$ rpki-client -vvf repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft File: 7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft (raw, json) Hash identifier: rC4C/WGiTIiJLy3m2U6sX0g/EpUy6aTKhRe8cRJBsUw= Subject key identifier: 6B:1E:6C:22:7C:8D:30:26:E9:AE:6D:24:F5:50:FC:3D:DF:36:42:33 Authority key identifier: 7C:D5:24:05:24:67:F2:2D:D8:E5:7E:02:A1:C9:9E:DE:5A:8C:F2:49 Certificate issuer: /CN=7CD524052467F22DD8E57E02A1C99EDE5A8CF249 Certificate serial: 41A9A0EB3AE61D6716C3A361D07580FA4F567172 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.cer Subject info access: rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft Manifest number: 04E4 Signing time: Tue 05 Aug 2025 09:50:39 +0000 Manifest this update: Tue 05 Aug 2025 09:45:39 +0000 Manifest next update: Fri 08 Aug 2025 18:38:39 +0000 Files and hashes: 1: 3130332e3135302e34342e302f32332d3234203d3e20313430333838.roa (hash: 9wWnuvCPEe0C8U6UVGeFeb9Dd9afvhSHPrMKavtgge8=) 2: 7CD524052467F22DD8E57E02A1C99EDE5A8CF249.crl (hash: 8si9y3pCDAspgSR3L2WObAoANOKcxY+e+MCEV3QRxPc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.crl rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 18:38:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:a9:a0:eb:3a:e6:1d:67:16:c3:a3:61:d0:75:80:fa:4f:56:71:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CD524052467F22DD8E57E02A1C99EDE5A8CF249 Validity Not Before: Aug 5 09:45:39 2025 GMT Not After : Aug 8 18:38:39 2025 GMT Subject: CN=6B1E6C227C8D3026E9AE6D24F550FC3DDF364233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:d6:09:e6:62:7f:81:f0:2c:79:7e:b9:8a:a7: 25:a5:81:b5:d5:9c:80:17:fa:cd:8b:ba:89:15:5e: 0a:b8:52:38:1d:9c:cd:e8:8f:06:2d:dd:64:d3:97: be:4d:06:91:0c:0a:92:00:f8:61:31:d5:28:f6:9a: 88:bb:1e:8a:29:1c:32:d1:39:07:62:b8:7e:4d:3e: 2a:2a:d8:6b:58:36:82:24:76:19:53:95:9c:9c:25: 57:53:03:85:48:e9:01:9d:5e:23:3f:0c:d7:b6:88: 89:3b:81:b1:79:ab:dd:ec:4d:bf:f6:4e:64:1d:ce: 0e:cb:8e:6a:25:ba:ce:71:ba:9b:72:8f:71:fb:fa: 64:6c:81:6c:b2:33:05:f1:6d:67:64:02:e6:5f:ca: a0:b2:60:6f:92:30:8b:01:ec:92:be:61:ee:38:da: a2:e9:3d:15:f9:4f:70:d1:87:11:d8:e3:23:8c:0f: 03:76:52:d1:17:8d:b1:eb:f7:f7:9a:1e:56:7e:39: 0d:ba:b8:6c:89:91:ac:76:e9:28:95:2c:a1:46:e2: 57:53:fb:7f:1d:fd:3a:b2:42:d6:fc:c2:1f:5d:68: 09:80:fb:53:d5:a4:d4:b4:9c:83:e5:fd:23:aa:2c: ad:1b:f6:59:aa:61:0f:27:e7:25:55:47:13:c3:ff: e0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:1E:6C:22:7C:8D:30:26:E9:AE:6D:24:F5:50:FC:3D:DF:36:42:33 X509v3 