$ rpki-client -vvf repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft File: 7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft (raw, json) Hash identifier: nGTb2zPrs6GOatXiZbc7MNytlpQGfadXovUJFszrh6I= Subject key identifier: 25:75:57:13:7C:6E:70:49:EB:48:27:F2:04:4B:C0:2C:FC:7A:6E:A9 Authority key identifier: 7A:21:6F:23:D8:A2:28:FB:B8:F5:63:EC:15:DF:76:FD:50:32:31:B3 Certificate issuer: /CN=7A216F23D8A228FBB8F563EC15DF76FD503231B3 Certificate serial: 2F90076D5A32C155085D5C6CC5DF6ECECB5D474C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A216F23D8A228FBB8F563EC15DF76FD503231B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft Manifest number: 01F1 Signing time: Sun 07 Sep 2025 10:32:10 +0000 Manifest this update: Sun 07 Sep 2025 10:27:10 +0000 Manifest next update: Wed 10 Sep 2025 14:38:10 +0000 Files and hashes: 1: 7A216F23D8A228FBB8F563EC15DF76FD503231B3.crl (hash: X7ik4Ke2LEQaqv7649eZHU35W2UPwx+fsWhuo6tJfds=) 2: 3130332e32302e3130382e302f32332d3234203d3e20313439373037.roa (hash: YUh1E1cCB+Tam8Lv4+/c622A6XvCbyDIufb9eqoPvMQ=) 3: 3130332e32302e3130392e302f32342d3234203d3e20313439373037.roa (hash: rOc9IS1yKanFrzj6lHEyVZN9K3Au8qIy9aCKaCdjEsw=) 4: 3130332e32302e3130382e302f32342d3234203d3e20313439373037.roa (hash: l72fTVO4iPS3td7y6iJ6FZ6Iq9uNFhg1kwCppW10yoE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.crl rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A216F23D8A228FBB8F563EC15DF76FD503231B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 14:38:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:90:07:6d:5a:32:c1:55:08:5d:5c:6c:c5:df:6e:ce:cb:5d:47:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A216F23D8A228FBB8F563EC15DF76FD503231B3 Validity Not Before: Sep 7 10:27:10 2025 GMT Not After : Sep 10 14:38:10 2025 GMT Subject: CN=257557137C6E7049EB4827F2044BC02CFC7A6EA9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:99:22:e7:24:39:41:a5:00:23:b6:0b:0f:9d: 4b:72:43:bb:80:8a:1e:1a:f2:80:a9:f8:4a:61:12: 06:2a:b9:f5:35:73:57:9d:69:ba:d7:cc:f4:9c:27: ce:6c:08:e5:d0:47:5b:e6:ad:25:48:45:c2:b5:0d: c6:a2:67:02:15:7e:04:0a:8b:ac:5a:0a:f1:1d:9a: e7:75:da:86:16:74:81:1e:1e:50:2d:2d:8a:52:47: 4d:ee:34:bc:e3:25:fd:c0:10:e7:35:aa:51:9a:be: 2d:f2:87:c0:cc:f6:f1:50:59:0b:6f:54:07:27:a1: a9:71:78:d4:08:4d:59:4f:7c:8b:23:23:27:96:6d: d7:5e:7d:f2:06:52:6e:e9:48:b8:7a:45:b7:40:e2: 5d:57:04:e7:cb:61:77:80:43:b8:a8:7f:03:29:ec: 12:15:b2:3e:f3:9b:d2:a5:4f:9f:af:ca:f3:6f:02: 8c:c3:81:cf:46:75:7d:b5:dd:84:69:a4:73:a7:fc: 3e:fe:b9:b5:2f:02:3b:65:07:ea:c6:ba:00:66:5c: 06:59:38:2e:a3:54:bc:fb:31:00:f4:24:a5:60:37: ad:d3:99:5b:18:aa:ee:1b:21:d8:13:ee:22:ff:ff: f0:6f:cc:f8:b5:a6:f6:17:b4:58:ee:f1:ef:ce:69: 56:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:75:57:13:7C:6E:70:49:EB:48:27:F2:04:4B:C0:2C:FC:7A:6E:A9 