$ rpki-client -vvf repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft File: A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft (raw, json) Hash identifier: qmkPLri0buwA0Wj3udt0nv7xoV1SCRxANxYk+Ir4y+k= Subject key identifier: 40:6E:AD:AF:A9:7A:49:6A:67:72:C8:B4:64:88:02:44:C2:DF:FE:67 Authority key identifier: A7:E6:C6:2C:47:C0:2E:EA:32:42:2E:13:59:08:EB:F2:30:C5:B5:FA Certificate issuer: /CN=A7E6C62C47C02EEA32422E135908EBF230C5B5FA Certificate serial: 3350E862087EEBB1B7C0DD0CBD03E90CCD5E3F9C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft Manifest number: 9B Signing time: Tue 05 Aug 2025 11:02:19 +0000 Manifest this update: Tue 05 Aug 2025 10:57:19 +0000 Manifest next update: Fri 08 Aug 2025 20:04:19 +0000 Files and hashes: 1: 3136302e32322e3139382e302f32332d3233203d3e20313532383336.roa (hash: VUNIcQLLtJsrGFAzVMiImA2RepGLVIMfYYvCS/t2Ge0=) 2: 3136302e32322e3139392e302f32342d3234203d3e20313532383336.roa (hash: Lhr2al1XwYOqujTNMwbvxurUmcC7+yc2oxsnrcYpuBo=) 3: A7E6C62C47C02EEA32422E135908EBF230C5B5FA.crl (hash: XwO6Yz8plKjRGQX/m9U+MLbczkcfVuA2UjrSPd6ZDT4=) 4: 3136302e32322e3139382e302f32342d3234203d3e20313532383336.roa (hash: T0SEzE9YSldItn38GmkKf92LoaZ2oQZ49jDDO4h9Pog=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.crl rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 09:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:50:e8:62:08:7e:eb:b1:b7:c0:dd:0c:bd:03:e9:0c:cd:5e:3f:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7E6C62C47C02EEA32422E135908EBF230C5B5FA Validity Not Before: Aug 5 10:57:19 2025 GMT Not After : Aug 8 20:04:19 2025 GMT Subject: CN=406EADAFA97A496A6772C8B464880244C2DFFE67 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:cd:8b:68:a0:95:10:e4:60:11:8f:dd:7d:39: 50:ea:6e:31:68:e2:e8:ca:d9:a9:a3:4d:fb:d4:98: f1:cc:66:92:09:74:a5:84:87:4f:28:4f:09:aa:9d: 40:ff:bb:3d:09:5a:d0:1d:ce:7e:90:91:e1:6a:59: cf:cb:3e:5f:3c:14:10:97:c3:30:01:b8:3e:70:40: fc:b4:bb:48:e3:79:dc:17:88:08:20:c9:52:c8:e1: 35:b6:54:d9:22:63:99:70:a8:8f:b3:91:99:f1:78: 95:b7:f7:fe:bf:6f:0c:e6:ab:fc:1b:fd:6c:83:ab: b7:19:3a:ce:8a:ff:5d:47:53:de:11:65:7c:c7:33: d4:41:42:b3:30:fc:fe:e6:6e:39:e3:a4:55:f7:d2: 1b:76:4e:0c:4e:95:c7:ab:1b:e8:31:42:e1:71:45: 31:46:6b:5d:ca:0c:40:25:a1:88:b2:a7:95:ec:0a: 44:9c:4c:0f:11:3f:e6:5d:59:31:a4:1b:fa:4a:62: 57:1a:40:4d:e4:96:04:c4:4d:d8:c2:69:51:0e:e2: fa:77:6b:e1:38:10:a6:39:57:8a:a0:ac:95:59:19: ec:73:30:b4:6d:db:a1:10:8e:2e:63:27:2d:2f:99: f3:96:b7:b0:d7:2b:a1:f7:e6:d3:7a:b8:2f:fc:a6: 10:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:6E:AD:AF:A9:7A:49:6A:67:72:C8:B4:64:88:02:44:C2:DF:FE:67 X509v3 Authority Key