$ rpki-client -vvf repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft File: A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft (raw, json) Hash identifier: waCH5rsy7OV2sh+MfBTS+JIxL/k9rkK1w1LTE6CtPdA= Subject key identifier: 1B:B5:D3:B1:D3:2D:71:A7:82:15:B6:17:6E:4C:57:68:F9:1E:FA:26 Authority key identifier: A6:49:57:71:5E:7D:CE:EC:3A:7D:4C:31:76:CC:97:ED:8E:5D:B3:1A Certificate issuer: /CN=A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A Certificate serial: 23F28FD2CA0DD9F3066BAFDA92AE58B8FF55DEC4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft Manifest number: 0180 Signing time: Wed 06 Aug 2025 06:52:10 +0000 Manifest this update: Wed 06 Aug 2025 06:47:10 +0000 Manifest next update: Sat 09 Aug 2025 15:21:10 +0000 Files and hashes: 1: A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.crl (hash: CaZwPUa8YKgTtDvrMRayXZpU/4ypgvCAvkL8Ni6r3U4=) 2: 3130332e3230332e39302e302f32342d3234203d3e20313530393236.roa (hash: lH+IV1VjfExz6EgaEksT/6x5pW3sOfiOZbcnKLG8hUk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.crl rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 15:21:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:f2:8f:d2:ca:0d:d9:f3:06:6b:af:da:92:ae:58:b8:ff:55:de:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A Validity Not Before: Aug 6 06:47:10 2025 GMT Not After : Aug 9 15:21:10 2025 GMT Subject: CN=1BB5D3B1D32D71A78215B6176E4C5768F91EFA26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:1c:e8:be:29:8e:3d:92:03:67:16:2e:13:19: 97:f5:b2:96:aa:1f:42:f5:3c:47:a0:98:a9:7a:59: 52:4c:ad:e6:fe:aa:ee:e4:78:dc:43:73:9c:b7:2f: 4f:87:9a:20:c6:ff:51:37:03:3c:ee:e8:7e:aa:42: 0d:25:9f:fa:6a:27:47:d4:69:a0:b4:69:41:0c:2f: 77:3c:57:a3:f7:42:d3:30:af:d2:49:14:74:2e:bc: b9:36:37:cf:3c:be:c9:b7:08:a8:48:09:19:1b:bc: dd:59:4e:64:c0:21:61:35:aa:6b:82:3d:62:40:d6: ef:5e:fa:f8:06:5e:67:5c:61:5c:fe:8f:2e:b2:95: ca:05:d1:4a:0d:c7:d2:e6:d0:f8:ed:9f:f1:16:ea: dd:54:0d:50:d1:b6:89:93:58:d9:23:f6:0b:4a:21: 2e:14:19:fe:da:3c:bb:36:db:0c:6b:57:05:b0:8f: a6:59:dc:7c:cb:a9:ec:51:9e:8d:02:ad:4b:8a:6d: 87:6d:1b:d4:6e:63:f4:48:b3:39:0d:67:33:b7:2b: 72:67:0c:a0:1a:4c:1f:3b:04:12:f3:b8:11:2d:46: c3:98:9e:82:4e:c2:e0:31:bc:98:68:55:55:e8:63: 14:17:b9:df:80:01:25:b7:2f:d8:cd:76:be:8b:cc: db:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:B5:D3:B1:D3:2D:71:A7:82:15:B6:17:6E:4C:57:68:F9:1E:FA:26 X509v3 Authority Key Identifier: keyid:A6:49:57:71:5E:7D:CE:EC:3A:7D:4C:31:76:CC:97:ED:8E:5D:B3:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:d9:0e:d2:0d:d1:15:8d:31:b5:bf:23:e1:2d:fc:c8:75:32: