$ rpki-client -vvf repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft File: A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft (raw, json) Hash identifier: B6R47Hb9uMZEm1JDocLNtCo9mLVXhS+ik+h40qrdZGQ= Subject key identifier: CD:32:3D:99:60:77:93:16:52:5F:D9:A2:24:D2:41:9F:A6:80:8F:43 Authority key identifier: A7:E6:C6:2C:47:C0:2E:EA:32:42:2E:13:59:08:EB:F2:30:C5:B5:FA Certificate issuer: /CN=A7E6C62C47C02EEA32422E135908EBF230C5B5FA Certificate serial: 0B721C7D4A0F968F33DBCC99FFA2EB29A6D8CA60 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft Manifest number: 7F Signing time: Wed 04 Jun 2025 02:02:14 +0000 Manifest this update: Wed 04 Jun 2025 01:57:14 +0000 Manifest next update: Sat 07 Jun 2025 05:50:14 +0000 Files and hashes: 1: 3136302e32322e3139392e302f32342d3234203d3e20313532383336.roa (hash: KK4iDt8fTsMGcROdReawd5n4c23gZEw7aOn4pQj9/68=) 2: 3136302e32322e3139382e302f32342d3234203d3e20313532383336.roa (hash: iBwCiGq60c+2kk4AeuGkzb89D8PG4a8vEAoiYw5XZV0=) 3: A7E6C62C47C02EEA32422E135908EBF230C5B5FA.crl (hash: vFOfwAJhgrzTQpJ/hp0B30JOW3U3IjRjzqRBGzrB2sA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.crl rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 05:50:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:72:1c:7d:4a:0f:96:8f:33:db:cc:99:ff:a2:eb:29:a6:d8:ca:60 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7E6C62C47C02EEA32422E135908EBF230C5B5FA Validity Not Before: Jun 4 01:57:14 2025 GMT Not After : Jun 7 05:50:14 2025 GMT Subject: CN=CD323D9960779316525FD9A224D2419FA6808F43 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ee:f3:56:3e:06:42:2b:fd:b3:3d:fc:ad:f0:b0: df:17:59:cb:6a:1d:d0:b2:d8:38:23:ee:e2:b4:26: 1a:20:7c:c8:d5:d9:2a:ae:c8:26:c7:0e:9e:65:c0: e2:cb:cf:30:63:b7:90:60:a6:ad:90:c8:86:e2:cb: f6:22:53:45:f2:2c:16:6e:ba:b7:97:0d:75:2d:89: 32:13:15:9f:d2:76:78:7d:d8:f2:98:d2:44:52:b5: f5:98:6d:fe:37:ab:20:69:a2:bf:b2:e7:9d:6e:29: d6:c2:cb:95:97:ad:77:0b:b1:7d:d3:3a:3d:ea:c6: ce:78:b5:68:af:06:47:aa:83:d1:11:e8:2b:32:1e: ab:6c:da:ae:24:90:3b:ec:27:2f:42:e6:44:eb:48: b9:85:7f:b9:dc:a8:7a:72:0e:ff:d6:dc:8b:08:21: 33:39:f8:70:fe:1b:db:98:d0:69:12:e3:e3:81:97: 2a:1f:06:66:cf:0b:82:e3:b3:b5:34:6a:65:c1:4b: b7:8f:82:11:76:99:59:8e:3f:57:b0:77:40:47:04: 60:c9:05:d1:62:2e:f6:bd:0b:c5:ad:32:c0:68:39: a6:88:6b:07:2a:0e:15:0a:ec:c3:78:f1:24:22:18: 4c:f1:bc:8d:33:85:45:24:e9:ad:5b:d0:d5:60:03: 78:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:32:3D:99:60:77:93:16:52:5F:D9:A2:24:D2:41:9F:A6:80:8F:43 X509v3 Authority Key Identifier: keyid:A7:E6:C6:2C:47:C0:2E:EA:32:42:2E:13:59:08:EB:F2:30:C5:B5:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9f30e4ae-3e47-4540-823c-53caf2267b36/0/A7E6C62C47C02EEA32422E135908EBF230C5B5FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:6e:4b:e2:c9:56:ef:1a:9f:1b:7b:2a:ad:66:e2:70:ab:9e: c8:57:23:9d:0c:2c:8e:f7:0c:cb:b9:76:00:a9:2b:3b:54:df: 6d:03:db:bf:b7:70:c9:97:58:fe:c4:5a:39:e7:04:a8:7e:e9: 45:99:f0:83:8e:1f:0b:61:ab:4a:46:6a:a8:b9:21:1e:c3:21: f1:c4:6b:66:bb:be:ce:7d:7f:d5:af:15:dd:8f:c0:62:d8:aa: 85:66:e5:f0:61:4b:34:e5:bc:20:fa:81:47:55:28:6b:ce:c6: fd:b5:a3:47:e4:22:0a:0a:6a:5a:da:6b:7c:5a:8c:47:76:d4: 25:0d:36:25:1f:57:97:fe:c7:26:ac:71:b8:93:8f:b0:3a:c0: 82:1b:cd:84:45:55:30:bc:98:79:50:23:d0:db:22:0b:d3:09: 67:9e:ad:7c:8e:27:3a:a7:ee:34:61:36:ba:74:d7:e0:25:5e: d7:3f:69:3c:c3:dd:18:87:de:bb:d9:9d:ae:9c:66:29:f8:25: 30:5a:a1:e0:95:81:f5:07:e0:57:41:ab:b4:ea:88:f6:9f:f6: a9:fd:5a:3a:76:3b:db:6d:e9:a4:33:2f:3b:7a:15:54:c2:03: ab:f2:95:1a:a1:d1:31:1f:6c:77:58:ac:9c:fc:61:a6:ee:2d: f2:ab:0c:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC3IcfUoPlo8z28yZ/6LrKabYymAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdFNkM2MkM0N0MwMkVFQTMyNDIyRTEzNTkwOEVCRjIz MEM1QjVGQTAeFw0yNTA2MDQwMTU3MTRaFw0yNTA2MDcwNTUwMTRaMDMxMTAvBgNV BAMTKENEMzIzRDk5NjA3NzkzMTY1MjVGRDlBMjI0RDI0MTlGQTY4MDhGNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDu81Y+BkIr/bM9/K3wsN8XWctq HdCy2Dgj7uK0JhogfMjV2SquyCbHDp5lwOLLzzBjt5Bgpq2QyIbiy/YiU0XyLBZu ureXDXUtiTITFZ/Sdnh92PKY0kRStfWYbf43qyBpor+y551uKdbCy5WXrXcLsX3T Oj3qxs54tWivBkeqg9ER6CsyHqts2q4kkDvsJy9C5kTrSLmFf7ncqHpyDv/W3IsI ITM5+HD+G9uY0GkS4+OBlyofBmbPC4Ljs7U0amXBS7ePghF2mVmOP1ewd0BHBGDJ BdFiLva9C8WtMsBoOaaIawcqDhUK7MN48SQiGEzxvI0zhUUk6a1b0NVgA3jNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzTI9mWB3kxZSX9miJNJBn6aAj0MwHwYDVR0j BBgwFoAUp+bGLEfALuoyQi4TWQjr8jDFtfowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZjMwZTRhZS0zZTQ3LTQ1NDAtODIzYy01M2NhZjIyNjdiMzYvMC9BN0U2QzYyQzQ3 QzAyRUVBMzI0MjJFMTM1OTA4RUJGMjMwQzVCNUZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQTdFNkM2MkM0N0MwMkVFQTMyNDIyRTEzNTkwOEVCRjIzMEM1 QjVGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWYzMGU0YWUtM2U0Ny00NTQwLTgy M2MtNTNjYWYyMjY3YjM2LzAvQTdFNkM2MkM0N0MwMkVFQTMyNDIyRTEzNTkwOEVC RjIzMEM1QjVGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIVuS+LJVu8anxt7Kq1m4nCrnshXI50MLI73 DMu5dgCpKztU320D27+3cMmXWP7EWjnnBKh+6UWZ8IOOHwthq0pGaqi5IR7DIfHE a2a7vs59f9WvFd2PwGLYqoVm5fBhSzTlvCD6gUdVKGvOxv21o0fkIgoKalraa3xa jEd21CUNNiUfV5f+xyascbiTj7A6wIIbzYRFVTC8mHlQI9DbIgvTCWeerXyOJzqn 7jRhNrp01+AlXtc/aTzD3RiH3rvZna6cZin4JTBaoeCVgfUH4FdBq7TqiPaf9qn9 Wjp2O9tt6aQzLzt6FVTCA6vylRqh0TEfbHdYrJz8YabuLfKrDCI= -----END CERTIFICATE-----Generated at Fri Jun 6 04:58:17 2025 by rpki-client