$ rpki-client -vvf repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft File: 0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft (raw, json) Hash identifier: vJaWQIdq4p5DsE7VRoIPNauiTz7w95BeldR8z7ysgdk= Subject key identifier: 54:E7:85:A6:3E:93:6E:3D:4C:A5:2B:B7:AB:27:A5:1A:79:8C:67:BC Authority key identifier: 0A:7E:22:2F:0C:3C:89:14:35:14:04:FC:05:DB:0F:DD:9C:D4:EB:20 Certificate issuer: /CN=0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20 Certificate serial: 3B3A770D287543BFC801829E38938CDC35B86E64 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft Manifest number: F6 Signing time: Sun 20 Jul 2025 02:10:59 +0000 Manifest this update: Sun 20 Jul 2025 02:05:59 +0000 Manifest next update: Wed 23 Jul 2025 07:22:59 +0000 Files and hashes: 1: 3130332e3136352e3135342e302f32342d3234203d3e20313431393635.roa (hash: 8OwVADfDElltpILpTKCgIU3iWPks4hxCwKGTSEJQw8w=) 2: 0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl (hash: M39LmuZWMkuWEidmKNycMByboCkz2wXk8/kyxvXEsrE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 07:22:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:3a:77:0d:28:75:43:bf:c8:01:82:9e:38:93:8c:dc:35:b8:6e:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20 Validity Not Before: Jul 20 02:05:59 2025 GMT Not After : Jul 23 07:22:59 2025 GMT Subject: CN=54E785A63E936E3D4CA52BB7AB27A51A798C67BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b4:7e:eb:0d:c5:3e:d0:6f:b8:e4:a2:d5:3d: 8e:62:35:4e:b0:fb:54:3d:27:5e:a5:ce:f4:72:98: 23:0a:c7:e3:fc:4d:ab:ff:84:96:a7:02:7c:ad:ed: 59:a2:2e:d0:af:cb:38:2a:48:58:7e:8e:8e:0f:3b: 47:9c:a1:b0:76:af:d7:c3:53:5b:e1:4d:24:cd:82: 68:f5:1c:9c:89:bb:95:32:87:42:6a:37:eb:4d:f1: a1:70:40:46:8f:32:81:aa:b9:93:f2:20:8c:51:e6: a5:ce:f2:66:a8:8b:d4:e2:c2:c0:ce:9b:76:f8:89: 10:a6:0b:a1:5c:1d:fb:54:08:da:3b:ef:8e:ff:ea: 53:d8:ac:76:43:96:8f:45:86:38:4f:53:d3:91:3d: 05:47:02:41:63:cd:3f:0d:8d:e6:be:70:4d:43:11: 76:6d:a2:f0:24:ea:1e:38:2b:02:72:84:d4:09:1e: 65:48:7b:e5:98:32:e1:81:98:ba:69:ec:f9:6c:4b: 77:11:11:d3:b0:10:8b:3c:6f:dc:33:99:5d:eb:3f: b8:df:66:b8:7d:35:19:02:6a:ca:2a:05:0a:40:5b: af:51:6a:1e:e9:87:27:50:66:c6:e5:e6:f0:5d:3a: f0:1d:40:f5:e4:ca:63:1e:f5:ee:3f:2a:40:3b:bf: 2a:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:E7:85:A6:3E:93:6E:3D:4C:A5:2B:B7:AB:27:A5:1A:79:8C:67:BC X509v3 Authority Key Identifier: keyid:0A:7E:22:2F:0C:3C:89:14:35:14:04:FC:05:DB:0F:DD:9C:D4:EB:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:e8:b4:37:c0:ff:1c:bd:0e:8f:ea:d1:c9:bd:ed:48:5f:d7: 