$ rpki-client -vvf repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.mft File: 523EE8D6F461B8FD4106F482C46C1029B1013145.mft (raw, json) Hash identifier: 3JUdcXaHQknvzwPIAq8uDtff39yHSGqmxMo4mpfntgw= Subject key identifier: 7F:F8:C4:CA:74:9F:DA:65:21:EE:F4:E8:C3:5D:23:1D:30:D7:E5:E2 Authority key identifier: 52:3E:E8:D6:F4:61:B8:FD:41:06:F4:82:C4:6C:10:29:B1:01:31:45 Certificate issuer: /CN=523EE8D6F461B8FD4106F482C46C1029B1013145 Certificate serial: 22443AD44CD881C55AD33E581C8867179ADCCEF7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/523EE8D6F461B8FD4106F482C46C1029B1013145.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.mft Manifest number: A7 Signing time: Sun 20 Jul 2025 15:00:35 +0000 Manifest this update: Sun 20 Jul 2025 14:55:35 +0000 Manifest next update: Wed 23 Jul 2025 22:07:35 +0000 Files and hashes: 1: 3130332e31392e38302e302f32342d3234203d3e20313332363339.roa (hash: YEDjMiqzXqQQzIDtWpx+jx5Bn+2TYkAiFHsRj0775yM=) 2: 3130332e31392e38302e302f32332d3234203d3e20313332363339.roa (hash: z0HZjcHieRuZ5HHeSmTqSUrJvHMtgbLp6o8sJVRupVI=) 3: 3130332e3132392e3233302e302f32332d3234203d3e20313332363339.roa (hash: H0hxzRE1P/k0NGsIoy/0kaAKznrWHPdRQxgiRW4T5Qo=) 4: 3130332e3132392e3233312e302f32342d3234203d3e20313332363339.roa (hash: jWc0sz86L+eDtr+nDMgQgH+2S7uRf5Y8Wu7u8v4zz0Q=) 5: 3130332e31392e38312e302f32342d3234203d3e20313332363339.roa (hash: jKwlGthiQpzXwnHyIqfnx5NGkz2sE+y3uVu40s6f6sc=) 6: 3130332e3132392e3233302e302f32342d3234203d3e20313332363339.roa (hash: zP2/XdcDOhp440RXruEyN+zWviJE7i53kBfkBKlQJ0I=) 7: 523EE8D6F461B8FD4106F482C46C1029B1013145.crl (hash: JePEgaQXAsFG9fPtxk3cpVlHxJr5XXBmWhkdiGfnYNY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.crl rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/523EE8D6F461B8FD4106F482C46C1029B1013145.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 22:07:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:44:3a:d4:4c:d8:81:c5:5a:d3:3e:58:1c:88:67:17:9a:dc:ce:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=523EE8D6F461B8FD4106F482C46C1029B1013145 Validity Not Before: Jul 20 14:55:35 2025 GMT Not After : Jul 23 22:07:35 2025 GMT Subject: CN=7FF8C4CA749FDA6521EEF4E8C35D231D30D7E5E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:50:ce:6b:b1:96:ce:38:4a:94:fe:fd:84:09: 1f:37:1c:4c:78:b9:c3:d3:93:22:bd:e3:7e:e0:e9: 62:3c:53:f3:5b:fc:fa:16:a0:93:2c:95:e1:70:04: 4e:d0:f5:9b:0c:32:a9:78:ed:d1:3f:b6:59:d2:56: 95:5c:8a:42:4f:64:e6:85:b0:fa:47:5a:5a:d7:b4: 98:b5:0f:9f:5e:ca:01:e4:84:8f:ba:72:70:38:90: c9:6d:3a:72:24:1b:fd:d2:e3:23:d4:f4:45:91:67: a3:b0:51:c9:51:78:ff:37:99:c1:41:5d:8e:2f:17: 48:31:dd:91:b2:4b:14:db:45:6d:e4:d6:9e:13:85: 59:4b:c0:80:5b:fa:a0:e9:32:d1:5c:8c:7b:fa:a2: ab:4e:04:ca:e6:22:02:8d:5d:b1:3b:2b:13:65:cc: 55:b7:4b:30:be:68:17:a5:90:94:3b:06:db:10:63: bb:18:24:19:d1:1e:b9:ff:a0:d9:42:20:db:9c:49: c6:30:37:d0:80:7f:2e:be:81:10:53:78:77:9b:60: 0f:af:47:9d:63:8a:15:df:9d:95:07:5c:b5:19:44: dc:c3:d4:e7:17:95:2e:7e:80:39:31:55:2b:ee:2e: 0c:25:b9:d8:c8:db:3a:72:fa:0e:e8:30:8a:45:0c: c8:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:F8:C4:CA:74:9F:DA:65:21:EE:F4:E8:C3:5D:23:1D:30:D7:E5:E2 X509v3 Authority Key Identifier: keyid:52:3E:E8:D6:F4:61:B8:FD:41:06:F4:82:C4:6C:10:29:B1:01:31:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/523EE8D6F461B8FD4106F482C46C1029B1013145.