$ rpki-client -vvf repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft File: A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft (raw, json) Hash identifier: Z7g9Flkws8Jel357WrRWVo9BlADUtNqWFgbf3n6TKsw= Subject key identifier: FD:19:ED:6E:34:19:8A:2B:73:B2:53:8B:77:38:84:A6:C1:D1:E5:17 Authority key identifier: A0:DE:21:A0:35:CF:60:1B:CB:D9:D5:C9:8B:D4:7D:D9:5F:99:34:64 Certificate issuer: /CN=A0DE21A035CF601BCBD9D5C98BD47DD95F993464 Certificate serial: 61AB3FA63DD1470350F8167E07F2ECCA362D5172 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft Manifest number: 0202 Signing time: Fri 18 Jul 2025 19:12:29 +0000 Manifest this update: Fri 18 Jul 2025 19:07:29 +0000 Manifest next update: Tue 22 Jul 2025 00:05:29 +0000 Files and hashes: 1: A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl (hash: 084JmgyE8sTrFZoq2GP0KEzEIyh4WrmpVxwV2CA07QY=) 2: 34322e36322e3137362e302f32342d3234203d3e203535363930.roa (hash: dHv2E74rvnbHn93zKNwQZCdDaqywUU0cyjyj8Kme6Kk=) 3: 34322e36322e3137382e302f32342d3234203d3e203535363930.roa (hash: pyuYjl7HJM3OX8EabIWp5/TJB6k8ueJKEta6KCZ5rHA=) 4: 34322e36322e3137372e302f32342d3234203d3e203535363930.roa (hash: wxamqcqZHFPZTXY3tFZjnjOjiDY+Ympi4Mw1SknW1jk=) 5: 34322e36322e3137392e302f32342d3234203d3e203535363930.roa (hash: cOnOzonkSjygqwY7wjbRR1C8zBB1AZouGk8x5uWWlJI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 00:05:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:ab:3f:a6:3d:d1:47:03:50:f8:16:7e:07:f2:ec:ca:36:2d:51:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A0DE21A035CF601BCBD9D5C98BD47DD95F993464 Validity Not Before: Jul 18 19:07:29 2025 GMT Not After : Jul 22 00:05:29 2025 GMT Subject: CN=FD19ED6E34198A2B73B2538B773884A6C1D1E517 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:6a:64:c4:e1:89:48:1c:85:81:f1:47:98:ff: 91:56:58:e7:b5:8a:ce:d9:70:ed:17:5a:77:49:9b: e3:91:3e:4f:6f:e5:77:bc:0c:23:16:00:9e:f5:22: 90:e7:c0:9c:64:b2:ff:f6:78:07:ae:9c:6d:a2:ce: 8b:e7:2c:06:3e:3b:c0:ca:df:77:37:f5:e0:a9:2d: cc:43:0b:5a:e8:6e:70:6a:85:ca:da:9c:8e:e6:9a: 5a:b2:8b:e3:cd:39:44:12:ec:de:43:98:ba:9b:49: 57:ca:84:61:99:f3:75:de:94:2b:14:11:e7:19:2f: 9d:c2:de:b7:9e:5d:5b:26:0d:ca:b3:8f:7f:5d:f1: e7:44:0c:9a:32:7e:97:3b:c4:50:6b:e6:9c:72:56: 55:a2:d5:21:dc:a2:df:a7:36:0b:42:15:eb:d8:04: 61:6e:25:23:f4:17:e8:14:e8:dc:74:0a:2c:2e:1e: d4:e0:e6:89:ac:f5:63:82:a3:e4:d8:47:f6:12:f9: 52:3f:b1:51:e7:76:c2:65:36:7c:22:c8:e8:65:8a: df:62:98:99:54:dd:40:36:f2:41:8a:10:a2:23:01: 23:61:50:72:60:97:8c:98:2f:fb:97:14:82:6f:9e: f2:eb:c6:f8:5d:cd:8d:6e:86:75:30:45:76:7e:3f: c5:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:19:ED:6E:34:19:8A:2B:73:B2:53:8B:77:38:84:A6:C1:D1:E5:17 X509v3 Authority Key Identifier: keyid:A0:DE:21:A0:35:CF:60:1B:CB:D9:D5:C9:8B:D4:7D:D9:5F:99:34:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07f8f6a4-8d87-4ef3-b4dc-52c25cb577c2/0/A0DE21A035CF601BCBD9D5C98BD47DD95F993464.