c1:9c:d0:1e:80:34:5e:6e:df:86:e7:e0:68:6d:da:9f:b8:76: c8:65:e4:eb:83:63:51:e6:44:be:42:bf:9a:ee:7f:17:e9:8b: 8b:d4:a2:ee:35:a8:8a:e1:9d:e5:88:c8:dd:df:be:47:dc:5f: 26:89:49:9c:18:cb:a2:53:b5:cf:08:c1:cd:f1:01:e7:b5:84: a3:24:8b:d0:93:f5:1a:ee:67:e0:55:e2:dc:d0:33:da:26:de: be:4f:8f:e0:64:3f:3f:ad:53:44:8f:3e:c3:51:17:1c:45:ea: b1:01:4c:af:d4:39:be:27:e3:be:5a:29:cd:32:28:4c:69:92: 2a:fa:63:69:73:99:42:f8:6b:de:cc:b5:83:6e:48:3f:88:5b: 04:3c:60:19:4a:2c:d4:82:d5:00:a8:9c:e6:b2:39:5b:33:3e: 81:d2:88:a5:ea:a1:01:52:d8:94:4e:43:7d:ce:49:c4:1e:00: 3a:12:c8:77:74:99:fd:c6:9a:1f:b4:11:65:fb:e0:2b:74:c8: 53:83:e7:a9:82:fc:8d:3a:6d:23:63:c7:ad:09:35:d6:05:33: a5:21:15:cc:bb:e8:45:a5:35:96:b1:84:ab:c9:76:19:01:e6: 49:4c:9f:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI/KP0soN2fMGa6/akq5YuP9V3sQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY0OTU3NzE1RTdEQ0VFQzNBN0Q0QzMxNzZDQzk3RUQ4 RTVEQjMxQTAeFw0yNTA4MDYwNjQ3MTBaFw0yNTA4MDkxNTIxMTBaMDMxMTAvBgNV BAMTKDFCQjVEM0IxRDMyRDcxQTc4MjE1QjYxNzZFNEM1NzY4RjkxRUZBMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClHOi+KY49kgNnFi4TGZf1spaq H0L1PEegmKl6WVJMreb+qu7keNxDc5y3L0+HmiDG/1E3Azzu6H6qQg0ln/pqJ0fU aaC0aUEML3c8V6P3QtMwr9JJFHQuvLk2N888vsm3CKhICRkbvN1ZTmTAIWE1qmuC PWJA1u9e+vgGXmdcYVz+jy6ylcoF0UoNx9Lm0Pjtn/EW6t1UDVDRtomTWNkj9gtK IS4UGf7aPLs22wxrVwWwj6ZZ3HzLqexRno0CrUuKbYdtG9RuY/RIszkNZzO3K3Jn DKAaTB87BBLzuBEtRsOYnoJOwuAxvJhoVVXoYxQXud+AASW3L9jNdr6LzNs/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG7XTsdMtcaeCFbYXbkxXaPke+iYwHwYDVR0j BBgwFoAUpklXcV59zuw6fUwxdsyX7Y5dsxowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YTAxMjlhOC0yN2U4LTQwNDYtODk4OS04NjViMjU3ZWE2Y2EvMC9BNjQ5NTc3MTVF N0RDRUVDM0E3RDRDMzE3NkNDOTdFRDhFNURCMzFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTY0OTU3NzE1RTdEQ0VFQzNBN0Q0QzMxNzZDQzk3RUQ4RTVE QjMxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWEwMTI5YTgtMjdlOC00MDQ2LTg5 ODktODY1YjI1N2VhNmNhLzAvQTY0OTU3NzE1RTdEQ0VFQzNBN0Q0QzMxNzZDQzk3 RUQ4RTVEQjMxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFbZDtIN0RWNMbW/I+Et/Mh1MsGc0B6ANF5u 34bn4Ght2p+4dshl5OuDY1HmRL5Cv5rufxfpi4vUou41qIrhneWIyN3fvkfcXyaJ SZwYy6JTtc8Iwc3xAee1hKMki9CT9RruZ+BV4tzQM9om3r5Pj+BkPz+tU0SPPsNR FxxF6rEBTK/UOb4n475aKc0yKExpkir6Y2lzmUL4a97MtYNuSD+IWwQ8YBlKLNSC 1QConOayOVszPoHSiKXqoQFS2JROQ33OScQeADoSyHd0mf3Gmh+0EWX74Ct0yFOD 56mC/I06bSNjx60JNdYFM6UhFcy76EWlNZaxhKvJdhkB5klMn50= -----END CERTIFICATE-----Generated at Thu Aug 7 03:22:55 2025 by rpki-client