$ rpki-client -vvf repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft File: 0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft (raw, json) Hash identifier: BzV3hUdFb9ntYvzQVkvV+NRS4TFpfv3Ci87m5JwmmuY= Subject key identifier: E1:C7:6C:65:96:A9:BC:61:A3:E1:E1:2C:21:16:14:2B:A2:C7:BE:A5 Authority key identifier: 0A:7E:22:2F:0C:3C:89:14:35:14:04:FC:05:DB:0F:DD:9C:D4:EB:20 Certificate issuer: /CN=0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20 Certificate serial: 7846293E0D1FC1EF66A1FBAFCE85E8344A541432 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft Manifest number: ED Signing time: Sun 29 Jun 2025 09:20:59 +0000 Manifest this update: Sun 29 Jun 2025 09:15:59 +0000 Manifest next update: Wed 02 Jul 2025 13:25:59 +0000 Files and hashes: 1: 0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl (hash: DZOJ9Jm9IzpHM2x41htr1WEJfOGDWr+whTz0LhNDhtM=) 2: 3130332e3136352e3135342e302f32342d3234203d3e20313431393635.roa (hash: 8OwVADfDElltpILpTKCgIU3iWPks4hxCwKGTSEJQw8w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:46:29:3e:0d:1f:c1:ef:66:a1:fb:af:ce:85:e8:34:4a:54:14:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20 Validity Not Before: Jun 29 09:15:59 2025 GMT Not After : Jul 2 13:25:59 2025 GMT Subject: CN=E1C76C6596A9BC61A3E1E12C2116142BA2C7BEA5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:4d:b8:1f:88:8d:4f:72:d1:b5:51:e9:78:e9: 31:14:ce:c2:95:8f:de:5e:a3:c0:59:65:2e:ad:3f: 7f:be:72:11:89:9e:db:0f:33:6a:0b:bf:76:eb:68: 90:44:a1:77:b9:96:fc:65:d5:a4:71:fb:d1:81:64: 17:72:8f:f0:49:cc:ba:c9:a0:b7:00:65:1f:ca:90: 46:c8:cd:c9:3f:07:86:cd:91:63:11:3c:62:ae:85: 95:60:4a:e1:e6:10:21:74:54:66:50:14:63:71:97: 67:03:25:d8:d7:cd:b7:fb:22:d3:a0:46:33:20:6b: 55:03:28:15:e3:29:25:bd:9e:d8:b5:da:29:63:cd: cb:21:e5:45:17:5b:14:51:3f:c0:bc:50:37:fd:1c: 34:5c:eb:3f:3d:df:b9:a0:36:03:99:08:ae:c6:e7: ca:03:5d:fb:04:24:11:36:73:c9:02:be:9b:0d:4e: 6e:ad:89:f0:9d:26:ad:c7:d1:c7:06:aa:34:88:bf: 3c:45:aa:fa:5b:29:4e:5e:f3:c9:70:52:ff:b8:0a: 79:29:ce:81:4e:a4:9f:4c:3b:f8:16:05:de:52:3c: e0:1f:09:e6:5d:f9:e7:b6:44:ac:52:22:b2:44:2e: 8d:ae:df:fe:76:f9:8d:4c:09:ca:8d:eb:59:9c:19: 61:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:C7:6C:65:96:A9:BC:61:A3:E1:E1:2C:21:16:14:2B:A2:C7:BE:A5 X509v3 Authority Key Identifier: keyid:0A:7E:22:2F:0C:3C:89:14:35:14:04:FC:05:DB:0F:DD:9C:D4:EB:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:a5:4b:6b:0f:46:7f:d1:e7:a6:5f:53:99:cf:33:49:98:27: 