$ rpki-client -vvf repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft File: A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft (raw, json) Hash identifier: a8CKq7cct536McdRhb9bIrJsWJLczHuOUGhIRLoTi4g= Subject key identifier: F8:52:75:2C:54:68:26:33:67:11:D5:84:D3:A8:DC:A5:54:59:DE:7D Authority key identifier: A7:DC:E7:64:7F:A7:75:A7:E9:DF:44:EA:EF:AC:52:11:8F:36:69:F8 Certificate issuer: /CN=A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8 Certificate serial: 20C29F344B226F1B932EE97ECFA591DEDEF9581A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft Manifest number: 01BF Signing time: Wed 06 Aug 2025 10:31:26 +0000 Manifest this update: Wed 06 Aug 2025 10:26:26 +0000 Manifest next update: Sat 09 Aug 2025 10:49:26 +0000 Files and hashes: 1: A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.crl (hash: p2eYYiI7uUgvnwSBjwAHfhaveqBu4VwA+P3nItgbv00=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.crl rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 10:49:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:c2:9f:34:4b:22:6f:1b:93:2e:e9:7e:cf:a5:91:de:de:f9:58:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8 Validity Not Before: Aug 6 10:26:26 2025 GMT Not After : Aug 9 10:49:26 2025 GMT Subject: CN=F852752C546826336711D584D3A8DCA55459DE7D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:72:a8:57:c0:16:36:a2:5a:bd:5c:01:10:fd: 09:17:54:3d:6e:cc:a0:b4:b1:c5:02:12:44:f6:31: 98:79:b8:36:17:3b:2e:58:9b:11:3d:fa:d5:5d:be: 24:03:cf:bf:e1:59:4f:8e:fd:c0:7e:06:20:c6:d8: 7b:24:71:e2:4d:b2:dc:7e:64:0e:54:1b:e4:d1:9f: 23:f5:77:c5:33:3e:d9:ca:58:18:42:8a:93:57:63: 44:79:60:fe:e5:31:f2:98:5b:11:a1:a8:93:47:63: 0e:97:26:22:b5:fa:89:ae:36:3e:80:30:72:6d:04: ea:3b:8b:b6:ec:5c:d9:ce:88:12:5e:6a:02:65:81: 8b:53:0b:20:c8:ea:d9:a5:9f:f1:7b:fb:4c:db:dc: 2d:4d:83:7f:1b:d0:a3:c6:a0:c2:5f:19:1a:31:1d: 5f:a4:c5:b1:51:c1:8a:3a:cd:d4:ad:cb:ec:64:5a: 1f:88:92:9b:aa:d8:e1:83:ce:ac:a4:72:0d:e7:4d: 56:2d:69:21:f9:3c:e7:f1:26:3a:5f:36:07:e8:d4: 93:6a:02:7d:ff:d3:40:b2:f3:7f:10:b9:e0:53:40: 3b:61:39:81:10:dd:7d:b2:ed:e1:0a:c2:f8:d2:65: cf:64:eb:3b:dd:01:2e:c8:a6:88:26:55:7d:93:08: cb:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:52:75:2C:54:68:26:33:67:11:D5:84:D3:A8:DC:A5:54:59:DE:7D X509v3 Authority Key Identifier: keyid:A7:DC:E7:64:7F:A7:75:A7:E9:DF:44:EA:EF:AC:52:11:8F:36:69:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:35:71:29:8c:97:5a:e2:e2:65:72:60:58:de:5f:b1:d2:2f: