$ rpki-client -vvf repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft File: C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft (raw, json) Hash identifier: OSnm9rDFZ/FCWShZMnC/sTfAMhEcFrxTsKPbF5Tk7dU= Subject key identifier: 29:4E:7A:C5:EF:54:B1:5D:56:B4:49:2E:1F:90:C2:C9:3D:DB:E2:21 Authority key identifier: C7:83:94:27:F4:4C:8E:D8:9E:6C:27:20:F1:9C:CF:27:92:70:FD:2A Certificate issuer: /CN=C7839427F44C8ED89E6C2720F19CCF279270FD2A Certificate serial: 722A56C25B11039AFFD9E30E9BAF5EEA5065FEB6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C7839427F44C8ED89E6C2720F19CCF279270FD2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft Manifest number: 8D Signing time: Wed 06 Aug 2025 07:31:06 +0000 Manifest this update: Wed 06 Aug 2025 07:26:06 +0000 Manifest next update: Sat 09 Aug 2025 14:24:06 +0000 Files and hashes: 1: 3135372e32302e3233382e302f32332d3233203d3e20313532343239.roa (hash: 47XUtIsbPhvEMu3eZ7qPRDeVpw2v8OOWFwMXf8PZG1I=) 2: 3135372e32302e3233382e302f32342d3234203d3e20313532343239.roa (hash: YUfWeO4Zp71JGwLmW0ExOlIuGUiX5R5EB5q+WHM4Ews=) 3: 3135372e32302e3233392e302f32342d3234203d3e20313532343239.roa (hash: +vgEkqNs4IZ18TGSuIZbEqxX1A4966mLzeBSJvGF+d0=) 4: C7839427F44C8ED89E6C2720F19CCF279270FD2A.crl (hash: oOJGUT4NaqoTWKWzNccm/HH5j1TVIsjTrc4BKDRKUz4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.crl rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C7839427F44C8ED89E6C2720F19CCF279270FD2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 09:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:2a:56:c2:5b:11:03:9a:ff:d9:e3:0e:9b:af:5e:ea:50:65:fe:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7839427F44C8ED89E6C2720F19CCF279270FD2A Validity Not Before: Aug 6 07:26:06 2025 GMT Not After : Aug 9 14:24:06 2025 GMT Subject: CN=294E7AC5EF54B15D56B4492E1F90C2C93DDBE221 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:d0:b3:24:16:6e:0c:36:b1:34:f7:ca:25:83: ce:7b:fc:bf:f1:29:dd:b2:58:30:c4:c2:36:48:55: bf:ce:f3:fd:9f:b0:2e:e4:dc:30:2e:09:4a:90:91: 0f:93:68:84:b2:76:9c:c6:78:c5:35:f4:cc:f0:a5: a4:23:e8:dd:c2:8e:32:d0:e9:7d:4f:e3:1b:84:79: 4b:b8:08:66:95:85:20:68:e9:5a:78:70:f8:59:68: 6f:fb:d8:f1:df:3e:64:d5:d1:79:82:91:0f:09:52: ba:6f:98:5c:d1:3a:39:d1:cf:3d:05:9e:b7:6c:2d: cc:59:05:dd:6d:04:d3:4f:20:ac:c9:40:ca:5b:13: ed:19:d9:72:91:12:98:7d:4b:f8:6c:42:5a:ec:2f: d4:15:50:d6:ab:38:58:6c:4d:e6:d9:fe:c4:3f:54: 35:a7:1b:df:0f:e7:51:9d:47:4d:5a:6c:19:1d:94: 5e:eb:e1:fc:ce:55:a0:7b:ec:5e:63:fb:4c:b8:85: 9c:86:12:f5:1b:36:1b:81:62:1f:04:da:f9:70:6c: 8f:39:3f:ac:d7:8d:49:b5:a5:4f:8f:88:3b:3e:65: 2b:7a:00:34:0d:98:9a:44:7b:50:7f:cd:d9:8f:a4: 2f:b5:c3:d6:de:34:c5:e7:b8:4a:96:e7:94:03:9f: fb:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:4E:7A:C5:EF:54:B1:5D:56:B4:49:2E:1F:90:C2:C9:3D:DB:E2:21 