Identifier: keyid:A7:E6:C6:2C:47:C0:2E:EA:32:42:2E:13:59:08:EB:F2:30:C5:B5:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:06:54:ce:c9:10:e3:c6:ef:ce:3d:b9:c4:62:25:c0:31:61: 96:9b:0a:ce:0b:fb:d0:e4:b2:c5:1a:b7:51:17:32:fb:60:5c: df:04:f4:16:8d:ac:e2:61:63:5d:6a:50:13:62:65:96:82:a1: 69:46:63:c9:a3:69:d5:3c:4c:f5:52:a2:72:57:33:32:80:5c: a0:a8:7a:c5:9e:80:6b:7c:61:1c:b8:80:41:24:fb:8a:91:83: c8:3d:4f:89:19:27:bd:24:b2:7a:65:e6:7b:a7:ca:9a:16:1c: 43:b2:4a:0e:d9:c6:f8:57:ac:bd:0b:36:69:50:3d:29:09:99: f0:5b:96:66:d4:51:0e:95:a8:75:15:e8:34:85:bf:e4:92:0d: 9d:f0:0c:4a:94:36:bc:eb:b9:6d:44:1f:1f:2e:78:14:b7:84: dc:d7:6c:57:22:55:4d:45:83:6a:85:be:98:f1:30:5f:7e:e9: 9f:94:5d:67:b9:1e:d7:6c:10:e2:6e:e6:5e:06:be:c9:1b:61: bd:ae:87:16:85:91:59:98:f3:93:6c:2b:fe:3e:ad:e3:37:ec: 48:8e:01:23:a3:6b:18:8b:69:93:03:5d:8e:da:a1:fa:a2:d3: b4:cc:4f:e2:95:5a:cd:c6:7e:70:f6:be:d4:78:0d:46:0d:d9: 28:64:89:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM1DoYgh+67G3wN0MvQPpDM1eP5wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdFNkM2MkM0N0MwMkVFQTMyNDIyRTEzNTkwOEVCRjIz MEM1QjVGQTAeFw0yNTA4MDUxMDU3MTlaFw0yNTA4MDgyMDA0MTlaMDMxMTAvBgNV BAMTKDQwNkVBREFGQTk3QTQ5NkE2NzcyQzhCNDY0ODgwMjQ0QzJERkZFNjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDzYtooJUQ5GARj919OVDqbjFo 4ujK2amjTfvUmPHMZpIJdKWEh08oTwmqnUD/uz0JWtAdzn6QkeFqWc/LPl88FBCX wzABuD5wQPy0u0jjedwXiAggyVLI4TW2VNkiY5lwqI+zkZnxeJW39/6/bwzmq/wb /WyDq7cZOs6K/11HU94RZXzHM9RBQrMw/P7mbjnjpFX30ht2TgxOlcerG+gxQuFx RTFGa13KDEAloYiyp5XsCkScTA8RP+ZdWTGkG/pKYlcaQE3klgTETdjCaVEO4vp3 a+E4EKY5V4qgrJVZGexzMLRt26EQji5jJy0vmfOWt7DXK6H35tN6uC/8phBpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQG6tr6l6SWpncsi0ZIgCRMLf/mcwHwYDVR0j BBgwFoAUp+bGLEfALuoyQi4TWQjr8jDFtfowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZjMwZTRhZS0zZTQ3LTQ1NDAtODIzYy01M2NhZjIyNjdiMzYvMC9BN0U2QzYyQzQ3 QzAyRUVBMzI0MjJFMTM1OTA4RUJGMjMwQzVCNUZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTdFNkM2MkM0N0MwMkVFQTMyNDIyRTEzNTkwOEVCRjIzMEM1 QjVGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWYzMGU0YWUtM2U0Ny00NTQwLTgy M2MtNTNjYWYyMjY3YjM2LzAvQTdFNkM2MkM0N0MwMkVFQTMyNDIyRTEzNTkwOEVC RjIzMEM1QjVGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJgGVM7JEOPG7849ucRiJcAxYZabCs4L+9Dk ssUat1EXMvtgXN8E9BaNrOJhY11qUBNiZZaCoWlGY8mjadU8TPVSonJXMzKAXKCo esWegGt8YRy4gEEk+4qRg8g9T4kZJ70ksnpl5nunypoWHEOySg7ZxvhXrL0LNmlQ PSkJmfBblmbUUQ6VqHUV6DSFv+SSDZ3wDEqUNrzruW1EHx8ueBS3hNzXbFciVU1F g2qFvpjxMF9+6Z+UXWe5HtdsEOJu5l4GvskbYb2uhxaFkVmY85NsK/4+reM37EiO ASOjaxiLaZMDXY7aofqi07TMT+KVWs3GfnD2vtR4DUYN2ShkiQA= -----END CERTIFICATE-----Generated at Wed Aug 6 18:24:24 2025 by rpki-client