$ rpki-client -vvf repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft File: A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft (raw, json) Hash identifier: u9+ZyHGtCBrUrz+ZItB4pVpbaMk9CXflLWhERLuNFeY= Subject key identifier: 0F:25:6E:D4:2B:9D:40:2F:04:8C:D2:D5:E9:CA:B0:88:25:80:E5:1C Authority key identifier: A7:E6:C6:2C:47:C0:2E:EA:32:42:2E:13:59:08:EB:F2:30:C5:B5:FA Certificate issuer: /CN=A7E6C62C47C02EEA32422E135908EBF230C5B5FA Certificate serial: 7ED77AA145C0B486E761C67D6B119838143322DA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft Manifest number: 8A Signing time: Sun 29 Jun 2025 02:32:12 +0000 Manifest this update: Sun 29 Jun 2025 02:27:12 +0000 Manifest next update: Wed 02 Jul 2025 03:00:12 +0000 Files and hashes: 1: A7E6C62C47C02EEA32422E135908EBF230C5B5FA.crl (hash: u856jX1h7kmooE4NLIxsUl+ccXTIs250xNwLb+vO9pM=) 2: 3136302e32322e3139382e302f32342d3234203d3e20313532383336.roa (hash: iBwCiGq60c+2kk4AeuGkzb89D8PG4a8vEAoiYw5XZV0=) 3: 3136302e32322e3139392e302f32342d3234203d3e20313532383336.roa (hash: KK4iDt8fTsMGcROdReawd5n4c23gZEw7aOn4pQj9/68=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.crl rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 03:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:d7:7a:a1:45:c0:b4:86:e7:61:c6:7d:6b:11:98:38:14:33:22:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7E6C62C47C02EEA32422E135908EBF230C5B5FA Validity Not Before: Jun 29 02:27:12 2025 GMT Not After : Jul 2 03:00:12 2025 GMT Subject: CN=0F256ED42B9D402F048CD2D5E9CAB0882580E51C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:98:be:ed:64:9d:3f:8f:89:41:2d:1e:75:e7: b9:a5:37:4e:53:88:82:85:2d:73:87:bc:da:42:ee: 6a:e9:a8:11:06:9a:9d:fe:fc:70:46:03:35:57:44: 21:a6:3f:24:b6:d1:52:8e:fd:73:75:fb:4e:fd:cc: 5b:d9:06:7e:29:71:7a:4b:69:b9:59:4b:e1:3d:99: cb:d6:ee:23:94:4c:84:6e:d6:dd:77:9d:b2:92:8b: 2a:3b:a4:2a:92:81:33:26:11:e6:2c:33:bd:73:9a: b7:60:a3:b5:66:6b:d5:c8:71:02:e6:d5:da:87:a3: c5:fa:27:a6:54:bd:5a:a6:b4:46:13:ac:3f:5d:43: e8:01:ba:b3:86:7b:01:24:36:4f:ee:e5:8e:a4:d5: bb:6d:4a:aa:66:14:cf:3b:13:04:eb:9a:0d:97:04: 2b:20:10:7b:0c:b0:d6:e2:c5:96:2b:30:a9:aa:5e: 71:32:a9:2f:76:6b:aa:fa:79:d5:94:56:50:c3:30: a6:02:3b:81:46:92:4d:74:5b:dc:fb:de:7e:e9:6f: 35:da:08:a0:4f:e2:9d:f8:8f:62:c1:46:47:26:a3: 66:9b:9e:58:25:b0:e1:f4:9f:41:ba:13:ee:fc:64: d6:5d:3c:93:81:06:fb:a6:59:ea:2f:a1:21:eb:f5: 78:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0F:25:6E:D4:2B:9D:40:2F:04:8C:D2:D5:E9:CA:B0:88:25:80:E5:1C X509v3 Authority Key Identifier: keyid:A7:E6:C6:2C:47:C0:2E:EA:32:42:2E:13:59:08:EB:F2:30:C5:B5:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:26:ba:a3:2b:ff:ce:19:3d:c6:52:cb:a3:e1:be:b6:e8:36: e1:87:bc:b0:fb:cb:6b:88:15:c6:14:96:45:47:7c:47:0a:a4: 62:2d:66:a2:c5:59:30:bf:59:6a:b9:e4:fd:45:1c:98:56:6b: 2a:d4:17:f4:f6:74:fa:07:e2:f0:40:9b:da:1d:41:c6:17:f1: 51:35:b4:2a:17:3e:3e:b3:1e:42:78:a8:cd:8f:70:f4:8a:0d: a2:4b:2a:d2:27:e6:7c:d4:66:77:74:96:b2:03:ae:27:86:f7: 74:db:05:b8:16:9a:22:68:ae:84:fa:43:cf:05:bf:c2:e2:1e: 09:e2:1f:6d:3e:8f:ee:a3:4c:6a:32:f5:23:43:5b:0c:82:78: 79:62:d8:95:36:31:58:39:0f:a1:ef:9d:c0:7f:1e:b3:8d:9f: b8:a9:67:5c:c8:4f:d7:f2:85:30:48:f7:2e:11:58:3e:66:6b: 07:e5:60:75:8a:fd:86:3b:9e:7b:39:a1:15:c3:17:fe:f3:10: be:1b:1a:3c:b7:1e:17:11:45:0e:dc:27:16:fc:77:70:53:fc: 48:a5:5e:52:f9:47:9e:c3:83:15:dd:cd:6b:04:6b:61:4a:87: e1:ea:3c:e0:00:80:9b:d3:8f:5f:12:a7:59:71:92:02:7d:36: 6a:68:fc:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUftd6oUXAtIbnYcZ9axGYOBQzItowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdFNkM2MkM0N0MwMkVFQTMyNDIyRTEzNTkwOEVCRjIz MEM1QjVGQTAeFw0yNTA2MjkwMjI3MTJaFw0yNTA3MDIwMzAwMTJaMDMxMTAvBgNV BAMTKDBGMjU2RUQ0MkI5RDQwMkYwNDhDRDJENUU5Q0FCMDg4MjU4MEU1MUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkmL7tZJ0/j4lBLR5157mlN05T iIKFLXOHvNpC7mrpqBEGmp3+/HBGAzVXRCGmPyS20VKO/XN1+079zFvZBn4pcXpL ablZS+E9mcvW7iOUTIRu1t13nbKSiyo7pCqSgTMmEeYsM71zmrdgo7Vma9XIcQLm 1dqHo8X6J6ZUvVqmtEYTrD9dQ+gBurOGewEkNk/u5Y6k1bttSqpmFM87EwTrmg2X BCsgEHsMsNbixZYrMKmqXnEyqS92a6r6edWUVlDDMKYCO4FGkk10W9z73n7pbzXa CKBP4p34j2LBRkcmo2abnlglsOH0n0G6E+78ZNZdPJOBBvumWeovoSHr9XhXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDyVu1CudQC8EjNLV6cqwiCWA5RwwHwYDVR0j BBgwFoAUp+bGLEfALuoyQi4TWQjr8jDFtfowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZjMwZTRhZS0zZTQ3LTQ1NDAtODIzYy01M2NhZjIyNjdiMzYvMC9BN0U2QzYyQzQ3 QzAyRUVBMzI0MjJFMTM1OTA4RUJGMjMwQzVCNUZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTdFNkM2MkM0N0MwMkVFQTMyNDIyRTEzNTkwOEVCRjIzMEM1 QjVGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWYzMGU0YWUtM2U0Ny00NTQwLTgy M2MtNTNjYWYyMjY3YjM2LzAvQTdFNkM2MkM0N0MwMkVFQTMyNDIyRTEzNTkwOEVC RjIzMEM1QjVGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAcmuqMr/84ZPcZSy6PhvrboNuGHvLD7y2uI FcYUlkVHfEcKpGItZqLFWTC/WWq55P1FHJhWayrUF/T2dPoH4vBAm9odQcYX8VE1 tCoXPj6zHkJ4qM2PcPSKDaJLKtIn5nzUZnd0lrIDrieG93TbBbgWmiJoroT6Q88F v8LiHgniH20+j+6jTGoy9SNDWwyCeHli2JU2MVg5D6HvncB/HrONn7ipZ1zIT9fy hTBI9y4RWD5mawflYHWK/YY7nns5oRXDF/7zEL4bGjy3HhcRRQ7cJxb8d3BT/Eil XlL5R57DgxXdzWsEa2FKh+HqPOAAgJvTj18Sp1lxkgJ9Nmpo/LU= -----END CERTIFICATE-----Generated at Mon Jun 30 10:21:19 2025 by rpki-client