$ rpki-client -vvf repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.mft File: 7136382578BA0ACBDD5EEAC687FF3234D04614B1.mft (raw, json) Hash identifier: 7wpA1XOLhUy7MTB4wgBg0aUlHZp2wGOG02fDazfmlGo= Subject key identifier: A9:B0:61:D8:BC:E0:7F:B3:35:BA:03:E4:D2:91:55:B6:4A:BA:C8:8F Authority key identifier: 71:36:38:25:78:BA:0A:CB:DD:5E:EA:C6:87:FF:32:34:D0:46:14:B1 Certificate issuer: /CN=7136382578BA0ACBDD5EEAC687FF3234D04614B1 Certificate serial: 0DD029004F047789A72DC9AAB8A049AD7E1F4DBE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7136382578BA0ACBDD5EEAC687FF3234D04614B1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.mft Manifest number: 0375 Signing time: Thu 07 Aug 2025 10:12:05 +0000 Manifest this update: Thu 07 Aug 2025 10:07:05 +0000 Manifest next update: Sun 10 Aug 2025 14:13:05 +0000 Files and hashes: 1: 3130332e3136392e3230372e302f32342d3234203d3e203435333235.roa (hash: af3wLczo6S1Ff2cHv7BLC7ZKbE+GaXVBqYVonmsEaYA=) 2: 7136382578BA0ACBDD5EEAC687FF3234D04614B1.crl (hash: coJ+ZmIfPdbL+7oIObEz+KSPCsV1fITBBC1jysfPAxA=) 3: 3130332e3136392e3230362e302f32342d3234203d3e203435333235.roa (hash: /3CGvY//H1css9zYuxxW/Bez/32hDDiVLYL7tvwgxws=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.crl rsync://repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7136382578BA0ACBDD5EEAC687FF3234D04614B1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 14:13:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:d0:29:00:4f:04:77:89:a7:2d:c9:aa:b8:a0:49:ad:7e:1f:4d:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7136382578BA0ACBDD5EEAC687FF3234D04614B1 Validity Not Before: Aug 7 10:07:05 2025 GMT Not After : Aug 10 14:13:05 2025 GMT Subject: CN=A9B061D8BCE07FB335BA03E4D29155B64ABAC88F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:82:58:01:56:56:a0:8c:39:95:02:47:83:1a: 1d:6f:0e:4d:89:fb:d4:db:0b:6e:67:4b:37:49:be: b3:0f:4f:fc:89:9a:eb:b3:ee:f5:80:f5:a2:f0:dd: 66:fe:62:31:a6:c5:6c:57:cf:a9:ce:85:fe:53:f6: 66:2b:89:9c:5e:28:dd:7b:e7:30:47:d5:e8:c7:1f: 4f:19:b9:bf:5d:ee:61:ec:b6:1b:e6:d9:6f:6f:a4: ef:82:8a:ee:36:76:ee:81:62:3e:e1:a3:77:7a:17: bb:d9:3f:cd:d3:ce:56:63:a4:00:46:a6:2d:09:df: 7d:45:c0:ad:c3:f0:73:35:02:b6:d4:d7:2b:86:47: 85:5d:69:b5:bf:7e:5c:f4:c2:c5:2a:46:cc:68:c4: 55:68:5c:1b:0c:15:71:37:e2:d1:87:6c:4f:72:d1: ee:74:28:b4:aa:81:76:a1:e9:b8:83:67:31:91:b0: 10:a8:bf:11:3e:20:3e:b1:ff:6f:01:17:ea:a5:92: 12:6f:35:82:2a:6e:0e:fe:12:15:a2:30:29:5d:74: ac:7a:23:99:9c:af:bc:5c:eb:89:68:17:b1:67:e3: ee:3d:3b:34:34:d4:43:3a:78:80:61:c5:1a:cc:2a: 8e:90:aa:bc:2c:e9:6b:21:c4:b7:a5:fc:8d:57:21: b1:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:B0:61:D8:BC:E0:7F:B3:35:BA:03:E4:D2:91:55:B6:4A:BA:C8:8F X509v3 Authority Key Identifier: keyid:71:36:38:25:78:BA:0A:CB:DD:5E:EA:C6:87:FF:32:34:D0:46:14:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7136382578BA0ACBDD5EEAC687FF3234D04614B1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:8c:de:28:b9:fd:10:de:d8:ab:b5:35:38:db:af:8a:7a:33: d1:18:a9:99:87:e6:23:62:d9:25:a4:74:ec:5b:87:b6:c2:19: a4:f7:04:a3:26:cf:fe:c3:a2:3d:43:38:57:6e:e2:79:93:9b: 4a:0a:be:df:fc:29:f4:10:51:fa:7e:d0:79:53:d2:ba:20:fb: 83:95:9c:18:71:f7:b7:f6:ef:45:5c:09:4c:2f:06:d5:89:46: 7d:dc:a4:d7:8b:d0:b1:60:f4:e6:0e:c8:a2:4e:cf:e7:95:61: 81:2d:6e:e5:a6:b8:03:80:f4:70:ae:a4:88:52:b6:6e:0f:f3: fc:4c:67:fd:95:c8:f7:c1:32:52:37:90:38:5e:7b:c7:88:dd: dc:8d:86:f7:0d:58:06:7a:9e:2f:de:46:fa:ac:e8:d9:f2:9b: 73:8e:c3:76:13:9c:28:f3:2a:04:7a:a5:67:73:33:62:a5:e1: 5f:6c:5a:5a:b7:d7:20:d7:79:43:71:0a:7f:f6:93:4e:3e:2e: 81:d3:57:d9:11:ff:34:f8:f5:81:e5:dd:bc:a5:59:f4:f1:ab: b6:fb:2a:f9:88:a2:02:1f:f6:08:70:8c:4a:db:4d:8f:84:c8: 10:ff:81:88:d9:36:59:7d:f4:1f:2c:fd:58:05:05:e5:54:5a: b6:35:a8:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDdApAE8Ed4mnLcmquKBJrX4fTb4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzEzNjM4MjU3OEJBMEFDQkRENUVFQUM2ODdGRjMyMzRE MDQ2MTRCMTAeFw0yNTA4MDcxMDA3MDVaFw0yNTA4MTAxNDEzMDVaMDMxMTAvBgNV BAMTKEE5QjA2MUQ4QkNFMDdGQjMzNUJBMDNFNEQyOTE1NUI2NEFCQUM4OEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7glgBVlagjDmVAkeDGh1vDk2J +9TbC25nSzdJvrMPT/yJmuuz7vWA9aLw3Wb+YjGmxWxXz6nOhf5T9mYriZxeKN17 5zBH1ejHH08Zub9d7mHsthvm2W9vpO+Ciu42du6BYj7ho3d6F7vZP83TzlZjpABG pi0J331FwK3D8HM1ArbU1yuGR4VdabW/flz0wsUqRsxoxFVoXBsMFXE34tGHbE9y 0e50KLSqgXah6biDZzGRsBCovxE+ID6x/28BF+qlkhJvNYIqbg7+EhWiMClddKx6 I5mcr7xc64loF7Fn4+49OzQ01EM6eIBhxRrMKo6Qqrws6WshxLel/I1XIbEhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqbBh2Lzgf7M1ugPk0pFVtkq6yI8wHwYDVR0j BBgwFoAUcTY4JXi6CsvdXurGh/8yNNBGFLEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2Y3Mzc4MC0wOTI1LTRiNGEtYmNhNy1hMWU3ZWQzZmY0MmEvMC83MTM2MzgyNTc4 QkEwQUNCREQ1RUVBQzY4N0ZGMzIzNEQwNDYxNEIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzEzNjM4MjU3OEJBMEFDQkRENUVFQUM2ODdGRjMyMzREMDQ2 MTRCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTdmNzM3ODAtMDkyNS00YjRhLWJj YTctYTFlN2VkM2ZmNDJhLzAvNzEzNjM4MjU3OEJBMEFDQkRENUVFQUM2ODdGRjMy MzREMDQ2MTRCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKOM3ii5/RDe2Ku1NTjbr4p6M9EYqZmH5iNi 2SWkdOxbh7bCGaT3BKMmz/7Doj1DOFdu4nmTm0oKvt/8KfQQUfp+0HlT0rog+4OV nBhx97f270VcCUwvBtWJRn3cpNeL0LFg9OYOyKJOz+eVYYEtbuWmuAOA9HCupIhS tm4P8/xMZ/2VyPfBMlI3kDhee8eI3dyNhvcNWAZ6ni/eRvqs6Nnym3OOw3YTnCjz KgR6pWdzM2Kl4V9sWlq31yDXeUNxCn/2k04+LoHTV9kR/zT49YHl3bylWfTxq7b7 KvmIogIf9ghwjErbTY+EyBD/gYjZNll99B8s/VgFBeVUWrY1qEg= -----END CERTIFICATE-----Generated at Thu Aug 7 23:56:08 2025 by rpki-client