$ rpki-client -vvf repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.mft File: A7422B678A17489054C0697D44A3B19EB9F67509.mft (raw, json) Hash identifier: y9Y9l+2EyGW67HDBXzd8SjSQscrX8qAaMrGtygfzagI= Subject key identifier: F3:E1:8F:F4:99:3C:49:17:F9:1F:62:A5:71:62:29:C4:AE:73:ED:27 Authority key identifier: A7:42:2B:67:8A:17:48:90:54:C0:69:7D:44:A3:B1:9E:B9:F6:75:09 Certificate issuer: /CN=A7422B678A17489054C0697D44A3B19EB9F67509 Certificate serial: 0374D3208FE71AF2DCC765927EA77DBC7310A8D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7422B678A17489054C0697D44A3B19EB9F67509.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.mft Manifest number: 04F0 Signing time: Wed 23 Jul 2025 21:40:34 +0000 Manifest this update: Wed 23 Jul 2025 21:35:34 +0000 Manifest next update: Sat 26 Jul 2025 21:58:34 +0000 Files and hashes: 1: 3230332e33342e3131392e302f32342d3234203d3e203338373735.roa (hash: lQa70hzJ397OJiel1wVx7dOXLMWMPJnsKeiNgocVwQs=) 2: 323030313a6466343a393830303a3a2f34382d3438203d3e203338373735.roa (hash: qOoJ0LJSDTjqqUqT336SaQD1ve+KUUM1X1KBlqt/05U=) 3: 3230332e33342e3131382e302f32342d3234203d3e203338373735.roa (hash: kAUCvMM7pyFIINYLsBDohcRiHbLYQPvnmOScjw/sM+w=) 4: A7422B678A17489054C0697D44A3B19EB9F67509.crl (hash: EpEwMzNZCz0Z0beFPFzvYq7yQ9YDvd2A5xmJnTsFyfU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.crl rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7422B678A17489054C0697D44A3B19EB9F67509.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 21:58:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:74:d3:20:8f:e7:1a:f2:dc:c7:65:92:7e:a7:7d:bc:73:10:a8:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7422B678A17489054C0697D44A3B19EB9F67509 Validity Not Before: Jul 23 21:35:34 2025 GMT Not After : Jul 26 21:58:34 2025 GMT Subject: CN=F3E18FF4993C4917F91F62A5716229C4AE73ED27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:de:2d:33:e2:6b:62:b8:13:b5:24:cf:40:97: cd:20:39:82:57:18:45:11:9b:dd:a7:59:e4:b8:71: e9:f1:83:11:ee:fc:d4:56:9d:b5:a0:c2:59:de:10: 14:1c:f8:bd:d8:80:7b:96:16:2e:6a:29:bf:5b:41: a8:cd:72:50:07:43:9c:b7:d5:ed:ef:20:fc:78:08: 3d:e8:11:46:e7:a4:c9:a6:16:8c:66:29:24:71:73: 0f:f1:b1:0a:12:53:f8:fb:20:a2:44:84:a8:34:c2: 4d:63:dd:d4:33:49:19:08:74:3b:65:38:64:a2:8d: bc:ab:18:40:92:3b:18:29:d7:12:88:45:ed:dd:42: c7:49:7a:9c:3e:15:b4:0c:4a:50:6a:ac:80:cf:57: 16:0e:be:08:b3:bd:6e:23:9b:2a:60:75:a2:d3:a8: f4:ed:21:4e:b2:79:45:58:81:4d:62:37:72:12:57: 0a:11:65:6f:a8:b8:db:d3:da:7a:fe:94:dc:af:58: 6a:13:86:02:c9:34:83:fa:7b:2f:91:a7:6c:24:f4: 81:12:80:52:83:f3:e5:0b:9d:6f:d3:1e:78:33:34: e5:e2:9c:05:6f:dd:f1:71:11:5d:cb:da:de:1a:3c: 1a:a7:02:a2:30:4e:5f:cd:6c:3b:e0:ca:d4:c8:77: db:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:E1:8F:F4:99:3C:49:17:F9:1F:62:A5:71:62:29:C4:AE:73:ED:27 X509v3 Authority Key Identifier: keyid:A7:42:2B:67:8A:17:48:90:54:C0:69:7D:44:A3:B1:9E:B9:F6:75:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7422B678A17489054C0697D44A3B19EB9F67509.