$ rpki-client -vvf repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft File: A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft (raw, json) Hash identifier: aMd9QGRXOvRxlO/sTMFGnmFo91CSuBCfZfojlGSNkxs= Subject key identifier: A6:12:7B:8F:96:76:3A:DB:7B:76:D4:ED:DA:2A:94:DF:3C:23:FD:A1 Authority key identifier: A7:D8:3E:E8:70:3B:BD:59:CD:CA:A5:62:2A:DB:35:C3:F9:72:27:28 Certificate issuer: /CN=A7D83EE8703BBD59CDCAA5622ADB35C3F9722728 Certificate serial: 50D7F8BCDB4FE856A90737D0BF991AD67F89C8BB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft Manifest number: 0193 Signing time: Sun 20 Jul 2025 06:02:39 +0000 Manifest this update: Sun 20 Jul 2025 05:57:39 +0000 Manifest next update: Wed 23 Jul 2025 07:21:39 +0000 Files and hashes: 1: 3130332e36332e32362e302f32342d3234203d3e20313338303839.roa (hash: a/XQ8MdxKUzSfIKR4TnLCUk6wo8og+MExbugEiLWe3U=) 2: A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.crl (hash: p6RgkZoKo6AK+J5LBb0FEGVZyUecJic4wuOLoxW661A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.crl rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 07:21:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:d7:f8:bc:db:4f:e8:56:a9:07:37:d0:bf:99:1a:d6:7f:89:c8:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7D83EE8703BBD59CDCAA5622ADB35C3F9722728 Validity Not Before: Jul 20 05:57:39 2025 GMT Not After : Jul 23 07:21:39 2025 GMT Subject: CN=A6127B8F96763ADB7B76D4EDDA2A94DF3C23FDA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:44:71:38:47:21:3a:81:66:4a:ba:3f:ab:61: 4c:39:3f:77:7a:80:cd:6c:92:67:6a:57:42:5b:bc: a5:f4:06:ce:99:85:62:46:af:21:5e:1b:e8:3d:85: 1f:d9:1d:61:ab:8a:f0:ba:82:f1:ae:8b:e1:cd:d0: 8c:1b:10:d2:c5:3a:13:4e:aa:b9:28:fe:3c:76:4e: e3:5a:e8:36:32:7c:91:f8:6b:2f:d6:37:7c:b0:b8: 8e:12:b4:fd:18:94:c9:64:30:e4:e6:09:bd:94:62: 44:bd:eb:8b:b3:38:8d:ad:ac:ac:76:d1:2b:b8:a4: 65:9a:c0:d4:25:3d:b7:ad:5d:6a:f4:92:c4:12:98: f3:6b:49:53:98:b6:c4:40:a2:88:49:46:6c:4a:8a: a9:97:f1:cb:65:19:3d:b9:21:66:dc:51:8a:ef:00: 10:3c:3c:80:a5:ec:1c:c6:66:4b:0f:37:8b:6b:bb: f6:fd:56:d1:08:da:46:1a:d1:13:01:87:ab:dd:96: 87:a2:92:e4:b4:b8:cd:f1:6d:e1:77:88:fc:60:3d: 9d:47:05:1f:2e:35:dc:7e:48:a3:e7:53:35:86:6d: 96:02:c3:44:5f:48:ee:cf:f7:16:c3:0e:9d:e4:b3: 4f:73:9b:f6:db:3d:67:bb:18:01:a0:cf:91:8e:61: 22:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:12:7B:8F:96:76:3A:DB:7B:76:D4:ED:DA:2A:94:DF:3C:23:FD:A1 X509v3 Authority Key Identifier: keyid:A7:D8:3E:E8:70:3B:BD:59:CD:CA:A5:62:2A:DB:35:C3:F9:72:27:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:b4:87:1b:57:0b:91:c0:a3:fc:2c:bc:5c:67:b4:14:70:ab: 