$ rpki-client -vvf repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.mft File: 0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.mft (raw, json) Hash identifier: a47yh2bxQyQKg1cD5GUTZ6yRhN9EwOW6bmAhU+RGdOI= Subject key identifier: 25:AC:7C:D9:01:3C:E8:87:02:95:1E:8E:2C:7E:15:3E:04:26:1B:4C Authority key identifier: 01:00:A7:F6:C4:D5:8C:38:67:F9:CE:D7:E7:D4:6D:CE:D0:A5:78:04 Certificate issuer: /CN=0100A7F6C4D58C3867F9CED7E7D46DCED0A57804 Certificate serial: 7E7C252581512DAC32E18BE3D7EAA250FED38DDE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.cer Subject info access: rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.mft Manifest number: 01AE Signing time: Sat 19 Jul 2025 21:00:50 +0000 Manifest this update: Sat 19 Jul 2025 20:55:50 +0000 Manifest next update: Wed 23 Jul 2025 06:55:50 +0000 Files and hashes: 1: 3130332e33352e3135322e302f32342d3234203d3e2039333431.roa (hash: ywb3a8C62BA/PMdGKSYbEqNH95chMJkQIqcJmusbD0s=) 2: 3130332e33352e3135332e302f32342d3234203d3e2039333431.roa (hash: OiTIcbauaRQZkoh05qWm9giYFtWGDu1XoyHAojKPf2g=) 3: 0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.crl (hash: QFWzNdR7qAvIdDmMELyOzTaBqoV5de9Q/CDD/EbsAZY=) 4: 3130332e33352e3135322e302f32332d3233203d3e2039333431.roa (hash: 2htdgS+1Or0wZzJh4jZYW5oaI6hoP4/N0BvY1mQLhMA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.crl rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 06:55:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:7c:25:25:81:51:2d:ac:32:e1:8b:e3:d7:ea:a2:50:fe:d3:8d:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0100A7F6C4D58C3867F9CED7E7D46DCED0A57804 Validity Not Before: Jul 19 20:55:50 2025 GMT Not After : Jul 23 06:55:50 2025 GMT Subject: CN=25AC7CD9013CE88702951E8E2C7E153E04261B4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:3a:1a:d2:d8:a2:33:eb:8d:ec:25:36:fd:f2: 8b:df:4c:57:7e:14:92:88:15:83:59:df:20:aa:36: 91:67:77:35:e7:c1:28:b8:6a:d9:0d:61:24:42:2b: 6e:b3:e9:68:32:91:2a:09:3a:9a:23:ce:42:03:fe: ff:26:e7:8e:77:ac:da:02:49:7a:f1:6c:df:a2:a0: b4:c1:63:f6:4f:63:5a:e5:22:53:81:eb:cd:ba:e7: 79:94:cf:4f:75:5f:f9:a0:62:b4:ec:52:39:f0:a5: ce:6b:3b:93:a3:82:8b:73:de:5e:d6:a4:19:6f:59: 46:27:b9:d4:39:79:fb:86:86:0f:35:a7:af:6f:4d: 23:dc:e1:f2:3a:06:c1:41:6c:d9:9d:37:ee:7a:08: 71:8d:33:f4:54:09:a9:30:1a:55:ea:e3:4a:de:61: f6:35:c2:7f:df:66:10:78:03:b1:57:fe:f6:74:b4: c3:b8:a6:9e:02:c8:49:1c:bc:15:7c:15:22:95:38: b1:d9:7c:a5:5c:f2:e1:d7:2a:3b:75:94:27:f4:a8: 25:f9:03:0f:fa:88:29:f7:6e:ec:d3:0b:1a:f1:31: 88:8e:20:b3:ee:64:55:f4:20:d9:a6:34:5c:a5:12: 0d:1c:2f:bc:f7:9e:d3:df:ca:89:bd:83:e0:1e:1b: 56:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:AC:7C:D9:01:3C:E8:87:02:95:1E:8E:2C:7E:15:3E:04:26:1B:4C