$ rpki-client -vvf repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft File: 7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft (raw, json) Hash identifier: ZCtTW+4CEw4zO1prP1mTKXnbmLin8K2KIlN57lRQYvA= Subject key identifier: FC:11:03:8E:84:B7:07:19:68:AA:4F:67:30:7A:C6:3E:5D:DA:E1:C0 Authority key identifier: 7E:8D:E1:54:9E:89:D4:B4:80:B5:56:69:5C:AB:E9:CE:7F:DF:5F:24 Certificate issuer: /CN=7E8DE1549E89D4B480B556695CABE9CE7FDF5F24 Certificate serial: 56FE121BD9A41ACAFA996EC5E955C65505F2A5E3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft Manifest number: 6E Signing time: Tue 05 Aug 2025 12:51:00 +0000 Manifest this update: Tue 05 Aug 2025 12:46:00 +0000 Manifest next update: Fri 08 Aug 2025 14:06:00 +0000 Files and hashes: 1: 323030313a6466343a396134303a3a2f34382d3438203d3e20313533313439.roa (hash: TtLF2mCHfSEfxKosRTbgY2pYRo+Ox0NN2gzHDI6VY/0=) 2: 7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.crl (hash: oHSOysrHOfQlfAQU62zQLUt4Kx9cZJ7jIv4S5DkXROU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.crl rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 14:06:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:fe:12:1b:d9:a4:1a:ca:fa:99:6e:c5:e9:55:c6:55:05:f2:a5:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E8DE1549E89D4B480B556695CABE9CE7FDF5F24 Validity Not Before: Aug 5 12:46:00 2025 GMT Not After : Aug 8 14:06:00 2025 GMT Subject: CN=FC11038E84B7071968AA4F67307AC63E5DDAE1C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:0c:5c:96:55:61:ba:e9:d2:ee:ba:dc:81:67: e2:42:0e:08:37:e1:dc:d7:93:73:f8:8a:1f:19:1a: f1:88:4d:0f:35:7a:7a:78:85:1e:0a:ab:36:9f:0b: d1:85:2f:80:83:18:93:04:85:3b:fd:4c:b2:49:87: 4b:29:d6:fb:e8:1f:03:b7:51:a1:34:48:c4:a0:02: 8e:98:11:4d:de:c6:76:a9:77:76:47:31:f2:1b:3e: 7c:fc:91:d0:6f:93:16:5c:8d:35:83:54:83:dc:6b: f4:2d:28:39:36:2e:cc:c1:33:48:09:cc:7c:ef:42: 8b:44:7f:d3:2f:f0:08:ef:a8:f1:1f:24:1b:bc:3e: 1b:e3:38:69:39:0b:00:d9:cc:b2:30:2b:2d:a2:4d: b0:6d:ff:9f:4b:d1:55:13:de:4b:55:40:85:df:4f: c2:9d:26:85:cf:65:5c:7f:e9:cf:c6:91:f4:0a:ad: 5f:c2:00:98:28:6e:6f:5e:9b:bf:ac:f8:64:ea:e8: 7e:39:13:bd:9b:ef:f5:fc:f2:47:a3:d0:d0:9e:ed: 49:b2:8a:8a:97:6f:f7:26:31:2b:fe:a6:1e:73:88: a1:1d:88:d4:5f:12:f5:05:b2:84:2f:be:49:64:ea: 27:7a:5e:46:67:c7:6f:15:5f:7c:cb:9d:9c:4b:b7: e2:15 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:11:03:8E:84:B7:07:19:68:AA:4F:67:30:7A:C6:3E:5D:DA:E1:C0 X509v3 Authority Key Identifier: keyid:7E:8D:E1:54:9E:89:D4:B4:80:B5:56:69:5C:AB:E9:CE:7F:DF:5F:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:47:54:e7:d5:19:70:55:25:b5:35:59:e2:d4:28:f8:7d:96: c5:18:9f:d6:d3:50:84:85:18:cb:dc:2e:69:c4:9a:01:e8:3e: cb:cb:a2:9c:c4:f0:59:57:dc:6d:ab:b5:d0:d0:10:bc:3b:46: f7:b7:c2:3d:bb:ef:89:a1:be:85:97:6e:76:8b:98:0b:be:fe: 14:d1:0c:40:5a:7b:d6:d7:74:eb:4f:76:06:3b:7a:de:e9:6d: 9b:d8:71:3f:4a:8c:f5:67:1d:1a:86:84:42:75:90:05:e4:39: 4d:36:c6:97:fc:0a:53:f7:8e:02:79:ba:25:ef:34:a6:fd:26: 27:4b:b4:9e:0a:a6:bf:30:9f:7d:36:d5:e4:f8:c8:1e:cd:87: f4:c6:64:e5:9b:58:b2:3d:46:c8:66:af:65:4a:d1:ea:a6:fe: 64:33:75:45:23:02:ca:c2:a5:f8:ab:15:da:77:84:ec:d3:71: fb:f4:a5:9d:0d:76:e0:8a:2a:c6:f3:5f:b3:26:ae:5d:f1:20: 9c:8f:e8:5d:cc:52:5c:c1:67:4c:0d:8a:3b:29:99:c4:8e:82: 2f:ef:c6:f4:f5:36:57:16:c6:72:d7:dc:a8:d6:42:41:f8:03: 80:5a:db:74:dd:79:b7:90:19:51:76:56:11:8b:e2:0d:0e:89: f0:aa:ac:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVv4SG9mkGsr6mW7F6VXGVQXypeMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U4REUxNTQ5RTg5RDRCNDgwQjU1NjY5NUNBQkU5Q0U3 RkRGNUYyNDAeFw0yNTA4MDUxMjQ2MDBaFw0yNTA4MDgxNDA2MDBaMDMxMTAvBgNV BAMTKEZDMTEwMzhFODRCNzA3MTk2OEFBNEY2NzMwN0FDNjNFNUREQUUxQzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEDFyWVWG66dLuutyBZ+JCDgg3 4dzXk3P4ih8ZGvGITQ81enp4hR4KqzafC9GFL4CDGJMEhTv9TLJJh0sp1vvoHwO3 UaE0SMSgAo6YEU3exnapd3ZHMfIbPnz8kdBvkxZcjTWDVIPca/QtKDk2LszBM0gJ zHzvQotEf9Mv8AjvqPEfJBu8PhvjOGk5CwDZzLIwKy2iTbBt/59L0VUT3ktVQIXf T8KdJoXPZVx/6c/GkfQKrV/CAJgobm9em7+s+GTq6H45E72b7/X88kej0NCe7Umy ioqXb/cmMSv+ph5ziKEdiNRfEvUFsoQvvklk6id6XkZnx28VX3zLnZxLt+IVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/BEDjoS3Bxloqk9nMHrGPl3a4cAwHwYDVR0j BBgwFoAUfo3hVJ6J1LSAtVZpXKvpzn/fXyQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2RjMDM0Zi0zODIzLTQ4YWYtOTUzZC1hYWE4NzNiMGZiNmEvMS83RThERTE1NDlF ODlENEI0ODBCNTU2Njk1Q0FCRTlDRTdGREY1RjI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0U4REUxNTQ5RTg5RDRCNDgwQjU1NjY5NUNBQkU5Q0U3RkRG NUYyNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNkYzAzNGYtMzgyMy00OGFmLTk1 M2QtYWFhODczYjBmYjZhLzEvN0U4REUxNTQ5RTg5RDRCNDgwQjU1NjY5NUNBQkU5 Q0U3RkRGNUYyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALFHVOfVGXBVJbU1WeLUKPh9lsUYn9bTUISF GMvcLmnEmgHoPsvLopzE8FlX3G2rtdDQELw7Rve3wj2774mhvoWXbnaLmAu+/hTR DEBae9bXdOtPdgY7et7pbZvYcT9KjPVnHRqGhEJ1kAXkOU02xpf8ClP3jgJ5uiXv NKb9JidLtJ4Kpr8wn3021eT4yB7Nh/TGZOWbWLI9Rshmr2VK0eqm/mQzdUUjAsrC pfirFdp3hOzTcfv0pZ0NduCKKsbzX7Mmrl3xIJyP6F3MUlzBZ0wNijspmcSOgi/v xvT1NlcWxnLX3KjWQkH4A4Ba23TdebeQGVF2VhGL4g0OifCqrJQ= -----END CERTIFICATE-----Generated at Thu Aug 7 04:24:06 2025 by rpki-client