$ rpki-client -vvf repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft File: A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft (raw, json) Hash identifier: xqHF6yyf0YcF0kb/yvsC9C2YT9RySEUJ3jH54DCbPIY= Subject key identifier: DF:CA:A9:AD:1E:08:8E:C5:EB:28:52:45:A2:63:17:28:3D:2D:9A:E3 Authority key identifier: A7:D5:3E:B5:45:1E:AF:8A:CA:B6:38:48:7F:BD:EB:40:17:7A:0F:8A Certificate issuer: /CN=A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A Certificate serial: 46224C330AB1430BCF1A9E5E7D6D6BECE9BE5CCA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft Manifest number: 01B3 Signing time: Thu 21 Aug 2025 12:51:30 +0000 Manifest this update: Thu 21 Aug 2025 12:46:30 +0000 Manifest next update: Sun 24 Aug 2025 13:01:30 +0000 Files and hashes: 1: A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.crl (hash: ABUBE+jtvTxZxONxow5lUrftCObPWNm07qn6O3VOBBw=) 2: 3130332e3139302e36322e302f32342d3234203d3e20313439383938.roa (hash: 2ja7FKvmu0FlqkDf7LuG1Z7B59LI4ArGIpEzwSMjxRg=) 3: 3130332e3139302e36332e302f32342d3234203d3e20313439383938.roa (hash: 2CVr+NqiEqGGwrJfck3G7ZB8HhulLnTSsHN6lGbSZ/c=) 4: 3130332e3139302e36322e302f32332d3234203d3e20313439383938.roa (hash: Cp2AGXmtWxhdOX8t8c9ZWl5s1GCXbA0uZVtL40w4/7g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.crl rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 13:01:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:22:4c:33:0a:b1:43:0b:cf:1a:9e:5e:7d:6d:6b:ec:e9:be:5c:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A Validity Not Before: Aug 21 12:46:30 2025 GMT Not After : Aug 24 13:01:30 2025 GMT Subject: CN=DFCAA9AD1E088EC5EB285245A26317283D2D9AE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:51:4c:49:2b:9c:eb:53:a2:f8:55:88:6b:ea: a2:eb:dd:c2:41:ac:67:ea:0e:8d:8c:95:db:4d:39: 49:46:c2:78:73:82:01:e0:f3:83:e2:06:96:ef:f5: a8:33:d5:3d:8a:6e:96:00:1a:0a:b7:28:0f:f3:cd: 20:f2:99:06:96:87:d9:f9:c7:be:a2:fe:32:7f:ef: da:b3:0b:20:f8:ac:80:fa:75:fa:d1:98:8d:26:04: b4:04:3b:b2:69:cc:66:ef:15:c4:02:d9:d5:c1:9b: 7e:c6:02:59:09:90:04:3a:e6:52:18:59:ed:4f:fb: f0:2e:f6:75:fd:3b:c8:a0:b1:5b:16:59:18:65:2a: 28:8d:25:24:5e:1d:73:5a:2e:95:48:25:19:f8:22: ea:2e:c3:55:a4:d1:98:3d:2d:70:94:82:8a:82:5a: bd:55:0e:83:9e:a8:a7:7f:23:0d:2a:a1:59:3a:ff: 1b:5a:e8:46:1a:e9:a9:58:2d:b8:28:19:fe:e4:ba: a6:b1:62:22:f7:92:9e:28:e9:e4:bc:a8:69:7a:d1: 8a:20:f9:9b:bf:34:02:91:c8:42:f4:cf:fa:6f:37: 7a:f6:f2:78:e2:86:ca:50:0a:56:70:88:51:bd:7f: 0c:81:66:7d:24:fa:75:35:2d:0f:c7:cf:e8:d7:08: 92:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:CA:A9:AD:1E:08:8E:C5:EB:28:52:45:A2:63:17:28:3D:2D:9A:E3 X509v3 Authority Key Identifier: keyid:A7:D5:3E:B5:45:1E:AF:8A:CA:B6:38:48:7F:BD:EB:40:17:7A:0F:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:1d:55:90:95:a1:33:7b:64:c9:58:8f:9a:56:bc:7e:61:dc: 37:56:e5:9c:4b:fa:81:e8:23:63:47:bd:11:76:11:dc:18:24: 63:78:c0:56:40:3e:9f:26:fe:0d:96:e1:07:31:cf:9c:bc:85: 6a:3c:31:40:7b:69:18:7b:3b:07:a4:2c:c0:d9:ce:4d:0e:83: a1:fe:99:46:b0:5f:e8:a0:1c:ed:2a:2b:f4:47:c2:0e:59:a7: 2f:0d:16:1d:e4:77:6d:30:50:1f:0b:95:2f:c3:f8:fc:dd:86: c3:de:d0:ba:94:19:db:75:0a:74:3a:bd:08:b3:45:9c:92:f7: b6:b3:da:36:db:89:d1:97:88:60:eb:13:75:6c:53:47:df:69: 97:86:39:73:f0:4d:22:4c:05:0d:54:a9:20:0c:21:d0:43:c7: 50:ee:08:19:d0:74:ba:6e:03:b6:40:96:7e:2b:8e:f0:73:e6: 60:1f:f2:de:5a:f6:d0:e5:ee:de:a7:bd:16:0d:aa:df:7e:5a: ed:2c:3f:91:14:bf:69:d6:39:f2:0b:75:80:63:75:d9:62:45: 23:a0:86:80:e3:d6:4e:61:85:07:3e:26:ed:b4:8b:3d:a9:94: 71:d3:8e:40:08:43:49:3e:44:f8:15:f5:db:cf:ea:57:4d:56: fb:93:ce:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURiJMMwqxQwvPGp5efW1r7Om+XMowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdENTNFQjU0NTFFQUY4QUNBQjYzODQ4N0ZCREVCNDAx NzdBMEY4QTAeFw0yNTA4MjExMjQ2MzBaFw0yNTA4MjQxMzAxMzBaMDMxMTAvBgNV BAMTKERGQ0FBOUFEMUUwODhFQzVFQjI4NTI0NUEyNjMxNzI4M0QyRDlBRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8UUxJK5zrU6L4VYhr6qLr3cJB rGfqDo2MldtNOUlGwnhzggHg84PiBpbv9agz1T2KbpYAGgq3KA/zzSDymQaWh9n5 x76i/jJ/79qzCyD4rID6dfrRmI0mBLQEO7JpzGbvFcQC2dXBm37GAlkJkAQ65lIY We1P+/Au9nX9O8igsVsWWRhlKiiNJSReHXNaLpVIJRn4Iuouw1Wk0Zg9LXCUgoqC Wr1VDoOeqKd/Iw0qoVk6/xta6EYa6alYLbgoGf7kuqaxYiL3kp4o6eS8qGl60Yog +Zu/NAKRyEL0z/pvN3r28njihspQClZwiFG9fwyBZn0k+nU1LQ/Hz+jXCJLjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU38qprR4IjsXrKFJFomMXKD0tmuMwHwYDVR0j BBgwFoAUp9U+tUUer4rKtjhIf73rQBd6D4owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjIwYjQyMy1kZDVkLTQ0OGYtYmJkMy0wNDUzMGVjMTcxNWQvMC9BN0Q1M0VCNTQ1 MUVBRjhBQ0FCNjM4NDg3RkJERUI0MDE3N0EwRjhBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTdENTNFQjU0NTFFQUY4QUNBQjYzODQ4N0ZCREVCNDAxNzdB MEY4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzYyMGI0MjMtZGQ1ZC00NDhmLWJi ZDMtMDQ1MzBlYzE3MTVkLzAvQTdENTNFQjU0NTFFQUY4QUNBQjYzODQ4N0ZCREVC NDAxNzdBMEY4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAEdVZCVoTN7ZMlYj5pWvH5h3DdW5ZxL+oHo I2NHvRF2EdwYJGN4wFZAPp8m/g2W4Qcxz5y8hWo8MUB7aRh7OwekLMDZzk0Og6H+ mUawX+igHO0qK/RHwg5Zpy8NFh3kd20wUB8LlS/D+PzdhsPe0LqUGdt1CnQ6vQiz RZyS97az2jbbidGXiGDrE3VsU0ffaZeGOXPwTSJMBQ1UqSAMIdBDx1DuCBnQdLpu A7ZAln4rjvBz5mAf8t5a9tDl7t6nvRYNqt9+Wu0sP5EUv2nWOfILdYBjddliRSOg hoDj1k5hhQc+Ju20iz2plHHTjkAIQ0k+RPgV9dvP6ldNVvuTzjk= -----END CERTIFICATE-----Generated at Sat Aug 23 12:25:49 2025 by rpki-client