00:4e:53:57:ff:6e:1e:51:30:2d:81:27:69:74:22:04:4d:2e: 7b:a8:83:45:f6:35:35:dd:44:bd:35:4a:0e:56:5c:db:40:90: c8:f2:00:c0:16:b7:8d:9b:a9:12:08:62:e7:9e:fc:18:85:0b: b1:0d:51:80:10:76:cd:68:54:cb:e0:12:4a:4f:72:54:11:61: ca:db:34:82:56:8f:a7:23:fe:fe:b5:92:95:6d:a7:3a:c0:6e: 6e:54:03:94:c7:4f:97:26:63:79:dd:f4:f4:6f:10:02:76:1a: 92:18:31:6e:5b:06:79:d7:b5:98:cc:80:b4:d0:3d:17:1e:60: aa:b0:47:8f:ea:c7:88:e8:05:ff:68:64:69:1b:69:cc:68:bf: 04:fe:f6:93:73:a2:e9:89:10:77:6b:70:ed:60:00:41:ce:f7: 2b:1b:5e:92:56:99:06:ce:a0:4a:e5:f4:1f:63:a5:52:64:c5: 09:f6:f4:a4:c7:a5:c9:99:bf:fb:42:41:f0:bf:ec:3b:44:0a: 3a:64:bb:b9:38:dd:3a:d7:36:60:e7:b9:1b:3a:9c:1e:93:08: 88:e3:55:91:2e:9c:e4:ad:94:ef:ac:f1:23:e6:a8:c4:fd:76: fa:28:b6:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOzp3DSh1Q7/IAYKeOJOM3DW4bmQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE3RTIyMkYwQzNDODkxNDM1MTQwNEZDMDVEQjBGREQ5 Q0Q0RUIyMDAeFw0yNTA3MjAwMjA1NTlaFw0yNTA3MjMwNzIyNTlaMDMxMTAvBgNV BAMTKDU0RTc4NUE2M0U5MzZFM0Q0Q0E1MkJCN0FCMjdBNTFBNzk4QzY3QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDatH7rDcU+0G+45KLVPY5iNU6w +1Q9J16lzvRymCMKx+P8Tav/hJanAnyt7VmiLtCvyzgqSFh+jo4PO0ecobB2r9fD U1vhTSTNgmj1HJyJu5Uyh0JqN+tN8aFwQEaPMoGquZPyIIxR5qXO8maoi9TiwsDO m3b4iRCmC6FcHftUCNo7747/6lPYrHZDlo9FhjhPU9ORPQVHAkFjzT8Njea+cE1D EXZtovAk6h44KwJyhNQJHmVIe+WYMuGBmLpp7PlsS3cREdOwEIs8b9wzmV3rP7jf Zrh9NRkCasoqBQpAW69Rah7phydQZsbl5vBdOvAdQPXkymMe9e4/KkA7vyohAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVOeFpj6Tbj1MpSu3qyelGnmMZ7wwHwYDVR0j BBgwFoAUCn4iLww8iRQ1FAT8BdsP3ZzU6yAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y Y2YzNWE0Ny0yY2NlLTQ4N2YtYWEyNy1jOWU5ZGU2MzViZWMvMC8wQTdFMjIyRjBD M0M4OTE0MzUxNDA0RkMwNURCMEZERDlDRDRFQjIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE3RTIyMkYwQzNDODkxNDM1MTQwNEZDMDVEQjBGREQ5Q0Q0 RUIyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmNmMzVhNDctMmNjZS00ODdmLWFh MjctYzllOWRlNjM1YmVjLzAvMEE3RTIyMkYwQzNDODkxNDM1MTQwNEZDMDVEQjBG REQ5Q0Q0RUIyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKXotDfA/xy9Do/q0cm97Uhf1wBOU1f/bh5R MC2BJ2l0IgRNLnuog0X2NTXdRL01Sg5WXNtAkMjyAMAWt42bqRIIYuee/BiFC7EN UYAQds1oVMvgEkpPclQRYcrbNIJWj6cj/v61kpVtpzrAbm5UA5THT5cmY3nd9PRv EAJ2GpIYMW5bBnnXtZjMgLTQPRceYKqwR4/qx4joBf9oZGkbacxovwT+9pNzoumJ EHdrcO1gAEHO9ysbXpJWmQbOoErl9B9jpVJkxQn29KTHpcmZv/tCQfC/7DtECjpk u7k43TrXNmDnuRs6nB6TCIjjVZEunOStlO+s8SPmqMT9dvootvQ= -----END CERTIFICATE-----Generated at Mon Jul 21 08:32:10 2025 by rpki-client