$ rpki-client -vvf repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft File: A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft (raw, json) Hash identifier: vBfhOPWHt7UX7iHr00+Om7TIswzLeSQj1PvgwxrR7bo= Subject key identifier: E6:91:3F:A6:5A:D2:2C:9B:BA:CB:C1:CE:0F:53:C0:6D:65:72:86:8F Authority key identifier: A7:D5:3E:B5:45:1E:AF:8A:CA:B6:38:48:7F:BD:EB:40:17:7A:0F:8A Certificate issuer: /CN=A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A Certificate serial: 668783C658472CF7660D9E2D3F9021E783D2AD4F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft Manifest number: 01B9 Signing time: Wed 03 Sep 2025 04:01:30 +0000 Manifest this update: Wed 03 Sep 2025 03:56:30 +0000 Manifest next update: Sat 06 Sep 2025 10:07:30 +0000 Files and hashes: 1: A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.crl (hash: 6L/Y5cqWUn/94jXZ/Tr1sk+NyMRFweIPaFOozhlYsUI=) 2: 3130332e3139302e36332e302f32342d3234203d3e20313439383938.roa (hash: 2CVr+NqiEqGGwrJfck3G7ZB8HhulLnTSsHN6lGbSZ/c=) 3: 3130332e3139302e36322e302f32332d3234203d3e20313439383938.roa (hash: Cp2AGXmtWxhdOX8t8c9ZWl5s1GCXbA0uZVtL40w4/7g=) 4: 3130332e3139302e36322e302f32342d3234203d3e20313439383938.roa (hash: 2ja7FKvmu0FlqkDf7LuG1Z7B59LI4ArGIpEzwSMjxRg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.crl rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 10:07:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:87:83:c6:58:47:2c:f7:66:0d:9e:2d:3f:90:21:e7:83:d2:ad:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A Validity Not Before: Sep 3 03:56:30 2025 GMT Not After : Sep 6 10:07:30 2025 GMT Subject: CN=E6913FA65AD22C9BBACBC1CE0F53C06D6572868F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:07:a1:e7:2f:c1:38:3c:01:61:dc:4d:52:1e: ca:13:ef:db:59:86:be:53:85:4d:ca:a7:c5:46:9f: 6d:b9:87:d0:ae:16:18:ae:36:56:6a:a4:24:09:50: 40:35:e3:be:42:07:74:76:d9:f3:89:e2:36:67:1f: ac:cc:1e:15:b3:d4:a3:ae:91:d9:38:00:08:5d:fd: bd:d8:0d:5d:64:92:42:cd:7f:31:34:a7:fb:5e:d2: 2b:c0:17:17:91:5f:45:b7:11:c4:67:49:3b:db:94: 23:10:ea:ee:a8:4f:64:a9:56:65:f9:e8:52:a0:41: 4b:c8:c7:49:26:eb:ab:b8:da:2f:05:a3:96:e8:d8: 6c:16:b8:af:f5:60:85:8a:10:af:cb:f4:aa:07:e1: 48:50:30:1d:3c:72:07:51:97:28:ec:3d:25:18:4b: 97:b1:2a:05:4f:10:03:ba:cb:8b:73:7a:96:77:be: d3:92:0c:28:2f:40:51:6c:bb:7c:df:ce:a2:53:45: fd:ef:64:36:ca:3a:b1:c7:22:54:75:a1:ef:77:60: 92:31:c5:72:0a:34:fe:d0:51:18:fa:63:c2:86:f4: d8:b3:84:54:a3:c9:98:06:fb:ee:62:83:4c:b0:01: 6a:46:42:3a:7d:16:82:cf:f9:c1:59:c0:c1:cc:9c: b8:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:91:3F:A6:5A:D2:2C:9B:BA:CB:C1:CE:0F:53:C0:6D:65:72:86:8F X509v3 Authority Key