$ rpki-client -vvf repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.mft File: AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.mft (raw, json) Hash identifier: /fr2kuFUW9TWsGH9eLDWI5rhs6oWWkgxK64+DKW8D5U= Subject key identifier: 42:6A:88:B3:DD:9C:EE:76:92:2F:00:7B:47:FD:3D:54:59:F1:01:05 Authority key identifier: AD:06:07:E8:6E:A3:F8:33:67:4B:B0:AF:1A:5E:A7:D5:EE:06:4B:39 Certificate issuer: /CN=AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39 Certificate serial: 4C4CB74C2AFD077807F858940D0B38B8B41D8CF9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.mft Manifest number: 01F1 Signing time: Wed 06 Aug 2025 00:30:45 +0000 Manifest this update: Wed 06 Aug 2025 00:25:45 +0000 Manifest next update: Sat 09 Aug 2025 03:19:45 +0000 Files and hashes: 1: AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.crl (hash: JIupV5IXCiHQGHY+0C8eT+vd1kx46OHcFLR3GavPipw=) 2: 3130332e3139312e36332e302f32342d3234203d3e20313338313135.roa (hash: Y9Gmd38S3GEr38X8sg4lpu4Cyhz7V9M44aocE3LKRAo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.crl rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 03:19:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:4c:b7:4c:2a:fd:07:78:07:f8:58:94:0d:0b:38:b8:b4:1d:8c:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39 Validity Not Before: Aug 6 00:25:45 2025 GMT Not After : Aug 9 03:19:45 2025 GMT Subject: CN=426A88B3DD9CEE76922F007B47FD3D5459F10105 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:9f:22:e6:0e:7f:ef:25:69:fc:0f:d3:d6:0f: 8d:37:bb:ec:4e:fb:80:1f:e9:53:38:f0:0a:dc:0a: 67:bf:7e:c7:ab:54:38:2d:71:65:61:cf:bb:16:c2: 9d:51:91:ad:45:ca:b0:7b:8f:e7:eb:c6:86:8e:92: c0:59:57:af:d7:cb:15:c0:8f:9d:07:73:d0:ab:90: 0d:b5:40:39:30:85:8e:e6:70:a0:6d:1e:e3:41:e3: c2:40:d0:84:2d:d4:cd:93:40:78:4e:cb:4a:3d:47: 6d:eb:92:cc:a3:41:8b:51:a1:49:3e:b1:3c:e6:61: 01:0e:c3:e3:13:f3:22:df:05:39:0f:4d:1e:af:bb: d1:29:9e:4e:f1:1f:26:4f:d8:a0:b7:bb:76:c0:e9: dd:d6:f0:e4:5e:aa:a6:26:ee:d8:05:96:06:c9:9a: 57:ad:2b:85:28:27:1e:be:c5:dd:7c:84:29:60:2e: b5:e2:2f:70:60:c5:59:4b:c6:ee:25:75:47:3a:2e: ac:b8:99:a7:5a:21:19:1e:d1:b8:a3:b3:6a:35:c3: 6b:ae:bf:37:e4:5b:f9:a0:cf:a1:c0:b7:45:6e:53: 69:22:dc:97:e5:a4:63:c6:07:c4:fc:12:3b:29:f1: 08:70:28:52:4e:5d:c5:7c:a1:ad:4f:72:4a:8e:7b: ac:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 42:6A:88:B3:DD:9C:EE:76:92:2F:00:7B:47:FD:3D:54:59:F1:01:05 X509v3 Authority Key Identifier: keyid:AD:06:07:E8:6E:A3:F8:33:67:4B:B0:AF:1A:5E:A7:D5:EE:06:4B:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b3327ffd-1e2e-4c52-9717-65f85e6359e5/0/AD0607E86EA3F833674BB0AF1A5EA7D5EE064B39.