$ rpki-client -vvf repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft File: A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft (raw, json) Hash identifier: b0fdPBA0hBohSuvO9RvOlzz6pWqSU/6TWtdIdWxhZjM= Subject key identifier: 02:F7:34:61:8F:4D:AA:C9:2E:6C:5B:28:8B:4C:10:BA:5D:D1:FD:8D Authority key identifier: A7:D1:BD:82:11:3C:D7:20:C5:72:AF:99:A8:FB:29:40:61:0A:EC:49 Certificate issuer: /CN=A7D1BD82113CD720C572AF99A8FB2940610AEC49 Certificate serial: 13586FCD12136FC77D4B4C968F8AA3C02124586D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer Subject info access: rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft Manifest number: 0168 Signing time: Sun 29 Jun 2025 12:01:16 +0000 Manifest this update: Sun 29 Jun 2025 11:56:16 +0000 Manifest next update: Wed 02 Jul 2025 13:01:16 +0000 Files and hashes: 1: 323430373a396538303a3a2f33322d3332203d3e203634323937.roa (hash: 8XW9fR3nJvKy312lXn4PWtXoN/9mgbLUR7iv4Mby3uc=) 2: 3130332e37372e3230352e302f32342d3234203d3e203634323937.roa (hash: NZ3zgpSngsIOBUBuxKD8qjF4IFrIt5WPsm16vJBokXQ=) 3: 3130332e37372e3230362e302f32342d3234203d3e203634323937.roa (hash: qm6Wx8HHdMprTN2Xs+s/pxVtuwdrhpPAL17E7ApccPM=) 4: 3130332e37372e3230342e302f32322d3232203d3e203634323937.roa (hash: DfpI3sfZfOso5gGyoS07WtJ/Jycy9ggknC4EuCpUXOM=) 5: 3130332e37372e3230342e302f32342d3234203d3e203634323937.roa (hash: BXSq9b95eC9MSwvxuZ/AcJL572zXX4pRx3/J1qctsOw=) 6: A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl (hash: 8VI4oqK981ifYFTMsAMRRXeo3KSl5hontFriHkOzZp4=) 7: 3130332e37372e3230372e302f32342d3234203d3e203634323937.roa (hash: Ldzq0WjI5kxA0xwZ9j/+HkbFA7bRhcVP8vfijlAcxEw=) 8: 3130332e37372e3230342e302f32332d3233203d3e203634323937.roa (hash: cOnqdPMFYbqbFi/FA6Q7dA8kJTzM3+iE0W1mSgXK4nI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:58:6f:cd:12:13:6f:c7:7d:4b:4c:96:8f:8a:a3:c0:21:24:58:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7D1BD82113CD720C572AF99A8FB2940610AEC49 Validity Not Before: Jun 29 11:56:16 2025 GMT Not After : Jul 2 13:01:16 2025 GMT Subject: CN=02F734618F4DAAC92E6C5B288B4C10BA5DD1FD8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:e5:a1:8c:a0:90:ab:70:12:a0:a3:67:66:9b: 77:64:08:10:a1:ed:23:1a:d4:54:aa:0e:0c:29:5d: 15:88:86:01:d6:a5:7e:b2:7b:f5:87:79:e0:f3:c0: cb:86:83:20:b7:3f:78:d8:27:11:5f:68:95:d7:6b: 15:76:56:b1:89:f0:40:e2:b9:3a:10:0c:27:fd:77: 1f:44:56:bb:7f:15:bc:8e:ab:4e:44:66:58:c6:2a: af:8f:d1:c8:09:72:51:ee:f2:32:b9:27:a9:19:71: ca:ba:5a:ab:b5:8d:30:02:e8:a2:f0:a0:fa:f6:14: 01:cf:0b:10:de:db:39:11:9e:f6:3f:db:37:50:d2: cd:c0:e1:00:0a:1a:e5:f9:74:28:d1:f1:3f:32:07: e7:51:4a:bc:7a:9d:dc:8b:95:9d:91:cb:27:73:69: 7f:82:c7:d1:cd:f9:23:c6:c9:14:fd:2c:23:c3:44: 5d:e2:cf:43:ed:30:67:ef:89:80:67:77:a4:85:33: c4:58:93:5c:61:83:da:1e:96:fe:2f:d6:e3:e9:c8: b1:fd:cc:87:24:07:56:77:3d:86:0c:98:57:af:9f: 