$ rpki-client -vvf repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft File: 0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft (raw, json) Hash identifier: YkzZ+yNvnTOrTxPT5AvppjX/cyjUpEZw01LojNZ2wi0= Subject key identifier: 14:D3:AC:CF:3B:70:64:BE:BB:18:0F:24:2A:36:60:CA:FC:A4:AA:E1 Authority key identifier: 0A:7E:22:2F:0C:3C:89:14:35:14:04:FC:05:DB:0F:DD:9C:D4:EB:20 Certificate issuer: /CN=0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20 Certificate serial: 74F2F64FF03A57708815EEB9198CDAE964E1F62A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft Manifest number: 010B Signing time: Fri 05 Sep 2025 05:30:59 +0000 Manifest this update: Fri 05 Sep 2025 05:25:59 +0000 Manifest next update: Mon 08 Sep 2025 14:27:59 +0000 Files and hashes: 1: 0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl (hash: ikLZ/OjkVVAXCWGgD3HUycA8XVkZMAF84bT6J3Wi0WE=) 2: 3130332e3136352e3135342e302f32342d3234203d3e20313431393635.roa (hash: 8OwVADfDElltpILpTKCgIU3iWPks4hxCwKGTSEJQw8w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 14:27:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:f2:f6:4f:f0:3a:57:70:88:15:ee:b9:19:8c:da:e9:64:e1:f6:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20 Validity Not Before: Sep 5 05:25:59 2025 GMT Not After : Sep 8 14:27:59 2025 GMT Subject: CN=14D3ACCF3B7064BEBB180F242A3660CAFCA4AAE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1a:3e:de:e0:e1:be:f2:ff:df:0e:b6:fc:a3: 7e:bd:d2:f8:eb:14:df:b1:3d:b8:35:ea:8c:9a:23: 74:74:62:d6:18:4d:94:72:e2:71:db:6c:c4:5c:39: b0:2e:8f:62:e4:25:a0:6b:7f:b2:4c:35:85:94:19: d3:8d:78:51:06:0c:34:38:a3:b3:43:71:6f:1e:3a: 03:7a:c1:7e:20:45:6e:82:b1:ad:7f:b1:d5:93:c2: f3:14:3f:87:b7:e3:ec:07:68:a3:31:8b:b4:ae:fd: 4b:e4:3a:57:ed:63:9e:65:a6:7d:b7:ff:a5:3a:4a: 61:14:08:c8:db:4c:87:cb:ea:72:6a:4d:54:41:34: ef:dc:1a:79:4b:51:15:3a:17:b9:7a:65:4d:e5:77: d6:f8:79:75:1f:7f:14:6f:94:ed:c1:8b:5a:bb:dc: 31:f1:2a:f6:64:3c:f7:4e:17:cc:df:92:62:ad:1a: ec:a3:fe:5f:74:ad:cd:76:40:fb:7f:a1:84:96:cb: 86:cc:c1:d4:70:15:40:1b:3c:4a:26:7c:28:46:7e: cb:ba:63:b2:59:cb:b0:00:dd:24:6a:c8:4b:ed:83: a9:75:90:bf:fd:56:11:63:06:34:a8:ce:57:a8:6d: 75:af:1d:f1:02:6b:35:a6:58:4e:e2:3e:fc:e1:2d: eb:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:D3:AC:CF:3B:70:64:BE:BB:18:0F:24:2A:36:60:CA:FC:A4:AA:E1 X509v3 Authority Key Identifier: keyid:0A:7E:22:2F:0C:3C:89:14:35:14:04:FC:05:DB:0F:DD:9C:D4:EB:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:76:72:f6:b2:db:b9:47:73:50:e6:be:c0:9c:91:00:92:2c: 