$ rpki-client -vvf repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft File: A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft (raw, json) Hash identifier: SUL5v9ZUJg5iIb2TWU6OA0OOhH22H7khy713rMRPU7E= Subject key identifier: EC:77:A2:8D:4E:05:70:C4:13:8D:F7:8C:59:B1:E1:00:68:FB:92:40 Authority key identifier: A7:DC:E7:64:7F:A7:75:A7:E9:DF:44:EA:EF:AC:52:11:8F:36:69:F8 Certificate issuer: /CN=A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8 Certificate serial: 6D1573875F621C677CF73490D71DFB54929DDF5F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft Manifest number: 01C6 Signing time: Thu 21 Aug 2025 16:31:26 +0000 Manifest this update: Thu 21 Aug 2025 16:26:26 +0000 Manifest next update: Sun 24 Aug 2025 21:43:26 +0000 Files and hashes: 1: A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.crl (hash: q3RKEcQixN3IXqYwEiie2HTSvoFFBB3sshBineXQxqY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.crl rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 21:43:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:15:73:87:5f:62:1c:67:7c:f7:34:90:d7:1d:fb:54:92:9d:df:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8 Validity Not Before: Aug 21 16:26:26 2025 GMT Not After : Aug 24 21:43:26 2025 GMT Subject: CN=EC77A28D4E0570C4138DF78C59B1E10068FB9240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:fb:be:06:82:52:97:0f:bb:bf:dd:a1:03:64: 07:a7:a5:3d:19:02:fa:a2:dd:e8:68:19:b9:55:da: bc:d6:26:a1:73:d5:83:5d:82:71:15:cc:60:78:66: 11:e8:c9:e3:95:61:40:6d:d7:6b:14:16:a3:0c:46: ff:cf:39:ec:b3:ff:74:5c:4e:e7:42:b5:14:66:53: b3:0f:96:fb:f6:70:66:b5:68:69:ad:60:10:f5:cd: 4a:42:69:29:a1:59:88:99:95:fa:c4:84:0f:72:95: 86:18:28:ef:c7:1d:50:22:c1:08:4b:6c:94:0b:8f: 09:17:1f:2b:17:1e:f0:64:6e:63:eb:ba:66:14:24: 06:15:33:2d:2f:21:2e:ba:12:8f:56:c6:28:66:18: 01:6d:ba:a9:c2:40:ff:69:8c:09:8f:09:44:e4:0d: 35:19:36:d7:b0:71:a5:95:0c:77:3d:2c:2c:fb:cb: 2e:9d:64:56:07:3e:d0:09:59:74:18:e7:96:6b:f8: 11:3e:af:24:f0:42:ae:6b:34:71:9a:82:67:59:35: 4a:f1:74:d4:27:40:07:9b:66:ed:38:cb:c9:43:d3: 48:dc:4b:d8:c7:94:17:19:6c:3b:b3:b8:f4:f2:e6: 54:91:62:29:ce:68:67:8c:f2:46:d2:52:72:3f:24: 91:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:77:A2:8D:4E:05:70:C4:13:8D:F7:8C:59:B1:E1:00:68:FB:92:40 X509v3 Authority Key Identifier: keyid:A7:DC:E7:64:7F:A7:75:A7:E9:DF:44:EA:EF:AC:52:11:8F:36:69:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:3c:8a:56:07:6c:21:32:16:64:91:fb:4a:84:7a:af:ac:fc: