$ rpki-client -vvf repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft File: A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft (raw, json) Hash identifier: q9LcKmbDUSHn+/qGFTVUopGJVGrRjuLHXrtNCP9k3+s= Subject key identifier: 5F:0B:09:9F:3D:39:19:36:23:79:44:3D:65:3E:19:D4:7A:FD:E2:2A Authority key identifier: A6:49:57:71:5E:7D:CE:EC:3A:7D:4C:31:76:CC:97:ED:8E:5D:B3:1A Certificate issuer: /CN=A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A Certificate serial: 4825D009F2595E599B0C9AB875731B8C8C6CE70C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft Manifest number: 0178 Signing time: Sat 19 Jul 2025 13:02:09 +0000 Manifest this update: Sat 19 Jul 2025 12:57:09 +0000 Manifest next update: Tue 22 Jul 2025 18:58:09 +0000 Files and hashes: 1: A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.crl (hash: 7n+0ikwxZbFf6zH8Qan/2tp06eFC3hhFjUWKSPbSWOA=) 2: 3130332e3230332e39302e302f32342d3234203d3e20313530393236.roa (hash: lH+IV1VjfExz6EgaEksT/6x5pW3sOfiOZbcnKLG8hUk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.crl rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 18:58:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:25:d0:09:f2:59:5e:59:9b:0c:9a:b8:75:73:1b:8c:8c:6c:e7:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A Validity Not Before: Jul 19 12:57:09 2025 GMT Not After : Jul 22 18:58:09 2025 GMT Subject: CN=5F0B099F3D3919362379443D653E19D47AFDE22A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:7f:0f:54:80:23:86:98:65:9b:b6:72:f6:65: 07:21:19:98:85:16:b5:64:29:9a:86:8e:f5:96:01: 71:f5:7f:f2:44:ae:70:cf:cf:cb:e2:39:74:3b:ee: ca:f2:aa:62:b4:74:32:06:a5:75:d1:93:6a:1f:97: db:5f:04:0d:f7:5b:dd:36:00:1f:12:53:9e:6d:d4: 7c:c0:eb:85:ba:9e:7b:46:d2:4e:6b:a8:1c:90:58: 49:db:6d:46:30:41:7e:f3:ab:18:3c:d2:99:e8:aa: ad:04:2d:6a:e7:a3:cf:57:3d:e0:81:c9:f2:f6:a7: 8b:77:d0:fb:6f:68:19:d8:8a:0f:36:95:3e:62:11: bd:b8:f3:ef:35:13:1d:c0:95:4b:a6:5d:c6:e8:2a: 84:4d:03:eb:5b:f9:90:d2:d6:01:91:e4:8f:8e:b2: 64:5a:e8:cd:8b:a7:27:90:e2:7d:50:86:23:2b:38: b0:e6:d6:d8:2c:15:2d:83:87:92:35:03:ab:37:ed: dd:c6:6b:a8:18:f5:ba:86:54:4f:c9:7e:f9:c5:e2: eb:50:a9:d7:0b:ba:57:b3:69:bb:bf:32:3b:04:55: ea:9c:6e:3d:9b:47:59:b9:e4:b0:15:58:8c:72:84: 69:1b:c6:c2:3c:57:c0:c9:48:bc:ed:13:12:f9:fc: 2e:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:0B:09:9F:3D:39:19:36:23:79:44:3D:65:3E:19:D4:7A:FD:E2:2A X509v3 Authority Key Identifier: keyid:A6:49:57:71:5E:7D:CE:EC:3A:7D:4C:31:76:CC:97:ED:8E:5D:B3:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9a0129a8-27e8-4046-8989-865b257ea6ca/0/A64957715E7DCEEC3A7D4C3176CC97ED8E5DB31A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:e6:36:22:2f:0f:1e:f4:c6:35:d1:e0:fe:8f:88:a8:e7:06: 