$ rpki-client -vvf repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/7ED69B0DB232E419E90D72766374EA03E6F18F73.mft File: 7ED69B0DB232E419E90D72766374EA03E6F18F73.mft (raw, json) Hash identifier: /IUVwEujqZ32jkO5ScYThATJpVx7e0QBHnEv5Cu5OIM= Subject key identifier: 97:7B:E7:03:F1:DF:58:27:AA:4C:E3:F9:F7:12:F1:F5:A6:64:1C:7C Authority key identifier: 7E:D6:9B:0D:B2:32:E4:19:E9:0D:72:76:63:74:EA:03:E6:F1:8F:73 Certificate issuer: /CN=7ED69B0DB232E419E90D72766374EA03E6F18F73 Certificate serial: 69D0D1EF7CC8BFE907AB660DA271DA4D4C6289EC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7ED69B0DB232E419E90D72766374EA03E6F18F73.cer Subject info access: rsync://repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/7ED69B0DB232E419E90D72766374EA03E6F18F73.mft Manifest number: D0 Signing time: Sat 09 Aug 2025 19:51:26 +0000 Manifest this update: Sat 09 Aug 2025 19:46:26 +0000 Manifest next update: Wed 13 Aug 2025 05:31:26 +0000 Files and hashes: 1: 7ED69B0DB232E419E90D72766374EA03E6F18F73.crl (hash: 7XsQB2dhl+II+4auetl5dbJwPtlTnsXwHOwQhg1fUI4=) 2: 3135372e32302e39342e302f32342d3234203d3e20313532343039.roa (hash: yeQYlb5D5MRjJOZy3icwpq+Xda5AxDKy2LKlKgiIVJg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/7ED69B0DB232E419E90D72766374EA03E6F18F73.crl rsync://repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/7ED69B0DB232E419E90D72766374EA03E6F18F73.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7ED69B0DB232E419E90D72766374EA03E6F18F73.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 13:41:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:d0:d1:ef:7c:c8:bf:e9:07:ab:66:0d:a2:71:da:4d:4c:62:89:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ED69B0DB232E419E90D72766374EA03E6F18F73 Validity Not Before: Aug 9 19:46:26 2025 GMT Not After : Aug 13 05:31:26 2025 GMT Subject: CN=977BE703F1DF5827AA4CE3F9F712F1F5A6641C7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:38:a4:fe:ba:7f:b4:c5:5c:62:e6:76:87:b2: 75:f2:2f:68:46:1b:e6:28:39:06:76:5a:e6:4c:47: ad:5d:90:e7:48:26:11:a3:a4:68:10:85:95:5b:9f: 8c:87:cf:2f:7a:c7:3d:fc:f5:c8:21:ab:b6:49:e7: 56:22:84:21:8c:81:e2:cc:2a:96:e7:fd:1b:2d:94: 0e:7d:4b:39:27:09:ce:4e:e1:5f:13:14:ef:cf:bb: 1f:8e:be:eb:88:96:a8:82:b6:5a:e7:72:3f:57:33: 94:44:b3:7c:04:fd:73:06:b0:99:bd:38:ce:62:3c: 48:6b:39:f5:56:9b:79:c3:25:49:78:49:45:70:37: c2:38:d0:5a:9b:78:5f:cd:29:66:88:0e:f5:70:63: 64:80:e2:ae:16:ee:96:ad:6c:69:e1:5d:9b:4e:85: 42:7b:da:95:af:9f:a6:7f:3e:4a:8b:e4:e1:78:ce: f4:7d:e6:4f:0b:bc:66:77:25:b0:4a:08:8c:9c:39: 58:79:8b:b4:3f:72:44:77:a5:05:72:e8:b3:2b:ea: 44:33:85:d9:7d:bd:d9:20:6a:fa:c9:ed:d5:c9:06: cb:b3:cb:fc:0e:70:8f:2c:42:31:f8:e9:6e:45:4a: e0:1f:d7:f8:a7:53:79:97:72:55:6a:d2:48:d7:97: e9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:7B:E7:03:F1:DF:58:27:AA:4C:E3:F9:F7:12:F1:F5:A6:64:1C:7C X509v3 Authority Key Identifier: keyid:7E:D6:9B:0D:B2:32:E4:19:E9:0D:72:76:63:74:EA:03:E6:F1:8F:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/7ED69B0DB232E419E90D72766374EA03E6F18F73.