$ rpki-client -vvf repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft File: D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft (raw, json) Hash identifier: 2p/jBaiexfNWmL72XFJulV4OvTeNwX4/F503BqZzUf8= Subject key identifier: 73:C0:8B:02:0D:3D:D6:81:05:C2:79:7F:53:C2:A9:F4:89:98:E3:12 Authority key identifier: D7:C7:61:22:42:64:91:B8:1F:84:E5:A8:24:E4:AB:EB:85:82:BA:C4 Certificate issuer: /CN=D7C76122426491B81F84E5A824E4ABEB8582BAC4 Certificate serial: 3564F3DCBA8E495833D2CF419046EF7395EFDF72 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C76122426491B81F84E5A824E4ABEB8582BAC4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft Manifest number: 0209 Signing time: Wed 06 Aug 2025 07:30:46 +0000 Manifest this update: Wed 06 Aug 2025 07:25:46 +0000 Manifest next update: Sat 09 Aug 2025 14:41:46 +0000 Files and hashes: 1: 3130332e3138352e34332e302f32342d3234203d3e20313333333630.roa (hash: pZz62m1gD3j25rkNtr+ZrpUFopI0lVMRASTdO0j7bx0=) 2: 3130332e3138352e34322e302f32342d3234203d3e20313439363733.roa (hash: dkX3mi6UtP2EclKtk4Ns5Our6XJ4lNIlC+WY5pkrMVA=) 3: D7C76122426491B81F84E5A824E4ABEB8582BAC4.crl (hash: i44eIOu4T23rNnVfQakVAyuBoIpa9MtCqSVErHplDd0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.crl rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C76122426491B81F84E5A824E4ABEB8582BAC4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 14:41:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:64:f3:dc:ba:8e:49:58:33:d2:cf:41:90:46:ef:73:95:ef:df:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7C76122426491B81F84E5A824E4ABEB8582BAC4 Validity Not Before: Aug 6 07:25:46 2025 GMT Not After : Aug 9 14:41:46 2025 GMT Subject: CN=73C08B020D3DD68105C2797F53C2A9F48998E312 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:09:4c:06:2d:9a:d6:f8:13:53:1a:58:57:c9: 7e:d4:f2:e0:6e:32:d9:16:03:4b:e9:24:94:05:81: 68:92:21:da:84:c1:ed:2c:bf:1c:39:a6:f9:00:fa: a0:5f:b4:9e:cd:1b:67:f7:05:43:52:c3:97:bd:45: 3f:e1:34:f3:3a:af:a3:f4:97:02:fd:c0:a7:03:66: df:ee:22:8f:d0:8c:8b:3f:34:c6:cd:bc:62:4e:a2: 15:72:c9:5e:55:9c:4c:a1:f8:8c:cd:e4:cc:e2:96: 9f:32:1f:fe:95:99:c6:be:4c:ec:df:3a:e4:46:e4: 35:32:23:5a:96:93:af:3b:13:06:70:d3:df:aa:c7: a3:9d:0f:45:c2:fc:24:6b:49:94:82:92:9d:c9:c6: d6:04:f2:19:79:5f:76:97:0f:c9:96:b3:33:11:7b: cf:72:0c:c9:0c:01:31:93:cd:54:0f:94:bf:a6:f3: a3:fa:74:db:9b:e0:c0:d8:1f:fd:95:66:e6:0e:3c: 9d:57:97:97:50:36:64:f4:b3:c1:80:03:60:4a:27: 76:ee:05:53:f7:44:7b:48:50:6f:df:a0:c7:98:e4: e7:5a:4e:da:2a:da:da:f1:32:24:4f:49:eb:95:d6: 0a:1c:ab:c3:9d:75:1b:fb:6a:0c:04:c5:68:45:a2: 31:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 73:C0:8B:02:0D:3D:D6:81:05:C2:79:7F:53:C2:A9:F4:89:98:E3:12 X509v3 Authority Key Identifier: keyid:D7:C7:61:22:42:64:91:B8:1F:84:E5:A8:24:E4:AB:EB:85:82:BA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C76122426491B81F84E5A824E4ABEB8582BAC4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2050dcc3-84dd-4595-ba2c-bc69989692f1/0/D7C76122426491B81F84E5A824E4ABEB8582BAC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:52:85:f5:3b:ea:62:69:da:3c:7e:7e:e9:49:8d:5e:7a:64: 0d:0b:e9:6e:46:c7:ad:c0:d4:62:24:8c:3c:50:50:a8:67:8b: 43:13:42:43:db:42:60:7a:76:58:64:0e:9b:b0:28:d0:2a:42: ff:54:fa:88:fd:42:64:25:da:46:a0:3d:e3:c2:36:03:c8:35: 9c:a1:9f:c7:c2:47:0d:44:80:87:c3:74:70:47:56:d1:e1:09: b6:93:3a:01:31:d6:1b:38:b3:4d:d7:d3:04:5f:31:6b:14:de: 2d:e8:3d:b4:ec:96:20:7b:00:5d:79:5b:ae:91:ea:a3:22:9c: 0b:f5:65:ab:f2:75:43:bd:51:a3:ab:17:35:7d:c5:ff:50:46: b4:ba:91:6f:c9:aa:43:d9:d1:23:15:ac:7e:77:ed:e1:a9:2b: c9:9f:ea:59:d8:48:2c:5a:80:43:55:11:b5:ed:ee:5d:7e:1d: 85:cb:9c:32:31:41:54:b4:22:04:ba:b4:a0:2b:1b:07:d5:df: 5e:3d:36:55:18:99:2a:56:75:0e:93:06:52:ee:6a:aa:e8:b3: c5:6e:9a:03:11:25:aa:d4:e2:86:0d:35:a7:dc:2f:da:b8:41: 07:97:d2:22:31:5f:bf:7d:76:d6:17:59:f6:06:ee:dc:c2:a9: ad:a4:ac:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNWTz3LqOSVgz0s9BkEbvc5Xv33IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdDNzYxMjI0MjY0OTFCODFGODRFNUE4MjRFNEFCRUI4 NTgyQkFDNDAeFw0yNTA4MDYwNzI1NDZaFw0yNTA4MDkxNDQxNDZaMDMxMTAvBgNV BAMTKDczQzA4QjAyMEQzREQ2ODEwNUMyNzk3RjUzQzJBOUY0ODk5OEUzMTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/CUwGLZrW+BNTGlhXyX7U8uBu MtkWA0vpJJQFgWiSIdqEwe0svxw5pvkA+qBftJ7NG2f3BUNSw5e9RT/hNPM6r6P0 lwL9wKcDZt/uIo/QjIs/NMbNvGJOohVyyV5VnEyh+IzN5Mzilp8yH/6Vmca+TOzf OuRG5DUyI1qWk687EwZw09+qx6OdD0XC/CRrSZSCkp3JxtYE8hl5X3aXD8mWszMR e89yDMkMATGTzVQPlL+m86P6dNub4MDYH/2VZuYOPJ1Xl5dQNmT0s8GAA2BKJ3bu BVP3RHtIUG/foMeY5OdaTtoq2trxMiRPSeuV1gocq8OddRv7agwExWhFojGPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUc8CLAg091oEFwnl/U8Kp9ImY4xIwHwYDVR0j BBgwFoAU18dhIkJkkbgfhOWoJOSr64WCusQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDUwZGNjMy04NGRkLTQ1OTUtYmEyYy1iYzY5OTg5NjkyZjEvMC9EN0M3NjEyMjQy NjQ5MUI4MUY4NEU1QTgyNEU0QUJFQjg1ODJCQUM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDdDNzYxMjI0MjY0OTFCODFGODRFNUE4MjRFNEFCRUI4NTgy QkFDNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjA1MGRjYzMtODRkZC00NTk1LWJh MmMtYmM2OTk4OTY5MmYxLzAvRDdDNzYxMjI0MjY0OTFCODFGODRFNUE4MjRFNEFC RUI4NTgyQkFDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAApShfU76mJp2jx+fulJjV56ZA0L6W5Gx63A 1GIkjDxQUKhni0MTQkPbQmB6dlhkDpuwKNAqQv9U+oj9QmQl2kagPePCNgPINZyh n8fCRw1EgIfDdHBHVtHhCbaTOgEx1hs4s03X0wRfMWsU3i3oPbTsliB7AF15W66R 6qMinAv1ZavydUO9UaOrFzV9xf9QRrS6kW/JqkPZ0SMVrH537eGpK8mf6lnYSCxa gENVEbXt7l1+HYXLnDIxQVS0IgS6tKArGwfV3149NlUYmSpWdQ6TBlLuaqros8Vu mgMRJarU4oYNNafcL9q4QQeX0iIxX799dtYXWfYG7tzCqa2krL4= -----END CERTIFICATE-----Generated at Thu Aug 7 03:15:39 2025 by rpki-client