23:da:36:66:78:a5:a1:16:30:43:e0:5e:54:03:a8:07:dd:85: 24:f8:87:ad:db:d7:ce:87:c3:38:36:2b:88:8b:32:25:f7:ad: 24:5c:19:37:48:ab:66:37:2e:1c:a2:60:ed:03:35:e5:b5:e3: 0f:ea:6f:bf:b0:bb:da:70:cd:40:83:30:93:40:bd:a6:63:7f: ca:47:e9:73:c0:68:94:32:e8:92:cb:92:39:f3:a6:84:4b:83: 0c:6e:5e:a5:8a:e0:b4:07:08:10:b0:f6:b3:45:06:99:f3:a9: 66:4c:ad:ee:8f:22:a6:20:3e:92:af:02:21:2e:20:dc:79:d8: d8:df:78:ca:3b:35:d7:b1:73:b0:2e:b9:c6:b3:ba:26:99:33: 9e:3f:81:35:5d:7e:43:60:90:9e:8b:a7:f7:f5:d2:4f:72:c6: 80:85:ca:2a:73:ca:bb:db:b3:5c:ed:69:7f:20:40:8c:b8:fe: 70:b7:b4:7d:ba:19:4c:ef:a5:4e:23:6b:93:be:ec:a3:0a:1b: f9:cd:0f:da:c4:cb:7e:d7:cf:28:a3:0f:30:f9:c0:fa:47:d4: cf:59:cc:6d:a0:cc:92:26:77:e2:74:c6:2b:7e:a0:bf:ad:f1: b3:5c:56:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeEYpPg0fwe9mofuvzoXoNEpUFDIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE3RTIyMkYwQzNDODkxNDM1MTQwNEZDMDVEQjBGREQ5 Q0Q0RUIyMDAeFw0yNTA2MjkwOTE1NTlaFw0yNTA3MDIxMzI1NTlaMDMxMTAvBgNV BAMTKEUxQzc2QzY1OTZBOUJDNjFBM0UxRTEyQzIxMTYxNDJCQTJDN0JFQTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwTbgfiI1PctG1Uel46TEUzsKV j95eo8BZZS6tP3++chGJntsPM2oLv3braJBEoXe5lvxl1aRx+9GBZBdyj/BJzLrJ oLcAZR/KkEbIzck/B4bNkWMRPGKuhZVgSuHmECF0VGZQFGNxl2cDJdjXzbf7ItOg RjMga1UDKBXjKSW9nti12iljzcsh5UUXWxRRP8C8UDf9HDRc6z8937mgNgOZCK7G 58oDXfsEJBE2c8kCvpsNTm6tifCdJq3H0ccGqjSIvzxFqvpbKU5e88lwUv+4Cnkp zoFOpJ9MO/gWBd5SPOAfCeZd+ee2RKxSIrJELo2u3/52+Y1MCcqN61mcGWFtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4cdsZZapvGGj4eEsIRYUK6LHvqUwHwYDVR0j BBgwFoAUCn4iLww8iRQ1FAT8BdsP3ZzU6yAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y Y2YzNWE0Ny0yY2NlLTQ4N2YtYWEyNy1jOWU5ZGU2MzViZWMvMC8wQTdFMjIyRjBD M0M4OTE0MzUxNDA0RkMwNURCMEZERDlDRDRFQjIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE3RTIyMkYwQzNDODkxNDM1MTQwNEZDMDVEQjBGREQ5Q0Q0 RUIyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmNmMzVhNDctMmNjZS00ODdmLWFh MjctYzllOWRlNjM1YmVjLzAvMEE3RTIyMkYwQzNDODkxNDM1MTQwNEZDMDVEQjBG REQ5Q0Q0RUIyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI6lS2sPRn/R56ZfU5nPM0mYJyPaNmZ4paEW MEPgXlQDqAfdhST4h63b186Hwzg2K4iLMiX3rSRcGTdIq2Y3LhyiYO0DNeW14w/q b7+wu9pwzUCDMJNAvaZjf8pH6XPAaJQy6JLLkjnzpoRLgwxuXqWK4LQHCBCw9rNF BpnzqWZMre6PIqYgPpKvAiEuINx52NjfeMo7Ndexc7AuucazuiaZM54/gTVdfkNg kJ6Lp/f10k9yxoCFyipzyrvbs1ztaX8gQIy4/nC3tH26GUzvpU4ja5O+7KMKG/nN D9rEy37XzyijDzD5wPpH1M9ZzG2gzJImd+J0xit+oL+t8bNcVh0= -----END CERTIFICATE-----Generated at Sun Jun 29 21:40:28 2025 by rpki-client