$ rpki-client -vvf repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft File: A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft (raw, json) Hash identifier: sbUQWQkz/r9tjjqi38H1mYeLRWRWhYBnurP44POx/aA= Subject key identifier: C0:14:71:8A:50:B7:47:C7:6B:93:C6:20:0F:39:F8:D7:88:B3:E2:6E Authority key identifier: A7:E6:C6:2C:47:C0:2E:EA:32:42:2E:13:59:08:EB:F2:30:C5:B5:FA Certificate issuer: /CN=A7E6C62C47C02EEA32422E135908EBF230C5B5FA Certificate serial: 6292838578F7F0E84EDC3A756A756F9250E7605F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft Manifest number: AA Signing time: Mon 08 Sep 2025 06:42:16 +0000 Manifest this update: Mon 08 Sep 2025 06:37:16 +0000 Manifest next update: Thu 11 Sep 2025 07:28:16 +0000 Files and hashes: 1: A7E6C62C47C02EEA32422E135908EBF230C5B5FA.crl (hash: WC70TZ/DI3cns5mn/4oewXfp8znHdFA9bqOERX3OUVo=) 2: 3136302e32322e3139382e302f32342d3234203d3e20313532383336.roa (hash: T0SEzE9YSldItn38GmkKf92LoaZ2oQZ49jDDO4h9Pog=) 3: 3136302e32322e3139382e302f32332d3233203d3e20313532383336.roa (hash: VUNIcQLLtJsrGFAzVMiImA2RepGLVIMfYYvCS/t2Ge0=) 4: 3136302e32322e3139392e302f32342d3234203d3e20313532383336.roa (hash: Lhr2al1XwYOqujTNMwbvxurUmcC7+yc2oxsnrcYpuBo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.crl rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 07:28:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:92:83:85:78:f7:f0:e8:4e:dc:3a:75:6a:75:6f:92:50:e7:60:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7E6C62C47C02EEA32422E135908EBF230C5B5FA Validity Not Before: Sep 8 06:37:16 2025 GMT Not After : Sep 11 07:28:16 2025 GMT Subject: CN=C014718A50B747C76B93C6200F39F8D788B3E26E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3d:62:1b:88:e7:92:fa:45:b6:3a:b0:86:b6: 7f:8b:66:fe:37:b7:ed:70:16:5e:96:dc:36:7d:e2: 4e:55:c4:88:d5:f9:53:14:2e:15:57:5a:6d:f1:b9: 0b:b9:22:2c:eb:1c:42:33:fd:ff:5e:85:40:28:ae: 5b:66:bd:56:00:df:55:b8:50:01:d0:76:ff:28:4b: e5:1a:4e:d9:a7:6b:3c:a3:52:d2:44:28:93:76:e1: 86:83:8a:48:30:d2:70:2e:3c:6f:0d:b4:de:4a:55: 44:f7:d5:a3:33:15:39:f3:1c:67:ea:f5:dd:e5:6f: 08:7f:92:76:4b:39:fa:c5:4f:3c:4a:c0:89:10:80: 23:e8:e3:8e:4c:ba:35:51:ae:0a:95:6a:e1:c2:8e: aa:e7:ec:32:b4:73:09:05:84:bd:01:37:9b:c9:17: 7f:5b:17:5d:f7:ce:5b:2e:34:9d:ef:7c:0d:ac:20: 64:cd:cd:c0:f3:53:13:aa:92:00:39:75:c4:06:0b: fd:ef:fb:83:67:eb:0e:b7:91:4f:98:21:3d:81:76: 5a:27:fb:d4:cc:db:be:df:8e:b1:b0:61:83:b4:47: e0:c3:4b:4b:dc:91:36:1e:33:8e:4a:ec:ee:94:6a: 2c:30:4d:62:95:a1:25:1a:0c:c5:46:de:35:49:24: 87:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:14:71:8A:50:B7:47:C7:6B:93:C6:20:0F:39:F8:D7:88:B3:E2:6E X509v3 Authority Key