$ rpki-client -vvf repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.mft File: A7422B678A17489054C0697D44A3B19EB9F67509.mft (raw, json) Hash identifier: 6GKze6J2OO4KUDBSKtBp4hb+dgFgxUzHY95L0HsbSpY= Subject key identifier: AB:86:ED:1F:46:8E:4B:C9:C4:5C:B3:5D:C0:C3:94:90:37:FB:61:82 Authority key identifier: A7:42:2B:67:8A:17:48:90:54:C0:69:7D:44:A3:B1:9E:B9:F6:75:09 Certificate issuer: /CN=A7422B678A17489054C0697D44A3B19EB9F67509 Certificate serial: 7C07F1E5075595DBAB0BF8253BA251F823FA62EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7422B678A17489054C0697D44A3B19EB9F67509.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.mft Manifest number: 04EF Signing time: Mon 21 Jul 2025 18:50:34 +0000 Manifest this update: Mon 21 Jul 2025 18:45:34 +0000 Manifest next update: Thu 24 Jul 2025 21:35:34 +0000 Files and hashes: 1: 323030313a6466343a393830303a3a2f34382d3438203d3e203338373735.roa (hash: qOoJ0LJSDTjqqUqT336SaQD1ve+KUUM1X1KBlqt/05U=) 2: 3230332e33342e3131392e302f32342d3234203d3e203338373735.roa (hash: lQa70hzJ397OJiel1wVx7dOXLMWMPJnsKeiNgocVwQs=) 3: A7422B678A17489054C0697D44A3B19EB9F67509.crl (hash: nP4LUWtKmag++2Jni0XTGfUSwwveFmt3gCavVobplPw=) 4: 3230332e33342e3131382e302f32342d3234203d3e203338373735.roa (hash: kAUCvMM7pyFIINYLsBDohcRiHbLYQPvnmOScjw/sM+w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.crl rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7422B678A17489054C0697D44A3B19EB9F67509.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 21:35:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:07:f1:e5:07:55:95:db:ab:0b:f8:25:3b:a2:51:f8:23:fa:62:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7422B678A17489054C0697D44A3B19EB9F67509 Validity Not Before: Jul 21 18:45:34 2025 GMT Not After : Jul 24 21:35:34 2025 GMT Subject: CN=AB86ED1F468E4BC9C45CB35DC0C3949037FB6182 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:23:8e:04:23:d2:ef:2e:48:43:52:f2:ab:70: 60:c1:89:23:fc:4a:ba:11:8e:57:cb:3a:2a:88:63: 8b:80:a3:ab:70:85:14:89:80:2b:d3:ba:49:57:6e: c1:df:28:10:a9:73:53:00:80:73:13:c2:13:15:e9: 37:aa:94:46:c7:6c:60:f6:43:e5:ef:28:f0:e8:a8: 71:49:8a:04:79:7f:bf:61:c1:db:4b:32:86:8d:4a: b4:27:3f:22:7f:f5:09:15:ba:a5:33:7b:0f:f9:a5: 0e:9d:8d:2c:79:b1:77:6e:a1:0d:a0:2f:77:99:6b: 12:ee:5a:33:22:b6:87:a5:a0:cb:38:b5:ed:3d:61: 83:b6:b1:70:3a:da:c3:9d:61:9f:e0:17:05:db:fd: c9:d5:3d:c3:e0:f9:0b:67:11:da:d3:92:31:9a:9a: ec:c8:d8:a8:bf:82:32:72:f5:62:8d:0b:f3:6f:c8: 50:bd:67:7d:a8:21:f8:2a:1b:5b:99:60:6f:7d:ff: cd:8a:a1:a0:56:00:1a:93:91:b9:ca:34:c9:a4:8b: 81:f1:3e:3f:47:db:e2:eb:f9:e3:2a:12:2e:73:46: fb:55:66:8e:d0:1e:65:7e:06:a9:be:78:37:2b:8e: b4:06:79:54:5c:e6:fb:c8:83:d8:b4:d0:f5:52:79: e5:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:86:ED:1F:46:8E:4B:C9:C4:5C:B3:5D:C0:C3:94:90:37:FB:61:82 X509v3 Authority Key Identifier: keyid:A7:42:2B:67:8A:17:48:90:54:C0:69:7D:44:A3:B1:9E:B9:F6:75:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7422B678A17489054C0697D44A3B19EB9F67509.