$ rpki-client -vvf repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft File: B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft (raw, json) Hash identifier: O0JENwyQuMq5u0gwunWLSjrSn6RXxdgB9Z+gVs34Jy8= Subject key identifier: C5:78:38:91:25:88:D1:49:44:35:D8:27:98:C1:A1:9B:7D:88:2A:36 Authority key identifier: B7:A3:DE:01:7F:B3:D7:40:B2:93:22:D8:18:D5:C6:A8:FE:6D:4C:30 Certificate issuer: /CN=B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30 Certificate serial: 72675BC4D7B1B26FC9D5508D3A2F5EFAC818A8CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft Manifest number: 010F Signing time: Thu 21 Aug 2025 17:01:21 +0000 Manifest this update: Thu 21 Aug 2025 16:56:21 +0000 Manifest next update: Mon 25 Aug 2025 04:20:21 +0000 Files and hashes: 1: 3130332e3231352e36302e302f32342d3234203d3e20313531353033.roa (hash: b0fuY1pKKFn/0Zi2JNlIa5wt7XKTYP6sji14ARgrEj0=) 2: 3130332e3231352e36312e302f32342d3234203d3e20313531353033.roa (hash: yI+x3QlccThUEQyL4aGgW81et+4syWgCbrFAnQNyq/g=) 3: B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.crl (hash: I3EH/1FooEAvpcjJks5rXWj/QbZiq9zzxilHJ4PWCxk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.crl rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 04:20:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:67:5b:c4:d7:b1:b2:6f:c9:d5:50:8d:3a:2f:5e:fa:c8:18:a8:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30 Validity Not Before: Aug 21 16:56:21 2025 GMT Not After : Aug 25 04:20:21 2025 GMT Subject: CN=C57838912588D1494435D82798C1A19B7D882A36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:2a:93:a0:2c:7a:2d:a2:10:a1:34:e3:3b:56: c3:8a:dc:3f:02:10:af:3d:c3:d7:ca:6f:59:cf:c8: e2:56:49:fd:77:26:95:50:b4:65:b1:21:d8:bb:79: 23:f5:c9:b5:1b:34:31:c5:2d:d7:b7:84:f5:ba:5f: 5c:e4:3d:82:3f:95:b2:61:3e:d2:71:79:f5:09:21: 27:43:07:82:24:b2:8c:89:bb:7e:a0:8c:a9:38:4c: 55:40:e7:a1:3d:d7:a0:4a:51:7f:85:dc:20:d8:4a: 98:e1:a7:a0:2f:ab:70:2e:07:c4:47:58:8e:9b:14: 43:e2:b3:e2:eb:26:ae:7e:ab:f2:2f:fd:3c:ef:a6: c6:fe:2b:bd:d3:b2:81:74:19:24:2f:d2:60:57:1e: 83:e9:c9:50:5d:43:b4:6b:e4:ef:50:93:ba:fb:02: b9:86:de:dc:23:7b:06:20:78:8b:f2:ca:f4:e6:c1: 13:cd:94:46:af:c7:cd:4f:2f:d5:46:90:2e:9b:ec: 4b:d1:20:dc:80:96:4c:65:d9:22:20:58:d2:c3:33: 6a:07:05:94:ed:1b:06:9c:6a:24:0b:c2:b4:0e:f9: 2d:f1:73:6d:3a:83:19:43:c4:bc:a3:b0:f6:3e:0c: 27:03:fd:19:c7:2d:e4:c8:7f:dc:a9:5b:a6:f9:f2: 06:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:78:38:91:25:88:D1:49:44:35:D8:27:98:C1:A1:9B:7D:88:2A:36 X509v3 Authority Key Identifier: