$ rpki-client -vvf repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft File: 7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft (raw, json) Hash identifier: s5wJz9OVCNqLQJGD1DhqK9gYKaSZrjzJbjaFs1GDdZs= Subject key identifier: BF:82:DE:97:65:71:ED:89:A9:17:25:02:3C:02:DE:02:CA:06:C3:4C Authority key identifier: 7A:21:6F:23:D8:A2:28:FB:B8:F5:63:EC:15:DF:76:FD:50:32:31:B3 Certificate issuer: /CN=7A216F23D8A228FBB8F563EC15DF76FD503231B3 Certificate serial: 1F6A9516BE517D605F60B8D57CEE160A09D198F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A216F23D8A228FBB8F563EC15DF76FD503231B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft Manifest number: 01E3 Signing time: Thu 07 Aug 2025 03:32:11 +0000 Manifest this update: Thu 07 Aug 2025 03:27:11 +0000 Manifest next update: Sun 10 Aug 2025 10:37:11 +0000 Files and hashes: 1: 7A216F23D8A228FBB8F563EC15DF76FD503231B3.crl (hash: B9SFg6bCMAUU7wSVKYPbnQcPuriKEJmu++o4pY11O+I=) 2: 3130332e32302e3130382e302f32332d3234203d3e20313439373037.roa (hash: YUh1E1cCB+Tam8Lv4+/c622A6XvCbyDIufb9eqoPvMQ=) 3: 3130332e32302e3130392e302f32342d3234203d3e20313439373037.roa (hash: rOc9IS1yKanFrzj6lHEyVZN9K3Au8qIy9aCKaCdjEsw=) 4: 3130332e32302e3130382e302f32342d3234203d3e20313439373037.roa (hash: l72fTVO4iPS3td7y6iJ6FZ6Iq9uNFhg1kwCppW10yoE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.crl rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A216F23D8A228FBB8F563EC15DF76FD503231B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 10:37:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:6a:95:16:be:51:7d:60:5f:60:b8:d5:7c:ee:16:0a:09:d1:98:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A216F23D8A228FBB8F563EC15DF76FD503231B3 Validity Not Before: Aug 7 03:27:11 2025 GMT Not After : Aug 10 10:37:11 2025 GMT Subject: CN=BF82DE976571ED89A91725023C02DE02CA06C34C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:5a:65:00:6a:b3:09:52:e1:fa:e4:4d:4a:2d: df:52:db:09:20:74:99:ea:e7:b2:ea:68:ec:05:cb: d1:f4:5c:52:98:24:54:bb:f0:6f:55:68:6b:78:91: a4:cf:a5:f6:a4:2b:77:c8:e3:5e:d6:0e:c1:ef:03: 21:68:a3:08:88:fe:91:53:53:12:84:70:38:13:c5: fc:61:86:f2:dc:b6:e6:50:ef:c3:a8:52:78:a3:2e: 82:a6:c0:dc:9e:30:3f:03:0d:00:cc:61:a2:36:fc: b4:63:ae:23:40:bf:14:f6:6e:fd:7b:ae:c0:66:09: 71:00:6d:00:6e:f0:08:29:68:3f:d8:8b:c2:4f:78: b4:23:32:5c:17:05:5e:0b:f4:2d:a6:57:88:7d:ff: af:ee:64:e0:b6:ab:97:47:8e:69:74:9f:76:01:0c: 19:6d:9f:e6:9b:da:f1:4f:95:e4:b5:08:18:38:77: 3b:1b:e6:4d:45:6d:37:9f:44:85:e1:68:6b:bc:84: ed:c3:6e:79:18:73:ee:15:d7:42:c3:cd:ca:2c:ae: e6:47:2b:dc:4f:5e:cd:1f:96:46:14:78:66:85:d6: 86:d1:69:84:1d:e4:f2:2e:c1:b8:39:4d:7d:be:bf: ba:92:8d:82:74:9a:9c:0f:e1:f1:2e:0c:3a:19:0c: 64:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:82:DE:97:65:71:ED:89:A9:17:25:02:3C:02:DE:02:CA:06:C3:4C