X509v3 Authority Key Identifier: keyid:C7:83:94:27:F4:4C:8E:D8:9E:6C:27:20:F1:9C:CF:27:92:70:FD:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C7839427F44C8ED89E6C2720F19CCF279270FD2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:13:5d:ba:a0:5e:6d:4f:d4:5f:2f:2e:69:ca:21:96:5c:d1: 21:8c:d9:0c:26:47:73:01:f1:25:14:08:bd:2a:d4:06:ad:b8: b2:96:0c:da:f0:2f:c8:16:70:b3:9e:bc:ac:1b:82:69:17:41: 49:c0:e3:9a:c0:b0:c4:fa:1e:c1:2c:0a:1c:83:e1:97:8b:05: 82:6b:c8:18:cf:9a:87:09:94:b4:1e:b4:3d:a0:d4:2e:49:ed: b7:91:d1:1c:4a:24:5f:01:e5:57:cd:42:a1:64:33:c3:d6:c6: a2:5b:b5:d8:4b:fc:89:3e:79:7c:37:94:cb:90:55:ba:21:7c: c3:67:27:2b:97:f0:e9:05:56:46:77:37:31:f2:4b:9b:60:e3: 2e:c0:c1:66:a7:f6:33:86:58:92:c7:38:c9:eb:45:a0:87:d0: 8d:6b:9d:35:96:43:07:02:31:8f:7e:6d:07:e2:17:c0:f4:b5: 8f:44:01:5d:24:98:5a:76:ec:23:9e:22:bd:e7:2c:9e:5d:27: 0c:8d:cf:e0:66:1a:c1:2f:bd:55:98:1a:90:c8:1f:5f:57:c3: 4d:15:3e:33:a8:42:61:89:27:20:04:fd:77:8d:56:4e:3d:60: 04:2b:ea:fd:c6:64:55:3c:f9:58:59:0e:51:21:55:b3:ac:ea: 24:b0:c8:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcipWwlsRA5r/2eMOm69e6lBl/rYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc4Mzk0MjdGNDRDOEVEODlFNkMyNzIwRjE5Q0NGMjc5 MjcwRkQyQTAeFw0yNTA4MDYwNzI2MDZaFw0yNTA4MDkxNDI0MDZaMDMxMTAvBgNV BAMTKDI5NEU3QUM1RUY1NEIxNUQ1NkI0NDkyRTFGOTBDMkM5M0REQkUyMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCc0LMkFm4MNrE098olg857/L/x Kd2yWDDEwjZIVb/O8/2fsC7k3DAuCUqQkQ+TaISydpzGeMU19MzwpaQj6N3CjjLQ 6X1P4xuEeUu4CGaVhSBo6Vp4cPhZaG/72PHfPmTV0XmCkQ8JUrpvmFzROjnRzz0F nrdsLcxZBd1tBNNPIKzJQMpbE+0Z2XKREph9S/hsQlrsL9QVUNarOFhsTebZ/sQ/ VDWnG98P51GdR01abBkdlF7r4fzOVaB77F5j+0y4hZyGEvUbNhuBYh8E2vlwbI85 P6zXjUm1pU+PiDs+ZSt6ADQNmJpEe1B/zdmPpC+1w9beNMXnuEqW55QDn/s/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKU56xe9UsV1WtEkuH5DCyT3b4iEwHwYDVR0j BBgwFoAUx4OUJ/RMjtiebCcg8ZzPJ5Jw/SowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OGQxYzQ0OS05NzhjLTQ4NDUtYjgyMy1iNTkyNWE5MDU0MjcvMC9DNzgzOTQyN0Y0 NEM4RUQ4OUU2QzI3MjBGMTlDQ0YyNzkyNzBGRDJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzc4Mzk0MjdGNDRDOEVEODlFNkMyNzIwRjE5Q0NGMjc5Mjcw RkQyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMThkMWM0NDktOTc4Yy00ODQ1LWI4 MjMtYjU5MjVhOTA1NDI3LzAvQzc4Mzk0MjdGNDRDOEVEODlFNkMyNzIwRjE5Q0NG Mjc5MjcwRkQyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABETXbqgXm1P1F8vLmnKIZZc0SGM2QwmR3MB 8SUUCL0q1AatuLKWDNrwL8gWcLOevKwbgmkXQUnA45rAsMT6HsEsChyD4ZeLBYJr yBjPmocJlLQetD2g1C5J7beR0RxKJF8B5VfNQqFkM8PWxqJbtdhL/Ik+eXw3lMuQ VbohfMNnJyuX8OkFVkZ3NzHyS5tg4y7AwWan9jOGWJLHOMnrRaCH0I1rnTWWQwcC MY9+bQfiF8D0tY9EAV0kmFp27COeIr3nLJ5dJwyNz+BmGsEvvVWYGpDIH19Xw00V PjOoQmGJJyAE/XeNVk49YAQr6v3GZFU8+VhZDlEhVbOs6iSwyC4= -----END CERTIFICATE-----Generated at Wed Aug 6 12:26:37 2025 by rpki-client