$ rpki-client -vvf repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.mft File: 0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.mft (raw, json) Hash identifier: BsGBXaOfpnBkJLwudlOxjdCRey/K7klAUnmbB8+oLPU= Subject key identifier: F3:09:71:00:CE:7C:CD:F7:AA:AD:64:6A:58:18:6C:FF:F2:32:3D:92 Authority key identifier: 01:00:A7:F6:C4:D5:8C:38:67:F9:CE:D7:E7:D4:6D:CE:D0:A5:78:04 Certificate issuer: /CN=0100A7F6C4D58C3867F9CED7E7D46DCED0A57804 Certificate serial: 6A0213D683A8291691A16E9D0E0545B6DB6B5719 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.cer Subject info access: rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.mft Manifest number: 01A5 Signing time: Sun 29 Jun 2025 02:20:51 +0000 Manifest this update: Sun 29 Jun 2025 02:15:51 +0000 Manifest next update: Wed 02 Jul 2025 06:18:51 +0000 Files and hashes: 1: 3130332e33352e3135322e302f32342d3234203d3e2039333431.roa (hash: ywb3a8C62BA/PMdGKSYbEqNH95chMJkQIqcJmusbD0s=) 2: 3130332e33352e3135322e302f32332d3233203d3e2039333431.roa (hash: 2htdgS+1Or0wZzJh4jZYW5oaI6hoP4/N0BvY1mQLhMA=) 3: 3130332e33352e3135332e302f32342d3234203d3e2039333431.roa (hash: OiTIcbauaRQZkoh05qWm9giYFtWGDu1XoyHAojKPf2g=) 4: 0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.crl (hash: qdIHA6j/VngHZyBAXH0NcBHHKzhVpKFxEwgGDYVgYXY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.crl rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 06:18:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:02:13:d6:83:a8:29:16:91:a1:6e:9d:0e:05:45:b6:db:6b:57:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0100A7F6C4D58C3867F9CED7E7D46DCED0A57804 Validity Not Before: Jun 29 02:15:51 2025 GMT Not After : Jul 2 06:18:51 2025 GMT Subject: CN=F3097100CE7CCDF7AAAD646A58186CFFF2323D92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:4b:41:3a:07:e7:c5:1a:bb:40:bc:b3:d5:3e: e0:38:23:52:34:da:bf:3d:b0:d6:05:6f:94:24:c1: b7:fc:8b:d3:6d:f1:37:3c:7a:e0:f3:15:8b:47:d7: 5d:87:43:7d:c3:76:06:92:a9:cc:ab:03:f6:58:24: ca:23:c6:03:f6:09:e7:da:16:d4:aa:4c:16:24:59: e5:7f:7c:26:dc:26:34:44:77:b3:a6:27:89:c0:2d: 5f:af:7a:32:0d:c6:fc:e2:18:da:41:66:7d:74:ae: 1b:ac:66:a5:95:42:c6:22:61:11:ed:f8:ca:b9:ce: d5:29:94:1e:d5:d5:36:0c:ed:58:6d:3d:75:52:f8: 31:9d:a1:ee:74:7f:22:e4:cd:1f:41:07:d2:6e:39: 06:53:c1:b9:21:ef:20:04:71:64:c0:ae:25:f5:42: 85:8c:d4:35:03:19:35:0d:8e:0f:80:ca:0d:ce:86: 3f:ce:11:b4:be:de:6e:a7:25:09:2b:5c:b7:b5:91: c5:c5:48:90:12:67:c5:36:a3:ef:62:3f:4c:9c:68: 41:13:17:fa:da:03:dd:63:dc:7c:43:e8:d2:45:d5: b7:6a:f8:5b:ad:7b:b6:e8:1d:09:60:bb:50:a1:01: 77:57:3e:a5:3a:33:b1:d2:d2:3c:36:50:70:26:ab: 98:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:09:71:00:CE:7C:CD:F7:AA:AD:64:6A:58:18:6C:FF:F2:32:3D:92 