$ rpki-client -vvf repo-rpki.idnic.net/repo/c74bccd5-252c-4947-871b-156dfffe7717/0/A715B65580762207B94EC6527AFBEDD69970A868.mft File: A715B65580762207B94EC6527AFBEDD69970A868.mft (raw, json) Hash identifier: zoK1dDCR6TOiAkuL5uP3DbJ7H9QO3HyhwO6KH/nRSQs= Subject key identifier: 7C:D6:0C:00:C2:D8:58:E5:03:70:14:25:A5:28:09:D6:09:1A:2D:89 Authority key identifier: A7:15:B6:55:80:76:22:07:B9:4E:C6:52:7A:FB:ED:D6:99:70:A8:68 Certificate issuer: /CN=A715B65580762207B94EC6527AFBEDD69970A868 Certificate serial: 7EF051E84A66D9847DB4CA4E995062DF8480A6D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A715B65580762207B94EC6527AFBEDD69970A868.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c74bccd5-252c-4947-871b-156dfffe7717/0/A715B65580762207B94EC6527AFBEDD69970A868.mft Manifest number: 0505 Signing time: Sun 07 Sep 2025 08:12:17 +0000 Manifest this update: Sun 07 Sep 2025 08:07:17 +0000 Manifest next update: Wed 10 Sep 2025 19:44:17 +0000 Files and hashes: 1: 3130332e3134302e3130342e302f32332d3234203d3e20313338383735.roa (hash: 6s+35i1PbBgpAAj3R2PbueLOCnOhVKs2T7rEnDWSY6U=) 2: A715B65580762207B94EC6527AFBEDD69970A868.crl (hash: ohhE6kTtJ0IkQBWr1Ecch5kwKAZFySwZlP8frN6EMb4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c74bccd5-252c-4947-871b-156dfffe7717/0/A715B65580762207B94EC6527AFBEDD69970A868.crl rsync://repo-rpki.idnic.net/repo/c74bccd5-252c-4947-871b-156dfffe7717/0/A715B65580762207B94EC6527AFBEDD69970A868.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A715B65580762207B94EC6527AFBEDD69970A868.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:f0:51:e8:4a:66:d9:84:7d:b4:ca:4e:99:50:62:df:84:80:a6:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A715B65580762207B94EC6527AFBEDD69970A868 Validity Not Before: Sep 7 08:07:17 2025 GMT Not After : Sep 10 19:44:17 2025 GMT Subject: CN=7CD60C00C2D858E503701425A52809D6091A2D89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:9e:d4:2e:52:ef:dc:b9:a3:c4:95:f0:c3:24: 32:a4:3b:9f:9b:94:90:c6:d9:71:c8:60:a6:d6:28: d1:2c:7a:75:af:9c:91:1c:f6:e2:ac:f7:4c:76:e1: 48:c8:ef:8e:2e:b7:09:bf:65:7c:90:3a:20:c6:cb: 42:57:10:03:27:82:cc:18:37:30:a6:c4:1d:7e:b9: 07:8f:51:fb:42:bb:23:a9:15:9d:d6:cf:b7:c4:46: 85:b8:34:39:a5:98:b1:5f:8c:74:17:61:79:1b:93: f9:e0:77:c8:88:c3:8b:f1:34:62:03:e5:cf:f3:27: f8:59:5e:6d:09:9d:6e:3b:44:44:84:7f:e3:b7:36: e5:75:6b:dd:20:bd:92:be:eb:8e:a7:1f:4f:96:3f: 2e:2f:2e:95:2a:97:97:82:36:a9:b8:b6:9b:d7:da: 0a:0f:5b:74:15:ff:f2:f4:fd:19:58:4d:ab:f8:85: 51:62:82:64:f3:17:39:0d:a4:ef:9a:a0:da:f0:ac: c6:d1:a6:eb:76:07:5d:2f:7e:ad:9f:0f:68:6d:9a: 01:08:df:69:6a:a1:83:da:d6:41:3e:87:cd:c6:a1: bc:8b:8a:8f:af:6e:6e:ab:10:e9:6e:f3:6e:76:d0: fc:20:d2:62:85:f3:57:2a:fc:39:15:0c:5c:ff:f4: 6b:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:D6:0C:00:C2:D8:58:E5:03:70:14:25:A5:28:09:D6:09:1A:2D:89 X509v3 Authority Key Identifier: keyid:A7:15:B6:55:80:76:22:07:B9:4E:C6:52:7A:FB:ED:D6:99:70:A8:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c74bccd5-252c-4947-871b-156dfffe7717/0/A715B65580762207B94EC6527AFBEDD69970A868.