ef:d3:02:97:89:62:ba:a7:d2:24:43:34:52:d5:f4:3e:9d:ce: 78:97:bc:f8:f0:80:80:51:be:17:71:18:95:05:b7:f1:fa:f9: c6:a5:10:7a:25:c6:fc:21:fe:5f:51:55:25:95:d3:98:c0:01: c3:2f:52:c5:2d:52:23:1e:2b:d3:3c:99:43:0e:48:75:31:51: 18:aa:4f:d3:e8:66:e1:c0:1f:a8:47:6d:24:ce:c5:36:5a:e8: c0:34:77:3a:8c:37:14:4f:e7:50:f0:23:d5:11:8f:5f:2b:40: 32:cd:b5:ae:5a:d2:60:fb:fa:d4:89:7c:92:90:1d:04:54:d6: b0:c5:85:78:2d:67:d1:24:1c:a2:99:52:2c:14:e3:b4:ea:9e: 4c:c4:4a:a6:d6:f2:92:8e:b7:d9:4f:47:f1:74:b2:15:f7:20: 59:cc:53:e1:8b:54:ab:72:53:75:e9:6e:9a:e1:51:c9:ba:52: 69:34:56:8a:32:79:e3:08:7c:02:6a:8d:f8:d5:56:7b:16:85: 63:87:ab:07:ac:89:d4:6e:b7:f4:60:4f:aa:88:43:16:1b:d8: 4e:a0:a7:27:b5:3e:94:5e:7f:4d:a0:dd:b0:07:82:6d:e6:f8: d3:ab:fe:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIMKfNEsibxuTLul+z6WR3t75WBowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdEQ0U3NjQ3RkE3NzVBN0U5REY0NEVBRUZBQzUyMTE4 RjM2NjlGODAeFw0yNTA4MDYxMDI2MjZaFw0yNTA4MDkxMDQ5MjZaMDMxMTAvBgNV BAMTKEY4NTI3NTJDNTQ2ODI2MzM2NzExRDU4NEQzQThEQ0E1NTQ1OURFN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCycqhXwBY2olq9XAEQ/QkXVD1u zKC0scUCEkT2MZh5uDYXOy5YmxE9+tVdviQDz7/hWU+O/cB+BiDG2HskceJNstx+ ZA5UG+TRnyP1d8UzPtnKWBhCipNXY0R5YP7lMfKYWxGhqJNHYw6XJiK1+omuNj6A MHJtBOo7i7bsXNnOiBJeagJlgYtTCyDI6tmln/F7+0zb3C1Ng38b0KPGoMJfGRox HV+kxbFRwYo6zdSty+xkWh+Ikpuq2OGDzqykcg3nTVYtaSH5POfxJjpfNgfo1JNq An3/00Cy838QueBTQDthOYEQ3X2y7eEKwvjSZc9k6zvdAS7IpogmVX2TCMsPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+FJ1LFRoJjNnEdWE06jcpVRZ3n0wHwYDVR0j BBgwFoAUp9znZH+ndafp30Tq76xSEY82afgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2YzMGUyNy1iOTVlLTRkNzUtOTY4ZC01MzhmYjc5MTg4MjkvMC9BN0RDRTc2NDdG QTc3NUE3RTlERjQ0RUFFRkFDNTIxMThGMzY2OUY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTdEQ0U3NjQ3RkE3NzVBN0U5REY0NEVBRUZBQzUyMTE4RjM2 NjlGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDNmMzBlMjctYjk1ZS00ZDc1LTk2 OGQtNTM4ZmI3OTE4ODI5LzAvQTdEQ0U3NjQ3RkE3NzVBN0U5REY0NEVBRUZBQzUy MTE4RjM2NjlGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGc1cSmMl1ri4mVyYFjeX7HSL+/TApeJYrqn 0iRDNFLV9D6dzniXvPjwgIBRvhdxGJUFt/H6+calEHolxvwh/l9RVSWV05jAAcMv UsUtUiMeK9M8mUMOSHUxURiqT9PoZuHAH6hHbSTOxTZa6MA0dzqMNxRP51DwI9UR j18rQDLNta5a0mD7+tSJfJKQHQRU1rDFhXgtZ9EkHKKZUiwU47TqnkzESqbW8pKO t9lPR/F0shX3IFnMU+GLVKtyU3XpbprhUcm6Umk0VooyeeMIfAJqjfjVVnsWhWOH qwesidRut/RgT6qIQxYb2E6gpye1PpRef02g3bAHgm3m+NOr/q0= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:34 2025 by rpki-client