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7ED69B0DB232E419E90D72766374EA03E6F18F73.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/7ED69B0DB232E419E90D72766374EA03E6F18F73.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:49:46:e0:24:91:23:c7:e3:b7:0c:08:55:d4:0f:cf:46:78: 2b:04:fb:bc:6b:cc:fb:16:33:80:c4:56:90:7b:0b:58:b2:5c: 42:1d:96:5c:46:78:16:eb:99:c9:35:8b:7b:bd:98:3b:43:4a: 77:38:3e:05:6d:96:a2:ba:4c:ad:d2:73:09:71:58:fc:14:d7: 50:9c:ec:c9:ff:1e:6b:0e:3e:9d:ea:e3:a6:fd:76:fa:8e:dd: 9a:8d:e9:c7:a5:99:ce:bf:6e:14:a0:8c:70:77:87:2e:87:fd: f1:c2:00:47:d4:de:3d:fa:5d:0d:99:23:c6:40:2b:2f:49:70: 03:1e:35:1b:ed:6e:44:d0:77:e2:1b:fd:db:10:17:6e:55:33: 12:d0:e2:73:30:e1:58:e0:e4:9c:0c:77:7a:a4:32:fb:b8:85: 65:fb:cd:d6:ff:ed:e2:07:ef:bc:25:ae:26:0b:39:b9:e8:18: 4a:2d:d8:b7:eb:db:7a:1e:57:cb:3b:41:7c:92:18:54:eb:a3: 64:ec:ef:13:04:85:60:6d:f7:e2:df:9e:8c:25:39:03:09:05: 3d:c2:6b:94:8c:41:9b:11:1f:e2:cf:20:28:fc:3f:58:91:36: e5:f3:16:9d:21:81:64:2d:be:3a:c6:3b:e8:e6:ff:97:a7:ec: 55:c2:77:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUadDR73zIv+kHq2YNonHaTUxiiewwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VENjlCMERCMjMyRTQxOUU5MEQ3Mjc2NjM3NEVBMDNF NkYxOEY3MzAeFw0yNTA4MDkxOTQ2MjZaFw0yNTA4MTMwNTMxMjZaMDMxMTAvBgNV BAMTKDk3N0JFNzAzRjFERjU4MjdBQTRDRTNGOUY3MTJGMUY1QTY2NDFDN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYOKT+un+0xVxi5naHsnXyL2hG G+YoOQZ2WuZMR61dkOdIJhGjpGgQhZVbn4yHzy96xz389cghq7ZJ51YihCGMgeLM Kpbn/RstlA59SzknCc5O4V8TFO/Pux+OvuuIlqiCtlrncj9XM5REs3wE/XMGsJm9 OM5iPEhrOfVWm3nDJUl4SUVwN8I40FqbeF/NKWaIDvVwY2SA4q4W7patbGnhXZtO hUJ72pWvn6Z/PkqL5OF4zvR95k8LvGZ3JbBKCIycOVh5i7Q/ckR3pQVy6LMr6kQz hdl9vdkgavrJ7dXJBsuzy/wOcI8sQjH46W5FSuAf1/inU3mXclVq0kjXl+l5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUl3vnA/HfWCeqTOP59xLx9aZkHHwwHwYDVR0j BBgwFoAUftabDbIy5BnpDXJ2Y3TqA+bxj3MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NzJkMTc1Mi00ODUzLTRjNzQtYjU3NC05OTRkM2IxMjQwOTAvMC83RUQ2OUIwREIy MzJFNDE5RTkwRDcyNzY2Mzc0RUEwM0U2RjE4RjczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0VENjlCMERCMjMyRTQxOUU5MEQ3Mjc2NjM3NEVBMDNFNkYx OEY3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTcyZDE3NTItNDg1My00Yzc0LWI1 NzQtOTk0ZDNiMTI0MDkwLzAvN0VENjlCMERCMjMyRTQxOUU5MEQ3Mjc2NjM3NEVB MDNFNkYxOEY3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHlJRuAkkSPH47cMCFXUD89GeCsE+7xrzPsW M4DEVpB7C1iyXEIdllxGeBbrmck1i3u9mDtDSnc4PgVtlqK6TK3ScwlxWPwU11Cc 7Mn/HmsOPp3q46b9dvqO3ZqN6celmc6/bhSgjHB3hy6H/fHCAEfU3j36XQ2ZI8ZA Ky9JcAMeNRvtbkTQd+Ib/dsQF25VMxLQ4nMw4Vjg5JwMd3qkMvu4hWX7zdb/7eIH 77wlriYLObnoGEot2Lfr23oeV8s7QXySGFTro2Ts7xMEhWBt9+LfnowlOQMJBT3C a5SMQZsRH+LPICj8P1iRNuXzFp0hgWQtvjrGO+jm/5en7FXCd/U= -----END CERTIFICATE-----Generated at Sun Aug 10 05:37:44 2025 by rpki-client