$ rpki-client -vvf repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft File: B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft (raw, json) Hash identifier: auikMEJKGARcb1zxszd+jHKaUsj89tu9DPwcWcu5mgc= Subject key identifier: 7A:DF:06:C3:22:25:40:06:1E:80:B1:1F:D3:DE:2E:7D:2F:68:7C:B2 Authority key identifier: B7:A3:DE:01:7F:B3:D7:40:B2:93:22:D8:18:D5:C6:A8:FE:6D:4C:30 Certificate issuer: /CN=B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30 Certificate serial: 30CC852CF5FC3E35B9033FFAA39AFB4B5AB90252 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft Manifest number: 0116 Signing time: Sat 06 Sep 2025 13:21:16 +0000 Manifest this update: Sat 06 Sep 2025 13:16:16 +0000 Manifest next update: Tue 09 Sep 2025 13:32:16 +0000 Files and hashes: 1: 3130332e3231352e36312e302f32342d3234203d3e20313531353033.roa (hash: yI+x3QlccThUEQyL4aGgW81et+4syWgCbrFAnQNyq/g=) 2: 3130332e3231352e36302e302f32342d3234203d3e20313531353033.roa (hash: b0fuY1pKKFn/0Zi2JNlIa5wt7XKTYP6sji14ARgrEj0=) 3: B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.crl (hash: tdAzTcx23MdVT0kTUuhE+8uRpfgscbShk2nPKMtzaEg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.crl rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 13:32:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:cc:85:2c:f5:fc:3e:35:b9:03:3f:fa:a3:9a:fb:4b:5a:b9:02:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30 Validity Not Before: Sep 6 13:16:16 2025 GMT Not After : Sep 9 13:32:16 2025 GMT Subject: CN=7ADF06C3222540061E80B11FD3DE2E7D2F687CB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:af:aa:00:30:90:fa:41:43:32:5a:15:d0:51: 84:78:13:bf:6c:3f:66:a7:ab:4b:8c:f3:78:13:98: c3:d6:7e:f8:9a:ed:3b:97:5d:2c:38:6e:40:22:ff: 40:b8:e3:3c:eb:36:a3:54:23:0f:fe:d0:f7:c5:48: 68:81:0f:72:50:18:18:f8:d8:a8:73:83:a6:ec:f5: 97:53:34:d4:02:9e:31:0f:7a:0d:29:35:a8:82:08: 1d:c9:c0:7f:8f:c9:42:bc:8d:a9:7c:2c:c0:f3:4e: c6:4a:1d:91:d7:a5:bc:e1:bf:c2:99:d0:4e:ee:52: d0:7b:7b:b3:6f:c0:e7:d4:e7:02:7e:32:a8:ef:7b: d6:5c:cd:6c:0c:e7:9f:fb:82:2d:1d:f2:59:50:8a: d9:2e:d7:a9:e9:a7:08:8a:27:05:b8:1e:e4:ad:22: 55:5d:f3:fb:02:99:f4:20:46:ac:d1:70:ec:2e:16: 1a:89:f7:94:52:a8:b1:64:60:a5:2c:2b:99:6b:c4: 0f:30:3e:82:1c:8f:d9:6b:6e:d3:e9:23:f9:83:44: 9e:04:69:17:e2:ab:fb:d0:0c:f2:08:8e:7a:4c:44: 50:62:cf:59:b1:be:e9:d5:48:30:9f:96:78:36:17: 2b:35:b7:32:8d:24:2f:78:8f:1b:a2:9b:c1:97:ef: bd:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:DF:06:C3:22:25:40:06:1E:80:B1:1F:D3:DE:2E:7D:2F:68:7C:B2 X509v3 Authority Key Identifier: keyid:B7:A3:DE:01:7F:B3:D7:40:B2:93:22:D8:18:D5:C6:A8:FE:6D:4C:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:af:bd:84:16:e9:fb:a8:ab:0d:40:69:9a:df:ab:ac:bc:1e: f9:80:ef:51:8c:7e:4d:97:f7:1b:ab:f4:fa:cb:49:d8:d3:c1: d2:6f:a0:f0:a6:d7:92:30:f0:f3:01:d1:09:de:29:a5:3a:bc: 25:e8:d6:c7:f9:60:90:b0:bd:ec:b1:7e:39:45:63:c2:b9:17: 83:7e:df:bb:13:eb:74:c6:56:42:50:14:4e:98:5a:40:d4:6f: 4f:13:12:39:8d:17:6b:2c:52:bc:5b:e3:ed:da:65:f7:00:4f: c8:57:49:5d:f2:bd:cf:05:ec:1e:2b:c4:f4:b4:7c:db:29:cc: 5e:5e:f0:27:0c:09:fa:37:4b:40:b5:7f:b6:01:cd:69:2d:97: 95:f5:16:d3:23:04:dd:c1:91:98:b7:53:2e:5f:04:99:a0:b6: 01:ff:5e:4c:85:d3:e1:d6:9d:ef:9c:08:da:08:f0:26:97:73: 91:92:75:27:48:69:95:65:15:56:ca:44:e8:f2:13:99:c7:8c: 81:ac:6f:4b:c9:a5:b5:b6:04:13:a8:1f:6c:38:24:47:27:2a: 55:5f:de:03:16:85:a1:12:be:d6:d8:84:fa:ac:a6:e4:17:9c: 90:73:53:40:d4:4f:5d:6e:ba:cf:39:9d:a9:53:8f:76:e4:8f: 7d:14:aa:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMMyFLPX8PjW5Az/6o5r7S1q5AlIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdBM0RFMDE3RkIzRDc0MEIyOTMyMkQ4MThENUM2QThG RTZENEMzMDAeFw0yNTA5MDYxMzE2MTZaFw0yNTA5MDkxMzMyMTZaMDMxMTAvBgNV BAMTKDdBREYwNkMzMjIyNTQwMDYxRTgwQjExRkQzREUyRTdEMkY2ODdDQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPr6oAMJD6QUMyWhXQUYR4E79s P2anq0uM83gTmMPWfvia7TuXXSw4bkAi/0C44zzrNqNUIw/+0PfFSGiBD3JQGBj4 2Khzg6bs9ZdTNNQCnjEPeg0pNaiCCB3JwH+PyUK8jal8LMDzTsZKHZHXpbzhv8KZ 0E7uUtB7e7NvwOfU5wJ+Mqjve9ZczWwM55/7gi0d8llQitku16nppwiKJwW4HuSt IlVd8/sCmfQgRqzRcOwuFhqJ95RSqLFkYKUsK5lrxA8wPoIcj9lrbtPpI/mDRJ4E aRfiq/vQDPIIjnpMRFBiz1mxvunVSDCflng2Fys1tzKNJC94jxuim8GX771dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUet8GwyIlQAYegLEf094ufS9ofLIwHwYDVR0j BBgwFoAUt6PeAX+z10CykyLYGNXGqP5tTDAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjE2YzA0ZC1kOWUwLTRjMWYtOGExNC1lMjNiZjI3NDQ1OTIvMC9CN0EzREUwMTdG QjNENzQwQjI5MzIyRDgxOEQ1QzZBOEZFNkQ0QzMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjdBM0RFMDE3RkIzRDc0MEIyOTMyMkQ4MThENUM2QThGRTZE NEMzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYxNmMwNGQtZDllMC00YzFmLThh MTQtZTIzYmYyNzQ0NTkyLzAvQjdBM0RFMDE3RkIzRDc0MEIyOTMyMkQ4MThENUM2 QThGRTZENEMzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANOvvYQW6fuoqw1AaZrfq6y8HvmA71GMfk2X 9xur9PrLSdjTwdJvoPCm15Iw8PMB0QneKaU6vCXo1sf5YJCwveyxfjlFY8K5F4N+ 37sT63TGVkJQFE6YWkDUb08TEjmNF2ssUrxb4+3aZfcAT8hXSV3yvc8F7B4rxPS0 fNspzF5e8CcMCfo3S0C1f7YBzWktl5X1FtMjBN3BkZi3Uy5fBJmgtgH/XkyF0+HW ne+cCNoI8CaXc5GSdSdIaZVlFVbKROjyE5nHjIGsb0vJpbW2BBOoH2w4JEcnKlVf 3gMWhaESvtbYhPqspuQXnJBzU0DUT11uus85nalTj3bkj30Uqg8= -----END CERTIFICATE-----Generated at Sun Sep 7 14:00:48 2025 by rpki-client