$ rpki-client -vvf repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft File: 7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft (raw, json) Hash identifier: WmOt/gHNKch9n/Ahb30C+LsVs8kYSq+R6nk7TYO08AE= Subject key identifier: 2B:D8:CE:82:77:DC:32:0D:02:58:D0:C3:F4:05:3B:C9:8A:EA:53:2B Authority key identifier: 7A:21:6F:23:D8:A2:28:FB:B8:F5:63:EC:15:DF:76:FD:50:32:31:B3 Certificate issuer: /CN=7A216F23D8A228FBB8F563EC15DF76FD503231B3 Certificate serial: 7B22985AA11389D8C4C86DA20E49BA5A6A91F02A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A216F23D8A228FBB8F563EC15DF76FD503231B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft Manifest number: 01EA Signing time: Fri 22 Aug 2025 20:32:20 +0000 Manifest this update: Fri 22 Aug 2025 20:27:20 +0000 Manifest next update: Tue 26 Aug 2025 03:11:20 +0000 Files and hashes: 1: 7A216F23D8A228FBB8F563EC15DF76FD503231B3.crl (hash: 9LWYVSSxQfwfi+5uN4M1Yag+3mbgbslGT4nS5UHDpPM=) 2: 3130332e32302e3130392e302f32342d3234203d3e20313439373037.roa (hash: rOc9IS1yKanFrzj6lHEyVZN9K3Au8qIy9aCKaCdjEsw=) 3: 3130332e32302e3130382e302f32342d3234203d3e20313439373037.roa (hash: l72fTVO4iPS3td7y6iJ6FZ6Iq9uNFhg1kwCppW10yoE=) 4: 3130332e32302e3130382e302f32332d3234203d3e20313439373037.roa (hash: YUh1E1cCB+Tam8Lv4+/c622A6XvCbyDIufb9eqoPvMQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.crl rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A216F23D8A228FBB8F563EC15DF76FD503231B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 03:11:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:22:98:5a:a1:13:89:d8:c4:c8:6d:a2:0e:49:ba:5a:6a:91:f0:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A216F23D8A228FBB8F563EC15DF76FD503231B3 Validity Not Before: Aug 22 20:27:20 2025 GMT Not After : Aug 26 03:11:20 2025 GMT Subject: CN=2BD8CE8277DC320D0258D0C3F4053BC98AEA532B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:95:4d:7b:4c:25:45:fb:1b:8a:05:f4:ec:c1: 5c:60:fa:e3:60:5f:2f:f2:b3:f1:70:a7:55:cc:fb: 94:83:fc:d8:7a:92:fb:57:44:67:94:13:28:3e:e9: 50:60:1a:9b:33:8b:b2:4b:4d:29:b8:a9:ea:fd:58: b7:fe:43:e1:91:47:7c:6f:f4:09:4b:e1:db:df:96: 1a:f2:7b:16:9b:e4:ed:4c:25:4c:10:39:c3:ca:2b: 56:75:bc:03:88:62:81:95:0c:c4:29:58:1c:e1:a6: 14:9e:8d:3c:01:43:6e:88:6b:3e:70:6e:e9:7b:bc: d3:9d:b0:e8:06:ff:57:fd:3e:b6:27:b2:d9:46:04: 01:9d:dd:d4:99:3b:d4:69:4f:2c:ee:47:4f:47:a3: 3d:b4:e4:6f:b5:5d:37:f1:5c:02:94:0e:6c:0d:9b: 39:93:45:d9:47:3f:f3:2d:1b:42:21:06:0f:6c:5a: 44:1b:87:01:aa:9d:4a:35:41:f1:24:1a:44:59:6b: be:18:0f:43:2f:41:27:74:86:f9:e5:72:8c:a5:cb: f8:31:74:3f:eb:bf:62:de:94:ea:15:19:d6:ca:c0: 02:d9:be:b8:c4:c1:2a:5c:1c:6a:fa:3c:65:f0:a5: f5:1d:c4:31:3c:f7:79:40:10:2e:44:74:ae:e0:06: 62:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:D8:CE:82:77:DC:32:0D:02:58:D0:C3:F4:05:3B:C9:8A:EA:53:2B