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:40:73:72:12:76:59:b6:15:23:c1:92:ae:a9:59:2e:59:75: 66:ed:f6:89:eb:4c:17:8b:09:e8:ad:0a:8e:93:71:ea:09:fe: 15:a3:4f:9b:a8:c8:46:86:e8:52:b1:b8:3f:65:6a:57:44:e8: 17:a1:97:1f:dc:78:16:3b:12:2a:66:4a:54:ea:a9:8d:44:18: 47:4e:a4:72:cd:6e:13:5f:c6:8e:f5:36:75:77:d3:ad:f9:5d: f5:9a:38:2e:d9:ae:42:a6:69:f3:90:7a:1d:fa:7b:5e:09:15: 86:df:b2:d2:75:dd:a6:4b:78:b6:cb:dd:cf:db:1d:a8:f1:9f: eb:a4:af:c1:08:ad:bf:d4:42:8e:ca:b6:87:d2:c8:70:01:31: 61:60:79:e1:c0:66:29:de:f9:03:df:52:5e:9b:c4:02:26:ef: ea:18:77:41:b1:a0:14:05:9b:36:7d:46:4a:72:86:f3:2b:4d: ed:d9:96:81:76:9a:5a:d3:06:d0:2f:bc:31:fb:a8:77:a7:00: ec:40:34:05:96:a2:30:f6:fb:c8:ab:d6:93:72:fb:0e:b7:b6: da:73:68:18:bd:e6:f9:f9:82:8d:5d:9f:1b:96:f2:2f:9c:8c: fa:67:a6:3c:bc:05:dc:de:96:e3:9d:1a:63:2a:73:39:67:0c: c7:3f:f5:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTEy3TCr9B3gH+FiUDQs4uLQdjPkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUQwNjA3RTg2RUEzRjgzMzY3NEJCMEFGMUE1RUE3RDVF RTA2NEIzOTAeFw0yNTA4MDYwMDI1NDVaFw0yNTA4MDkwMzE5NDVaMDMxMTAvBgNV BAMTKDQyNkE4OEIzREQ5Q0VFNzY5MjJGMDA3QjQ3RkQzRDU0NTlGMTAxMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+nyLmDn/vJWn8D9PWD403u+xO +4Af6VM48ArcCme/fserVDgtcWVhz7sWwp1Rka1FyrB7j+frxoaOksBZV6/XyxXA j50Hc9CrkA21QDkwhY7mcKBtHuNB48JA0IQt1M2TQHhOy0o9R23rksyjQYtRoUk+ sTzmYQEOw+MT8yLfBTkPTR6vu9Epnk7xHyZP2KC3u3bA6d3W8OReqqYm7tgFlgbJ mletK4UoJx6+xd18hClgLrXiL3BgxVlLxu4ldUc6Lqy4madaIRke0bijs2o1w2uu vzfkW/mgz6HAt0VuU2ki3JflpGPGB8T8Ejsp8QhwKFJOXcV8oa1PckqOe6zlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQmqIs92c7naSLwB7R/09VFnxAQUwHwYDVR0j BBgwFoAUrQYH6G6j+DNnS7CvGl6n1e4GSzkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MzMyN2ZmZC0xZTJlLTRjNTItOTcxNy02NWY4NWU2MzU5ZTUvMC9BRDA2MDdFODZF QTNGODMzNjc0QkIwQUYxQTVFQTdENUVFMDY0QjM5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQUQwNjA3RTg2RUEzRjgzMzY3NEJCMEFGMUE1RUE3RDVFRTA2 NEIzOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjMzMjdmZmQtMWUyZS00YzUyLTk3 MTctNjVmODVlNjM1OWU1LzAvQUQwNjA3RTg2RUEzRjgzMzY3NEJCMEFGMUE1RUE3 RDVFRTA2NEIzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKRAc3ISdlm2FSPBkq6pWS5ZdWbt9onrTBeL CeitCo6TceoJ/hWjT5uoyEaG6FKxuD9laldE6Behlx/ceBY7EipmSlTqqY1EGEdO pHLNbhNfxo71NnV30635XfWaOC7ZrkKmafOQeh36e14JFYbfstJ13aZLeLbL3c/b Hajxn+ukr8EIrb/UQo7KtofSyHABMWFgeeHAZine+QPfUl6bxAIm7+oYd0GxoBQF mzZ9RkpyhvMrTe3ZloF2mlrTBtAvvDH7qHenAOxANAWWojD2+8ir1pNy+w63ttpz aBi95vn5go1dnxuW8i+cjPpnpjy8BdzeluOdGmMqczlnDMc/9cA= -----END CERTIFICATE-----Generated at Thu Aug 7 13:10:54 2025 by rpki-client