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:41:9b:1a:d2:d8:e3:9a:b2:f0:c5:a2:8a:40:5d:2a:81:97: b8:d3:df:0f:bc:d6:1e:f4:76:0c:32:49:36:65:b7:dc:12:13: 4b:1e:05:cb:a6:97:82:0d:cb:2c:66:dd:d2:d8:8f:2a:13:9d: 48:18:44:51:83:1a:91:e0:f4:ae:45:b7:f0:e5:2f:fe:e3:47: 16:23:f4:94:0a:e4:b5:9b:46:98:64:ca:f3:bb:bb:ea:f7:5d: 3b:9a:67:e3:59:ab:7c:5c:9d:8b:07:6d:aa:4f:c7:fc:15:9f: fa:64:8c:fb:17:b9:15:98:a4:57:36:b0:a7:f6:a1:2f:3d:9d: e7:df:3b:f6:dc:42:81:ea:27:9d:09:09:a6:50:f9:bc:9d:7c: bd:3f:84:e4:a8:22:5d:f7:f5:bd:d4:ec:37:4d:80:6f:ec:8a: cd:2e:2d:d8:c5:e5:dc:1f:da:f9:ea:04:3c:06:23:52:cd:bc: b6:b4:8c:4e:42:d6:fe:5e:1c:fe:43:94:b0:4a:fe:40:cc:49: 27:09:c5:f6:8a:c8:69:73:dd:ee:25:95:bf:9e:cf:13:56:ae: 8f:82:01:52:11:e2:13:17:23:b2:f9:7c:a5:0e:a9:5f:04:54: 47:1b:ef:29:6b:ae:b8:24:d7:e7:9f:41:9a:87:3e:f2:8e:d6: 06:3d:a8:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfAfx5QdVldurC/glO6JR+CP6Yu4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc0MjJCNjc4QTE3NDg5MDU0QzA2OTdENDRBM0IxOUVC OUY2NzUwOTAeFw0yNTA3MjExODQ1MzRaFw0yNTA3MjQyMTM1MzRaMDMxMTAvBgNV BAMTKEFCODZFRDFGNDY4RTRCQzlDNDVDQjM1REMwQzM5NDkwMzdGQjYxODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiI44EI9LvLkhDUvKrcGDBiSP8 SroRjlfLOiqIY4uAo6twhRSJgCvTuklXbsHfKBCpc1MAgHMTwhMV6TeqlEbHbGD2 Q+XvKPDoqHFJigR5f79hwdtLMoaNSrQnPyJ/9QkVuqUzew/5pQ6djSx5sXduoQ2g L3eZaxLuWjMitoeloMs4te09YYO2sXA62sOdYZ/gFwXb/cnVPcPg+QtnEdrTkjGa muzI2Ki/gjJy9WKNC/NvyFC9Z32oIfgqG1uZYG99/82KoaBWABqTkbnKNMmki4Hx Pj9H2+Lr+eMqEi5zRvtVZo7QHmV+Bqm+eDcrjrQGeVRc5vvIg9i00PVSeeV/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq4btH0aOS8nEXLNdwMOUkDf7YYIwHwYDVR0j BBgwFoAUp0IrZ4oXSJBUwGl9RKOxnrn2dQkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTA1M2Q5Ni1kYTE3LTQwOTktYjcwNy1kYTBlYjJiZjA3YmMvMC9BNzQyMkI2NzhB MTc0ODkwNTRDMDY5N0Q0NEEzQjE5RUI5RjY3NTA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTc0MjJCNjc4QTE3NDg5MDU0QzA2OTdENDRBM0IxOUVCOUY2 NzUwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkwNTNkOTYtZGExNy00MDk5LWI3 MDctZGEwZWIyYmYwN2JjLzAvQTc0MjJCNjc4QTE3NDg5MDU0QzA2OTdENDRBM0Ix OUVCOUY2NzUwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACRBmxrS2OOasvDFoopAXSqBl7jT3w+81h70 dgwySTZlt9wSE0seBcuml4INyyxm3dLYjyoTnUgYRFGDGpHg9K5Ft/DlL/7jRxYj 9JQK5LWbRphkyvO7u+r3XTuaZ+NZq3xcnYsHbapPx/wVn/pkjPsXuRWYpFc2sKf2 oS89neffO/bcQoHqJ50JCaZQ+bydfL0/hOSoIl339b3U7DdNgG/sis0uLdjF5dwf 2vnqBDwGI1LNvLa0jE5C1v5eHP5DlLBK/kDMSScJxfaKyGlz3e4llb+ezxNWro+C AVIR4hMXI7L5fKUOqV8EVEcb7ylrrrgk1+efQZqHPvKO1gY9qN0= -----END CERTIFICATE-----Generated at Wed Jul 23 02:11:49 2025 by rpki-client