$ rpki-client -vvf repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft File: A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft (raw, json) Hash identifier: Nc7NUzWJFGCrkSOjQw3AdKthE21nPmo6zN71/Y2uDqI= Subject key identifier: 35:82:0D:CE:54:6D:F2:AA:F3:61:53:3E:B9:94:47:B6:3E:2D:A8:47 Authority key identifier: A7:D1:BD:82:11:3C:D7:20:C5:72:AF:99:A8:FB:29:40:61:0A:EC:49 Certificate issuer: /CN=A7D1BD82113CD720C572AF99A8FB2940610AEC49 Certificate serial: 08AC0315E724B6DA571CC6078336D5783EF8F11E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer Subject info access: rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft Manifest number: 0171 Signing time: Sat 19 Jul 2025 05:31:15 +0000 Manifest this update: Sat 19 Jul 2025 05:26:15 +0000 Manifest next update: Tue 22 Jul 2025 12:16:15 +0000 Files and hashes: 1: 3130332e37372e3230352e302f32342d3234203d3e203634323937.roa (hash: NZ3zgpSngsIOBUBuxKD8qjF4IFrIt5WPsm16vJBokXQ=) 2: A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl (hash: B8xTJTHP1rtSsrdpMMC9uNYMMtp10Lk43VD/Ym3o7L8=) 3: 3130332e37372e3230342e302f32322d3232203d3e203634323937.roa (hash: DfpI3sfZfOso5gGyoS07WtJ/Jycy9ggknC4EuCpUXOM=) 4: 3130332e37372e3230372e302f32342d3234203d3e203634323937.roa (hash: Ldzq0WjI5kxA0xwZ9j/+HkbFA7bRhcVP8vfijlAcxEw=) 5: 3130332e37372e3230362e302f32342d3234203d3e203634323937.roa (hash: qm6Wx8HHdMprTN2Xs+s/pxVtuwdrhpPAL17E7ApccPM=) 6: 3130332e37372e3230342e302f32332d3233203d3e203634323937.roa (hash: cOnqdPMFYbqbFi/FA6Q7dA8kJTzM3+iE0W1mSgXK4nI=) 7: 323430373a396538303a3a2f33322d3332203d3e203634323937.roa (hash: 8XW9fR3nJvKy312lXn4PWtXoN/9mgbLUR7iv4Mby3uc=) 8: 3130332e37372e3230342e302f32342d3234203d3e203634323937.roa (hash: BXSq9b95eC9MSwvxuZ/AcJL572zXX4pRx3/J1qctsOw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 12:16:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:ac:03:15:e7:24:b6:da:57:1c:c6:07:83:36:d5:78:3e:f8:f1:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7D1BD82113CD720C572AF99A8FB2940610AEC49 Validity Not Before: Jul 19 05:26:15 2025 GMT Not After : Jul 22 12:16:15 2025 GMT Subject: CN=35820DCE546DF2AAF361533EB99447B63E2DA847 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:4e:c7:74:c3:5c:5b:a6:5d:20:04:06:6b:f1: 15:66:d5:f4:42:fa:16:fa:82:72:83:15:e1:f9:ad: b6:7d:9b:88:70:c0:70:27:5a:65:f1:bf:e6:b9:f8: ba:7d:7c:b6:06:67:3f:8f:0f:31:74:25:c0:c1:1c: b8:3d:31:48:23:3d:b3:46:a2:fc:92:4a:ba:3a:b7: 9a:55:18:d7:3c:9b:33:ee:ca:64:4f:d0:32:7c:bd: 8d:29:98:e0:a9:01:bb:73:33:48:60:fb:22:84:4d: 3d:56:52:a2:e5:e7:15:bb:d3:11:82:5d:86:ba:96: 7b:81:76:ac:e1:42:cb:77:4d:65:47:66:db:8b:28: db:df:33:d7:07:df:8a:bb:6e:4a:04:bb:9c:d8:17: 93:af:3b:93:22:6c:2f:b3:cb:3a:11:c8:85:cc:cf: a4:a6:43:14:55:52:b9:28:a9:ef:52:7b:a7:b2:4a: b1:1c:f3:b5:b9:9f:af:10:a7:16:5b:81:d7:b7:ed: a3:17:2e:cc:df:f7:80:f7:60:67:67:b0:61:54:ff: ff:fe:d9:31:18:e3:b9:ec:9e:40:e7:a4:8e:1d:ed: c9:cc:4c:2d:8f:a1:3b:07:a1:73:5f:8c:ce:c3:b5: 50:4a:5c:7b:95:a8:19:03:9c:43:4d:f4:e8:23:fe: 76:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:82:0D:CE:54:6D:F2:AA:F3:61:53:3E:B9:94:47:B6:3E:2D:A8:47 X509v3 Authority Key Identifier: keyid:A7:D1:BD:82:11:3C:D7:20:C5:72:AF:99:A8:FB:29:40:61:0A:EC:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:a7:82:ff:df:ae:b0:be:e4:e0:3c:1a:94:d5:b0:f5:a4:21: ed:6a:fc:a3:76:8c:f4:7e:64:22:93:cd:72:21:00:9e:34:52: b7:f6:83:ed:25:4e:81:95:b4:1b:cb:e2:24:d6:74:13:8b:81: fc:79:c1:1e:45:d9:f8:ce:ea:35:97:35:ef:30:7f:1d:d6:1b: 14:fe:58:38:d1:44:f5:5b:ee:54:18:8c:47:9d:a6:26:4e:30: 93:68:20:dd:01:a5:59:b2:61:87:32:3c:49:f4:d0:cd:d9:18: 87:fd:0a:87:b6:17:7e:07:33:c9:48:93:92:58:fb:86:d4:29: 1c:38:86:e3:18:9d:12:5d:c5:45:04:10:55:e6:4b:f6:41:e8: f9:e9:5c:2d:b2:ed:a2:9c:aa:d4:3e:92:c8:be:9b:1e:21:43: 02:bc:5e:06:05:19:b6:5b:60:73:84:a1:39:81:2d:ef:1a:d5: 43:a4:e5:87:ab:da:cb:66:10:e9:94:75:3c:69:af:34:60:9c: 0e:c8:1a:01:23:d7:d0:8b:87:a9:15:a3:34:e5:f0:a1:64:ed: 90:73:3f:9c:5f:99:20:22:8f:34:55:81:fb:84:01:fd:66:16: cc:c9:d2:4d:45:7e:18:17:87:fa:ca:a1:86:dc:95:8a:d0:9b: f8:0f:72:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCKwDFeckttpXHMYHgzbVeD748R4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdEMUJEODIxMTNDRDcyMEM1NzJBRjk5QThGQjI5NDA2 MTBBRUM0OTAeFw0yNTA3MTkwNTI2MTVaFw0yNTA3MjIxMjE2MTVaMDMxMTAvBgNV BAMTKDM1ODIwRENFNTQ2REYyQUFGMzYxNTMzRUI5OTQ0N0I2M0UyREE4NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDATsd0w1xbpl0gBAZr8RVm1fRC +hb6gnKDFeH5rbZ9m4hwwHAnWmXxv+a5+Lp9fLYGZz+PDzF0JcDBHLg9MUgjPbNG ovySSro6t5pVGNc8mzPuymRP0DJ8vY0pmOCpAbtzM0hg+yKETT1WUqLl5xW70xGC XYa6lnuBdqzhQst3TWVHZtuLKNvfM9cH34q7bkoEu5zYF5OvO5MibC+zyzoRyIXM z6SmQxRVUrkoqe9Se6eySrEc87W5n68QpxZbgde37aMXLszf94D3YGdnsGFU///+ 2TEY47nsnkDnpI4d7cnMTC2PoTsHoXNfjM7DtVBKXHuVqBkDnENN9Ogj/nYzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNYINzlRt8qrzYVM+uZRHtj4tqEcwHwYDVR0j BBgwFoAUp9G9ghE81yDFcq+ZqPspQGEK7EkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OWRhN2I2YS00ZTFhLTQxZmYtYjhlYi04YzM2NGNkMjY0YjEvMC9BN0QxQkQ4MjEx M0NENzIwQzU3MkFGOTlBOEZCMjk0MDYxMEFFQzQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTdEMUJEODIxMTNDRDcyMEM1NzJBRjk5QThGQjI5NDA2MTBB RUM0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDlkYTdiNmEtNGUxYS00MWZmLWI4 ZWItOGMzNjRjZDI2NGIxLzAvQTdEMUJEODIxMTNDRDcyMEM1NzJBRjk5QThGQjI5 NDA2MTBBRUM0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF+ngv/frrC+5OA8GpTVsPWkIe1q/KN2jPR+ ZCKTzXIhAJ40Urf2g+0lToGVtBvL4iTWdBOLgfx5wR5F2fjO6jWXNe8wfx3WGxT+ WDjRRPVb7lQYjEedpiZOMJNoIN0BpVmyYYcyPEn00M3ZGIf9Coe2F34HM8lIk5JY +4bUKRw4huMYnRJdxUUEEFXmS/ZB6PnpXC2y7aKcqtQ+ksi+mx4hQwK8XgYFGbZb YHOEoTmBLe8a1UOk5Yer2stmEOmUdTxprzRgnA7IGgEj19CLh6kVozTl8KFk7ZBz P5xfmSAijzRVgfuEAf1mFszJ0k1FfhgXh/rKoYbclYrQm/gPchY= -----END CERTIFICATE-----Generated at Sun Jul 20 21:26:19 2025 by rpki-client