$ rpki-client -vvf repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft File: 7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft (raw, json) Hash identifier: 3lFD2R/eLGyFAOD0GuJUs+EvmTCPjLTjEnowdQDQTJs= Subject key identifier: A7:40:AC:D5:1F:20:13:C4:99:76:74:CC:41:13:1A:CA:3F:CE:71:A9 Authority key identifier: 7E:F8:9B:45:69:2D:93:E9:CA:15:DA:4C:F9:D4:39:30:06:32:EF:D4 Certificate issuer: /CN=7EF89B45692D93E9CA15DA4CF9D439300632EFD4 Certificate serial: 2FA69CAC59B74B7521CA0DC47655A6E3363CAAE0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft Manifest number: 021B Signing time: Wed 06 Aug 2025 22:00:02 +0000 Manifest this update: Wed 06 Aug 2025 21:55:02 +0000 Manifest next update: Sun 10 Aug 2025 01:13:02 +0000 Files and hashes: 1: 3130332e3138302e35382e302f32342d3234203d3e2039333431.roa (hash: FdloWvzwT5E7bV0h2MrBbwdyadkn1oI1JIyg7UwS1zQ=) 2: 3130332e3138302e35382e302f32332d3233203d3e2039333431.roa (hash: lr7nUWH/7raRlFDZhAD65ANTChYQYYLQIg/z8dK94J4=) 3: 3130332e3138302e35392e302f32342d3234203d3e2039333431.roa (hash: i2rSOVglupsSuL0ZoSXVd/tHmiF7pW8+dps3wslED5c=) 4: 7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl (hash: WUpLjcByYSUMEqBscCmJOBQewjrBDmpDOsHQubxUAko=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 01:13:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:a6:9c:ac:59:b7:4b:75:21:ca:0d:c4:76:55:a6:e3:36:3c:aa:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EF89B45692D93E9CA15DA4CF9D439300632EFD4 Validity Not Before: Aug 6 21:55:02 2025 GMT Not After : Aug 10 01:13:02 2025 GMT Subject: CN=A740ACD51F2013C4997674CC41131ACA3FCE71A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:66:b8:d8:f4:1a:08:52:78:58:19:6c:4a:87: 7a:fa:f9:f2:f3:24:6c:b4:0d:9c:23:a8:ba:11:07: ea:99:c9:8e:fa:5d:e0:f7:55:91:11:e1:cf:95:bc: 7e:db:10:8f:0c:4b:83:de:e1:6e:12:78:fc:62:99: b3:07:55:fc:3d:1f:0b:49:93:49:d4:89:79:c1:5d: dc:1f:a4:7a:53:2a:36:07:d0:e6:0a:12:81:bb:49: 7d:6b:ba:13:a1:20:fc:ce:39:77:d5:0b:5b:83:e0: 52:1a:5e:30:e3:e7:ec:60:4a:66:9e:b0:ee:47:a9: ba:0e:12:33:3a:0b:10:b9:01:cc:99:bc:81:73:15: a8:d4:11:15:47:8a:a7:a7:9c:83:c7:60:fe:ab:cb: 16:ae:49:e8:aa:db:d3:40:b6:64:4e:fb:bc:c8:c3: 64:f3:2a:ad:b3:d3:82:1e:41:ff:04:69:e5:96:30: 8f:05:d2:f6:26:44:36:7a:5e:f5:37:8f:78:a2:1a: 95:0a:52:cd:6c:03:23:32:3f:7b:9f:14:6c:f4:ed: 3d:7c:70:8d:7f:dc:8e:72:ac:c0:8a:6f:94:c3:22: 67:fa:f1:e8:b1:32:7d:95:54:a7:84:98:fc:fa:f8: 28:c4:2b:d7:f2:f4:38:01:25:2e:8e:1b:c9:7a:30: 1f:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:40:AC:D5:1F:20:13:C4:99:76:74:CC:41:13:1A:CA:3F:CE:71:A9 X509v3 Authority Key Identifier: keyid:7E:F8:9B:45:69:2D:93:E9:CA:15:DA:4C:F9:D4:39:30:06:32:EF:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:7b:96:b4:8d:f2:c2:c8:dc:2e:6c:5e:f2:39:f0:bf:55:55: cb:9e:76:ad:89:fd:cc:0d:bb:3b:14:2c:d2:94:01:ce:d1:53: 16:93:a8:27:18:39:31:3d:3d:19:63:ac:20:14:b8:88:55:37: 18:ce:cc:b2:b0:6e:5d:ec:48:d6:8c:d4:e4:26:f1:69:d6:f5: 00:87:2e:ce:6e:74:5a:73:26:8c:f3:1d:6d:f2:ec:48:0a:90: 17:09:dd:6b:2f:59:3a:1c:34:c1:8e:1b:20:b4:89:c0:72:80: d0:9c:95:63:c8:cd:61:e2:21:c2:02:ce:28:4e:7f:25:b1:33: 89:8e:db:44:ba:45:c4:4b:c0:42:40:56:7b:1a:1a:ec:ac:af: cf:51:d2:47:de:fb:33:53:f4:3e:62:3a:6c:2a:c7:90:18:bf: 76:e0:a3:15:1a:1a:79:dd:8e:0a:62:7c:3f:9b:25:9e:dc:1f: 88:21:1b:a4:25:01:dd:7d:d3:ea:81:89:21:ac:34:b0:fc:25: 4a:91:79:19:df:dd:62:91:d7:08:49:81:1e:3b:26:d4:98:06: 6f:66:de:82:29:36:dd:5b:28:09:dc:cc:2b:1c:1b:ea:3b:bf: 85:b1:fd:5e:8d:15:b4:92:7c:b9:18:2a:95:ea:9a:0e:f6:b7: 3a:c9:41:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL6acrFm3S3Uhyg3EdlWm4zY8quAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VGODlCNDU2OTJEOTNFOUNBMTVEQTRDRjlENDM5MzAw NjMyRUZENDAeFw0yNTA4MDYyMTU1MDJaFw0yNTA4MTAwMTEzMDJaMDMxMTAvBgNV BAMTKEE3NDBBQ0Q1MUYyMDEzQzQ5OTc2NzRDQzQxMTMxQUNBM0ZDRTcxQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtZrjY9BoIUnhYGWxKh3r6+fLz JGy0DZwjqLoRB+qZyY76XeD3VZER4c+VvH7bEI8MS4Pe4W4SePximbMHVfw9HwtJ k0nUiXnBXdwfpHpTKjYH0OYKEoG7SX1ruhOhIPzOOXfVC1uD4FIaXjDj5+xgSmae sO5HqboOEjM6CxC5AcyZvIFzFajUERVHiqennIPHYP6ryxauSeiq29NAtmRO+7zI w2TzKq2z04IeQf8EaeWWMI8F0vYmRDZ6XvU3j3iiGpUKUs1sAyMyP3ufFGz07T18 cI1/3I5yrMCKb5TDImf68eixMn2VVKeEmPz6+CjEK9fy9DgBJS6OG8l6MB8JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp0Cs1R8gE8SZdnTMQRMayj/OcakwHwYDVR0j BBgwFoAUfvibRWktk+nKFdpM+dQ5MAYy79QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NzFhODQ3ZC0yNTMxLTRkN2YtOTI0MS05Nzc3ODUwNjA1ZDYvMC83RUY4OUI0NTY5 MkQ5M0U5Q0ExNURBNENGOUQ0MzkzMDA2MzJFRkQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0VGODlCNDU2OTJEOTNFOUNBMTVEQTRDRjlENDM5MzAwNjMy RUZENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTcxYTg0N2QtMjUzMS00ZDdmLTky NDEtOTc3Nzg1MDYwNWQ2LzAvN0VGODlCNDU2OTJEOTNFOUNBMTVEQTRDRjlENDM5 MzAwNjMyRUZENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACR7lrSN8sLI3C5sXvI58L9VVcuedq2J/cwN uzsULNKUAc7RUxaTqCcYOTE9PRljrCAUuIhVNxjOzLKwbl3sSNaM1OQm8WnW9QCH Ls5udFpzJozzHW3y7EgKkBcJ3WsvWTocNMGOGyC0icBygNCclWPIzWHiIcICzihO fyWxM4mO20S6RcRLwEJAVnsaGuysr89R0kfe+zNT9D5iOmwqx5AYv3bgoxUaGnnd jgpifD+bJZ7cH4ghG6QlAd190+qBiSGsNLD8JUqReRnf3WKR1whJgR47JtSYBm9m 3oIpNt1bKAnczCscG+o7v4Wx/V6NFbSSfLkYKpXqmg72tzrJQb4= -----END CERTIFICATE-----Generated at Fri Aug 8 00:18:55 2025 by rpki-client