7f:fe:29:9b:23:28:7e:4b:3b:41:11:f2:58:ae:a8:02:e4:2e: 11:ef:14:1f:1b:57:60:98:08:f6:a6:10:0c:b8:48:d1:09:f8: c2:58:a8:0f:55:fe:51:0b:30:90:1e:3c:3e:75:1a:b0:b5:e8: e1:3c:bb:30:8f:91:7c:a2:5e:f4:b9:3d:26:d7:2b:c3:0f:56: 9d:b7:bd:1e:b3:70:4e:9a:66:59:2b:17:33:ba:20:78:e3:39: a3:ef:ba:bf:46:d9:01:64:04:39:c2:be:d5:5a:2a:69:7f:73: ba:9c:3b:29:e1:69:ba:c4:a7:70:06:b3:64:ff:40:5a:9a:54: 76:9a:53:2f:a2:e7:6c:75:ef:c4:4f:ed:ed:96:79:8e:be:6a: 48:62:1b:69:8c:57:23:e1:02:9a:44:8e:f3:ed:0a:c7:b2:84: 8e:fa:47:9e:18:1e:d8:69:f1:ae:37:70:f1:5f:73:d6:98:d1: 6f:26:2d:21:24:8d:78:7f:8f:7c:6f:79:09:4e:08:8e:61:d5: 88:b5:87:8d:0e:40:73:31:f1:85:58:21:0e:48:21:af:c8:26: 95:36:5c:0f:0d:ea:ac:b0:90:86:b1:0e:6e:ab:9c:be:d6:5d: 64:1d:e1:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSCXQCfJZXlmbDJq4dXMbjIxs5wwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTY0OTU3NzE1RTdEQ0VFQzNBN0Q0QzMxNzZDQzk3RUQ4 RTVEQjMxQTAeFw0yNTA3MTkxMjU3MDlaFw0yNTA3MjIxODU4MDlaMDMxMTAvBgNV BAMTKDVGMEIwOTlGM0QzOTE5MzYyMzc5NDQzRDY1M0UxOUQ0N0FGREUyMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUfw9UgCOGmGWbtnL2ZQchGZiF FrVkKZqGjvWWAXH1f/JErnDPz8viOXQ77sryqmK0dDIGpXXRk2ofl9tfBA33W902 AB8SU55t1HzA64W6nntG0k5rqByQWEnbbUYwQX7zqxg80pnoqq0ELWrno89XPeCB yfL2p4t30PtvaBnYig82lT5iEb248+81Ex3AlUumXcboKoRNA+tb+ZDS1gGR5I+O smRa6M2LpyeQ4n1QhiMrOLDm1tgsFS2Dh5I1A6s37d3Ga6gY9bqGVE/JfvnF4utQ qdcLulezabu/MjsEVeqcbj2bR1m55LAVWIxyhGkbxsI8V8DJSLztExL5/C4PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXwsJnz05GTYjeUQ9ZT4Z1Hr94iowHwYDVR0j BBgwFoAUpklXcV59zuw6fUwxdsyX7Y5dsxowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 YTAxMjlhOC0yN2U4LTQwNDYtODk4OS04NjViMjU3ZWE2Y2EvMC9BNjQ5NTc3MTVF N0RDRUVDM0E3RDRDMzE3NkNDOTdFRDhFNURCMzFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTY0OTU3NzE1RTdEQ0VFQzNBN0Q0QzMxNzZDQzk3RUQ4RTVE QjMxQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWEwMTI5YTgtMjdlOC00MDQ2LTg5 ODktODY1YjI1N2VhNmNhLzAvQTY0OTU3NzE1RTdEQ0VFQzNBN0Q0QzMxNzZDQzk3 RUQ4RTVEQjMxQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFfmNiIvDx70xjXR4P6PiKjnBn/+KZsjKH5L O0ER8liuqALkLhHvFB8bV2CYCPamEAy4SNEJ+MJYqA9V/lELMJAePD51GrC16OE8 uzCPkXyiXvS5PSbXK8MPVp23vR6zcE6aZlkrFzO6IHjjOaPvur9G2QFkBDnCvtVa Kml/c7qcOynhabrEp3AGs2T/QFqaVHaaUy+i52x178RP7e2WeY6+akhiG2mMVyPh AppEjvPtCseyhI76R54YHthp8a43cPFfc9aY0W8mLSEkjXh/j3xveQlOCI5h1Yi1 h40OQHMx8YVYIQ5IIa/IJpU2XA8N6qywkIaxDm6rnL7WXWQd4Y0= -----END CERTIFICATE-----Generated at Mon Jul 21 02:07:32 2025 by rpki-client