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A715B65580762207B94EC6527AFBEDD69970A868.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c74bccd5-252c-4947-871b-156dfffe7717/0/A715B65580762207B94EC6527AFBEDD69970A868.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:bb:48:a1:23:48:53:5e:09:b1:54:db:62:2c:8a:21:12:48: cb:4a:7e:8b:c5:f2:c8:11:99:61:db:be:56:3d:dd:2b:57:b6: ea:a6:0b:b6:ba:ae:7c:62:93:18:be:96:bd:25:ea:f4:bb:dc: ad:42:e8:a3:10:ba:bf:13:ed:ba:2f:99:11:8a:4a:5d:0e:5e: 0a:19:35:3c:eb:24:88:1d:c5:b8:ea:54:73:e4:ca:42:49:d9: 31:53:11:19:75:c5:35:76:d3:a0:8b:bc:8d:3a:8a:95:40:97: 94:a9:47:84:43:43:cf:f7:30:64:2e:d8:09:a4:6c:19:bd:5c: 2c:0b:bb:2f:06:ed:88:6e:57:2d:d4:26:3b:ec:75:f7:6d:fc: 25:1c:89:22:2a:ea:3e:12:e7:1e:1e:9c:55:77:4d:2b:2e:cb: d7:99:cf:41:6e:87:5e:fe:8c:20:a3:51:ca:bb:14:47:2b:a9: 29:aa:6a:f2:58:43:98:25:7f:e5:d7:a0:a2:c7:e3:95:aa:1e: 1e:23:4c:b8:09:8f:73:95:01:76:23:ba:e8:f1:a5:fb:c4:d8: 70:cf:4d:3e:08:b2:72:94:a1:ab:98:cd:bd:ec:a4:d0:e7:78: 6a:80:e0:de:79:7d:6e:f3:c3:5e:6d:1f:ab:c5:94:05:63:b0: 48:d3:9e:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfvBR6Epm2YR9tMpOmVBi34SAptcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcxNUI2NTU4MDc2MjIwN0I5NEVDNjUyN0FGQkVERDY5 OTcwQTg2ODAeFw0yNTA5MDcwODA3MTdaFw0yNTA5MTAxOTQ0MTdaMDMxMTAvBgNV BAMTKDdDRDYwQzAwQzJEODU4RTUwMzcwMTQyNUE1MjgwOUQ2MDkxQTJEODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCntQuUu/cuaPElfDDJDKkO5+b lJDG2XHIYKbWKNEsenWvnJEc9uKs90x24UjI744utwm/ZXyQOiDGy0JXEAMngswY NzCmxB1+uQePUftCuyOpFZ3Wz7fERoW4NDmlmLFfjHQXYXkbk/ngd8iIw4vxNGID 5c/zJ/hZXm0JnW47RESEf+O3NuV1a90gvZK+646nH0+WPy4vLpUql5eCNqm4tpvX 2goPW3QV//L0/RlYTav4hVFigmTzFzkNpO+aoNrwrMbRput2B10vfq2fD2htmgEI 32lqoYPa1kE+h83GobyLio+vbm6rEOlu82520Pwg0mKF81cq/DkVDFz/9Gu5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfNYMAMLYWOUDcBQlpSgJ1gkaLYkwHwYDVR0j BBgwFoAUpxW2VYB2Ige5TsZSevvt1plwqGgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NzRiY2NkNS0yNTJjLTQ5NDctODcxYi0xNTZkZmZmZTc3MTcvMC9BNzE1QjY1NTgw NzYyMjA3Qjk0RUM2NTI3QUZCRURENjk5NzBBODY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTcxNUI2NTU4MDc2MjIwN0I5NEVDNjUyN0FGQkVERDY5OTcw QTg2OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzc0YmNjZDUtMjUyYy00OTQ3LTg3 MWItMTU2ZGZmZmU3NzE3LzAvQTcxNUI2NTU4MDc2MjIwN0I5NEVDNjUyN0FGQkVE RDY5OTcwQTg2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACe7SKEjSFNeCbFU22IsiiESSMtKfovF8sgR mWHbvlY93StXtuqmC7a6rnxikxi+lr0l6vS73K1C6KMQur8T7bovmRGKSl0OXgoZ NTzrJIgdxbjqVHPkykJJ2TFTERl1xTV206CLvI06ipVAl5SpR4RDQ8/3MGQu2Amk bBm9XCwLuy8G7YhuVy3UJjvsdfdt/CUciSIq6j4S5x4enFV3TSsuy9eZz0Fuh17+ jCCjUcq7FEcrqSmqavJYQ5glf+XXoKLH45WqHh4jTLgJj3OVAXYjuujxpfvE2HDP TT4IsnKUoauYzb3spNDneGqA4N55fW7zw15tH6vFlAVjsEjTnnc= -----END CERTIFICATE-----Generated at Sun Sep 7 15:34:13 2025 by rpki-client