$ rpki-client -vvf repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft File: A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft (raw, json) Hash identifier: xfw12X6hNr5wS6mNS53+KdvARwFoemuqe3ceXHFDmB4= Subject key identifier: 65:91:56:70:5A:45:D5:A9:55:73:7E:5E:37:FD:FF:B3:93:2D:3D:39 Authority key identifier: A7:DC:E7:64:7F:A7:75:A7:E9:DF:44:EA:EF:AC:52:11:8F:36:69:F8 Certificate issuer: /CN=A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8 Certificate serial: 51B03FD88A6153653196E7C4D6EEE85501FDF50A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft Manifest number: 01CD Signing time: Sat 06 Sep 2025 10:11:25 +0000 Manifest this update: Sat 06 Sep 2025 10:06:25 +0000 Manifest next update: Tue 09 Sep 2025 20:35:25 +0000 Files and hashes: 1: A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.crl (hash: x1f761UHm8MwClEfldcCsaKxGDA6wf7K+eiTjmyEZyM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.crl rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 20:35:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:b0:3f:d8:8a:61:53:65:31:96:e7:c4:d6:ee:e8:55:01:fd:f5:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8 Validity Not Before: Sep 6 10:06:25 2025 GMT Not After : Sep 9 20:35:25 2025 GMT Subject: CN=659156705A45D5A955737E5E37FDFFB3932D3D39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:99:e7:27:f5:55:2f:3b:16:25:ee:b7:bb:28: d8:40:d7:d9:6e:d9:27:6e:08:51:95:11:ce:32:65: 06:f7:f9:02:d5:0c:0d:cd:0a:2a:6a:72:75:43:4a: 30:dd:47:3d:fe:04:84:b6:c9:10:63:33:2a:f7:ae: a3:d3:9d:20:77:70:2d:1a:60:60:fe:66:47:81:7c: 9f:d8:4a:e1:16:c7:85:50:67:39:a3:d2:5c:ba:1f: 91:45:8d:2f:19:94:ee:94:db:53:1e:63:fd:a5:e8: 02:f9:fd:5c:c5:d3:74:0b:40:a2:23:84:4b:31:53: c7:9a:fe:2b:5b:aa:78:96:14:20:06:b6:73:09:6e: 7d:15:1c:15:c8:6b:dc:29:56:0c:dd:60:a0:06:1b: 34:47:ec:af:8e:79:df:8a:31:25:c0:32:13:68:97: 2d:ad:df:13:32:7e:3f:36:88:d3:b4:d1:c5:75:65: f9:a5:fe:6f:ca:86:57:08:ce:e0:93:3d:43:c6:1d: 84:34:96:c3:8a:3e:98:0c:e2:6b:6d:24:3d:cc:8a: 5f:ef:bf:60:84:17:55:fa:58:16:8d:28:fc:a1:8d: 0e:d5:88:ba:b7:d4:dd:5c:4e:d2:ed:d9:3e:cf:4b: 30:85:81:91:a7:05:07:6e:e9:32:39:65:bc:7d:93: ee:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:91:56:70:5A:45:D5:A9:55:73:7E:5E:37:FD:FF:B3:93:2D:3D:39 X509v3 Authority Key Identifier: keyid:A7:DC:E7:64:7F:A7:75:A7:E9:DF:44:EA:EF:AC:52:11:8F:36:69:F8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d3f30e27-b95e-4d75-968d-538fb7918829/0/A7DCE7647FA775A7E9DF44EAEFAC52118F3669F8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:61:36:f7:5e:f1:3a:66:2d:38:77:71:6e:8a:6e:39:7d:d7: ea:22:80:7d:e8:b1:f3:14:94:42:db:92:06:cf:da:01:92:5b: e5:28:58:fb:a4:ab:9d:07:ee:46:92:8b:43:c7:33:0a:12:b8: 51:9a:34:46:7c:a8:be:4a:9a:9d:2c:84:05:61:f2:1c:c7:5d: e0:28:c5:9e:e4:e9:c6:d8:81:a6:b6:a7:f0:db:bd:25:3f:a5: 76:d4:a5:52:d6:4e:63:04:2b:5e:7e:2c:af:1e:69:ed:34:d5: 32:10:f5:47:88:02:7f:5a:c9:15:29:05:0a:06:00:ee:13:4d: b2:68:16:dc:9b:68:f7:6c:07:18:83:95:54:d9:b3:ca:b0:b3: a7:c8:2d:37:8a:0e:bc:83:5f:a6:61:12:71:72:77:2c:26:c7: 44:72:a3:a2:b5:9b:6f:19:0e:14:9d:88:a6:18:d1:3f:3d:f3: 78:33:19:a4:da:ce:d1:26:39:60:9b:38:12:9c:09:35:b8:46: cc:59:66:14:43:fd:ce:12:6d:57:89:f6:3c:40:34:a0:83:89: 83:82:97:3e:93:56:54:9a:6e:6d:8c:f0:92:08:39:ee:71:2d: 15:8b:ec:eb:56:47:0a:e6:af:a6:64:22:a6:4f:98:bd:01:57: bb:89:1f:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUbA/2IphU2UxlufE1u7oVQH99QowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdEQ0U3NjQ3RkE3NzVBN0U5REY0NEVBRUZBQzUyMTE4 RjM2NjlGODAeFw0yNTA5MDYxMDA2MjVaFw0yNTA5MDkyMDM1MjVaMDMxMTAvBgNV BAMTKDY1OTE1NjcwNUE0NUQ1QTk1NTczN0U1RTM3RkRGRkIzOTMyRDNEMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcmecn9VUvOxYl7re7KNhA19lu 2SduCFGVEc4yZQb3+QLVDA3NCipqcnVDSjDdRz3+BIS2yRBjMyr3rqPTnSB3cC0a YGD+ZkeBfJ/YSuEWx4VQZzmj0ly6H5FFjS8ZlO6U21MeY/2l6AL5/VzF03QLQKIj hEsxU8ea/itbqniWFCAGtnMJbn0VHBXIa9wpVgzdYKAGGzRH7K+Oed+KMSXAMhNo ly2t3xMyfj82iNO00cV1Zfml/m/KhlcIzuCTPUPGHYQ0lsOKPpgM4mttJD3Mil/v v2CEF1X6WBaNKPyhjQ7ViLq31N1cTtLt2T7PSzCFgZGnBQdu6TI5Zbx9k+4NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZZFWcFpF1alVc35eN/3/s5MtPTkwHwYDVR0j BBgwFoAUp9znZH+ndafp30Tq76xSEY82afgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k M2YzMGUyNy1iOTVlLTRkNzUtOTY4ZC01MzhmYjc5MTg4MjkvMC9BN0RDRTc2NDdG QTc3NUE3RTlERjQ0RUFFRkFDNTIxMThGMzY2OUY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTdEQ0U3NjQ3RkE3NzVBN0U5REY0NEVBRUZBQzUyMTE4RjM2 NjlGOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDNmMzBlMjctYjk1ZS00ZDc1LTk2 OGQtNTM4ZmI3OTE4ODI5LzAvQTdEQ0U3NjQ3RkE3NzVBN0U5REY0NEVBRUZBQzUy MTE4RjM2NjlGOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMBhNvde8TpmLTh3cW6Kbjl91+oigH3osfMU lELbkgbP2gGSW+UoWPukq50H7kaSi0PHMwoSuFGaNEZ8qL5Kmp0shAVh8hzHXeAo xZ7k6cbYgaa2p/DbvSU/pXbUpVLWTmMEK15+LK8eae001TIQ9UeIAn9ayRUpBQoG AO4TTbJoFtybaPdsBxiDlVTZs8qws6fILTeKDryDX6ZhEnFydywmx0Ryo6K1m28Z DhSdiKYY0T8983gzGaTaztEmOWCbOBKcCTW4RsxZZhRD/c4SbVeJ9jxANKCDiYOC lz6TVlSabm2M8JIIOe5xLRWL7OtWRwrmr6ZkIqZPmL0BV7uJH4M= -----END CERTIFICATE-----Generated at Sun Sep 7 15:13:17 2025 by rpki-client