X509v3 Authority Key Identifier: keyid:01:00:A7:F6:C4:D5:8C:38:67:F9:CE:D7:E7:D4:6D:CE:D0:A5:78:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:e7:a0:3b:e0:c4:40:89:41:21:ef:9a:49:02:62:ff:5c:f8: 6d:8b:1a:65:84:03:b4:97:87:62:b6:50:7f:3e:f1:c6:43:7a: 39:89:bb:28:82:31:da:43:82:a7:de:92:07:c8:ec:ac:84:91: eb:aa:fa:9b:e8:a5:ff:a1:5b:59:8f:c4:86:8d:0b:4f:2d:d2: 63:87:f9:31:65:d5:8e:2c:e3:6f:85:0d:6d:69:6e:c8:fa:d0: a0:01:8f:e8:e8:90:22:85:80:2c:ce:b0:35:95:e1:58:28:6e: d5:d2:b1:d3:3b:a2:20:11:f1:5e:da:31:ec:de:eb:f7:6d:f5: 58:5b:7b:c9:dc:3b:b7:8f:5a:0e:2f:63:ee:38:d4:c0:18:cb: 6c:c5:ae:43:5e:4f:ce:45:54:8c:6e:77:3a:e3:90:c8:bf:55: f7:60:e2:b9:74:cc:d7:cc:3f:fb:75:3f:a8:bb:b2:ff:ee:8a: de:95:da:e6:91:40:3b:b2:cb:ff:1f:51:0e:23:8d:00:5b:e1: 9f:14:c0:24:49:97:2f:19:60:48:18:33:23:37:d0:59:9c:b5: 17:c3:29:a1:fb:dc:99:66:51:5c:3d:24:4f:e9:a4:d7:23:bc: a3:20:a1:6e:b9:87:c7:c3:0b:06:56:91:43:53:5c:0a:51:7a: fa:9f:ed:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfnwlJYFRLawy4Yvj1+qiUP7Tjd4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDEwMEE3RjZDNEQ1OEMzODY3RjlDRUQ3RTdENDZEQ0VE MEE1NzgwNDAeFw0yNTA3MTkyMDU1NTBaFw0yNTA3MjMwNjU1NTBaMDMxMTAvBgNV BAMTKDI1QUM3Q0Q5MDEzQ0U4ODcwMjk1MUU4RTJDN0UxNTNFMDQyNjFCNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCOhrS2KIz643sJTb98ovfTFd+ FJKIFYNZ3yCqNpFndzXnwSi4atkNYSRCK26z6WgykSoJOpojzkID/v8m5453rNoC SXrxbN+ioLTBY/ZPY1rlIlOB682653mUz091X/mgYrTsUjnwpc5rO5Ojgotz3l7W pBlvWUYnudQ5efuGhg81p69vTSPc4fI6BsFBbNmdN+56CHGNM/RUCakwGlXq40re YfY1wn/fZhB4A7FX/vZ0tMO4pp4CyEkcvBV8FSKVOLHZfKVc8uHXKjt1lCf0qCX5 Aw/6iCn3buzTCxrxMYiOILPuZFX0INmmNFylEg0cL7z3ntPfyom9g+AeG1ZZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJax82QE86IcClR6OLH4VPgQmG0wwHwYDVR0j BBgwFoAUAQCn9sTVjDhn+c7X59RtztCleAQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDg4NTUyNS1jYjBmLTQ2YTAtODI1My0wNDJkN2Q3YWZmMzgvMC8wMTAwQTdGNkM0 RDU4QzM4NjdGOUNFRDdFN0Q0NkRDRUQwQTU3ODA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDEwMEE3RjZDNEQ1OEMzODY3RjlDRUQ3RTdENDZEQ0VEMEE1 NzgwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQ4ODU1MjUtY2IwZi00NmEwLTgy NTMtMDQyZDdkN2FmZjM4LzAvMDEwMEE3RjZDNEQ1OEMzODY3RjlDRUQ3RTdENDZE Q0VEMEE1NzgwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC/noDvgxECJQSHvmkkCYv9c+G2LGmWEA7SX h2K2UH8+8cZDejmJuyiCMdpDgqfekgfI7KyEkeuq+pvopf+hW1mPxIaNC08t0mOH +TFl1Y4s42+FDW1pbsj60KABj+jokCKFgCzOsDWV4VgobtXSsdM7oiAR8V7aMeze 6/dt9Vhbe8ncO7ePWg4vY+441MAYy2zFrkNeT85FVIxudzrjkMi/Vfdg4rl0zNfM P/t1P6i7sv/uit6V2uaRQDuyy/8fUQ4jjQBb4Z8UwCRJly8ZYEgYMyM30FmctRfD KaH73JlmUVw9JE/ppNcjvKMgoW65h8fDCwZWkUNTXApRevqf7RM= -----END CERTIFICATE-----Generated at Mon Jul 21 08:39:55 2025 by rpki-client