$ rpki-client -vvf repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft File: 7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft (raw, json) Hash identifier: GvF9Ovhs7Kkd3lO5YsbHT/fQv+GlxGZXcQWzR0q6YWc= Subject key identifier: 0D:DB:FD:F3:08:DE:43:AE:0D:0E:15:BB:28:49:8F:17:B9:2D:28:70 Authority key identifier: 7A:21:6F:23:D8:A2:28:FB:B8:F5:63:EC:15:DF:76:FD:50:32:31:B3 Certificate issuer: /CN=7A216F23D8A228FBB8F563EC15DF76FD503231B3 Certificate serial: 203A27245A513615719535C823B14DCEA6A7F26D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A216F23D8A228FBB8F563EC15DF76FD503231B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft Manifest number: 01DD Signing time: Fri 25 Jul 2025 00:12:09 +0000 Manifest this update: Fri 25 Jul 2025 00:07:09 +0000 Manifest next update: Mon 28 Jul 2025 06:40:09 +0000 Files and hashes: 1: 7A216F23D8A228FBB8F563EC15DF76FD503231B3.crl (hash: J/kq7nQtNTY8oD28prEXTCoUBTmEfJ/eCUoMPGujNCc=) 2: 3130332e32302e3130392e302f32342d3234203d3e20313439373037.roa (hash: rOc9IS1yKanFrzj6lHEyVZN9K3Au8qIy9aCKaCdjEsw=) 3: 3130332e32302e3130382e302f32332d3234203d3e20313439373037.roa (hash: YUh1E1cCB+Tam8Lv4+/c622A6XvCbyDIufb9eqoPvMQ=) 4: 3130332e32302e3130382e302f32342d3234203d3e20313439373037.roa (hash: l72fTVO4iPS3td7y6iJ6FZ6Iq9uNFhg1kwCppW10yoE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.crl rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A216F23D8A228FBB8F563EC15DF76FD503231B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 06:40:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:3a:27:24:5a:51:36:15:71:95:35:c8:23:b1:4d:ce:a6:a7:f2:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A216F23D8A228FBB8F563EC15DF76FD503231B3 Validity Not Before: Jul 25 00:07:09 2025 GMT Not After : Jul 28 06:40:09 2025 GMT Subject: CN=0DDBFDF308DE43AE0D0E15BB28498F17B92D2870 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:a8:7f:01:38:b8:27:3f:00:2d:26:1f:26:e0: d9:d9:fb:df:d0:00:18:83:22:8e:29:d1:d8:23:d4: 6b:6c:07:f2:45:1c:09:70:4f:af:8e:83:01:07:32: 42:1b:b9:56:78:6f:ab:ac:10:60:f4:b6:ed:42:97: bb:b6:4a:bb:f0:fe:c5:b6:f6:d8:35:5c:a0:33:51: 17:9e:82:11:97:14:5b:73:96:fe:e9:ec:3c:bb:b3: 27:66:76:4f:3b:7c:76:4f:01:71:27:d5:c8:e9:db: 9d:6d:2d:01:d8:9e:6d:47:37:ce:c5:c8:45:a9:e0: 93:3e:6d:ce:af:1f:14:1f:b6:15:50:a9:51:4b:04: d1:09:97:0a:89:e5:32:4d:b9:43:7e:9e:a9:a5:94: 11:f1:a3:bd:e5:a2:70:ae:8b:ab:ce:60:b6:ec:c9: d9:f7:67:f0:30:3b:86:e7:f6:f6:fc:e9:b7:61:dd: e9:92:55:01:73:e0:1e:68:f0:de:5c:59:45:a1:f4: aa:13:b6:51:8c:fe:1c:8a:f1:6d:8c:f7:a8:d8:05: cc:15:14:2d:97:c4:19:e6:81:2b:f4:a9:b4:fe:9b: dc:28:ed:02:04:aa:8e:71:09:fd:75:93:06:73:3c: ff:ce:82:e6:cc:2a:ce:a2:18:bc:1b:f5:10:38:64: af:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:DB:FD:F3:08:DE:43:AE:0D:0E:15:BB:28:49:8F:17:B9:2D:28:70 