$ rpki-client -vvf repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft File: A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft (raw, json) Hash identifier: 5Jn9niiF1RDC6K//kekLPZt7tXru2+G6J8+Fmyh7XvI= Subject key identifier: 8E:1C:ED:18:C5:7B:BC:D5:38:32:EA:58:DA:FA:A1:5A:96:93:99:30 Authority key identifier: A7:D8:3E:E8:70:3B:BD:59:CD:CA:A5:62:2A:DB:35:C3:F9:72:27:28 Certificate issuer: /CN=A7D83EE8703BBD59CDCAA5622ADB35C3F9722728 Certificate serial: 17C00BC5C8943E21A2F6407EEEC50B9B9AFE5F58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft Manifest number: 019B Signing time: Wed 06 Aug 2025 13:11:37 +0000 Manifest this update: Wed 06 Aug 2025 13:06:37 +0000 Manifest next update: Sat 09 Aug 2025 22:24:37 +0000 Files and hashes: 1: A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.crl (hash: bk1tvMiUKRJfd5XkVXjmBSf1/0C8qhPB7HPZY8XRX5o=) 2: 3130332e36332e32362e302f32342d3234203d3e20313338303839.roa (hash: a/XQ8MdxKUzSfIKR4TnLCUk6wo8og+MExbugEiLWe3U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.crl rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 22:24:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:c0:0b:c5:c8:94:3e:21:a2:f6:40:7e:ee:c5:0b:9b:9a:fe:5f:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7D83EE8703BBD59CDCAA5622ADB35C3F9722728 Validity Not Before: Aug 6 13:06:37 2025 GMT Not After : Aug 9 22:24:37 2025 GMT Subject: CN=8E1CED18C57BBCD53832EA58DAFAA15A96939930 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:13:0d:f7:11:80:e3:f9:92:68:c5:9e:d8:a7: 3b:25:68:3e:e7:8b:51:f0:94:a6:a3:1f:b8:0a:31: 6f:9e:20:eb:32:5d:d4:78:73:71:43:c1:00:ad:b2: 21:10:eb:2d:14:a7:cb:cb:93:b7:c7:88:0c:d8:f7: 2d:88:21:9a:a0:7f:75:6f:9e:ac:42:c0:c7:7d:c7: ad:30:59:ce:e8:12:55:4f:6e:3d:e1:d0:d6:6e:06: 43:f9:cc:ad:2e:3e:c5:ce:f4:04:8d:5b:6b:04:00: d1:47:09:fa:64:45:e9:3b:78:a2:87:6f:00:44:7c: f0:41:af:52:d7:b3:77:59:49:a2:df:aa:44:66:85: 7c:93:a3:28:0f:11:69:22:35:bd:0f:52:53:25:51: a9:5d:61:b5:df:7d:1c:f0:08:54:09:04:4d:3e:65: 88:cd:ab:a0:53:4b:da:71:9e:68:97:25:e5:62:19: 31:49:4a:15:f1:36:db:50:5e:33:2c:b9:d1:93:51: a1:3e:f2:25:04:77:b0:5e:63:3e:10:e4:69:17:b9: 55:e1:28:bc:69:1a:78:0a:df:7d:c0:8f:75:b8:f0: 87:b0:f6:94:2a:3b:47:22:33:51:6a:ec:b2:b9:87: 16:1e:68:2e:6e:ee:33:16:5a:9c:43:4e:33:d8:9c: 66:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:1C:ED:18:C5:7B:BC:D5:38:32:EA:58:DA:FA:A1:5A:96:93:99:30 X509v3 Authority Key Identifier: keyid:A7:D8:3E:E8:70:3B:BD:59:CD:CA:A5:62:2A:DB:35:C3:F9:72:27:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:1e:c0:75:4e:a5:71:b7:1a:84:dc:b5:32:6c:5d:9c:22:af: 