X509v3 Authority Key Identifier: keyid:01:00:A7:F6:C4:D5:8C:38:67:F9:CE:D7:E7:D4:6D:CE:D0:A5:78:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:ba:01:00:ff:c7:30:83:65:15:d8:8a:c5:d0:54:42:b1:a2: c4:b7:7f:96:12:3d:1e:b0:03:0f:61:fe:3e:ad:b9:04:4c:17: 49:dc:61:3d:5f:82:8c:e5:71:59:ec:95:12:06:fb:e9:54:b5: cc:5a:ed:b3:91:21:ce:39:6f:7c:55:16:1d:bb:e7:f4:e5:6b: cb:c0:67:58:4b:ca:e5:92:7f:a3:85:bf:4c:9a:f2:c6:13:f9: 4f:9b:47:1d:3b:41:85:30:4d:1b:0e:85:ad:b2:51:bf:b8:93: c0:78:07:12:f8:17:7e:56:f3:63:08:b8:71:83:bc:bd:9c:56: 22:82:c0:0a:26:f4:1f:59:60:85:c0:84:2e:b6:e5:2f:c5:08: 60:9b:f7:1e:a2:54:b7:7b:fd:9d:78:eb:3b:33:fa:6f:98:21: 22:28:03:d4:fb:26:69:5e:cf:48:6f:dc:d7:53:d6:c0:92:60: ee:59:87:7a:b8:37:b0:ca:42:48:47:aa:07:8d:24:c8:01:68: 1b:d3:60:3e:cd:b9:04:af:b3:3f:11:8f:5b:05:1f:7a:fc:45: 81:6e:3f:70:4b:d0:c8:ee:6f:c6:dc:36:5f:ca:83:61:9f:78: 5b:c8:fd:15:a2:1a:87:61:37:76:85:00:d8:66:bf:b7:87:1f: 10:8e:00:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUagIT1oOoKRaRoW6dDgVFtttrVxkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDEwMEE3RjZDNEQ1OEMzODY3RjlDRUQ3RTdENDZEQ0VE MEE1NzgwNDAeFw0yNTA2MjkwMjE1NTFaFw0yNTA3MDIwNjE4NTFaMDMxMTAvBgNV BAMTKEYzMDk3MTAwQ0U3Q0NERjdBQUFENjQ2QTU4MTg2Q0ZGRjIzMjNEOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVS0E6B+fFGrtAvLPVPuA4I1I0 2r89sNYFb5Qkwbf8i9Nt8Tc8euDzFYtH112HQ33DdgaSqcyrA/ZYJMojxgP2Cefa FtSqTBYkWeV/fCbcJjREd7OmJ4nALV+vejINxvziGNpBZn10rhusZqWVQsYiYRHt +Mq5ztUplB7V1TYM7VhtPXVS+DGdoe50fyLkzR9BB9JuOQZTwbkh7yAEcWTAriX1 QoWM1DUDGTUNjg+Ayg3Ohj/OEbS+3m6nJQkrXLe1kcXFSJASZ8U2o+9iP0ycaEET F/raA91j3HxD6NJF1bdq+Fute7boHQlgu1ChAXdXPqU6M7HS0jw2UHAmq5gZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8wlxAM58zfeqrWRqWBhs//IyPZIwHwYDVR0j BBgwFoAUAQCn9sTVjDhn+c7X59RtztCleAQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDg4NTUyNS1jYjBmLTQ2YTAtODI1My0wNDJkN2Q3YWZmMzgvMC8wMTAwQTdGNkM0 RDU4QzM4NjdGOUNFRDdFN0Q0NkRDRUQwQTU3ODA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDEwMEE3RjZDNEQ1OEMzODY3RjlDRUQ3RTdENDZEQ0VEMEE1 NzgwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQ4ODU1MjUtY2IwZi00NmEwLTgy NTMtMDQyZDdkN2FmZjM4LzAvMDEwMEE3RjZDNEQ1OEMzODY3RjlDRUQ3RTdENDZE Q0VEMEE1NzgwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKa6AQD/xzCDZRXYisXQVEKxosS3f5YSPR6w Aw9h/j6tuQRMF0ncYT1fgozlcVnslRIG++lUtcxa7bORIc45b3xVFh275/Tla8vA Z1hLyuWSf6OFv0ya8sYT+U+bRx07QYUwTRsOha2yUb+4k8B4BxL4F35W82MIuHGD vL2cViKCwAom9B9ZYIXAhC625S/FCGCb9x6iVLd7/Z146zsz+m+YISIoA9T7Jmle z0hv3NdT1sCSYO5Zh3q4N7DKQkhHqgeNJMgBaBvTYD7NuQSvsz8Rj1sFH3r8RYFu P3BL0Mjub8bcNl/Kg2GfeFvI/RWiGodhN3aFANhmv7eHHxCOADE= -----END CERTIFICATE-----Generated at Tue Jul 1 06:57:09 2025 by rpki-client