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6aa42742-89d2-49bb-8a3e-294c368971f5/0/523EE8D6F461B8FD4106F482C46C1029B1013145.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:0d:4d:75:2d:3c:de:73:a4:48:36:77:13:f6:23:0e:8a:29: 59:18:83:0e:86:2c:06:91:16:af:0f:1f:b4:b4:17:4b:63:33: 76:4a:7a:2b:1b:86:0f:c4:c8:c0:4e:a1:44:c9:c3:d2:34:8d: 95:7c:f1:43:3b:57:2a:b2:af:09:0a:49:2e:7e:0b:7a:bd:b8: 6e:7e:b0:98:dc:e0:e5:a2:d3:e6:a8:fb:a0:11:06:f6:50:d0: 97:28:a1:ee:52:5d:92:fc:06:a3:f4:44:ea:59:05:72:3f:25: 71:b7:18:46:b3:cb:01:0a:fa:73:41:c4:76:db:a6:40:c8:2f: 08:77:dc:c8:14:e3:e7:8f:63:92:f9:8c:bb:72:7e:a5:0d:df: b0:09:e3:a1:81:0f:82:7b:4d:14:a2:5b:97:49:1c:0a:da:d5: a5:8c:62:a0:24:10:36:19:ab:09:d8:56:c4:41:a9:63:80:c2: d5:f1:e7:8d:29:27:d3:52:d2:af:07:c7:82:5f:bd:fd:db:34: 8c:90:98:c2:5b:76:15:80:15:e5:8b:01:f3:d1:42:e9:17:43: 5a:01:e6:6f:9e:16:0a:21:4f:05:1c:df:c5:fd:1a:93:60:6e: a3:ff:da:2a:4b:1b:52:cd:fe:39:ea:d0:c0:23:6e:1f:c3:99: a4:fa:6e:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIkQ61EzYgcVa0z5YHIhnF5rczvcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIzRUU4RDZGNDYxQjhGRDQxMDZGNDgyQzQ2QzEwMjlC MTAxMzE0NTAeFw0yNTA3MjAxNDU1MzVaFw0yNTA3MjMyMjA3MzVaMDMxMTAvBgNV BAMTKDdGRjhDNENBNzQ5RkRBNjUyMUVFRjRFOEMzNUQyMzFEMzBEN0U1RTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1UM5rsZbOOEqU/v2ECR83HEx4 ucPTkyK9437g6WI8U/Nb/PoWoJMsleFwBE7Q9ZsMMql47dE/tlnSVpVcikJPZOaF sPpHWlrXtJi1D59eygHkhI+6cnA4kMltOnIkG/3S4yPU9EWRZ6OwUclReP83mcFB XY4vF0gx3ZGySxTbRW3k1p4ThVlLwIBb+qDpMtFcjHv6oqtOBMrmIgKNXbE7KxNl zFW3SzC+aBelkJQ7BtsQY7sYJBnRHrn/oNlCINucScYwN9CAfy6+gRBTeHebYA+v R51jihXfnZUHXLUZRNzD1OcXlS5+gDkxVSvuLgwludjI2zpy+g7oMIpFDMglAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf/jEynSf2mUh7vTow10jHTDX5eIwHwYDVR0j BBgwFoAUUj7o1vRhuP1BBvSCxGwQKbEBMUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YWE0Mjc0Mi04OWQyLTQ5YmItOGEzZS0yOTRjMzY4OTcxZjUvMC81MjNFRThENkY0 NjFCOEZENDEwNkY0ODJDNDZDMTAyOUIxMDEzMTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNTIzRUU4RDZGNDYxQjhGRDQxMDZGNDgyQzQ2QzEwMjlCMTAx MzE0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmFhNDI3NDItODlkMi00OWJiLThh M2UtMjk0YzM2ODk3MWY1LzAvNTIzRUU4RDZGNDYxQjhGRDQxMDZGNDgyQzQ2QzEw MjlCMTAxMzE0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIsNTXUtPN5zpEg2dxP2Iw6KKVkYgw6GLAaR Fq8PH7S0F0tjM3ZKeisbhg/EyMBOoUTJw9I0jZV88UM7VyqyrwkKSS5+C3q9uG5+ sJjc4OWi0+ao+6ARBvZQ0Jcooe5SXZL8BqP0ROpZBXI/JXG3GEazywEK+nNBxHbb pkDILwh33MgU4+ePY5L5jLtyfqUN37AJ46GBD4J7TRSiW5dJHAra1aWMYqAkEDYZ qwnYVsRBqWOAwtXx540pJ9NS0q8Hx4Jfvf3bNIyQmMJbdhWAFeWLAfPRQukXQ1oB 5m+eFgohTwUc38X9GpNgbqP/2ipLG1LN/jnq0MAjbh/DmaT6bqU= -----END CERTIFICATE-----Generated at Mon Jul 21 07:27:26 2025 by rpki-client