Identifier: keyid:A7:D5:3E:B5:45:1E:AF:8A:CA:B6:38:48:7F:BD:EB:40:17:7A:0F:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:ca:84:8f:1e:7f:99:d8:24:f5:31:3e:16:86:32:4a:59:30: b8:e5:80:24:af:78:39:89:99:c4:3e:0b:5e:58:e4:85:1f:30: 10:86:ce:e2:52:5e:d6:39:02:37:aa:1c:2f:c5:fa:1c:f4:4b: f7:1e:ac:49:61:c9:31:6a:36:6a:91:e6:c9:da:17:86:4c:df: cc:7c:82:cf:94:04:e4:b2:b9:d0:37:e0:68:bd:59:eb:7b:8e: 1a:3f:b7:56:f9:b9:ac:b7:3e:99:6d:cd:41:6c:05:ad:cc:1e: 8e:8b:1d:92:03:21:a3:8d:ec:57:be:c2:c4:81:1b:5e:77:cd: 00:fa:21:b9:ed:c0:fd:6a:97:99:67:1e:85:4b:b9:2d:c9:4e: 2e:43:fd:f3:84:45:e6:57:9c:44:01:36:8b:2a:f4:b2:97:22: ed:44:22:c3:8f:b9:14:ac:04:74:ad:c8:22:67:31:20:42:01: 54:20:75:3d:ff:b3:59:40:7e:18:6c:c4:aa:39:87:10:ad:cb: 5c:80:86:f0:f8:60:d3:45:d1:5f:cf:26:97:f2:c8:21:07:a0: dc:c7:db:97:e5:52:8d:e1:c3:a8:c2:76:5d:02:73:12:f2:f5: 89:ae:58:33:27:3c:b1:95:48:db:71:7f:f3:3e:07:de:3c:d2: cb:b4:90:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZoeDxlhHLPdmDZ4tP5Ah54PSrU8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdENTNFQjU0NTFFQUY4QUNBQjYzODQ4N0ZCREVCNDAx NzdBMEY4QTAeFw0yNTA5MDMwMzU2MzBaFw0yNTA5MDYxMDA3MzBaMDMxMTAvBgNV BAMTKEU2OTEzRkE2NUFEMjJDOUJCQUNCQzFDRTBGNTNDMDZENjU3Mjg2OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7B6HnL8E4PAFh3E1SHsoT79tZ hr5ThU3Kp8VGn225h9CuFhiuNlZqpCQJUEA1475CB3R22fOJ4jZnH6zMHhWz1KOu kdk4AAhd/b3YDV1kkkLNfzE0p/te0ivAFxeRX0W3EcRnSTvblCMQ6u6oT2SpVmX5 6FKgQUvIx0km66u42i8Fo5bo2GwWuK/1YIWKEK/L9KoH4UhQMB08cgdRlyjsPSUY S5exKgVPEAO6y4tzepZ3vtOSDCgvQFFsu3zfzqJTRf3vZDbKOrHHIlR1oe93YJIx xXIKNP7QURj6Y8KG9NizhFSjyZgG++5ig0ywAWpGQjp9FoLP+cFZwMHMnLgpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5pE/plrSLJu6y8HOD1PAbWVyho8wHwYDVR0j BBgwFoAUp9U+tUUer4rKtjhIf73rQBd6D4owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjIwYjQyMy1kZDVkLTQ0OGYtYmJkMy0wNDUzMGVjMTcxNWQvMC9BN0Q1M0VCNTQ1 MUVBRjhBQ0FCNjM4NDg3RkJERUI0MDE3N0EwRjhBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTdENTNFQjU0NTFFQUY4QUNBQjYzODQ4N0ZCREVCNDAxNzdB MEY4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzYyMGI0MjMtZGQ1ZC00NDhmLWJi ZDMtMDQ1MzBlYzE3MTVkLzAvQTdENTNFQjU0NTFFQUY4QUNBQjYzODQ4N0ZCREVC NDAxNzdBMEY4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABrKhI8ef5nYJPUxPhaGMkpZMLjlgCSveDmJ mcQ+C15Y5IUfMBCGzuJSXtY5AjeqHC/F+hz0S/cerElhyTFqNmqR5snaF4ZM38x8 gs+UBOSyudA34Gi9Wet7jho/t1b5uay3PpltzUFsBa3MHo6LHZIDIaON7Fe+wsSB G153zQD6IbntwP1ql5lnHoVLuS3JTi5D/fOEReZXnEQBNosq9LKXIu1EIsOPuRSs BHStyCJnMSBCAVQgdT3/s1lAfhhsxKo5hxCty1yAhvD4YNNF0V/PJpfyyCEHoNzH 25flUo3hw6jCdl0CcxLy9YmuWDMnPLGVSNtxf/M+B9480su0kBc= -----END CERTIFICATE-----Generated at Fri Sep 5 10:34:31 2025 by rpki-client