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:24:f1:5f:f9:25:f4:1a:ca:66:63:98:de:0d:73:39:22:5c: 2b:f1:72:be:4f:6e:3c:b3:c4:7c:b5:76:a3:0c:db:df:0b:d8: 07:c4:59:70:d9:85:3f:8f:56:02:1c:be:55:37:01:29:59:1e: 87:d6:6a:82:61:99:0e:b9:2b:fe:b5:ef:66:5e:76:ac:3f:7f: 20:f9:9c:4d:42:bf:0f:15:4c:a0:d5:0a:87:eb:8e:45:ab:34: 57:49:d6:4d:fc:cc:f7:dc:ab:e4:57:e0:74:00:5d:30:7d:49: 85:7a:9d:37:d8:6d:fc:66:3d:1b:7e:91:ad:cf:25:9a:03:11: e8:89:97:08:c4:4d:e0:e4:3b:3e:18:72:5b:a6:06:ad:9e:76: cd:4d:ee:85:f7:58:ab:06:20:bb:fe:2a:94:a9:58:16:d8:e5: d5:70:8f:07:05:0f:6b:aa:f2:eb:46:3d:19:d3:d9:80:94:68: 58:9e:f4:77:5f:ca:bd:dc:cd:e6:14:10:7f:79:a8:08:ee:b9: 72:82:36:b1:db:6a:7a:5a:80:10:de:32:c2:de:65:ae:58:33: d8:f3:c0:66:a1:9f:96:e1:86:73:5e:6e:5e:05:ae:7a:da:8f: 5b:20:f9:6f:61:43:9a:43:0f:15:3a:fa:ed:83:2d:6b:97:0f: 58:59:a6:5f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA3TTII/nGvLcx2WSfqd9vHMQqNcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc0MjJCNjc4QTE3NDg5MDU0QzA2OTdENDRBM0IxOUVC OUY2NzUwOTAeFw0yNTA3MjMyMTM1MzRaFw0yNTA3MjYyMTU4MzRaMDMxMTAvBgNV BAMTKEYzRTE4RkY0OTkzQzQ5MTdGOTFGNjJBNTcxNjIyOUM0QUU3M0VEMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc3i0z4mtiuBO1JM9Al80gOYJX GEURm92nWeS4cenxgxHu/NRWnbWgwlneEBQc+L3YgHuWFi5qKb9bQajNclAHQ5y3 1e3vIPx4CD3oEUbnpMmmFoxmKSRxcw/xsQoSU/j7IKJEhKg0wk1j3dQzSRkIdDtl OGSijbyrGECSOxgp1xKIRe3dQsdJepw+FbQMSlBqrIDPVxYOvgizvW4jmypgdaLT qPTtIU6yeUVYgU1iN3ISVwoRZW+ouNvT2nr+lNyvWGoThgLJNIP6ey+Rp2wk9IES gFKD8+ULnW/THngzNOXinAVv3fFxEV3L2t4aPBqnAqIwTl/NbDvgytTId9vTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8+GP9Jk8SRf5H2KlcWIpxK5z7ScwHwYDVR0j BBgwFoAUp0IrZ4oXSJBUwGl9RKOxnrn2dQkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTA1M2Q5Ni1kYTE3LTQwOTktYjcwNy1kYTBlYjJiZjA3YmMvMC9BNzQyMkI2NzhB MTc0ODkwNTRDMDY5N0Q0NEEzQjE5RUI5RjY3NTA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTc0MjJCNjc4QTE3NDg5MDU0QzA2OTdENDRBM0IxOUVCOUY2 NzUwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkwNTNkOTYtZGExNy00MDk5LWI3 MDctZGEwZWIyYmYwN2JjLzAvQTc0MjJCNjc4QTE3NDg5MDU0QzA2OTdENDRBM0Ix OUVCOUY2NzUwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEck8V/5JfQaymZjmN4NczkiXCvxcr5Pbjyz xHy1dqMM298L2AfEWXDZhT+PVgIcvlU3ASlZHofWaoJhmQ65K/6172Zedqw/fyD5 nE1Cvw8VTKDVCofrjkWrNFdJ1k38zPfcq+RX4HQAXTB9SYV6nTfYbfxmPRt+ka3P JZoDEeiJlwjETeDkOz4YclumBq2eds1N7oX3WKsGILv+KpSpWBbY5dVwjwcFD2uq 8utGPRnT2YCUaFie9Hdfyr3czeYUEH95qAjuuXKCNrHbanpagBDeMsLeZa5YM9jz wGahn5bhhnNebl4Frnraj1sg+W9hQ5pDDxU6+u2DLWuXD1hZpl8= -----END CERTIFICATE-----Generated at Fri Jul 25 06:47:46 2025 by rpki-client