42:22:a7:bf:73:10:0e:0e:8d:fa:22:8f:d7:d3:8f: db:d7:81:1c:cf:be:7d:6c:7f:f8:b9:8a:39:30:ec: c1:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:F7:34:61:8F:4D:AA:C9:2E:6C:5B:28:8B:4C:10:BA:5D:D1:FD:8D X509v3 Authority Key Identifier: keyid:A7:D1:BD:82:11:3C:D7:20:C5:72:AF:99:A8:FB:29:40:61:0A:EC:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:d3:ea:54:9d:29:e4:28:c1:fc:89:42:cc:76:41:82:8b:8b: f5:04:b3:ff:9f:43:80:20:9c:bf:32:a2:fb:01:4c:6d:7e:01: bc:c5:e8:ea:5e:27:6e:90:0e:e8:9a:55:a4:77:28:4a:84:45: 87:e6:c2:58:f3:4f:86:93:ba:c2:b4:d0:94:c6:90:bf:5a:b7: 16:97:1c:6b:d4:a2:60:c0:1e:8b:4f:8d:26:9c:5e:8b:28:6d: 85:1d:e3:14:a7:6a:b1:d8:51:53:b6:c1:3a:84:41:3a:a8:96: 6a:87:95:4a:15:51:8e:e1:ec:21:48:7a:b4:1e:b5:5e:d3:9a: b9:cd:f2:24:e7:ff:91:0a:4c:3c:ca:20:29:03:e3:5b:77:bc: 59:98:b3:e2:3f:2b:62:86:c6:b0:5b:31:8e:70:ae:34:63:db: e2:07:f9:59:29:7a:1d:bf:bb:f7:ab:03:b3:fb:a8:e8:38:82: ef:a1:28:96:c6:b8:dd:97:2c:cc:c2:35:bd:20:1f:c4:5a:c2: 61:27:b8:43:27:a2:39:3b:94:1a:b4:c0:65:f1:13:18:d8:43: 67:14:d5:54:b8:0a:fb:6c:21:e5:ff:15:70:0c:7b:7a:6b:ca: 9c:10:19:9f:b0:d0:47:1a:10:77:10:c7:24:0b:ce:a4:a6:96: 76:db:68:81 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE1hvzRITb8d9S0yWj4qjwCEkWG0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdEMUJEODIxMTNDRDcyMEM1NzJBRjk5QThGQjI5NDA2 MTBBRUM0OTAeFw0yNTA2MjkxMTU2MTZaFw0yNTA3MDIxMzAxMTZaMDMxMTAvBgNV BAMTKDAyRjczNDYxOEY0REFBQzkyRTZDNUIyODhCNEMxMEJBNUREMUZEOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCd5aGMoJCrcBKgo2dmm3dkCBCh 7SMa1FSqDgwpXRWIhgHWpX6ye/WHeeDzwMuGgyC3P3jYJxFfaJXXaxV2VrGJ8EDi uToQDCf9dx9EVrt/FbyOq05EZljGKq+P0cgJclHu8jK5J6kZccq6Wqu1jTAC6KLw oPr2FAHPCxDe2zkRnvY/2zdQ0s3A4QAKGuX5dCjR8T8yB+dRSrx6ndyLlZ2Ryydz aX+Cx9HN+SPGyRT9LCPDRF3iz0PtMGfviYBnd6SFM8RYk1xhg9oelv4v1uPpyLH9 zIckB1Z3PYYMmFevn0Iip79zEA4Ojfoij9fTj9vXgRzPvn1sf/i5ijkw7MGJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAvc0YY9NqskubFsoi0wQul3R/Y0wHwYDVR0j BBgwFoAUp9G9ghE81yDFcq+ZqPspQGEK7EkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OWRhN2I2YS00ZTFhLTQxZmYtYjhlYi04YzM2NGNkMjY0YjEvMC9BN0QxQkQ4MjEx M0NENzIwQzU3MkFGOTlBOEZCMjk0MDYxMEFFQzQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTdEMUJEODIxMTNDRDcyMEM1NzJBRjk5QThGQjI5NDA2MTBB RUM0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDlkYTdiNmEtNGUxYS00MWZmLWI4 ZWItOGMzNjRjZDI2NGIxLzAvQTdEMUJEODIxMTNDRDcyMEM1NzJBRjk5QThGQjI5 NDA2MTBBRUM0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH7T6lSdKeQowfyJQsx2QYKLi/UEs/+fQ4Ag nL8yovsBTG1+AbzF6OpeJ26QDuiaVaR3KEqERYfmwljzT4aTusK00JTGkL9atxaX HGvUomDAHotPjSacXosobYUd4xSnarHYUVO2wTqEQTqolmqHlUoVUY7h7CFIerQe tV7TmrnN8iTn/5EKTDzKICkD41t3vFmYs+I/K2KGxrBbMY5wrjRj2+IH+Vkpeh2/ u/erA7P7qOg4gu+hKJbGuN2XLMzCNb0gH8RawmEnuEMnojk7lBq0wGXxExjYQ2cU 1VS4CvtsIeX/FXAMe3prypwQGZ+w0EcaEHcQxyQLzqSmlnbbaIE= -----END CERTIFICATE-----Generated at Sun Jun 29 19:20:29 2025 by rpki-client