$ rpki-client -vvf repo-rpki.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/7CDEC0195C0619A2844735B38B762AB1C145318A.mft File: 7CDEC0195C0619A2844735B38B762AB1C145318A.mft (raw, json) Hash identifier: WsQASYSP9jTacCSNzEbmmFcaxaSUcx2UajNzbbbs2QY= Subject key identifier: 30:37:D4:CB:B1:25:E4:E8:54:18:21:5D:3E:3D:13:9B:34:47:34:2C Authority key identifier: 7C:DE:C0:19:5C:06:19:A2:84:47:35:B3:8B:76:2A:B1:C1:45:31:8A Certificate issuer: /CN=7CDEC0195C0619A2844735B38B762AB1C145318A Certificate serial: 5252B80D6CF99A100D8AE4EEDB734DFAF2521793 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CDEC0195C0619A2844735B38B762AB1C145318A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/7CDEC0195C0619A2844735B38B762AB1C145318A.mft Manifest number: 01C2 Signing time: Thu 07 Aug 2025 07:01:28 +0000 Manifest this update: Thu 07 Aug 2025 06:56:28 +0000 Manifest next update: Sun 10 Aug 2025 09:20:28 +0000 Files and hashes: 1: 7CDEC0195C0619A2844735B38B762AB1C145318A.crl (hash: CC+lp+RxcGcpAS8+stUKc2SQOZ9jd1+Fkb56jMuqzxE=) 2: 3130332e3136332e33362e302f32332d3234203d3e20313338383836.roa (hash: CtGkBvOXr+z5xeQBMHV9NThlZEDqDbWOP9wsaKhn80Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/7CDEC0195C0619A2844735B38B762AB1C145318A.crl rsync://repo-rpki.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/7CDEC0195C0619A2844735B38B762AB1C145318A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CDEC0195C0619A2844735B38B762AB1C145318A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 09:20:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:52:b8:0d:6c:f9:9a:10:0d:8a:e4:ee:db:73:4d:fa:f2:52:17:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CDEC0195C0619A2844735B38B762AB1C145318A Validity Not Before: Aug 7 06:56:28 2025 GMT Not After : Aug 10 09:20:28 2025 GMT Subject: CN=3037D4CBB125E4E85418215D3E3D139B3447342C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:e3:fc:12:b7:fe:2b:4a:11:fa:5d:c9:36:59: a8:c3:b0:1f:71:b4:af:b8:98:39:af:06:df:1c:9f: 0f:12:f0:e5:d2:87:f6:82:9b:d3:f9:c4:51:c7:59: d7:fd:c6:80:b9:69:4e:c5:c9:43:9a:81:36:fc:47: c4:a9:54:a9:b2:5f:22:23:35:1f:a4:a5:76:63:0b: 42:f7:a2:47:7f:bb:87:21:90:05:76:b6:5e:81:93: 3a:d3:a3:c6:36:36:d9:4f:b2:f0:9f:5b:e8:7d:30: f8:5a:9e:7f:78:5d:87:51:74:f7:5c:76:28:6b:2e: 2a:78:88:00:91:ce:1b:45:29:26:8c:dd:db:61:4f: a3:ba:d8:b6:4a:86:11:7b:60:77:96:cb:2f:a6:1b: 9e:cb:b5:79:75:6c:54:26:6d:82:f5:a5:d9:47:20: 3b:45:4a:d3:5c:01:5b:7c:e4:3c:cd:62:a9:61:14: 4d:d0:09:6a:32:d1:9c:80:67:03:54:5e:b1:7c:2a: e1:ea:f4:ca:aa:19:89:0f:12:c4:a4:f2:32:1a:06: a2:67:e2:b7:2d:42:2d:4e:1f:4a:89:c4:d0:c1:70: 14:75:0b:66:5f:bd:85:f7:ed:a4:d2:bf:b8:ca:e5: 7b:ca:61:dc:78:61:a6:cf:f6:f7:9d:7d:73:a8:98: e3:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:37:D4:CB:B1:25:E4:E8:54:18:21:5D:3E:3D:13:9B:34:47:34:2C X509v3 Authority Key Identifier: keyid:7C:DE:C0:19:5C:06:19:A2:84:47:35:B3:8B:76:2A:B1:C1:45:31:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/7CDEC0195C0619A2844735B38B762AB1C145318A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CDEC0195C0619A2844735B38B762AB1C145318A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b90ada6-b721-4b5f-90ca-e8f4b977d561/0/7CDEC0195C0619A2844735B38B762AB1C145318A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:a7:b5:2d:dc:aa:20:a2:bb:10:7b:f3:42:07:ee:0c:b5:96: 70:fb:7f:ac:95:df:4b:da:49:b2:48:f2:01:85:a1:b1:ab:df: ce:a7:52:2b:ac:e2:52:34:10:6f:21:7d:5b:a9:e9:aa:2a:e7: b2:77:6c:c6:50:2f:5c:f3:bb:de:81:f5:ac:b0:62:da:54:be: 14:d3:42:97:4a:4d:cf:7d:ce:18:df:7c:0f:8d:68:aa:47:cd: 04:6e:69:ff:9e:51:5c:8e:73:92:6c:c4:33:2a:d2:a4:aa:30: 04:95:ad:c5:d3:6a:dd:9d:0d:13:12:c2:86:2c:0d:71:65:0d: 6e:8c:dc:8a:d5:55:6f:ca:b9:a0:56:c4:0f:f0:b9:bb:37:80: b4:a3:12:45:cf:c3:57:6a:18:61:ec:8a:cb:ad:e0:8e:01:fc: d8:46:6a:27:e8:c8:22:65:e5:60:b5:3a:d5:bb:2a:20:21:74: 59:7f:17:b9:34:ac:d1:7f:fa:6c:c1:8d:04:7f:98:a2:e3:e7: 78:59:2a:2e:c6:86:02:2f:28:aa:e3:8f:13:2c:52:9d:23:2f: aa:f1:5b:f0:4e:3a:f1:12:2a:bb:02:c6:24:7a:db:2a:05:6e: 70:ad:e2:aa:0e:17:0c:81:2b:41:69:c3:8d:82:5f:38:51:79: a4:a7:d8:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUlK4DWz5mhANiuTu23NN+vJSF5MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NERUMwMTk1QzA2MTlBMjg0NDczNUIzOEI3NjJBQjFD MTQ1MzE4QTAeFw0yNTA4MDcwNjU2MjhaFw0yNTA4MTAwOTIwMjhaMDMxMTAvBgNV BAMTKDMwMzdENENCQjEyNUU0RTg1NDE4MjE1RDNFM0QxMzlCMzQ0NzM0MkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw4/wSt/4rShH6Xck2WajDsB9x tK+4mDmvBt8cnw8S8OXSh/aCm9P5xFHHWdf9xoC5aU7FyUOagTb8R8SpVKmyXyIj NR+kpXZjC0L3okd/u4chkAV2tl6BkzrTo8Y2NtlPsvCfW+h9MPhann94XYdRdPdc dihrLip4iACRzhtFKSaM3dthT6O62LZKhhF7YHeWyy+mG57LtXl1bFQmbYL1pdlH IDtFStNcAVt85DzNYqlhFE3QCWoy0ZyAZwNUXrF8KuHq9MqqGYkPEsSk8jIaBqJn 4rctQi1OH0qJxNDBcBR1C2ZfvYX37aTSv7jK5XvKYdx4YabP9vedfXOomOORAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMDfUy7El5OhUGCFdPj0TmzRHNCwwHwYDVR0j BBgwFoAUfN7AGVwGGaKERzWzi3YqscFFMYowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x YjkwYWRhNi1iNzIxLTRiNWYtOTBjYS1lOGY0Yjk3N2Q1NjEvMC83Q0RFQzAxOTVD MDYxOUEyODQ0NzM1QjM4Qjc2MkFCMUMxNDUzMThBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0NERUMwMTk1QzA2MTlBMjg0NDczNUIzOEI3NjJBQjFDMTQ1 MzE4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI5MGFkYTYtYjcyMS00YjVmLTkw Y2EtZThmNGI5NzdkNTYxLzAvN0NERUMwMTk1QzA2MTlBMjg0NDczNUIzOEI3NjJB QjFDMTQ1MzE4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGOntS3cqiCiuxB780IH7gy1lnD7f6yV30va SbJI8gGFobGr386nUius4lI0EG8hfVup6aoq57J3bMZQL1zzu96B9aywYtpUvhTT QpdKTc99zhjffA+NaKpHzQRuaf+eUVyOc5JsxDMq0qSqMASVrcXTat2dDRMSwoYs DXFlDW6M3IrVVW/KuaBWxA/wubs3gLSjEkXPw1dqGGHsisut4I4B/NhGaifoyCJl 5WC1OtW7KiAhdFl/F7k0rNF/+mzBjQR/mKLj53hZKi7GhgIvKKrjjxMsUp0jL6rx W/BOOvESKrsCxiR62yoFbnCt4qoOFwyBK0Fpw42CXzhReaSn2D0= -----END CERTIFICATE-----Generated at Fri Aug 8 00:00:50 2025 by rpki-client