$ rpki-client -vvf repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft File: A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft (raw, json) Hash identifier: 30FfzMsL7xgVwItO+SoAdLTV2WTgZfAfQSVrj9/dx4k= Subject key identifier: 72:00:E6:00:C8:5C:0C:BA:67:E5:E2:FD:E3:31:4C:8D:E0:E8:13:09 Authority key identifier: A7:E6:C6:2C:47:C0:2E:EA:32:42:2E:13:59:08:EB:F2:30:C5:B5:FA Certificate issuer: /CN=A7E6C62C47C02EEA32422E135908EBF230C5B5FA Certificate serial: 6F9336BDD221AD161D5F8C735FEEEED2750DCA05 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft Manifest number: A3 Signing time: Sat 23 Aug 2025 15:42:20 +0000 Manifest this update: Sat 23 Aug 2025 15:37:20 +0000 Manifest next update: Tue 26 Aug 2025 17:48:20 +0000 Files and hashes: 1: 3136302e32322e3139392e302f32342d3234203d3e20313532383336.roa (hash: Lhr2al1XwYOqujTNMwbvxurUmcC7+yc2oxsnrcYpuBo=) 2: 3136302e32322e3139382e302f32332d3233203d3e20313532383336.roa (hash: VUNIcQLLtJsrGFAzVMiImA2RepGLVIMfYYvCS/t2Ge0=) 3: A7E6C62C47C02EEA32422E135908EBF230C5B5FA.crl (hash: xbyRW2lUJ8z34sPRnue+jtmnYJk6j34htmBg3n+sWus=) 4: 3136302e32322e3139382e302f32342d3234203d3e20313532383336.roa (hash: T0SEzE9YSldItn38GmkKf92LoaZ2oQZ49jDDO4h9Pog=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.crl rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:93:36:bd:d2:21:ad:16:1d:5f:8c:73:5f:ee:ee:d2:75:0d:ca:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7E6C62C47C02EEA32422E135908EBF230C5B5FA Validity Not Before: Aug 23 15:37:20 2025 GMT Not After : Aug 26 17:48:20 2025 GMT Subject: CN=7200E600C85C0CBA67E5E2FDE3314C8DE0E81309 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f3:35:f7:b3:6e:c6:51:61:7c:19:3c:22:45: 26:58:d0:0e:b1:52:32:bd:9e:fd:23:df:8b:35:50: e8:7e:27:30:58:85:bd:80:2b:cf:dc:1b:54:56:92: d9:73:a4:ea:80:63:34:46:0c:cf:99:eb:51:4c:41: 41:5b:e0:82:a7:f7:ed:7d:1a:32:36:ef:98:b4:58: 04:2a:5b:56:87:53:6e:12:bf:56:f0:e3:23:de:07: f4:52:df:2a:10:2b:e7:62:53:46:ea:ed:dd:8d:90: 78:8b:29:43:83:cb:ba:83:5f:5e:07:8a:c2:29:24: 35:b1:d9:99:50:8b:cf:ab:c7:ea:54:24:95:55:4a: 92:83:0c:03:1f:a4:15:81:fd:fd:11:7d:c1:fe:85: e9:69:53:46:75:2a:ea:69:1f:1f:94:ad:bf:4e:18: 22:34:03:67:4c:3d:65:59:b9:47:b3:be:63:0e:65: 31:50:80:69:24:ca:ac:db:5d:58:cc:fc:3d:ce:58: a8:ab:19:1b:5a:97:04:9d:6b:77:6c:f6:57:8d:cb: 87:87:56:a2:55:d3:3b:55:8e:e8:80:c4:39:05:a2: 13:84:de:3b:4b:15:8a:fd:04:b6:e6:92:81:7c:3f: 41:e5:e3:3e:fe:0b:96:4e:b7:34:b2:a1:16:b8:5d: 17:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:00:E6:00:C8:5C:0C:BA:67:E5:E2:FD:E3:31:4C:8D:E0:E8:13:09 X509v3 Authority Key Identifier: keyid:A7:E6:C6:2C:47:C0:2E:EA:32:42:2E:13:59:08:EB:F2:30:C5:B5:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:b7:f9:43:5c:2a:a6:a5:bb:c5:2a:39:0b:2d:41:a3:2f:b7: ec:00:fc:8e:04:b3:1d:52:91:c3:bd:00:a8:e3:36:ef:cf:85: fc:f2:61:70:8e:51:b9:47:4d:c2:1c:7c:44:c1:f5:1b:25:62: 63:27:f1:b3:aa:7f:63:b3:cf:68:18:ec:b2:c0:17:3c:7e:37: 5e:17:5d:02:f6:90:9e:62:32:36:47:f0:b0:94:2f:64:88:23: 4e:17:fe:40:b3:06:e2:3a:eb:ab:d5:cf:68:58:2e:4d:56:c1: fb:8e:c7:2f:c1:a6:92:6b:5e:0e:0c:3c:ab:c7:86:95:4d:5c: 82:7d:c4:01:50:67:2d:37:e0:70:16:d8:d0:dd:51:ef:35:98: bf:d2:2c:47:dd:2c:82:a0:9e:ef:c2:7e:ff:21:67:2f:c6:dd: dd:fe:aa:a7:d1:1e:68:2c:f0:dd:7d:fb:6d:11:4b:89:30:92: 0e:18:51:ba:90:13:e8:77:a5:c6:29:c2:fb:68:5b:b3:e7:fe: d8:d2:71:00:7c:ac:a3:42:4d:c4:b0:82:2d:57:c9:87:6a:d6: 57:c0:bc:27:0d:a2:01:ef:82:63:89:b7:e6:34:cb:f6:8a:b0: e6:59:bf:11:0b:18:11:fd:a2:41:25:72:6f:1e:0b:30:4a:a8: 92:9e:15:09 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb5M2vdIhrRYdX4xzX+7u0nUNygUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdFNkM2MkM0N0MwMkVFQTMyNDIyRTEzNTkwOEVCRjIz MEM1QjVGQTAeFw0yNTA4MjMxNTM3MjBaFw0yNTA4MjYxNzQ4MjBaMDMxMTAvBgNV BAMTKDcyMDBFNjAwQzg1QzBDQkE2N0U1RTJGREUzMzE0QzhERTBFODEzMDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL8zX3s27GUWF8GTwiRSZY0A6x UjK9nv0j34s1UOh+JzBYhb2AK8/cG1RWktlzpOqAYzRGDM+Z61FMQUFb4IKn9+19 GjI275i0WAQqW1aHU24Sv1bw4yPeB/RS3yoQK+diU0bq7d2NkHiLKUODy7qDX14H isIpJDWx2ZlQi8+rx+pUJJVVSpKDDAMfpBWB/f0RfcH+helpU0Z1KuppHx+Urb9O GCI0A2dMPWVZuUezvmMOZTFQgGkkyqzbXVjM/D3OWKirGRtalwSda3ds9leNy4eH VqJV0ztVjuiAxDkFohOE3jtLFYr9BLbmkoF8P0Hl4z7+C5ZOtzSyoRa4XRfjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcgDmAMhcDLpn5eL94zFMjeDoEwkwHwYDVR0j BBgwFoAUp+bGLEfALuoyQi4TWQjr8jDFtfowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZjMwZTRhZS0zZTQ3LTQ1NDAtODIzYy01M2NhZjIyNjdiMzYvMC9BN0U2QzYyQzQ3 QzAyRUVBMzI0MjJFMTM1OTA4RUJGMjMwQzVCNUZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTdFNkM2MkM0N0MwMkVFQTMyNDIyRTEzNTkwOEVCRjIzMEM1 QjVGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWYzMGU0YWUtM2U0Ny00NTQwLTgy M2MtNTNjYWYyMjY3YjM2LzAvQTdFNkM2MkM0N0MwMkVFQTMyNDIyRTEzNTkwOEVC RjIzMEM1QjVGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI63+UNcKqalu8UqOQstQaMvt+wA/I4Esx1S kcO9AKjjNu/PhfzyYXCOUblHTcIcfETB9RslYmMn8bOqf2Ozz2gY7LLAFzx+N14X XQL2kJ5iMjZH8LCUL2SII04X/kCzBuI666vVz2hYLk1WwfuOxy/BppJrXg4MPKvH hpVNXIJ9xAFQZy034HAW2NDdUe81mL/SLEfdLIKgnu/Cfv8hZy/G3d3+qqfRHmgs 8N19+20RS4kwkg4YUbqQE+h3pcYpwvtoW7Pn/tjScQB8rKNCTcSwgi1XyYdq1lfA vCcNogHvgmOJt+Y0y/aKsOZZvxELGBH9okElcm8eCzBKqJKeFQk= -----END CERTIFICATE-----Generated at Sat Aug 23 21:49:08 2025 by rpki-client