$ rpki-client -vvf repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft File: 7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft (raw, json) Hash identifier: peDMLWFCx0DVKMJZTDuuJn5elcuK+H5SEYV657M8LPg= Subject key identifier: F0:F6:F0:06:E5:51:CE:5E:59:DA:75:D3:2C:1A:09:EE:90:FD:7B:F0 Authority key identifier: 7C:4D:FD:78:91:4D:C1:F6:61:30:F2:56:AE:69:D9:FA:84:39:48:DC Certificate issuer: /CN=7C4DFD78914DC1F66130F256AE69D9FA843948DC Certificate serial: 700403870D69C32BDECAC60D27F4C776A58391C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4DFD78914DC1F66130F256AE69D9FA843948DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft Manifest number: 7F Signing time: Wed 06 Aug 2025 01:21:12 +0000 Manifest this update: Wed 06 Aug 2025 01:16:12 +0000 Manifest next update: Sat 09 Aug 2025 05:05:12 +0000 Files and hashes: 1: 3136302e3138372e3133372e302f32342d3234203d3e20313533313233.roa (hash: lAtUfGS13GDkvr/Pm9PSGFkJR4Rstob6+L+fcyUN72Q=) 2: 7C4DFD78914DC1F66130F256AE69D9FA843948DC.crl (hash: 33pOAN8qc8H0g5cp3TbcGO802cCuklDYk1jsO7IizXc=) 3: 3136302e3138372e3133362e302f32342d3234203d3e20313533313233.roa (hash: HJdK4DRAmRrZWLjILXhoJkILfMyC0BwC4uGRxH8TEAM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.crl rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4DFD78914DC1F66130F256AE69D9FA843948DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 09:26:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:04:03:87:0d:69:c3:2b:de:ca:c6:0d:27:f4:c7:76:a5:83:91:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C4DFD78914DC1F66130F256AE69D9FA843948DC Validity Not Before: Aug 6 01:16:12 2025 GMT Not After : Aug 9 05:05:12 2025 GMT Subject: CN=F0F6F006E551CE5E59DA75D32C1A09EE90FD7BF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:12:11:d4:fb:a5:44:8e:3a:97:ce:85:7d:a6: 2f:e2:0e:86:da:f4:73:18:c7:d1:5e:b5:c8:50:be: 05:d2:8d:74:86:c6:2c:c7:f2:17:58:7f:7d:75:13: ee:a1:b6:8b:d0:19:35:ec:ae:81:be:06:89:9c:67: 40:88:34:54:da:94:e5:04:69:e8:2d:33:ef:f6:5a: 17:6b:14:7b:bf:1e:8d:18:a5:0f:3b:7c:16:bb:ce: 53:b4:25:66:ba:1f:95:a9:6d:6b:dd:05:83:02:72: 56:b4:46:12:3e:a0:aa:91:54:d4:32:66:35:34:ea: 7e:72:6e:7f:43:ed:86:f4:ae:e3:84:0c:f4:49:b7: 87:cf:eb:5e:29:0f:6e:93:77:22:a6:3b:2b:91:53: 00:55:50:35:6a:e8:eb:e5:1f:d6:10:5a:4d:ac:f3: 77:bb:62:9f:50:34:19:24:7c:0c:8b:15:71:d0:cb: 72:dc:40:da:d3:c2:37:6d:fd:af:46:c7:a5:2b:a3: 27:76:02:bf:98:c6:1d:d1:87:c4:b3:90:44:58:d5: a2:21:a5:a7:af:d0:03:6e:a0:54:09:7a:e2:e1:d7: 46:1e:eb:f7:eb:1a:49:7f:dd:75:4a:69:12:02:46: 97:b7:24:88:94:a7:fb:9e:c9:d0:a7:ea:2e:fc:f8: 5c:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:F6:F0:06:E5:51:CE:5E:59:DA:75:D3:2C:1A:09:EE:90:FD:7B:F0 X509v3 Authority Key Identifier: keyid:7C:4D:FD:78:91:4D:C1:F6:61:30:F2:56:AE:69:D9:FA:84:39:48:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4DFD78914DC1F66130F256AE69D9FA843948DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:19:6f:fd:8c:83:ef:45:71:90:08:85:01:e8:12:db:0e:22: 75:ed:3a:a9:fd:38:b6:8a:fb:2a:5e:ee:98:86:cc:65:3f:4e: d4:2a:dc:f3:a0:9b:85:5b:d2:f0:8e:e2:a4:e7:54:1b:36:17: 91:0f:6d:e5:a8:1d:e4:65:bd:05:a2:3f:f8:58:84:21:45:8a: 70:83:c5:4c:28:25:22:a4:b1:53:c5:2a:a5:be:48:0f:37:a0: f7:78:f6:fb:b0:92:5d:75:39:a4:5a:85:27:c0:4e:5a:4f:08: 84:9b:b4:a1:68:3b:0a:3e:97:ff:58:97:15:0c:4e:8f:70:0a: b1:f9:b4:61:e1:d7:fc:d8:62:69:a5:a1:13:7d:24:88:79:54: 88:1b:9c:ac:21:11:0b:79:89:a3:2b:a5:9b:68:e5:f6:dd:5b: 25:c3:91:3a:55:7e:2a:7e:30:8d:94:7e:4b:51:4a:59:96:cd: e6:f1:d2:77:84:dc:d9:1f:dc:1b:d1:e7:10:5e:17:ff:1b:ea: 5d:70:d6:d4:98:2f:c5:cd:25:5e:39:3c:e0:25:01:5e:1c:ef: d2:7d:b2:da:c7:c6:e0:3a:00:f3:b0:9c:34:35:f3:4b:eb:c6: e2:6a:c2:05:dd:f4:12:90:1d:27:58:b2:75:d0:97:47:6f:11: 39:e8:6e:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcAQDhw1pwyveysYNJ/THdqWDkcUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M0REZENzg5MTREQzFGNjYxMzBGMjU2QUU2OUQ5RkE4 NDM5NDhEQzAeFw0yNTA4MDYwMTE2MTJaFw0yNTA4MDkwNTA1MTJaMDMxMTAvBgNV BAMTKEYwRjZGMDA2RTU1MUNFNUU1OURBNzVEMzJDMUEwOUVFOTBGRDdCRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWEhHU+6VEjjqXzoV9pi/iDoba 9HMYx9FetchQvgXSjXSGxizH8hdYf311E+6htovQGTXsroG+BomcZ0CINFTalOUE aegtM+/2WhdrFHu/Ho0YpQ87fBa7zlO0JWa6H5WpbWvdBYMCcla0RhI+oKqRVNQy ZjU06n5ybn9D7Yb0ruOEDPRJt4fP614pD26TdyKmOyuRUwBVUDVq6OvlH9YQWk2s 83e7Yp9QNBkkfAyLFXHQy3LcQNrTwjdt/a9Gx6Uroyd2Ar+Yxh3Rh8SzkERY1aIh paev0ANuoFQJeuLh10Ye6/frGkl/3XVKaRICRpe3JIiUp/ueydCn6i78+FydAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8PbwBuVRzl5Z2nXTLBoJ7pD9e/AwHwYDVR0j BBgwFoAUfE39eJFNwfZhMPJWrmnZ+oQ5SNwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTkyMzM5Ny04Y2Y4LTRjZWYtODg1Ni0wZDI2OGQ3M2VkYjEvMC83QzRERkQ3ODkx NERDMUY2NjEzMEYyNTZBRTY5RDlGQTg0Mzk0OERDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0M0REZENzg5MTREQzFGNjYxMzBGMjU2QUU2OUQ5RkE4NDM5 NDhEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2E5MjMzOTctOGNmOC00Y2VmLTg4 NTYtMGQyNjhkNzNlZGIxLzAvN0M0REZENzg5MTREQzFGNjYxMzBGMjU2QUU2OUQ5 RkE4NDM5NDhEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABoZb/2Mg+9FcZAIhQHoEtsOInXtOqn9OLaK +ype7piGzGU/TtQq3POgm4Vb0vCO4qTnVBs2F5EPbeWoHeRlvQWiP/hYhCFFinCD xUwoJSKksVPFKqW+SA83oPd49vuwkl11OaRahSfATlpPCISbtKFoOwo+l/9YlxUM To9wCrH5tGHh1/zYYmmloRN9JIh5VIgbnKwhEQt5iaMrpZto5fbdWyXDkTpVfip+ MI2UfktRSlmWzebx0neE3Nkf3BvR5xBeF/8b6l1w1tSYL8XNJV45POAlAV4c79J9 strHxuA6APOwnDQ180vrxuJqwgXd9BKQHSdYsnXQl0dvETnobng= -----END CERTIFICATE-----Generated at Wed Aug 6 12:32:44 2025 by rpki-client