33:2b:3f:bc:48:f0:42:ce:28:15:ac:8b:7e:4d:c3:65:0d:5f: d6:b9:47:96:94:3d:e5:bd:40:02:2b:0e:a5:c3:17:c0:1d:00: 79:c0:32:3c:ff:c7:84:2f:3d:62:0b:b5:bf:1f:91:cf:dd:56: 93:c1:20:7e:99:da:86:0e:01:d0:11:c2:aa:1d:26:95:f7:2d: 00:00:60:73:0c:8f:1f:c6:8c:6c:53:39:13:09:bb:89:82:e7: 4f:55:9e:77:7a:bb:67:08:40:9e:ab:b2:a6:e9:5d:b3:fc:f1: 93:76:aa:69:4c:74:17:ee:15:49:2b:90:e4:8d:95:1f:c7:a9: 98:f9:27:23:a3:42:0b:be:af:4c:a6:d8:29:51:4b:cb:5e:ab: bf:e1:3a:3b:fd:a6:2a:dd:84:a7:2d:46:6c:6a:9f:a3:b8:6b: cb:c4:18:b6:da:d7:34:48:b1:c6:f8:7c:f3:53:76:68:8a:bd: d1:2b:3c:c2:67:44:5c:bd:9e:42:5f:84:a0:22:58:a1:1c:d3: 67:2b:10:37:87:c1:8b:69:19:32:41:ef:7b:98:3f:ea:f7:a5: 54:ce:4e:6a:ef:38:5c:98:0b:0e:66:ac:3c:a4:ce:b6:cd:0b: 12:9f:40:a3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdPL2T/A6V3CIFe65GYza6WTh9iowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE3RTIyMkYwQzNDODkxNDM1MTQwNEZDMDVEQjBGREQ5 Q0Q0RUIyMDAeFw0yNTA5MDUwNTI1NTlaFw0yNTA5MDgxNDI3NTlaMDMxMTAvBgNV BAMTKDE0RDNBQ0NGM0I3MDY0QkVCQjE4MEYyNDJBMzY2MENBRkNBNEFBRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAGj7e4OG+8v/fDrb8o3690vjr FN+xPbg16oyaI3R0YtYYTZRy4nHbbMRcObAuj2LkJaBrf7JMNYWUGdONeFEGDDQ4 o7NDcW8eOgN6wX4gRW6Csa1/sdWTwvMUP4e34+wHaKMxi7Su/UvkOlftY55lpn23 /6U6SmEUCMjbTIfL6nJqTVRBNO/cGnlLURU6F7l6ZU3ld9b4eXUffxRvlO3Bi1q7 3DHxKvZkPPdOF8zfkmKtGuyj/l90rc12QPt/oYSWy4bMwdRwFUAbPEomfChGfsu6 Y7JZy7AA3SRqyEvtg6l1kL/9VhFjBjSozleobXWvHfECazWmWE7iPvzhLeuHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFNOszztwZL67GA8kKjZgyvykquEwHwYDVR0j BBgwFoAUCn4iLww8iRQ1FAT8BdsP3ZzU6yAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y Y2YzNWE0Ny0yY2NlLTQ4N2YtYWEyNy1jOWU5ZGU2MzViZWMvMC8wQTdFMjIyRjBD M0M4OTE0MzUxNDA0RkMwNURCMEZERDlDRDRFQjIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE3RTIyMkYwQzNDODkxNDM1MTQwNEZDMDVEQjBGREQ5Q0Q0 RUIyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmNmMzVhNDctMmNjZS00ODdmLWFh MjctYzllOWRlNjM1YmVjLzAvMEE3RTIyMkYwQzNDODkxNDM1MTQwNEZDMDVEQjBG REQ5Q0Q0RUIyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADh2cvay27lHc1DmvsCckQCSLDMrP7xI8ELO KBWsi35Nw2UNX9a5R5aUPeW9QAIrDqXDF8AdAHnAMjz/x4QvPWILtb8fkc/dVpPB IH6Z2oYOAdARwqodJpX3LQAAYHMMjx/GjGxTORMJu4mC509Vnnd6u2cIQJ6rsqbp XbP88ZN2qmlMdBfuFUkrkOSNlR/HqZj5JyOjQgu+r0ym2ClRS8teq7/hOjv9pird hKctRmxqn6O4a8vEGLba1zRIscb4fPNTdmiKvdErPMJnRFy9nkJfhKAiWKEc02cr EDeHwYtpGTJB73uYP+r3pVTOTmrvOFyYCw5mrDykzrbNCxKfQKM= -----END CERTIFICATE-----Generated at Sun Sep 7 13:57:21 2025 by rpki-client