Identifier: keyid:A7:E6:C6:2C:47:C0:2E:EA:32:42:2E:13:59:08:EB:F2:30:C5:B5:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:3a:c4:2d:c2:50:49:cd:60:d8:ed:5c:0c:56:eb:46:47:ea: d5:f7:47:c0:ee:87:45:2c:d7:08:0f:5f:bc:8b:79:d9:cb:af: 3b:4f:19:9b:c8:15:69:ff:79:fb:8d:b4:99:1e:ff:e0:7b:ba: 9d:7a:d2:b6:34:fb:c7:19:b5:63:0b:77:1e:3b:83:dc:96:53: c6:41:8d:39:59:46:89:dd:ac:70:ef:95:67:a1:a1:63:8e:46: d7:21:7e:83:7d:8e:2a:36:f7:aa:5d:1b:b5:b6:6c:68:56:c1: 4f:53:2d:e7:8c:53:bc:50:89:d5:fd:c2:62:fb:5a:ad:0a:de: 9b:bf:8a:e0:e3:09:05:e3:5b:d6:b8:d8:7f:9d:94:44:ae:96: 73:70:da:fc:32:f1:2d:f6:0a:84:16:57:7c:ef:8a:ee:08:6a: 32:92:c2:3a:de:ce:e2:e7:6a:f4:75:3b:b6:f4:4e:5a:0d:6c: ee:e8:5a:24:b4:d4:ef:b1:e1:69:48:e2:0d:52:a0:7b:f8:4c: 3e:18:69:84:e9:ae:42:6e:a5:00:2d:70:0c:7d:70:e4:f3:0a: 41:5d:83:6d:a2:64:95:44:5d:ca:e4:8d:51:d1:da:5b:63:97: 2b:3e:95:06:7b:79:2b:59:55:e5:ac:53:fd:fa:f3:0e:ef:78: 1f:c2:a2:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYpKDhXj38OhO3Dp1anVvklDnYF8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdFNkM2MkM0N0MwMkVFQTMyNDIyRTEzNTkwOEVCRjIz MEM1QjVGQTAeFw0yNTA5MDgwNjM3MTZaFw0yNTA5MTEwNzI4MTZaMDMxMTAvBgNV BAMTKEMwMTQ3MThBNTBCNzQ3Qzc2QjkzQzYyMDBGMzlGOEQ3ODhCM0UyNkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCePWIbiOeS+kW2OrCGtn+LZv43 t+1wFl6W3DZ94k5VxIjV+VMULhVXWm3xuQu5IizrHEIz/f9ehUAorltmvVYA31W4 UAHQdv8oS+UaTtmnazyjUtJEKJN24YaDikgw0nAuPG8NtN5KVUT31aMzFTnzHGfq 9d3lbwh/knZLOfrFTzxKwIkQgCPo445MujVRrgqVauHCjqrn7DK0cwkFhL0BN5vJ F39bF133zlsuNJ3vfA2sIGTNzcDzUxOqkgA5dcQGC/3v+4Nn6w63kU+YIT2Bdlon +9TM277fjrGwYYO0R+DDS0vckTYeM45K7O6UaiwwTWKVoSUaDMVG3jVJJIfJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwBRxilC3R8drk8YgDzn414iz4m4wHwYDVR0j BBgwFoAUp+bGLEfALuoyQi4TWQjr8jDFtfowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZjMwZTRhZS0zZTQ3LTQ1NDAtODIzYy01M2NhZjIyNjdiMzYvMC9BN0U2QzYyQzQ3 QzAyRUVBMzI0MjJFMTM1OTA4RUJGMjMwQzVCNUZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTdFNkM2MkM0N0MwMkVFQTMyNDIyRTEzNTkwOEVCRjIzMEM1 QjVGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWYzMGU0YWUtM2U0Ny00NTQwLTgy M2MtNTNjYWYyMjY3YjM2LzAvQTdFNkM2MkM0N0MwMkVFQTMyNDIyRTEzNTkwOEVC RjIzMEM1QjVGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACU6xC3CUEnNYNjtXAxW60ZH6tX3R8Duh0Us 1wgPX7yLednLrztPGZvIFWn/efuNtJke/+B7up160rY0+8cZtWMLdx47g9yWU8ZB jTlZRondrHDvlWehoWOORtchfoN9jio296pdG7W2bGhWwU9TLeeMU7xQidX9wmL7 Wq0K3pu/iuDjCQXjW9a42H+dlESulnNw2vwy8S32CoQWV3zviu4IajKSwjrezuLn avR1O7b0TloNbO7oWiS01O+x4WlI4g1SoHv4TD4YaYTprkJupQAtcAx9cOTzCkFd g22iZJVEXcrkjVHR2ltjlys+lQZ7eStZVeWsU/368w7veB/Coj0= -----END CERTIFICATE-----Generated at Mon Sep 8 10:38:17 2025 by rpki-client