$ rpki-client -vvf repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft File: E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft (raw, json) Hash identifier: LEXr6H2OIQLYNnc68EQKMMqERMQwBmnArbubPok7CUg= Subject key identifier: 5D:7D:44:92:83:36:E2:53:4B:AB:5D:C3:13:39:41:5A:68:C8:F2:AF Authority key identifier: E7:08:C9:77:B0:6A:CF:AE:8B:AF:C6:B2:19:E5:A4:58:51:36:C0:02 Certificate issuer: /CN=E708C977B06ACFAE8BAFC6B219E5A4585136C002 Certificate serial: 039EA1CA4F45CCE57E6521CF3805E8483D2BAF33 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E708C977B06ACFAE8BAFC6B219E5A4585136C002.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft Manifest number: B7 Signing time: Wed 06 Aug 2025 16:22:03 +0000 Manifest this update: Wed 06 Aug 2025 16:17:03 +0000 Manifest next update: Sat 09 Aug 2025 17:01:03 +0000 Files and hashes: 1: E708C977B06ACFAE8BAFC6B219E5A4585136C002.crl (hash: mUmM+WwjIIzRskYBCa3ZwnLdIdm9USp3PDXpdAol2QY=) 2: 323030313a6466333a653563303a3a2f34382d3438203d3e20313532383231.roa (hash: qxwzYie9RBuV/7W0nohtPX4U19ZjLN0Jy/HLrDrkfAc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.crl rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E708C977B06ACFAE8BAFC6B219E5A4585136C002.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 17:01:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:9e:a1:ca:4f:45:cc:e5:7e:65:21:cf:38:05:e8:48:3d:2b:af:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E708C977B06ACFAE8BAFC6B219E5A4585136C002 Validity Not Before: Aug 6 16:17:03 2025 GMT Not After : Aug 9 17:01:03 2025 GMT Subject: CN=5D7D44928336E2534BAB5DC31339415A68C8F2AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:1b:a9:80:1e:a8:71:a4:5c:a5:f6:16:49:fa: 39:1a:e7:1b:5e:17:7f:5c:f9:6f:b4:4c:1e:ba:58: cb:82:01:a5:4b:91:ec:dc:33:3f:77:b2:de:43:a5: 2e:2a:e4:6e:50:05:97:be:17:6c:27:80:15:20:7f: e8:b4:07:bd:a4:5a:d5:72:b6:e9:8a:42:d9:e1:be: a0:53:86:6d:0f:5f:c7:3a:b0:4a:ad:99:4b:65:c7: 1d:64:1f:cf:d4:d4:a4:3b:85:ba:d8:2c:6e:23:34: 15:55:f2:6e:f7:1c:ee:37:9e:28:2c:c5:bf:27:66: d5:7b:c6:9f:ee:e1:a9:67:fb:09:4d:3f:a3:9f:73: 8d:ff:32:fa:93:73:2b:a6:9a:72:7b:6a:76:f3:9c: 5c:48:dc:8a:bd:b5:cf:44:6b:7c:e1:20:e9:71:76: f8:53:13:e2:86:70:23:38:4f:d5:c9:8f:ca:87:a5: 27:e0:5c:2c:f0:0d:74:e9:89:ca:09:c6:3b:ae:18: 2f:cc:ee:66:c1:70:df:bb:a9:29:b6:73:0e:e3:0d: 0a:e5:0b:31:d4:52:f4:0e:78:89:63:e3:df:a5:45: 78:da:70:17:27:d4:81:ea:33:94:fd:4b:44:ef:c6: f0:56:6e:6d:b2:b4:a9:82:1b:3e:b7:72:d0:58:8e: cc:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:7D:44:92:83:36:E2:53:4B:AB:5D:C3:13:39:41:5A:68:C8:F2:AF X509v3 Authority Key Identifier: keyid:E7:08:C9:77:B0:6A:CF:AE:8B:AF:C6:B2:19:E5:A4:58:51:36:C0:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E708C977B06ACFAE8BAFC6B219E5A4585136C002.