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c1:7d:18:2e:62:86:36:d7:17:9e:26:e0:c7:e0:16:f6:67:22: af:40:29:76:c5:e3:47:ef:e8:5f:be:64:56:d5:4b:4c:c5:bf: 00:01:b8:86:59:df:dc:76:cf:ad:2c:3f:ac:c0:db:db:5c:b7: 7c:5a:48:17:6f:90:86:e1:bd:07:7b:8a:83:f9:4e:c4:df:56: 0d:47:6f:9e:66:80:c1:a0:5e:1e:06:ef:e3:f1:f9:0f:a4:d9: 86:43:bb:3a:51:73:73:b3:c9:a2:1a:bf:fe:53:be:d5:fc:6c: 9d:4f:53:52:17:28:45:5e:53:5e:f8:01:ad:71:c4:98:08:06: ee:bc:02:15:a1:e9:78:2a:26:cd:f6:ba:4a:f0:2c:6c:c7:6d: af:87:a8:71:a5:c8:ec:0f:a2:a5:a5:7f:18:3d:fe:bc:dd:3f: e1:0b:44:90:3f:49:29:5d:12:7f:93:d5:0a:d6:ed:ed:bf:01: eb:36:c4:2b:b9:da:7c:54:af:fc:6c:af:e6:25:1b:e5:54:d1: 18:34:2b:f0:c0:2c:f6:50:ef:1c:52:5b:b6:fb:67:3d:bd:6b: 90:79:10:f9:e2:60:3f:c9:0a:e4:a3:6c:7b:10:d5:71:17:09: 2b:76:c6:05:77:0d:b0:ee:39:25:ff:b5:67:43:44:e5:10:e5: 51:66:09:90 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYas/pj3RRwNQ+BZ+B/LsyjYtUXIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTBERTIxQTAzNUNGNjAxQkNCRDlENUM5OEJENDdERDk1 Rjk5MzQ2NDAeFw0yNTA3MTgxOTA3MjlaFw0yNTA3MjIwMDA1MjlaMDMxMTAvBgNV BAMTKEZEMTlFRDZFMzQxOThBMkI3M0IyNTM4Qjc3Mzg4NEE2QzFEMUU1MTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDamTE4YlIHIWB8UeY/5FWWOe1 is7ZcO0XWndJm+ORPk9v5Xe8DCMWAJ71IpDnwJxksv/2eAeunG2izovnLAY+O8DK 33c39eCpLcxDC1robnBqhcranI7mmlqyi+PNOUQS7N5DmLqbSVfKhGGZ83XelCsU EecZL53C3reeXVsmDcqzj39d8edEDJoyfpc7xFBr5pxyVlWi1SHcot+nNgtCFevY BGFuJSP0F+gU6Nx0CiwuHtTg5oms9WOCo+TYR/YS+VI/sVHndsJlNnwiyOhlit9i mJlU3UA28kGKEKIjASNhUHJgl4yYL/uXFIJvnvLrxvhdzY1uhnUwRXZ+P8WzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/RntbjQZiitzslOLdziEpsHR5RcwHwYDVR0j BBgwFoAUoN4hoDXPYBvL2dXJi9R92V+ZNGQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w N2Y4ZjZhNC04ZDg3LTRlZjMtYjRkYy01MmMyNWNiNTc3YzIvMC9BMERFMjFBMDM1 Q0Y2MDFCQ0JEOUQ1Qzk4QkQ0N0REOTVGOTkzNDY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTBERTIxQTAzNUNGNjAxQkNCRDlENUM5OEJENDdERDk1Rjk5 MzQ2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDdmOGY2YTQtOGQ4Ny00ZWYzLWI0 ZGMtNTJjMjVjYjU3N2MyLzAvQTBERTIxQTAzNUNGNjAxQkNCRDlENUM5OEJENDdE RDk1Rjk5MzQ2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMF9GC5ihjbXF54m4MfgFvZnIq9AKXbF40fv 6F++ZFbVS0zFvwABuIZZ39x2z60sP6zA29tct3xaSBdvkIbhvQd7ioP5TsTfVg1H b55mgMGgXh4G7+Px+Q+k2YZDuzpRc3OzyaIav/5TvtX8bJ1PU1IXKEVeU174Aa1x xJgIBu68AhWh6XgqJs32ukrwLGzHba+HqHGlyOwPoqWlfxg9/rzdP+ELRJA/SSld En+T1QrW7e2/Aes2xCu52nxUr/xsr+YlG+VU0Rg0K/DALPZQ7xxSW7b7Zz29a5B5 EPniYD/JCuSjbHsQ1XEXCSt2xgV3DbDuOSX/tWdDROUQ5VFmCZA= -----END CERTIFICATE-----Generated at Sun Jul 20 21:56:17 2025 by rpki-client