$ rpki-client -vvf repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft File: A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft (raw, json) Hash identifier: kUfqc+Svs3TFbam9qv7K53BGuE0JBoumNfiHVDZbWlU= Subject key identifier: A9:3F:64:19:98:50:F2:42:00:B6:58:3B:4A:25:20:76:7F:8C:1F:23 Authority key identifier: A7:D8:3E:E8:70:3B:BD:59:CD:CA:A5:62:2A:DB:35:C3:F9:72:27:28 Certificate issuer: /CN=A7D83EE8703BBD59CDCAA5622ADB35C3F9722728 Certificate serial: 38393B91919244E36B7FCC76A781173D1DBF23D0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft Manifest number: 01A2 Signing time: Fri 22 Aug 2025 13:11:35 +0000 Manifest this update: Fri 22 Aug 2025 13:06:35 +0000 Manifest next update: Mon 25 Aug 2025 21:43:35 +0000 Files and hashes: 1: A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.crl (hash: 5lj0mdH0NUTg5645tO0JuHBSt/m8YhSiNvjuVxV8gqo=) 2: 3130332e36332e32362e302f32342d3234203d3e20313338303839.roa (hash: a/XQ8MdxKUzSfIKR4TnLCUk6wo8og+MExbugEiLWe3U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.crl rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 21:43:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:39:3b:91:91:92:44:e3:6b:7f:cc:76:a7:81:17:3d:1d:bf:23:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7D83EE8703BBD59CDCAA5622ADB35C3F9722728 Validity Not Before: Aug 22 13:06:35 2025 GMT Not After : Aug 25 21:43:35 2025 GMT Subject: CN=A93F64199850F24200B6583B4A2520767F8C1F23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:60:f3:0d:f6:03:de:23:c6:90:92:4c:96:18: ad:27:5c:32:85:1c:6c:20:8f:bd:b0:67:7a:21:67: 64:98:97:97:9d:45:4a:04:e8:34:6d:31:b5:a6:dd: d2:bf:ae:b3:77:48:fe:15:7c:3b:80:88:e0:4f:9f: 36:39:c5:93:fd:65:75:16:d1:bc:6c:28:d0:38:ae: 11:ef:83:d9:e8:38:12:de:72:f3:45:72:70:17:7d: 39:f4:92:fa:0e:f7:ab:15:5e:1c:2c:3b:47:27:2e: 52:ef:48:92:03:74:12:bc:ac:19:82:52:7a:85:2d: 82:3f:c8:bd:e3:27:8f:61:09:53:71:1d:b2:b1:57: 9a:5d:21:1f:93:c5:65:11:fc:d3:13:a9:c8:a4:8e: 13:9c:78:ed:cb:54:d1:7f:16:a9:c9:0b:bd:b8:b0: 9e:7f:9a:8f:66:69:5e:49:1a:8e:e6:d3:1e:93:e4: 2b:92:2c:c4:b1:01:e9:53:96:e9:bc:a6:41:23:3d: 1f:85:30:e8:66:af:56:12:39:f1:fd:5a:3b:95:13: 8f:ae:29:93:0b:07:00:a6:c0:7f:89:b4:1e:1a:eb: 99:60:3a:12:2a:44:c4:22:1f:3e:32:6c:49:46:9b: f0:dd:2a:2a:c1:c0:bf:70:03:f8:4f:f7:16:52:a2: 2a:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:3F:64:19:98:50:F2:42:00:B6:58:3B:4A:25:20:76:7F:8C:1F:23 X509v3 Authority Key Identifier: keyid:A7:D8:3E:E8:70:3B:BD:59:CD:CA:A5:62:2A:DB:35:C3:F9:72:27:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:90:7f:41:bf:a5:37:91:8b:b0:6f:ff:32:90:9e:fe:cb:26: d6:01:54:4a:9a:42:22:12:1e:0e:c5:46:66:d3:ed:a9:9e:f8: 62:a7:86:65:34:99:87:b9:79:d3:1d:c3:e1:57:50:9d:89:db: 48:f0:cf:5f:67:36:94:21:48:2a:d5:20:20:5b:d5:e5:cc:d7: 16:15:98:1b:e9:f2:3a:fb:e0:2d:34:cf:ce:28:f3:55:47:77: 48:32:16:17:93:dd:29:4d:c6:18:71:57:00:5e:56:3a:d6:25: 28:d4:16:41:69:78:20:52:7e:9d:0b:69:02:df:7f:37:58:00: 1b:57:95:f6:e5:5c:0e:ed:bf:ed:31:14:ca:ac:cf:56:a6:b2: a9:57:19:e9:1f:61:cc:f9:12:7c:43:78:80:a8:28:b8:6e:9e: 4c:24:23:f2:1f:5a:e1:2c:8f:eb:20:68:9b:53:29:c1:72:8a: bc:f6:a5:a2:0f:5c:d5:6a:aa:70:f2:53:e0:3a:2c:6f:cd:dd: 9d:2f:99:54:f1:78:f4:a9:89:e1:0f:4e:bb:f7:16:c9:78:8c: db:35:5d:68:49:80:e4:9d:87:37:0d:77:23:ae:59:c3:66:66: d6:f7:39:30:48:5e:2d:8c:15:92:da:6e:80:82:39:3c:43:75: ba:65:c5:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUODk7kZGSRONrf8x2p4EXPR2/I9AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdEODNFRTg3MDNCQkQ1OUNEQ0FBNTYyMkFEQjM1QzNG OTcyMjcyODAeFw0yNTA4MjIxMzA2MzVaFw0yNTA4MjUyMTQzMzVaMDMxMTAvBgNV BAMTKEE5M0Y2NDE5OTg1MEYyNDIwMEI2NTgzQjRBMjUyMDc2N0Y4QzFGMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHYPMN9gPeI8aQkkyWGK0nXDKF HGwgj72wZ3ohZ2SYl5edRUoE6DRtMbWm3dK/rrN3SP4VfDuAiOBPnzY5xZP9ZXUW 0bxsKNA4rhHvg9noOBLecvNFcnAXfTn0kvoO96sVXhwsO0cnLlLvSJIDdBK8rBmC UnqFLYI/yL3jJ49hCVNxHbKxV5pdIR+TxWUR/NMTqcikjhOceO3LVNF/FqnJC724 sJ5/mo9maV5JGo7m0x6T5CuSLMSxAelTlum8pkEjPR+FMOhmr1YSOfH9WjuVE4+u KZMLBwCmwH+JtB4a65lgOhIqRMQiHz4ybElGm/DdKirBwL9wA/hP9xZSoip5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqT9kGZhQ8kIAtlg7SiUgdn+MHyMwHwYDVR0j BBgwFoAUp9g+6HA7vVnNyqViKts1w/lyJygwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWE2Y2VhZi1kNjhjLTRkY2ItODI2Ny1mZDFhNTNkOTk5ODgvMC9BN0Q4M0VFODcw M0JCRDU5Q0RDQUE1NjIyQURCMzVDM0Y5NzIyNzI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTdEODNFRTg3MDNCQkQ1OUNEQ0FBNTYyMkFEQjM1QzNGOTcy MjcyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODlhNmNlYWYtZDY4Yy00ZGNiLTgy NjctZmQxYTUzZDk5OTg4LzAvQTdEODNFRTg3MDNCQkQ1OUNEQ0FBNTYyMkFEQjM1 QzNGOTcyMjcyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAICQf0G/pTeRi7Bv/zKQnv7LJtYBVEqaQiIS Hg7FRmbT7ame+GKnhmU0mYe5edMdw+FXUJ2J20jwz19nNpQhSCrVICBb1eXM1xYV mBvp8jr74C00z84o81VHd0gyFheT3SlNxhhxVwBeVjrWJSjUFkFpeCBSfp0LaQLf fzdYABtXlfblXA7tv+0xFMqsz1amsqlXGekfYcz5EnxDeICoKLhunkwkI/IfWuEs j+sgaJtTKcFyirz2paIPXNVqqnDyU+A6LG/N3Z0vmVTxePSpieEPTrv3Fsl4jNs1 XWhJgOSdhzcNdyOuWcNmZtb3OTBIXi2MFZLaboCCOTxDdbplxWo= -----END CERTIFICATE-----Generated at Sat Aug 23 17:39:45 2025 by rpki-client