X509v3 Authority Key Identifier: keyid:7A:21:6F:23:D8:A2:28:FB:B8:F5:63:EC:15:DF:76:FD:50:32:31:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A216F23D8A228FBB8F563EC15DF76FD503231B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:4e:a1:28:fb:14:a0:b4:cb:02:35:ad:de:69:82:90:8b:8b: d0:50:06:1e:7a:11:3d:cf:ec:b8:5e:67:45:0f:e6:64:de:9c: e0:8c:7e:a9:0c:d7:86:43:2d:fc:cf:ff:f0:ed:17:15:2f:62: c0:e7:e0:1a:34:b1:57:e3:11:e8:41:d3:b1:20:e0:00:14:b7: c6:c3:d0:4f:c1:3f:5f:4e:94:be:cc:42:8d:88:6b:3e:ee:d6: dc:e4:fc:e4:83:19:6a:72:9e:6e:ff:cb:f0:ee:93:57:39:ff: bf:17:d4:44:7b:88:b6:e2:35:70:eb:cb:f7:2e:6c:d4:8b:1b: 17:49:3c:57:c2:db:70:7d:c6:ac:6e:cc:39:71:b2:1a:2d:70: d7:0d:2c:d1:19:a2:d7:e0:4e:5a:d5:24:aa:73:a8:99:5e:19: b0:92:86:92:eb:06:00:fd:d5:d9:19:c3:0a:99:fb:5f:a9:b6: 4f:5d:30:52:ec:4a:cf:a0:59:39:9b:33:ad:8b:fa:ad:6c:5b: 1f:ba:11:24:8f:73:1a:37:64:44:96:15:d8:b4:87:1a:60:f6: ed:e4:b8:1d:44:3b:ce:dc:d5:57:83:d7:95:6d:1b:3e:b3:90: 1f:3a:f4:b7:18:17:9c:c9:30:f8:d7:82:b5:92:58:fa:ae:0d: f3:e4:74:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH2qVFr5RfWBfYLjVfO4WCgnRmPMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0EyMTZGMjNEOEEyMjhGQkI4RjU2M0VDMTVERjc2RkQ1 MDMyMzFCMzAeFw0yNTA4MDcwMzI3MTFaFw0yNTA4MTAxMDM3MTFaMDMxMTAvBgNV BAMTKEJGODJERTk3NjU3MUVEODlBOTE3MjUwMjNDMDJERTAyQ0EwNkMzNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfWmUAarMJUuH65E1KLd9S2wkg dJnq57LqaOwFy9H0XFKYJFS78G9VaGt4kaTPpfakK3fI417WDsHvAyFoowiI/pFT UxKEcDgTxfxhhvLctuZQ78OoUnijLoKmwNyeMD8DDQDMYaI2/LRjriNAvxT2bv17 rsBmCXEAbQBu8AgpaD/Yi8JPeLQjMlwXBV4L9C2mV4h9/6/uZOC2q5dHjml0n3YB DBltn+ab2vFPleS1CBg4dzsb5k1FbTefRIXhaGu8hO3DbnkYc+4V10LDzcosruZH K9xPXs0flkYUeGaF1obRaYQd5PIuwbg5TX2+v7qSjYJ0mpwP4fEuDDoZDGQrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv4Lel2Vx7YmpFyUCPALeAsoGw0wwHwYDVR0j BBgwFoAUeiFvI9iiKPu49WPsFd92/VAyMbMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Y2M2YmQ3My1mOWJkLTRmNWEtOWM1OS1mYmVhMWJkODM0NzMvMC83QTIxNkYyM0Q4 QTIyOEZCQjhGNTYzRUMxNURGNzZGRDUwMzIzMUIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0EyMTZGMjNEOEEyMjhGQkI4RjU2M0VDMTVERjc2RkQ1MDMy MzFCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWNjNmJkNzMtZjliZC00ZjVhLTlj NTktZmJlYTFiZDgzNDczLzAvN0EyMTZGMjNEOEEyMjhGQkI4RjU2M0VDMTVERjc2 RkQ1MDMyMzFCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFpOoSj7FKC0ywI1rd5pgpCLi9BQBh56ET3P 7LheZ0UP5mTenOCMfqkM14ZDLfzP//DtFxUvYsDn4Bo0sVfjEehB07Eg4AAUt8bD 0E/BP19OlL7MQo2Iaz7u1tzk/OSDGWpynm7/y/Duk1c5/78X1ER7iLbiNXDry/cu bNSLGxdJPFfC23B9xqxuzDlxshotcNcNLNEZotfgTlrVJKpzqJleGbCShpLrBgD9 1dkZwwqZ+1+ptk9dMFLsSs+gWTmbM62L+q1sWx+6ESSPcxo3ZESWFdi0hxpg9u3k uB1EO87c1VeD15VtGz6zkB869LcYF5zJMPjXgrWSWPquDfPkdGI= -----END CERTIFICATE-----Generated at Thu Aug 7 14:41:18 2025 by rpki-client