keyid:B7:A3:DE:01:7F:B3:D7:40:B2:93:22:D8:18:D5:C6:A8:FE:6D:4C:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:c7:20:47:a7:1c:55:78:44:1a:b0:2c:57:00:44:61:be:23: 52:7f:98:e5:29:44:c7:92:1f:55:3d:59:73:5f:54:61:3e:79: d7:5b:7a:d8:a5:51:e8:4c:8e:37:f2:96:2e:3c:71:cd:ee:16: c1:b8:ea:f9:6e:1c:f1:2a:6c:22:89:0f:92:bf:59:dc:5d:be: 39:f5:7f:10:f7:e9:95:ad:5a:1c:be:30:1a:40:26:d3:93:dc: cb:9e:88:c6:6e:04:ff:6c:b9:77:9e:44:2e:72:14:e3:70:83: f6:c8:37:b0:29:01:43:1b:7f:fc:ec:fa:f5:1b:e8:9e:8e:dc: 87:03:f7:c5:35:23:7a:0f:4e:33:81:db:c7:33:a3:ad:4e:69: 54:3b:df:ff:b0:cd:b9:9d:9c:83:af:03:76:d0:c3:c4:ec:0b: 26:9b:c6:df:4f:9e:b0:b3:15:69:73:81:91:a4:dd:3f:67:19: 8b:02:d2:13:9c:26:75:2d:1f:22:b8:ed:81:63:61:ba:15:9c: c5:01:a0:1b:bf:da:22:ea:64:02:d1:ca:ca:f1:09:6a:13:e1: 5c:30:3f:3c:db:7d:34:40:9c:41:98:ff:44:20:fb:bb:50:41: c1:56:75:bd:aa:93:e4:f5:f2:80:3d:62:6d:a9:19:ee:3a:89: 8f:bf:d9:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcmdbxNexsm/J1VCNOi9e+sgYqM8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdBM0RFMDE3RkIzRDc0MEIyOTMyMkQ4MThENUM2QThG RTZENEMzMDAeFw0yNTA4MjExNjU2MjFaFw0yNTA4MjUwNDIwMjFaMDMxMTAvBgNV BAMTKEM1NzgzODkxMjU4OEQxNDk0NDM1RDgyNzk4QzFBMTlCN0Q4ODJBMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpKpOgLHotohChNOM7VsOK3D8C EK89w9fKb1nPyOJWSf13JpVQtGWxIdi7eSP1ybUbNDHFLde3hPW6X1zkPYI/lbJh PtJxefUJISdDB4IksoyJu36gjKk4TFVA56E916BKUX+F3CDYSpjhp6Avq3AuB8RH WI6bFEPis+LrJq5+q/Iv/Tzvpsb+K73TsoF0GSQv0mBXHoPpyVBdQ7Rr5O9Qk7r7 ArmG3twjewYgeIvyyvTmwRPNlEavx81PL9VGkC6b7EvRINyAlkxl2SIgWNLDM2oH BZTtGwacaiQLwrQO+S3xc206gxlDxLyjsPY+DCcD/RnHLeTIf9ypW6b58gZfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxXg4kSWI0UlENdgnmMGhm32IKjYwHwYDVR0j BBgwFoAUt6PeAX+z10CykyLYGNXGqP5tTDAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjE2YzA0ZC1kOWUwLTRjMWYtOGExNC1lMjNiZjI3NDQ1OTIvMC9CN0EzREUwMTdG QjNENzQwQjI5MzIyRDgxOEQ1QzZBOEZFNkQ0QzMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjdBM0RFMDE3RkIzRDc0MEIyOTMyMkQ4MThENUM2QThGRTZE NEMzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYxNmMwNGQtZDllMC00YzFmLThh MTQtZTIzYmYyNzQ0NTkyLzAvQjdBM0RFMDE3RkIzRDc0MEIyOTMyMkQ4MThENUM2 QThGRTZENEMzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIbHIEenHFV4RBqwLFcARGG+I1J/mOUpRMeS H1U9WXNfVGE+eddbetilUehMjjfyli48cc3uFsG46vluHPEqbCKJD5K/Wdxdvjn1 fxD36ZWtWhy+MBpAJtOT3MueiMZuBP9suXeeRC5yFONwg/bIN7ApAUMbf/zs+vUb 6J6O3IcD98U1I3oPTjOB28czo61OaVQ73/+wzbmdnIOvA3bQw8TsCyabxt9PnrCz FWlzgZGk3T9nGYsC0hOcJnUtHyK47YFjYboVnMUBoBu/2iLqZALRysrxCWoT4Vww PzzbfTRAnEGY/0Qg+7tQQcFWdb2qk+T18oA9Ym2pGe46iY+/2UE= -----END CERTIFICATE-----Generated at Sat Aug 23 10:19:41 2025 by rpki-client