$ rpki-client -vvf repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.mft File: 07087494011A8BD71E0AB56E4A29820B0C265D45.mft (raw, json) Hash identifier: GnWY7JLe6rovJ70e0Efi2icioCzZTytbNmVyiPnXxf8= Subject key identifier: B8:BD:EF:2C:D8:C3:60:35:0C:DA:AE:8E:C4:9B:C3:97:EF:F0:04:7A Authority key identifier: 07:08:74:94:01:1A:8B:D7:1E:0A:B5:6E:4A:29:82:0B:0C:26:5D:45 Certificate issuer: /CN=07087494011A8BD71E0AB56E4A29820B0C265D45 Certificate serial: 417358A5941C493CE353C037AE8BE5598736888A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07087494011A8BD71E0AB56E4A29820B0C265D45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.mft Manifest number: 4B Signing time: Fri 08 Aug 2025 16:21:17 +0000 Manifest this update: Fri 08 Aug 2025 16:16:17 +0000 Manifest next update: Tue 12 Aug 2025 02:51:17 +0000 Files and hashes: 1: 3130332e38392e3234382e302f32342d3234203d3e20313336303939.roa (hash: nJDk2moXVJKOcLf/s2ENaD41Lvuu7Wv1fbgDq/e+7rk=) 2: 07087494011A8BD71E0AB56E4A29820B0C265D45.crl (hash: qgqLntDnAmDluXsMkmUK+c6JlUe7myKV1eGKSFj0W9Q=) 3: 323030313a6466303a633330303a3a2f34382d3438203d3e20313336303939.roa (hash: 7vK5kAAznF/vtGtOCVNcNBhvktxpMswh2ctIXuNsU5A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.crl rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07087494011A8BD71E0AB56E4A29820B0C265D45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 02:51:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:73:58:a5:94:1c:49:3c:e3:53:c0:37:ae:8b:e5:59:87:36:88:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07087494011A8BD71E0AB56E4A29820B0C265D45 Validity Not Before: Aug 8 16:16:17 2025 GMT Not After : Aug 12 02:51:17 2025 GMT Subject: CN=B8BDEF2CD8C360350CDAAE8EC49BC397EFF0047A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:51:bb:3f:c2:bc:ee:96:7d:24:a4:d8:eb:9c: a6:2c:a2:45:a4:ba:4f:5e:23:1e:ad:a5:f2:02:f4: df:65:6b:a7:a3:52:b7:fc:9e:93:6b:e3:8b:09:1d: a8:14:35:05:34:eb:d8:4c:38:c1:bf:a3:21:a9:1e: ab:e0:eb:b2:66:e4:33:ba:61:6f:cc:61:46:57:5a: 0a:f8:62:a6:08:13:f9:01:36:ce:28:58:ea:85:51: b0:cb:2b:24:80:ba:be:6f:1f:c4:af:44:61:fa:6a: 53:59:b6:bc:e2:5c:97:02:05:c9:48:70:10:49:dd: 81:4d:2d:aa:06:f5:ee:ce:95:41:4c:8d:b1:bd:25: d9:09:65:f3:d5:c3:c1:96:03:a8:8a:9a:81:c6:6a: 03:43:ce:57:8e:fd:0e:02:df:fe:b6:1d:dc:7c:69: 8b:ef:67:c3:50:62:3b:fa:1c:88:1e:6c:54:a5:a5: 8a:eb:41:51:c5:d8:97:f4:99:34:2b:c2:37:4b:ad: d2:4c:bc:12:8f:97:36:a6:00:32:12:27:11:c7:5e: ee:b5:83:3d:5b:4d:b8:26:ad:38:f4:9c:e0:cc:65: 5d:cc:ae:26:3b:39:e7:fa:15:52:d0:f6:2d:29:d7: cd:f8:29:85:26:74:00:4a:55:71:93:fb:cf:6d:2a: c6:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:BD:EF:2C:D8:C3:60:35:0C:DA:AE:8E:C4:9B:C3:97:EF:F0:04:7A X509v3 Authority Key Identifier: keyid:07:08:74:94:01:1A:8B:D7:1E:0A:B5:6E:4A:29:82:0B:0C:26:5D:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07087494011A8BD71E0AB56E4A29820B0C265D45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:8b:0d:83:90:c3:d2:82:ef:4c:e1:f3:15:cb:7e:03:25:96: 70:b9:13:5a:fe:86:0e:54:82:9b:b9:f9:1f:be:55:9d:5e:7f: e5:2c:86:7a:6d:30:03:1a:00:07:e9:6b:52:84:e6:f1:9b:40: 3b:28:9c:0e:51:92:f1:29:93:82:70:45:70:2d:11:78:ca:30: 72:1b:b5:6e:59:6b:0c:91:f3:04:5e:93:d0:59:e7:61:e6:d7: 66:c9:49:e0:11:6f:57:01:a2:a3:5d:ed:42:08:38:00:f3:3c: 48:b9:6e:02:5d:36:07:e7:25:d5:38:37:6f:5d:23:8a:f7:e4: 8e:7f:70:bc:c8:95:6e:48:c4:64:69:f8:2a:f7:4c:3f:a8:0e: e0:55:79:8a:8c:c2:14:ac:b4:b5:43:37:fa:50:03:f5:7c:d6: 72:ec:40:be:e2:0c:39:4c:cc:5c:65:65:1b:d8:df:26:13:71: c1:84:9c:21:d4:ca:91:2d:ad:d5:5e:8c:e0:1c:23:ff:b7:bc: 1c:d7:0e:ca:f6:99:37:9b:c3:ae:c9:f5:a5:e7:7b:a5:64:b8: c4:0c:f5:f4:42:18:96:29:24:d2:b1:c4:6b:f0:99:53:8e:f2: de:25:90:51:b2:6d:b2:a1:c7:85:24:b6:3e:52:bd:dc:3b:4f: cf:89:70:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQXNYpZQcSTzjU8A3rovlWYc2iIowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDcwODc0OTQwMTFBOEJENzFFMEFCNTZFNEEyOTgyMEIw QzI2NUQ0NTAeFw0yNTA4MDgxNjE2MTdaFw0yNTA4MTIwMjUxMTdaMDMxMTAvBgNV BAMTKEI4QkRFRjJDRDhDMzYwMzUwQ0RBQUU4RUM0OUJDMzk3RUZGMDA0N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtUbs/wrzuln0kpNjrnKYsokWk uk9eIx6tpfIC9N9la6ejUrf8npNr44sJHagUNQU069hMOMG/oyGpHqvg67Jm5DO6 YW/MYUZXWgr4YqYIE/kBNs4oWOqFUbDLKySAur5vH8SvRGH6alNZtrziXJcCBclI cBBJ3YFNLaoG9e7OlUFMjbG9JdkJZfPVw8GWA6iKmoHGagNDzleO/Q4C3/62Hdx8 aYvvZ8NQYjv6HIgebFSlpYrrQVHF2Jf0mTQrwjdLrdJMvBKPlzamADISJxHHXu61 gz1bTbgmrTj0nODMZV3MriY7Oef6FVLQ9i0p1834KYUmdABKVXGT+89tKsalAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuL3vLNjDYDUM2q6OxJvDl+/wBHowHwYDVR0j BBgwFoAUBwh0lAEai9ceCrVuSimCCwwmXUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MTQwNTU0NS1jMzVkLTRkZTEtOTYxOC00NGI1ZjQxN2EzMDMvMC8wNzA4NzQ5NDAx MUE4QkQ3MUUwQUI1NkU0QTI5ODIwQjBDMjY1RDQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDcwODc0OTQwMTFBOEJENzFFMEFCNTZFNEEyOTgyMEIwQzI2 NUQ0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDE0MDU1NDUtYzM1ZC00ZGUxLTk2 MTgtNDRiNWY0MTdhMzAzLzAvMDcwODc0OTQwMTFBOEJENzFFMEFCNTZFNEEyOTgy MEIwQzI2NUQ0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHKLDYOQw9KC70zh8xXLfgMllnC5E1r+hg5U gpu5+R++VZ1ef+UshnptMAMaAAfpa1KE5vGbQDsonA5RkvEpk4JwRXAtEXjKMHIb tW5ZawyR8wRek9BZ52Hm12bJSeARb1cBoqNd7UIIOADzPEi5bgJdNgfnJdU4N29d I4r35I5/cLzIlW5IxGRp+Cr3TD+oDuBVeYqMwhSstLVDN/pQA/V81nLsQL7iDDlM zFxlZRvY3yYTccGEnCHUypEtrdVejOAcI/+3vBzXDsr2mTebw67J9aXne6VkuMQM 9fRCGJYpJNKxxGvwmVOO8t4lkFGybbKhx4Uktj5Svdw7T8+JcGY= -----END CERTIFICATE-----Generated at Sat Aug 9 20:50:56 2025 by rpki-client