$ rpki-client -vvf repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft File: A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft (raw, json) Hash identifier: /tmOxwtvMjBHKYAdtO2TqIIIb20rcuRf6aVkIDzrWCU= Subject key identifier: 48:E4:3F:1F:2D:09:61:91:8A:72:75:E7:13:D0:EC:8D:4C:F9:E1:88 Authority key identifier: A7:D8:3E:E8:70:3B:BD:59:CD:CA:A5:62:2A:DB:35:C3:F9:72:27:28 Certificate issuer: /CN=A7D83EE8703BBD59CDCAA5622ADB35C3F9722728 Certificate serial: 4F471495E3C8D58ED72B07561FCCCCF51EFD51AF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft Manifest number: 018A Signing time: Sun 29 Jun 2025 16:41:32 +0000 Manifest this update: Sun 29 Jun 2025 16:36:32 +0000 Manifest next update: Thu 03 Jul 2025 04:11:32 +0000 Files and hashes: 1: 3130332e36332e32362e302f32342d3234203d3e20313338303839.roa (hash: a/XQ8MdxKUzSfIKR4TnLCUk6wo8og+MExbugEiLWe3U=) 2: A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.crl (hash: RQl4nbqORNWzNBzrNeuUv2lHJYaJLbltq8SH3mIxLEU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.crl rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:47:14:95:e3:c8:d5:8e:d7:2b:07:56:1f:cc:cc:f5:1e:fd:51:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7D83EE8703BBD59CDCAA5622ADB35C3F9722728 Validity Not Before: Jun 29 16:36:32 2025 GMT Not After : Jul 3 04:11:32 2025 GMT Subject: CN=48E43F1F2D0961918A7275E713D0EC8D4CF9E188 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:89:fb:20:3e:2d:dc:22:a2:69:f1:14:a0:49: d3:3d:7a:15:c6:f5:df:d9:6d:dc:c2:14:ed:1b:cb: 44:87:15:9e:d3:37:d0:47:7c:80:91:9a:64:46:16: c8:15:a3:c1:5b:57:41:c1:4b:a9:50:c2:44:f3:25: 3c:80:a7:c0:4a:9d:51:dc:cf:bd:fa:61:e5:cb:9d: f1:f5:d9:8b:a7:5e:f4:4d:d0:fe:6a:ae:eb:e8:d5: fb:ee:38:c3:a7:69:12:39:79:c8:73:ea:29:1a:b7: 6f:ed:a0:db:3d:53:05:5a:cc:60:b3:c7:da:54:bc: 58:fe:24:86:6c:3a:91:4a:a3:a9:0a:aa:94:06:c8: ec:f9:09:5b:3a:73:1f:c8:be:c0:26:ef:96:10:86: c3:90:76:13:3d:18:01:e9:99:60:59:09:93:ec:9b: 21:64:04:38:49:ce:10:c9:ee:77:73:7b:bb:85:30: 99:e6:ec:7c:6a:e4:ac:db:0c:ef:be:4b:7f:46:6c: c8:84:e4:3d:fe:f6:49:7a:8b:1c:30:15:dd:12:70: 8a:6e:59:17:54:da:74:e1:f8:5c:a9:15:2c:68:cb: 00:33:f3:8a:bf:91:40:f0:4f:91:c1:17:58:63:b5: 17:e3:1a:61:6c:43:8d:cd:d0:a1:0b:65:e1:16:b4: a6:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:E4:3F:1F:2D:09:61:91:8A:72:75:E7:13:D0:EC:8D:4C:F9:E1:88 X509v3 Authority Key Identifier: keyid:A7:D8:3E:E8:70:3B:BD:59:CD:CA:A5:62:2A:DB:35:C3:F9:72:27:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:61:fc:da:7a:8a:d7:e4:64:1f:ad:23:d8:3e:eb:68:3c:ef: bb:5c:79:4e:98:d2:47:51:b4:65:10:4c:f8:3a:29:53:34:f5: 0b:11:c5:96:ac:5a:29:25:20:dd:31:05:4e:9e:1e:03:4a:49: 99:a7:b4:d8:9e:97:42:3d:cb:1f:d0:7b:18:88:31:98:77:22: 71:8f:92:08:78:5e:48:ac:17:44:3d:26:27:91:8e:ad:e1:2f: cc:54:94:46:e8:d1:6e:3b:f3:4c:82:12:66:d4:31:7a:25:4a: 14:9e:0d:da:42:d1:64:2e:5e:9e:56:db:d9:06:18:af:38:96: 2a:7f:1f:36:4f:75:45:cf:77:00:77:16:9d:96:6f:d4:6b:f9: 61:7f:88:ad:5d:2a:55:c4:a2:75:4d:c5:43:2f:57:a6:fc:5f: e9:66:6b:59:7e:03:7a:60:d0:bf:be:ee:be:41:b1:7c:9c:46: f4:15:28:1d:d8:28:eb:a3:b4:67:5e:8f:67:5f:1b:ba:d5:9c: 9e:2c:3b:71:eb:13:70:69:8c:54:d3:57:92:95:4a:c3:1a:6d: 8b:ef:08:da:45:4c:9a:d3:39:3d:ff:f0:7d:67:d8:c8:57:69: 09:1f:e0:ab:a8:27:08:d2:f2:6c:15:71:42:67:06:1f:2a:88: 0d:89:27:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT0cUlePI1Y7XKwdWH8zM9R79Ua8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdEODNFRTg3MDNCQkQ1OUNEQ0FBNTYyMkFEQjM1QzNG OTcyMjcyODAeFw0yNTA2MjkxNjM2MzJaFw0yNTA3MDMwNDExMzJaMDMxMTAvBgNV BAMTKDQ4RTQzRjFGMkQwOTYxOTE4QTcyNzVFNzEzRDBFQzhENENGOUUxODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuifsgPi3cIqJp8RSgSdM9ehXG 9d/ZbdzCFO0by0SHFZ7TN9BHfICRmmRGFsgVo8FbV0HBS6lQwkTzJTyAp8BKnVHc z736YeXLnfH12YunXvRN0P5qruvo1fvuOMOnaRI5echz6ikat2/toNs9UwVazGCz x9pUvFj+JIZsOpFKo6kKqpQGyOz5CVs6cx/IvsAm75YQhsOQdhM9GAHpmWBZCZPs myFkBDhJzhDJ7ndze7uFMJnm7Hxq5KzbDO++S39GbMiE5D3+9kl6ixwwFd0ScIpu WRdU2nTh+FypFSxoywAz84q/kUDwT5HBF1hjtRfjGmFsQ43N0KELZeEWtKY7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSOQ/Hy0JYZGKcnXnE9DsjUz54YgwHwYDVR0j BBgwFoAUp9g+6HA7vVnNyqViKts1w/lyJygwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWE2Y2VhZi1kNjhjLTRkY2ItODI2Ny1mZDFhNTNkOTk5ODgvMC9BN0Q4M0VFODcw M0JCRDU5Q0RDQUE1NjIyQURCMzVDM0Y5NzIyNzI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTdEODNFRTg3MDNCQkQ1OUNEQ0FBNTYyMkFEQjM1QzNGOTcy MjcyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODlhNmNlYWYtZDY4Yy00ZGNiLTgy NjctZmQxYTUzZDk5OTg4LzAvQTdEODNFRTg3MDNCQkQ1OUNEQ0FBNTYyMkFEQjM1 QzNGOTcyMjcyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE1h/Np6itfkZB+tI9g+62g877tceU6Y0kdR tGUQTPg6KVM09QsRxZasWiklIN0xBU6eHgNKSZmntNiel0I9yx/QexiIMZh3InGP kgh4XkisF0Q9JieRjq3hL8xUlEbo0W4780yCEmbUMXolShSeDdpC0WQuXp5W29kG GK84lip/HzZPdUXPdwB3Fp2Wb9Rr+WF/iK1dKlXEonVNxUMvV6b8X+lma1l+A3pg 0L++7r5BsXycRvQVKB3YKOujtGdej2dfG7rVnJ4sO3HrE3BpjFTTV5KVSsMabYvv CNpFTJrTOT3/8H1n2MhXaQkf4KuoJwjS8mwVcUJnBh8qiA2JJ5A= -----END CERTIFICATE-----Generated at Mon Jun 30 00:39:23 2025 by rpki-client