$ rpki-client -vvf repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft File: A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft (raw, json) Hash identifier: E8XcDoVJUb4d9B93/DXyb4ErUGLRcQKDK2S1v73kCjk= Subject key identifier: FB:06:8E:EE:B8:89:05:6C:00:08:BA:F7:86:8E:BD:4E:FD:D1:C5:B7 Authority key identifier: A7:D8:3E:E8:70:3B:BD:59:CD:CA:A5:62:2A:DB:35:C3:F9:72:27:28 Certificate issuer: /CN=A7D83EE8703BBD59CDCAA5622ADB35C3F9722728 Certificate serial: 26CAD4F1BB343EA90DAD5B0724499EF6316BC651 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.cer Subject info access: rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft Manifest number: 017F Signing time: Thu 05 Jun 2025 06:31:33 +0000 Manifest this update: Thu 05 Jun 2025 06:26:33 +0000 Manifest next update: Sun 08 Jun 2025 10:29:33 +0000 Files and hashes: 1: 3130332e36332e32362e302f32342d3234203d3e20313338303839.roa (hash: a/XQ8MdxKUzSfIKR4TnLCUk6wo8og+MExbugEiLWe3U=) 2: A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.crl (hash: FkvEj0iihKr6JhldanDXOYxrVs6VV3vgQxDf1t7aFkY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.crl rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 10:29:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:ca:d4:f1:bb:34:3e:a9:0d:ad:5b:07:24:49:9e:f6:31:6b:c6:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7D83EE8703BBD59CDCAA5622ADB35C3F9722728 Validity Not Before: Jun 5 06:26:33 2025 GMT Not After : Jun 8 10:29:33 2025 GMT Subject: CN=FB068EEEB889056C0008BAF7868EBD4EFDD1C5B7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:49:36:a8:f2:ff:a6:3c:14:37:4a:b5:77:b3: 73:17:d3:d2:4a:2f:78:31:df:fa:9c:90:8e:42:96: ca:27:40:7f:47:07:01:27:c7:6e:dd:50:48:40:a7: 93:e0:8d:52:af:5f:99:1e:7a:3d:45:5d:5e:f0:5f: d7:b4:49:0b:e5:d5:80:70:78:ed:8f:40:9f:08:fd: 45:cb:99:26:33:7a:c8:68:22:df:6a:d0:75:d2:43: 5e:08:8b:3b:a7:13:72:2b:d7:0c:bf:72:4c:9d:40: 1f:41:6a:ff:2c:d9:82:e4:37:16:df:03:ef:aa:73: b7:55:e2:03:ac:01:17:cc:8b:60:08:80:ad:13:05: 85:a9:9d:8f:18:92:5b:a3:d8:39:5d:3e:22:0a:ec: 04:b2:99:c2:65:9e:84:3a:65:fa:1c:9b:10:c4:f2: 82:a8:47:a2:ba:27:a5:cb:cf:dc:c8:10:ce:90:27: 07:87:e7:96:d4:4e:3c:f4:49:bb:08:bf:48:51:e7: 9f:91:9d:6a:29:08:14:9f:25:20:09:f1:8c:93:44: 1c:be:bb:ff:83:1b:9a:ae:8a:0d:4f:c2:0f:8f:7d: 2a:ab:a3:7e:fc:76:f2:aa:c0:24:b0:7a:13:41:75: 20:6d:8d:29:6a:51:78:c2:60:5f:1c:cf:73:b0:22: dd:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:06:8E:EE:B8:89:05:6C:00:08:BA:F7:86:8E:BD:4E:FD:D1:C5:B7 X509v3 Authority Key Identifier: keyid:A7:D8:3E:E8:70:3B:BD:59:CD:CA:A5:62:2A:DB:35:C3:F9:72:27:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89a6ceaf-d68c-4dcb-8267-fd1a53d99988/0/A7D83EE8703BBD59CDCAA5622ADB35C3F9722728.