53:1b:24:72:0f:93:64:34:88:b1:27:89:92:3d:bf:03:a3:37: fe:fa:27:83:de:38:12:41:49:2f:22:db:b5:7c:0d:f7:d2:a8: b0:c6:c8:49:a7:93:93:76:02:c0:11:e1:04:1d:75:1f:a1:7f: 30:a2:e9:d7:ce:10:18:33:b8:43:52:4b:7a:46:52:b5:11:f4: d9:c5:a2:80:cb:fe:e7:c8:44:ef:ab:a0:c0:32:e4:bd:2e:97: aa:2d:77:ba:20:db:d4:7e:0a:d6:54:a8:ba:e7:58:39:a5:f6: a0:db:f2:25:d7:65:e8:fb:0d:1f:b2:17:8d:4a:3b:0f:00:0c: fa:ce:fa:2a:76:d1:7f:bf:8b:17:81:7d:fd:9e:d2:28:4c:c3: 64:e5:8d:a0:e7:03:82:af:1b:53:b9:57:92:90:b5:95:70:cc: 1d:65:5f:db:41:5e:d9:ef:2f:57:20:39:10:8e:6c:06:e2:58: dc:d5:a9:c0:c1:1c:da:b9:19:e3:1d:a6:39:d4:fc:bd:43:3f: 41:5d:fb:fc:51:13:df:6c:b4:c9:12:d6:7e:67:b4:1e:e3:67: c8:95:5c:b7:2a:c0:cc:dc:b4:c7:f0:ef:c3:4b:30:cc:53:26: e2:d7:f4:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUNf4vNtP6FapBzfQv5ka1n+JyLswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdEODNFRTg3MDNCQkQ1OUNEQ0FBNTYyMkFEQjM1QzNG OTcyMjcyODAeFw0yNTA3MjAwNTU3MzlaFw0yNTA3MjMwNzIxMzlaMDMxMTAvBgNV BAMTKEE2MTI3QjhGOTY3NjNBREI3Qjc2RDRFRERBMkE5NERGM0MyM0ZEQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/RHE4RyE6gWZKuj+rYUw5P3d6 gM1skmdqV0JbvKX0Bs6ZhWJGryFeG+g9hR/ZHWGrivC6gvGui+HN0IwbENLFOhNO qrko/jx2TuNa6DYyfJH4ay/WN3ywuI4StP0YlMlkMOTmCb2UYkS964uzOI2trKx2 0Su4pGWawNQlPbetXWr0ksQSmPNrSVOYtsRAoohJRmxKiqmX8ctlGT25IWbcUYrv ABA8PICl7BzGZksPN4tru/b9VtEI2kYa0RMBh6vdloeikuS0uM3xbeF3iPxgPZ1H BR8uNdx+SKPnUzWGbZYCw0RfSO7P9xbDDp3ks09zm/bbPWe7GAGgz5GOYSJzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUphJ7j5Z2Ott7dtTt2iqU3zwj/aEwHwYDVR0j BBgwFoAUp9g+6HA7vVnNyqViKts1w/lyJygwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWE2Y2VhZi1kNjhjLTRkY2ItODI2Ny1mZDFhNTNkOTk5ODgvMC9BN0Q4M0VFODcw M0JCRDU5Q0RDQUE1NjIyQURCMzVDM0Y5NzIyNzI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTdEODNFRTg3MDNCQkQ1OUNEQ0FBNTYyMkFEQjM1QzNGOTcy MjcyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODlhNmNlYWYtZDY4Yy00ZGNiLTgy NjctZmQxYTUzZDk5OTg4LzAvQTdEODNFRTg3MDNCQkQ1OUNEQ0FBNTYyMkFEQjM1 QzNGOTcyMjcyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADq0hxtXC5HAo/wsvFxntBRwq1MbJHIPk2Q0 iLEniZI9vwOjN/76J4PeOBJBSS8i27V8DffSqLDGyEmnk5N2AsAR4QQddR+hfzCi 6dfOEBgzuENSS3pGUrUR9NnFooDL/ufIRO+roMAy5L0ul6otd7og29R+CtZUqLrn WDml9qDb8iXXZej7DR+yF41KOw8ADPrO+ip20X+/ixeBff2e0ihMw2TljaDnA4Kv G1O5V5KQtZVwzB1lX9tBXtnvL1cgORCObAbiWNzVqcDBHNq5GeMdpjnU/L1DP0Fd +/xRE99stMkS1n5ntB7jZ8iVXLcqwMzctMfw78NLMMxTJuLX9K0= -----END CERTIFICATE-----Generated at Mon Jul 21 07:24:52 2025 by rpki-client