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0ec677fd-d569-4cc5-a563-9b0f248b1af1/1/E708C977B06ACFAE8BAFC6B219E5A4585136C002.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:3a:82:50:1d:96:75:68:66:d2:0b:71:99:d9:dc:53:7a:4e: 6b:74:e4:71:49:c7:ff:b4:d8:1b:50:b0:be:a8:8a:bc:99:03: 90:0c:29:e9:b9:7a:50:03:42:ad:58:58:72:a9:cd:53:5e:f5: 11:38:d3:b8:26:3d:16:46:87:00:ca:42:45:1f:d0:ef:b0:96: 4a:be:ac:e6:ba:84:62:90:80:f3:20:b3:a9:ee:f1:e0:47:ee: e1:03:fb:7c:04:2c:6e:a7:3f:f8:6b:eb:90:39:24:9e:1b:70: 83:13:db:85:02:06:2a:56:ac:27:0f:b9:4e:88:30:84:08:22: 94:a2:81:5e:ce:41:a6:cb:9d:0a:b6:a9:4f:16:3c:83:ce:67: bc:06:6b:8f:0a:7c:e2:2b:e0:a6:ce:56:f9:a3:c2:22:e1:f4: 64:86:a0:2e:42:bf:1e:04:d8:9d:1e:96:e3:96:9f:1a:ab:6e: 11:78:f1:40:fb:01:35:f9:54:a4:f7:b7:57:f1:c7:3b:1b:28: 87:cf:64:09:9c:ac:c2:20:f6:2d:9c:d0:c8:a5:ba:0a:ab:f9: 10:5a:06:35:d6:10:a7:02:db:64:c9:a6:0d:e7:50:9e:cf:b7: 13:8d:7a:18:ed:eb:eb:19:e7:14:c6:37:4a:12:ec:d3:e1:bd: ab:3d:ed:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA56hyk9FzOV+ZSHPOAXoSD0rrzMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTcwOEM5NzdCMDZBQ0ZBRThCQUZDNkIyMTlFNUE0NTg1 MTM2QzAwMjAeFw0yNTA4MDYxNjE3MDNaFw0yNTA4MDkxNzAxMDNaMDMxMTAvBgNV BAMTKDVEN0Q0NDkyODMzNkUyNTM0QkFCNURDMzEzMzk0MTVBNjhDOEYyQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIG6mAHqhxpFyl9hZJ+jka5xte F39c+W+0TB66WMuCAaVLkezcMz93st5DpS4q5G5QBZe+F2wngBUgf+i0B72kWtVy tumKQtnhvqBThm0PX8c6sEqtmUtlxx1kH8/U1KQ7hbrYLG4jNBVV8m73HO43nigs xb8nZtV7xp/u4aln+wlNP6Ofc43/MvqTcyummnJ7anbznFxI3Iq9tc9Ea3zhIOlx dvhTE+KGcCM4T9XJj8qHpSfgXCzwDXTpicoJxjuuGC/M7mbBcN+7qSm2cw7jDQrl CzHUUvQOeIlj49+lRXjacBcn1IHqM5T9S0TvxvBWbm2ytKmCGz63ctBYjsyLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXX1EkoM24lNLq13DEzlBWmjI8q8wHwYDVR0j BBgwFoAU5wjJd7Bqz66Lr8ayGeWkWFE2wAIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZWM2NzdmZC1kNTY5LTRjYzUtYTU2My05YjBmMjQ4YjFhZjEvMS9FNzA4Qzk3N0Iw NkFDRkFFOEJBRkM2QjIxOUU1QTQ1ODUxMzZDMDAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTcwOEM5NzdCMDZBQ0ZBRThCQUZDNkIyMTlFNUE0NTg1MTM2 QzAwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGVjNjc3ZmQtZDU2OS00Y2M1LWE1 NjMtOWIwZjI0OGIxYWYxLzEvRTcwOEM5NzdCMDZBQ0ZBRThCQUZDNkIyMTlFNUE0 NTg1MTM2QzAwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACU6glAdlnVoZtILcZnZ3FN6Tmt05HFJx/+0 2BtQsL6oiryZA5AMKem5elADQq1YWHKpzVNe9RE407gmPRZGhwDKQkUf0O+wlkq+ rOa6hGKQgPMgs6nu8eBH7uED+3wELG6nP/hr65A5JJ4bcIMT24UCBipWrCcPuU6I MIQIIpSigV7OQabLnQq2qU8WPIPOZ7wGa48KfOIr4KbOVvmjwiLh9GSGoC5Cvx4E 2J0eluOWnxqrbhF48UD7ATX5VKT3t1fxxzsbKIfPZAmcrMIg9i2c0Milugqr+RBa BjXWEKcC22TJpg3nUJ7PtxONehjt6+sZ5xTGN0oS7NPhvas97aU= -----END CERTIFICATE-----Generated at Thu Aug 7 00:27:09 2025 by rpki-client