de:32:5c:db:8f:3d:36:a5:47:80:46:c8:57:29:9d:b7:56:d0: 36:f0:be:7a:1d:e1:56:65:42:9e:d9:44:56:90:2d:55:41:73: 7e:5a:9e:dd:4d:20:0e:1f:60:b2:af:5f:a0:99:75:eb:b1:9f: 2d:ac:04:24:52:ae:3b:f8:f0:ac:94:49:23:e7:86:8f:f8:a7: b0:f8:18:2a:d6:15:f2:8f:7d:11:ff:ed:5c:6b:c6:39:ee:ee: 86:83:c6:6e:9c:b0:0e:22:0d:ba:66:9d:b9:f9:94:71:5d:29: c8:7a:0c:c1:e6:94:66:a6:30:96:88:f7:42:3b:f0:35:cb:00: b0:9e:da:36:71:94:f5:81:70:6e:b2:88:a5:52:bd:53:d7:e8: f8:da:f8:b5:39:f4:55:07:23:98:c3:ba:fc:e0:b9:3e:61:de: f4:97:fc:07:9b:62:4e:14:4a:ca:9d:33:9e:38:06:3d:c0:b3: 1a:c7:31:d0:ac:de:00:a1:79:f8:9b:b4:04:bb:cd:14:4c:1d: a0:08:6f:44:55:74:28:ae:af:df:f4:c2:ca:35:a1:fe:dc:f0: a7:13:a7:38:71:a7:e7:08:ef:5d:04:78:ba:f4:ee:8e:83:42: 2b:4d:7f:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbRVzh19iHGd89zSQ1x37VJKd318wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdEQ0U3NjQ3RkE3NzVBN0U5REY0NEVBRUZBQzUyMTE4 RjM2NjlGODAeFw0yNTA4MjExNjI2MjZaFw0yNTA4MjQyMTQzMjZaMDMxMTAvBgNV BAMTKEVDNzdBMjhENEUwNTcwQzQxMzhERjc4QzU5QjFFMTAwNjhGQjkyNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa+74GglKXD7u/3aEDZAenpT0Z Avqi3ehoGblV2rzWJqFz1YNdgnEVzGB4ZhHoyeOVYUBt12sUFqMMRv/POeyz/3Rc TudCtRRmU7MPlvv2cGa1aGmtYBD1zUpCaSmhWYiZlfrEhA9ylYYYKO/HHVAiwQhL bJQLjwkXHysXHvBkbmPrumYUJAYVMy0vIS66Eo9WxihmGAFtuqnCQP9pjAmPCUTk DTUZNtewcaWVDHc9LCz7yy6dZFYHPtAJWXQY55Zr+BE+ryTwQq5rNHGagmdZNUrx dNQnQAebZu04y8lD00jcS9jHlBcZbDuzuPTy5lSRYinOaGeM8kbSUnI/JJH9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7HeijU4FcMQTjfeMWbHhAGj7kkAwHwYDVR0j BBgwFoAUp9znZH+ndafp30Tq76xSEY82afgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2YzMGUyNy1iOTVlLTRkNzUtOTY4ZC01MzhmYjc5MTg4MjkvMC9BN0RDRTc2NDdG QTc3NUE3RTlERjQ0RUFFRkFDNTIxMThGMzY2OUY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTdEQ0U3NjQ3RkE3NzVBN0U5REY0NEVBRUZBQzUyMTE4RjM2 NjlGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDNmMzBlMjctYjk1ZS00ZDc1LTk2 OGQtNTM4ZmI3OTE4ODI5LzAvQTdEQ0U3NjQ3RkE3NzVBN0U5REY0NEVBRUZBQzUy MTE4RjM2NjlGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKw8ilYHbCEyFmSR+0qEeq+s/N4yXNuPPTal R4BGyFcpnbdW0Dbwvnod4VZlQp7ZRFaQLVVBc35ant1NIA4fYLKvX6CZdeuxny2s BCRSrjv48KyUSSPnho/4p7D4GCrWFfKPfRH/7Vxrxjnu7oaDxm6csA4iDbpmnbn5 lHFdKch6DMHmlGamMJaI90I78DXLALCe2jZxlPWBcG6yiKVSvVPX6Pja+LU59FUH I5jDuvzguT5h3vSX/AebYk4USsqdM544Bj3AsxrHMdCs3gChefibtAS7zRRMHaAI b0RVdCiur9/0wso1of7c8KcTpzhxp+cI710EeLr07o6DQitNf58= -----END CERTIFICATE-----Generated at Sat Aug 23 12:17:41 2025 by rpki-client