5c:62:92:4e:a7:67:d8:21:83:43:ec:9e:e9:44:3e:fd:9d:c6: f7:8d:3f:d7:fb:73:bf:f6:08:85:07:54:81:e0:82:b3:e4:63: d5:bc:91:16:1c:cf:85:93:80:ff:b6:92:ad:06:62:43:6e:9e: ae:c3:5d:3b:cb:e5:00:e6:29:02:76:b1:23:d1:5f:08:db:64: 15:3e:08:06:4d:d4:1a:dd:55:35:54:5e:8b:e0:84:46:bb:1a: bf:fa:7e:ba:7e:9d:d5:99:88:87:0e:96:b8:c8:24:2e:4c:8f: 3c:c1:58:8f:63:7f:d2:a3:da:11:69:d0:2a:ba:34:3c:6e:a6: a0:61:92:d7:4b:8c:83:b7:46:ed:46:73:ba:39:bc:0e:03:ec: e9:a7:44:1c:2f:9d:8d:0d:8a:3b:c6:b6:c1:61:29:a9:b7:85: 6c:c1:92:74:29:c8:8c:7d:da:0e:1a:ee:bb:5e:ea:92:f3:6b: a8:6f:fe:65:e0:14:64:6a:d0:1c:b1:71:0e:d6:40:88:73:83: 56:89:f1:01:9e:cb:05:58:5f:43:c7:1e:b6:3f:79:67:04:ac: c6:83:69:26:02:da:4b:d8:1f:ec:af:8d:ae:89:c3:43:13:c7: d6:70:0a:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF8ALxciUPiGi9kB+7sULm5r+X1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdEODNFRTg3MDNCQkQ1OUNEQ0FBNTYyMkFEQjM1QzNG OTcyMjcyODAeFw0yNTA4MDYxMzA2MzdaFw0yNTA4MDkyMjI0MzdaMDMxMTAvBgNV BAMTKDhFMUNFRDE4QzU3QkJDRDUzODMyRUE1OERBRkFBMTVBOTY5Mzk5MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyEw33EYDj+ZJoxZ7YpzslaD7n i1HwlKajH7gKMW+eIOsyXdR4c3FDwQCtsiEQ6y0Up8vLk7fHiAzY9y2IIZqgf3Vv nqxCwMd9x60wWc7oElVPbj3h0NZuBkP5zK0uPsXO9ASNW2sEANFHCfpkRek7eKKH bwBEfPBBr1LXs3dZSaLfqkRmhXyToygPEWkiNb0PUlMlUaldYbXffRzwCFQJBE0+ ZYjNq6BTS9pxnmiXJeViGTFJShXxNttQXjMsudGTUaE+8iUEd7BeYz4Q5GkXuVXh KLxpGngK333Aj3W48Iew9pQqO0ciM1Fq7LK5hxYeaC5u7jMWWpxDTjPYnGaVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjhztGMV7vNU4MupY2vqhWpaTmTAwHwYDVR0j BBgwFoAUp9g+6HA7vVnNyqViKts1w/lyJygwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWE2Y2VhZi1kNjhjLTRkY2ItODI2Ny1mZDFhNTNkOTk5ODgvMC9BN0Q4M0VFODcw M0JCRDU5Q0RDQUE1NjIyQURCMzVDM0Y5NzIyNzI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTdEODNFRTg3MDNCQkQ1OUNEQ0FBNTYyMkFEQjM1QzNGOTcy MjcyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODlhNmNlYWYtZDY4Yy00ZGNiLTgy NjctZmQxYTUzZDk5OTg4LzAvQTdEODNFRTg3MDNCQkQ1OUNEQ0FBNTYyMkFEQjM1 QzNGOTcyMjcyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACUewHVOpXG3GoTctTJsXZwir1xikk6nZ9gh g0PsnulEPv2dxveNP9f7c7/2CIUHVIHggrPkY9W8kRYcz4WTgP+2kq0GYkNunq7D XTvL5QDmKQJ2sSPRXwjbZBU+CAZN1BrdVTVUXovghEa7Gr/6frp+ndWZiIcOlrjI JC5MjzzBWI9jf9Kj2hFp0Cq6NDxupqBhktdLjIO3Ru1Gc7o5vA4D7OmnRBwvnY0N ijvGtsFhKam3hWzBknQpyIx92g4a7rte6pLza6hv/mXgFGRq0ByxcQ7WQIhzg1aJ 8QGeywVYX0PHHrY/eWcErMaDaSYC2kvYH+yvja6Jw0MTx9ZwCqg= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:34 2025 by rpki-client