X509v3 Authority Key Identifier: keyid:7A:21:6F:23:D8:A2:28:FB:B8:F5:63:EC:15:DF:76:FD:50:32:31:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A216F23D8A228FBB8F563EC15DF76FD503231B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:cd:63:63:02:a4:11:84:2e:0f:88:49:cd:89:88:ef:ea:6c: 95:69:49:4b:50:3b:93:e0:bf:09:29:d0:8c:6b:d2:03:4e:ab: 58:9a:bd:15:f7:e9:8d:05:cf:09:66:dd:2b:65:b6:9e:e5:56: a0:fe:f8:9c:81:82:9e:9c:5b:23:4b:32:59:30:41:ba:d1:24: ff:d4:3c:65:42:05:3d:a7:cd:3c:c6:bb:78:3f:00:d7:37:49: 15:6e:b5:9f:69:98:10:f1:7a:ae:15:6e:b4:60:70:e5:18:59: 68:ed:78:76:21:03:44:1b:29:f9:d8:e6:64:e4:0c:f4:b7:b7: e7:d3:ed:62:5f:45:5b:d1:f3:4b:0f:75:2b:fa:d3:08:b5:94: 07:fe:22:2f:b8:e1:c0:fc:14:4a:d5:77:4a:20:f2:ac:35:1a: 45:6f:0a:37:1f:b1:cf:e8:30:17:8f:98:01:eb:b8:37:6d:bb: e7:4e:ba:27:69:15:9c:7b:21:93:d5:a9:9f:cb:ca:c2:dd:9e: ee:8c:52:11:b3:0f:dd:cf:9d:61:28:77:49:74:c3:6f:cc:24: 01:45:be:c4:b6:0f:fc:78:8f:0e:16:d5:08:03:4b:31:18:32: cc:68:41:d0:6f:d7:f2:b3:ea:cc:ab:83:e1:75:9f:46:cd:5f: 39:7c:53:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL5AHbVoywVUIXVxsxd9uzstdR0wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0EyMTZGMjNEOEEyMjhGQkI4RjU2M0VDMTVERjc2RkQ1 MDMyMzFCMzAeFw0yNTA5MDcxMDI3MTBaFw0yNTA5MTAxNDM4MTBaMDMxMTAvBgNV BAMTKDI1NzU1NzEzN0M2RTcwNDlFQjQ4MjdGMjA0NEJDMDJDRkM3QTZFQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJmSLnJDlBpQAjtgsPnUtyQ7uA ih4a8oCp+EphEgYqufU1c1edabrXzPScJ85sCOXQR1vmrSVIRcK1DcaiZwIVfgQK i6xaCvEdmud12oYWdIEeHlAtLYpSR03uNLzjJf3AEOc1qlGavi3yh8DM9vFQWQtv VAcnoalxeNQITVlPfIsjIyeWbddeffIGUm7pSLh6RbdA4l1XBOfLYXeAQ7iofwMp 7BIVsj7zm9KlT5+vyvNvAozDgc9GdX213YRppHOn/D7+ubUvAjtlB+rGugBmXAZZ OC6jVLz7MQD0JKVgN63TmVsYqu4bIdgT7iL///BvzPi1pvYXtFju8e/OaVafAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJXVXE3xucEnrSCfyBEvALPx6bqkwHwYDVR0j BBgwFoAUeiFvI9iiKPu49WPsFd92/VAyMbMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Y2M2YmQ3My1mOWJkLTRmNWEtOWM1OS1mYmVhMWJkODM0NzMvMC83QTIxNkYyM0Q4 QTIyOEZCQjhGNTYzRUMxNURGNzZGRDUwMzIzMUIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0EyMTZGMjNEOEEyMjhGQkI4RjU2M0VDMTVERjc2RkQ1MDMy MzFCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWNjNmJkNzMtZjliZC00ZjVhLTlj NTktZmJlYTFiZDgzNDczLzAvN0EyMTZGMjNEOEEyMjhGQkI4RjU2M0VDMTVERjc2 RkQ1MDMyMzFCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADHNY2MCpBGELg+ISc2JiO/qbJVpSUtQO5Pg vwkp0Ixr0gNOq1iavRX36Y0Fzwlm3Stltp7lVqD++JyBgp6cWyNLMlkwQbrRJP/U PGVCBT2nzTzGu3g/ANc3SRVutZ9pmBDxeq4VbrRgcOUYWWjteHYhA0QbKfnY5mTk DPS3t+fT7WJfRVvR80sPdSv60wi1lAf+Ii+44cD8FErVd0og8qw1GkVvCjcfsc/o MBePmAHruDdtu+dOuidpFZx7IZPVqZ/LysLdnu6MUhGzD93PnWEod0l0w2/MJAFF vsS2D/x4jw4W1QgDSzEYMsxoQdBv1/Kz6syrg+F1n0bNXzl8U1M= -----END CERTIFICATE-----Generated at Tue Sep 9 02:29:57 2025 by rpki-client