X509v3 Authority Key Identifier: keyid:7A:21:6F:23:D8:A2:28:FB:B8:F5:63:EC:15:DF:76:FD:50:32:31:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A216F23D8A228FBB8F563EC15DF76FD503231B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:44:7b:18:6e:8e:92:3f:62:05:ef:4b:0a:a5:32:91:bc:5b: 9c:c4:1a:5f:e6:3a:97:d2:9f:06:8f:d7:7f:84:d3:13:09:6c: c2:34:10:24:03:ea:20:f0:7c:74:0f:73:19:fd:e9:ae:97:7c: 57:9c:2c:19:05:2c:f9:7f:99:ca:38:46:78:8a:e3:b6:3a:b4: 36:c4:de:eb:24:bf:d8:94:ef:de:75:ec:1a:7a:b6:f0:03:e1: 23:23:89:15:c8:e1:06:8a:d6:83:5c:85:5f:44:28:23:1f:94: a3:30:b3:86:64:19:26:79:29:bc:4d:a9:d4:89:d8:aa:58:2d: 0b:11:08:33:cf:25:4e:90:ad:da:68:a7:52:2a:cb:32:85:70: ec:2c:b8:e6:3d:cf:a2:b7:85:28:87:92:9e:3a:46:7b:1b:c5: 08:43:c8:82:6c:d4:ee:be:35:ad:ad:91:3d:43:19:7c:d0:a9: 54:3f:30:c2:57:79:ac:b1:3f:0c:62:37:33:41:58:39:70:cf: ea:bb:a6:94:c7:7b:e9:3e:b3:f3:24:77:12:f9:94:da:14:05: 54:5b:ed:21:0a:3f:db:4c:ae:7d:2c:e6:29:50:a5:11:13:8f: 73:9d:0e:3a:c2:7e:f0:1c:94:23:a2:fc:0d:60:3f:18:8f:c4: ae:c6:6a:7b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeyKYWqETidjEyG2iDkm6WmqR8CowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0EyMTZGMjNEOEEyMjhGQkI4RjU2M0VDMTVERjc2RkQ1 MDMyMzFCMzAeFw0yNTA4MjIyMDI3MjBaFw0yNTA4MjYwMzExMjBaMDMxMTAvBgNV BAMTKDJCRDhDRTgyNzdEQzMyMEQwMjU4RDBDM0Y0MDUzQkM5OEFFQTUzMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1lU17TCVF+xuKBfTswVxg+uNg Xy/ys/Fwp1XM+5SD/Nh6kvtXRGeUEyg+6VBgGpszi7JLTSm4qer9WLf+Q+GRR3xv 9AlL4dvflhryexab5O1MJUwQOcPKK1Z1vAOIYoGVDMQpWBzhphSejTwBQ26Iaz5w bul7vNOdsOgG/1f9PrYnstlGBAGd3dSZO9RpTyzuR09Hoz205G+1XTfxXAKUDmwN mzmTRdlHP/MtG0IhBg9sWkQbhwGqnUo1QfEkGkRZa74YD0MvQSd0hvnlcoyly/gx dD/rv2LelOoVGdbKwALZvrjEwSpcHGr6PGXwpfUdxDE893lAEC5EdK7gBmLxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK9jOgnfcMg0CWNDD9AU7yYrqUyswHwYDVR0j BBgwFoAUeiFvI9iiKPu49WPsFd92/VAyMbMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Y2M2YmQ3My1mOWJkLTRmNWEtOWM1OS1mYmVhMWJkODM0NzMvMC83QTIxNkYyM0Q4 QTIyOEZCQjhGNTYzRUMxNURGNzZGRDUwMzIzMUIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0EyMTZGMjNEOEEyMjhGQkI4RjU2M0VDMTVERjc2RkQ1MDMy MzFCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWNjNmJkNzMtZjliZC00ZjVhLTlj NTktZmJlYTFiZDgzNDczLzAvN0EyMTZGMjNEOEEyMjhGQkI4RjU2M0VDMTVERjc2 RkQ1MDMyMzFCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF9EexhujpI/YgXvSwqlMpG8W5zEGl/mOpfS nwaP13+E0xMJbMI0ECQD6iDwfHQPcxn96a6XfFecLBkFLPl/mco4RniK47Y6tDbE 3uskv9iU79517Bp6tvAD4SMjiRXI4QaK1oNchV9EKCMflKMws4ZkGSZ5KbxNqdSJ 2KpYLQsRCDPPJU6Qrdpop1IqyzKFcOwsuOY9z6K3hSiHkp46RnsbxQhDyIJs1O6+ Na2tkT1DGXzQqVQ/MMJXeayxPwxiNzNBWDlwz+q7ppTHe+k+s/MkdxL5lNoUBVRb 7SEKP9tMrn0s5ilQpRETj3OdDjrCfvAclCOi/A1gPxiPxK7Gans= -----END CERTIFICATE-----Generated at Sat Aug 23 14:07:23 2025 by rpki-client