X509v3 Authority Key Identifier: keyid:7A:21:6F:23:D8:A2:28:FB:B8:F5:63:EC:15:DF:76:FD:50:32:31:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A216F23D8A228FBB8F563EC15DF76FD503231B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:6f:3d:90:03:4d:8c:ef:88:84:f2:5f:5a:73:ef:9b:0c:22: c7:80:28:27:b9:5a:9d:c4:22:89:f0:3a:d3:5f:87:3d:20:d8: 59:26:b3:ce:a6:6f:ef:b3:0d:5a:b7:2f:fa:f3:69:37:b0:59: a6:c9:fb:dd:8d:09:70:df:3f:d4:fa:da:43:68:3f:5c:b8:07: 83:d8:0d:0f:05:d6:f0:f0:20:d4:ab:c3:6c:f5:17:66:11:37: fa:9e:ff:de:99:d9:f2:a4:9c:32:02:ab:6b:21:e3:57:10:e1: 8e:a7:4b:fe:d8:51:4d:b1:86:a0:6e:6d:0b:d2:81:34:23:99: 3d:7b:d6:38:00:87:00:3b:09:9d:a7:fd:de:59:1d:d2:b1:21: 7e:23:b0:32:e0:e8:22:df:12:40:fc:f7:a7:2d:b6:fd:09:47: ff:13:5b:e0:8b:9f:a1:de:cf:4d:da:4b:45:77:55:77:83:63: 5a:1f:e5:24:20:a3:5d:f5:7e:ff:97:8e:65:e3:fd:9a:25:eb: 0f:fb:62:c3:5a:f8:30:a5:48:f4:1c:b4:ff:f1:16:a4:e5:8c: a0:07:b3:76:80:e2:b1:06:f2:6c:e7:08:43:ae:aa:38:cd:82: 27:c8:4e:32:c6:19:56:83:50:f5:9f:56:07:12:ed:f4:8c:b8: 73:85:be:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIDonJFpRNhVxlTXII7FNzqan8m0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0EyMTZGMjNEOEEyMjhGQkI4RjU2M0VDMTVERjc2RkQ1 MDMyMzFCMzAeFw0yNTA3MjUwMDA3MDlaFw0yNTA3MjgwNjQwMDlaMDMxMTAvBgNV BAMTKDBEREJGREYzMDhERTQzQUUwRDBFMTVCQjI4NDk4RjE3QjkyRDI4NzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNqH8BOLgnPwAtJh8m4NnZ+9/Q ABiDIo4p0dgj1GtsB/JFHAlwT6+OgwEHMkIbuVZ4b6usEGD0tu1Cl7u2Srvw/sW2 9tg1XKAzUReeghGXFFtzlv7p7Dy7sydmdk87fHZPAXEn1cjp251tLQHYnm1HN87F yEWp4JM+bc6vHxQfthVQqVFLBNEJlwqJ5TJNuUN+nqmllBHxo73lonCui6vOYLbs ydn3Z/AwO4bn9vb86bdh3emSVQFz4B5o8N5cWUWh9KoTtlGM/hyK8W2M96jYBcwV FC2XxBnmgSv0qbT+m9wo7QIEqo5xCf11kwZzPP/OgubMKs6iGLwb9RA4ZK/1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDdv98wjeQ64NDhW7KEmPF7ktKHAwHwYDVR0j BBgwFoAUeiFvI9iiKPu49WPsFd92/VAyMbMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Y2M2YmQ3My1mOWJkLTRmNWEtOWM1OS1mYmVhMWJkODM0NzMvMC83QTIxNkYyM0Q4 QTIyOEZCQjhGNTYzRUMxNURGNzZGRDUwMzIzMUIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0EyMTZGMjNEOEEyMjhGQkI4RjU2M0VDMTVERjc2RkQ1MDMy MzFCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWNjNmJkNzMtZjliZC00ZjVhLTlj NTktZmJlYTFiZDgzNDczLzAvN0EyMTZGMjNEOEEyMjhGQkI4RjU2M0VDMTVERjc2 RkQ1MDMyMzFCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKdvPZADTYzviITyX1pz75sMIseAKCe5Wp3E IonwOtNfhz0g2Fkms86mb++zDVq3L/rzaTewWabJ+92NCXDfP9T62kNoP1y4B4PY DQ8F1vDwINSrw2z1F2YRN/qe/96Z2fKknDICq2sh41cQ4Y6nS/7YUU2xhqBubQvS gTQjmT171jgAhwA7CZ2n/d5ZHdKxIX4jsDLg6CLfEkD896cttv0JR/8TW+CLn6He z03aS0V3VXeDY1of5SQgo131fv+XjmXj/Zol6w/7YsNa+DClSPQctP/xFqTljKAH s3aA4rEG8mznCEOuqjjNgifITjLGGVaDUPWfVgcS7fSMuHOFvvs= -----END CERTIFICATE-----Generated at Fri Jul 25 04:01:26 2025 by rpki-client