$ rpki-client -vvf repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft File: A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft (raw, json) Hash identifier: 4HSI9zoyaQIZuA7g+xYzwNGr4Zc/omIeILSH0O7T2P8= Subject key identifier: 46:C6:57:C1:BA:7F:BA:1F:41:5B:51:D6:AB:50:81:F7:19:78:1B:45 Authority key identifier: A7:D5:3E:B5:45:1E:AF:8A:CA:B6:38:48:7F:BD:EB:40:17:7A:0F:8A Certificate issuer: /CN=A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A Certificate serial: 624521C39F067D6DEE846F5DA743007F28DD31DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft Manifest number: 019C Signing time: Mon 30 Jun 2025 10:01:29 +0000 Manifest this update: Mon 30 Jun 2025 09:56:29 +0000 Manifest next update: Thu 03 Jul 2025 19:35:29 +0000 Files and hashes: 1: A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.crl (hash: ifMqf/PLvmYxttpMY6y6wNlfjPvEgl1UjS7wworrUsw=) 2: 3130332e3139302e36332e302f32342d3234203d3e20313439383938.roa (hash: 2CVr+NqiEqGGwrJfck3G7ZB8HhulLnTSsHN6lGbSZ/c=) 3: 3130332e3139302e36322e302f32332d3234203d3e20313439383938.roa (hash: Cp2AGXmtWxhdOX8t8c9ZWl5s1GCXbA0uZVtL40w4/7g=) 4: 3130332e3139302e36322e302f32342d3234203d3e20313439383938.roa (hash: 2ja7FKvmu0FlqkDf7LuG1Z7B59LI4ArGIpEzwSMjxRg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.crl rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 19:35:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:45:21:c3:9f:06:7d:6d:ee:84:6f:5d:a7:43:00:7f:28:dd:31:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A Validity Not Before: Jun 30 09:56:29 2025 GMT Not After : Jul 3 19:35:29 2025 GMT Subject: CN=46C657C1BA7FBA1F415B51D6AB5081F719781B45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:c5:2c:f7:95:00:65:77:62:24:32:20:8b:92: 11:54:62:cb:af:d3:a0:fa:64:4c:8c:12:38:96:46: 53:02:06:75:c9:fb:df:b9:1f:87:93:aa:45:ea:e6: a7:b5:71:64:42:43:1f:c8:7b:e8:ac:c3:ec:65:d4: e4:d8:63:f9:01:b8:d7:49:49:1f:d1:1d:5b:03:28: 1f:12:5f:65:46:dc:40:8d:05:28:b6:6c:04:9e:48: 54:81:ff:76:7a:b2:be:d0:7c:78:89:7c:e8:2f:a4: 91:bf:bb:b5:ba:b7:62:54:73:6f:8a:94:56:c0:01: 75:8e:f8:a5:0e:4d:d8:87:cb:7a:b1:d8:a1:58:22: 58:57:58:53:4c:1d:62:60:b9:1d:6c:e3:cf:b5:91: 87:7c:94:aa:08:0e:37:80:04:b2:6a:96:b2:cf:8d: ac:13:34:42:1b:68:59:ec:10:09:73:ba:df:ef:0d: 25:db:d6:ab:11:ca:8e:53:e2:e8:99:83:70:fa:45: ae:35:c1:c9:a1:fe:95:3d:07:86:33:b0:c8:f8:ec: 0e:aa:61:4a:d8:d4:72:c9:2d:fe:8d:2f:f2:fc:15: c8:16:2e:1e:ea:c6:ca:31:30:71:4d:64:ba:bb:e8: c1:2d:1c:12:d3:8c:3e:56:66:49:05:25:10:fc:7d: c6:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:C6:57:C1:BA:7F:BA:1F:41:5B:51:D6:AB:50:81:F7:19:78:1B:45 X509v3 Authority Key Identifier: keyid:A7:D5:3E:B5:45:1E:AF:8A:CA:B6:38:48:7F:BD:EB:40:17:7A:0F:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:4c:36:5d:8f:ad:04:c4:38:00:5a:3b:a4:84:3c:41:dc:cc: 24:32:30:30:3f:87:d6:18:de:be:5a:40:a5:fd:7c:ac:b2:70: c0:a8:36:87:cb:c6:63:2c:a2:a0:31:ca:72:31:02:e2:98:48: da:63:f3:74:a4:e0:8d:8f:2b:a6:87:65:c7:b6:70:3b:49:95: f0:2b:ce:f2:b1:df:59:05:a8:f3:d9:1b:e3:c5:fd:0d:58:c6: c3:2a:a7:cb:b3:5b:c1:2e:94:3c:23:2c:b4:da:9f:b8:05:37: 9b:c7:0b:31:bc:69:84:18:94:5b:79:57:95:0a:1f:35:b4:94: 48:ec:a2:81:83:a3:d0:75:06:22:8f:39:da:ba:41:cf:df:28: 21:b4:81:1a:03:5e:5c:4d:0d:42:e8:68:a9:c9:be:1b:6c:72: 8f:a7:fb:0b:64:11:b7:96:ca:a9:72:fc:8e:64:ef:0e:34:45: 58:79:c7:98:a7:2c:91:b1:f8:d4:84:9e:14:5d:a6:26:15:ec: 6d:2f:c0:dc:b0:0b:4f:3b:24:f5:c0:66:d3:0c:36:cf:20:ce: 00:52:dd:6c:d0:25:b4:c5:d0:6d:bb:c3:d9:bd:63:2e:e3:83: d8:ae:be:0f:7c:8c:30:f7:c7:6a:2a:09:3f:75:53:96:a6:7a: 20:9d:4a:38 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYkUhw58GfW3uhG9dp0MAfyjdMd0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdENTNFQjU0NTFFQUY4QUNBQjYzODQ4N0ZCREVCNDAx NzdBMEY4QTAeFw0yNTA2MzAwOTU2MjlaFw0yNTA3MDMxOTM1MjlaMDMxMTAvBgNV BAMTKDQ2QzY1N0MxQkE3RkJBMUY0MTVCNTFENkFCNTA4MUY3MTk3ODFCNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4xSz3lQBld2IkMiCLkhFUYsuv 06D6ZEyMEjiWRlMCBnXJ+9+5H4eTqkXq5qe1cWRCQx/Ie+isw+xl1OTYY/kBuNdJ SR/RHVsDKB8SX2VG3ECNBSi2bASeSFSB/3Z6sr7QfHiJfOgvpJG/u7W6t2JUc2+K lFbAAXWO+KUOTdiHy3qx2KFYIlhXWFNMHWJguR1s48+1kYd8lKoIDjeABLJqlrLP jawTNEIbaFnsEAlzut/vDSXb1qsRyo5T4uiZg3D6Ra41wcmh/pU9B4YzsMj47A6q YUrY1HLJLf6NL/L8FcgWLh7qxsoxMHFNZLq76MEtHBLTjD5WZkkFJRD8fcbTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURsZXwbp/uh9BW1HWq1CB9xl4G0UwHwYDVR0j BBgwFoAUp9U+tUUer4rKtjhIf73rQBd6D4owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjIwYjQyMy1kZDVkLTQ0OGYtYmJkMy0wNDUzMGVjMTcxNWQvMC9BN0Q1M0VCNTQ1 MUVBRjhBQ0FCNjM4NDg3RkJERUI0MDE3N0EwRjhBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTdENTNFQjU0NTFFQUY4QUNBQjYzODQ4N0ZCREVCNDAxNzdB MEY4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzYyMGI0MjMtZGQ1ZC00NDhmLWJi ZDMtMDQ1MzBlYzE3MTVkLzAvQTdENTNFQjU0NTFFQUY4QUNBQjYzODQ4N0ZCREVC NDAxNzdBMEY4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIZMNl2PrQTEOABaO6SEPEHczCQyMDA/h9YY 3r5aQKX9fKyycMCoNofLxmMsoqAxynIxAuKYSNpj83Sk4I2PK6aHZce2cDtJlfAr zvKx31kFqPPZG+PF/Q1YxsMqp8uzW8EulDwjLLTan7gFN5vHCzG8aYQYlFt5V5UK HzW0lEjsooGDo9B1BiKPOdq6Qc/fKCG0gRoDXlxNDULoaKnJvhtsco+n+wtkEbeW yqly/I5k7w40RVh5x5inLJGx+NSEnhRdpiYV7G0vwNywC087JPXAZtMMNs8gzgBS 3WzQJbTF0G27w9m9Yy7jg9iuvg98jDD3x2oqCT91U5ameiCdSjg= -----END CERTIFICATE-----Generated at Wed Jul 2 10:58:11 2025 by rpki-client