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:de:e9:8e:f8:94:99:33:0a:e2:3b:2d:db:bb:f0:0b:c3:d0: ec:1f:f8:90:88:0a:88:d6:51:85:c6:a0:c7:3e:86:f8:8f:98: cc:32:b8:4a:ce:ee:01:a4:49:b9:e6:04:4c:97:f7:54:70:d7: c5:9a:47:dd:aa:9c:eb:da:4a:ee:0b:02:5f:3f:b9:16:b3:ab: 4c:ed:1a:a4:29:92:e9:6d:dc:0e:23:19:5b:cd:df:a4:8d:11: fb:ce:81:3f:c2:af:cb:25:a4:f7:d1:41:ed:59:81:ea:f9:61: a6:3a:83:65:ea:b8:7c:41:b0:e6:77:72:f2:07:5d:4d:ef:8e: 62:92:28:eb:94:4d:44:44:d4:6c:15:25:c3:dc:87:d9:ba:58: e6:54:cc:f9:75:08:93:b2:fd:57:65:a3:8b:51:24:3f:b5:78: 3c:a7:98:49:16:ac:9e:0a:8e:39:d2:03:b6:86:f9:ae:0a:21: 6f:09:e8:75:3a:58:4f:28:1f:04:f3:e2:89:97:95:37:5d:c9: bb:49:49:9a:dc:9d:34:f6:a1:e3:96:31:54:72:a5:b3:66:39: b5:ba:7e:5d:f5:c5:58:8f:80:d3:1f:3a:f5:38:b5:b2:f9:d6: c3:21:cd:61:4b:d4:94:b1:ec:3a:cf:f0:c0:03:47:e9:bd:4d: 73:13:57:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJsrU8bs0PqkNrVsHJEme9jFrxlEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdEODNFRTg3MDNCQkQ1OUNEQ0FBNTYyMkFEQjM1QzNG OTcyMjcyODAeFw0yNTA2MDUwNjI2MzNaFw0yNTA2MDgxMDI5MzNaMDMxMTAvBgNV BAMTKEZCMDY4RUVFQjg4OTA1NkMwMDA4QkFGNzg2OEVCRDRFRkREMUM1QjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDySTao8v+mPBQ3SrV3s3MX09JK L3gx3/qckI5ClsonQH9HBwEnx27dUEhAp5PgjVKvX5keej1FXV7wX9e0SQvl1YBw eO2PQJ8I/UXLmSYzeshoIt9q0HXSQ14IizunE3Ir1wy/ckydQB9Bav8s2YLkNxbf A++qc7dV4gOsARfMi2AIgK0TBYWpnY8Ykluj2DldPiIK7ASymcJlnoQ6ZfocmxDE 8oKoR6K6J6XLz9zIEM6QJweH55bUTjz0SbsIv0hR55+RnWopCBSfJSAJ8YyTRBy+ u/+DG5quig1Pwg+PfSqro378dvKqwCSwehNBdSBtjSlqUXjCYF8cz3OwIt1DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+waO7riJBWwACLr3ho69Tv3RxbcwHwYDVR0j BBgwFoAUp9g+6HA7vVnNyqViKts1w/lyJygwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 OWE2Y2VhZi1kNjhjLTRkY2ItODI2Ny1mZDFhNTNkOTk5ODgvMC9BN0Q4M0VFODcw M0JCRDU5Q0RDQUE1NjIyQURCMzVDM0Y5NzIyNzI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTdEODNFRTg3MDNCQkQ1OUNEQ0FBNTYyMkFEQjM1QzNGOTcy MjcyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODlhNmNlYWYtZDY4Yy00ZGNiLTgy NjctZmQxYTUzZDk5OTg4LzAvQTdEODNFRTg3MDNCQkQ1OUNEQ0FBNTYyMkFEQjM1 QzNGOTcyMjcyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGne6Y74lJkzCuI7Ldu78AvD0Owf+JCICojW UYXGoMc+hviPmMwyuErO7gGkSbnmBEyX91Rw18WaR92qnOvaSu4LAl8/uRazq0zt GqQpkult3A4jGVvN36SNEfvOgT/Cr8slpPfRQe1Zger5YaY6g2XquHxBsOZ3cvIH XU3vjmKSKOuUTURE1GwVJcPch9m6WOZUzPl1CJOy/Vdlo4tRJD+1eDynmEkWrJ4K jjnSA7aG+a4KIW8J6HU6WE8oHwTz4omXlTddybtJSZrcnTT2oeOWMVRypbNmObW6 fl31xViPgNMfOvU4tbL51sMhzWFL1JSx7DrP8MADR+m9TXMTVws= -----END CERTIFICATE-----Generated at Thu Jun 5 18:12:57 2025 by rpki-client