$ rpki-client -vvf repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft File: A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft (raw, json) Hash identifier: Jpnj9u8TX7g2dmomq5WmPCEDZ9GTmJWFVyFUqPeLhzc= Subject key identifier: BB:D1:5D:9B:48:43:54:5F:26:F0:4B:8B:AB:5E:EB:A3:AB:54:8B:E7 Authority key identifier: A7:D5:3E:B5:45:1E:AF:8A:CA:B6:38:48:7F:BD:EB:40:17:7A:0F:8A Certificate issuer: /CN=A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A Certificate serial: 023EDECEA4CAEB69665AD4C56F61C9B21AD82FB6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft Manifest number: 0191 Signing time: Wed 04 Jun 2025 19:31:40 +0000 Manifest this update: Wed 04 Jun 2025 19:26:40 +0000 Manifest next update: Sun 08 Jun 2025 00:21:40 +0000 Files and hashes: 1: 3130332e3139302e36322e302f32332d3234203d3e20313439383938.roa (hash: Cp2AGXmtWxhdOX8t8c9ZWl5s1GCXbA0uZVtL40w4/7g=) 2: A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.crl (hash: DOyK3rI0m7vMN5BgoGcvmL8E0DrC+CAc6WxQNgrUoEk=) 3: 3130332e3139302e36332e302f32342d3234203d3e20313439383938.roa (hash: 2CVr+NqiEqGGwrJfck3G7ZB8HhulLnTSsHN6lGbSZ/c=) 4: 3130332e3139302e36322e302f32342d3234203d3e20313439383938.roa (hash: 2ja7FKvmu0FlqkDf7LuG1Z7B59LI4ArGIpEzwSMjxRg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.crl rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 00:21:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:3e:de:ce:a4:ca:eb:69:66:5a:d4:c5:6f:61:c9:b2:1a:d8:2f:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A Validity Not Before: Jun 4 19:26:40 2025 GMT Not After : Jun 8 00:21:40 2025 GMT Subject: CN=BBD15D9B4843545F26F04B8BAB5EEBA3AB548BE7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:b6:6e:99:e0:96:8c:a9:98:5c:05:bd:79:46: eb:ec:eb:49:47:e1:1b:a7:a9:19:a9:83:3b:e0:c1: 7d:7e:8c:5e:a0:00:67:7e:ba:87:e6:04:27:a5:48: 41:40:b0:f1:47:0f:5f:b0:c1:f4:56:0a:0b:b0:bc: cb:98:da:0a:e1:9c:b8:1a:06:46:21:1c:dc:30:c2: 21:20:4b:49:09:b1:72:a6:4f:6d:04:ff:72:5c:b9: 65:a6:64:12:47:92:c7:33:90:9b:d3:96:4e:61:f9: 6b:b0:ec:06:57:e0:df:94:6d:3d:71:73:be:22:2e: 8a:05:1b:66:ed:11:55:20:81:13:c3:88:3f:87:8c: 5a:e3:02:01:38:db:4e:5a:ad:72:69:6b:8e:22:af: 77:0e:98:7e:ba:f8:54:f4:67:85:6b:ca:23:ec:a5: f3:be:11:42:c4:c9:14:56:45:d9:fb:00:a8:58:d8: d7:69:d6:e6:44:20:89:23:97:05:7d:2f:e5:c0:f1: 0a:31:60:98:79:88:c8:d3:53:a5:c7:19:7d:cf:61: b6:9f:61:1a:8a:27:16:79:bb:a0:88:9f:ad:68:07: 7c:7c:5e:cb:ea:c4:59:70:db:1b:dc:56:0a:f7:7d: c1:b0:d4:d6:c5:30:e4:21:09:b1:cc:98:e5:f1:a1: f4:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:D1:5D:9B:48:43:54:5F:26:F0:4B:8B:AB:5E:EB:A3:AB:54:8B:E7 X509v3 Authority Key Identifier: keyid:A7:D5:3E:B5:45:1E:AF:8A:CA:B6:38:48:7F:BD:EB:40:17:7A:0F:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:79:f8:34:97:72:cf:02:e2:ab:1a:56:49:54:8b:ad:66:55: e6:13:c0:31:b1:d4:3c:35:14:8a:3a:c6:4b:03:1f:8b:e5:07: fc:f1:65:41:64:ed:4c:36:7d:f1:f9:1d:7c:cd:db:f7:b2:85: cf:7c:9a:cb:ed:ab:17:3e:bd:3f:c4:1e:b4:2e:d6:d8:7f:d3: 4d:33:5e:1e:4c:00:d8:cb:64:16:93:ef:23:4e:19:3a:fa:ca: 09:93:e3:90:b7:36:d8:62:69:ef:43:fe:c3:63:71:32:85:51: dc:f5:a9:10:38:e1:54:60:0b:9b:ee:f2:b0:4f:d2:51:1d:11: 28:1d:87:da:0b:e2:43:77:e2:80:f1:b5:b7:e2:d8:38:dd:4c: 00:bd:01:16:9a:42:b9:37:f1:77:6e:b0:fc:61:b0:c0:75:d3: b5:78:0a:49:66:f7:65:fc:f3:84:66:04:6d:cd:24:17:e4:1e: b7:50:4e:33:aa:e5:9a:22:16:f6:c9:d2:3e:35:28:74:86:b8: 70:e0:6a:94:8d:f2:fa:0c:7b:02:2b:6f:d6:9d:a8:92:59:7b: 43:d9:63:14:df:cc:c8:6d:b1:ad:46:c8:f9:4e:fd:c9:17:34: 3c:c9:24:d2:6e:6d:bf:f2:a1:57:86:27:81:ac:88:34:48:32: 71:49:99:86 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAj7ezqTK62lmWtTFb2HJshrYL7YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdENTNFQjU0NTFFQUY4QUNBQjYzODQ4N0ZCREVCNDAx NzdBMEY4QTAeFw0yNTA2MDQxOTI2NDBaFw0yNTA2MDgwMDIxNDBaMDMxMTAvBgNV BAMTKEJCRDE1RDlCNDg0MzU0NUYyNkYwNEI4QkFCNUVFQkEzQUI1NDhCRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDatm6Z4JaMqZhcBb15Ruvs60lH 4RunqRmpgzvgwX1+jF6gAGd+uofmBCelSEFAsPFHD1+wwfRWCguwvMuY2grhnLga BkYhHNwwwiEgS0kJsXKmT20E/3JcuWWmZBJHksczkJvTlk5h+Wuw7AZX4N+UbT1x c74iLooFG2btEVUggRPDiD+HjFrjAgE4205arXJpa44ir3cOmH66+FT0Z4VryiPs pfO+EULEyRRWRdn7AKhY2Ndp1uZEIIkjlwV9L+XA8QoxYJh5iMjTU6XHGX3PYbaf YRqKJxZ5u6CIn61oB3x8XsvqxFlw2xvcVgr3fcGw1NbFMOQhCbHMmOXxofQlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUu9Fdm0hDVF8m8EuLq17ro6tUi+cwHwYDVR0j BBgwFoAUp9U+tUUer4rKtjhIf73rQBd6D4owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjIwYjQyMy1kZDVkLTQ0OGYtYmJkMy0wNDUzMGVjMTcxNWQvMC9BN0Q1M0VCNTQ1 MUVBRjhBQ0FCNjM4NDg3RkJERUI0MDE3N0EwRjhBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTdENTNFQjU0NTFFQUY4QUNBQjYzODQ4N0ZCREVCNDAxNzdB MEY4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzYyMGI0MjMtZGQ1ZC00NDhmLWJi ZDMtMDQ1MzBlYzE3MTVkLzAvQTdENTNFQjU0NTFFQUY4QUNBQjYzODQ4N0ZCREVC NDAxNzdBMEY4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKF5+DSXcs8C4qsaVklUi61mVeYTwDGx1Dw1 FIo6xksDH4vlB/zxZUFk7Uw2ffH5HXzN2/eyhc98msvtqxc+vT/EHrQu1th/000z Xh5MANjLZBaT7yNOGTr6ygmT45C3Nthiae9D/sNjcTKFUdz1qRA44VRgC5vu8rBP 0lEdESgdh9oL4kN34oDxtbfi2DjdTAC9ARaaQrk38XdusPxhsMB107V4Cklm92X8 84RmBG3NJBfkHrdQTjOq5ZoiFvbJ0j41KHSGuHDgapSN8voMewIrb9adqJJZe0PZ YxTfzMhtsa1GyPlO/ckXNDzJJNJubb/yoVeGJ4GsiDRIMnFJmYY= -----END CERTIFICATE-----Generated at Fri Jun 6 16:53:21 2025 by rpki-client