Authority Key Identifier: keyid:7C:D5:24:05:24:67:F2:2D:D8:E5:7E:02:A1:C9:9E:DE:5A:8C:F2:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:91:02:f6:9a:9e:a9:38:02:dc:44:a2:db:75:ea:81:76:ac: 19:31:6e:56:a1:92:65:1a:da:91:5e:ca:91:e6:f9:5d:d2:17: c7:36:ed:22:a3:d3:05:ea:f5:ac:3f:75:3a:80:1e:ec:4a:26: 54:12:d2:5d:73:be:8b:18:5a:ff:a3:30:55:db:4f:af:28:83: a7:36:e2:da:37:b3:14:5e:c8:62:72:16:bf:1b:a8:41:4e:98: 91:d6:56:65:07:6a:fc:97:fa:d1:aa:bc:d4:ea:99:eb:01:f0: 1e:56:99:7f:83:ea:6b:b7:27:21:46:cb:12:12:86:db:8b:9c: 10:4b:ed:eb:52:8f:8b:9b:d2:d2:6e:dc:21:6e:c3:f4:4f:82: 5f:9e:ae:7c:bc:22:47:74:d3:cc:99:34:d2:3a:08:39:00:37: 08:eb:15:29:16:d2:57:47:ab:27:12:06:8a:07:b2:0d:7a:4b: 74:fe:f3:5f:b7:d3:9e:0a:59:81:73:ab:f5:7c:e9:48:e5:4a: 03:d3:85:87:59:40:2b:09:e1:25:5e:de:70:28:04:b0:77:59: cc:98:ec:78:93:ed:b8:b7:6c:36:89:9a:c5:7c:44:f6:79:db: b5:4b:b7:88:14:cd:25:67:02:9d:02:30:b0:e6:ab:b8:27:77: d3:cd:ea:25 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQamg6zrmHWcWw6Nh0HWA+k9WcXIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NENTI0MDUyNDY3RjIyREQ4RTU3RTAyQTFDOTlFREU1 QThDRjI0OTAeFw0yNTA4MDUwOTQ1MzlaFw0yNTA4MDgxODM4MzlaMDMxMTAvBgNV BAMTKDZCMUU2QzIyN0M4RDMwMjZFOUFFNkQyNEY1NTBGQzNEREYzNjQyMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn1gnmYn+B8Cx5frmKpyWlgbXV nIAX+s2LuokVXgq4UjgdnM3ojwYt3WTTl75NBpEMCpIA+GEx1Sj2moi7HoopHDLR OQdiuH5NPioq2GtYNoIkdhlTlZycJVdTA4VI6QGdXiM/DNe2iIk7gbF5q93sTb/2 TmQdzg7Ljmolus5xuptyj3H7+mRsgWyyMwXxbWdkAuZfyqCyYG+SMIsB7JK+Ye44 2qLpPRX5T3DRhxHY4yOMDwN2UtEXjbHr9/eaHlZ+OQ26uGyJkax26SiVLKFG4ldT +38d/TqyQtb8wh9daAmA+1PVpNS0nIPl/SOqLK0b9lmqYQ8n5yVVRxPD/+DrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUax5sInyNMCbprm0k9VD8Pd82QjMwHwYDVR0j BBgwFoAUfNUkBSRn8i3Y5X4Cocme3lqM8kkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NGViNmVkZC1mMTNiLTQ5ZjAtYWQ4Ny02YjhlZTYxNGRjOGYvMC83Q0Q1MjQwNTI0 NjdGMjJERDhFNTdFMDJBMUM5OUVERTVBOENGMjQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0NENTI0MDUyNDY3RjIyREQ4RTU3RTAyQTFDOTlFREU1QThD RjI0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDRlYjZlZGQtZjEzYi00OWYwLWFk ODctNmI4ZWU2MTRkYzhmLzAvN0NENTI0MDUyNDY3RjIyREQ4RTU3RTAyQTFDOTlF REU1QThDRjI0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHSRAvaanqk4AtxEott16oF2rBkxblahkmUa 2pFeypHm+V3SF8c27SKj0wXq9aw/dTqAHuxKJlQS0l1zvosYWv+jMFXbT68og6c2 4to3sxReyGJyFr8bqEFOmJHWVmUHavyX+tGqvNTqmesB8B5WmX+D6mu3JyFGyxIS htuLnBBL7etSj4ub0tJu3CFuw/RPgl+erny8Ikd008yZNNI6CDkANwjrFSkW0ldH qycSBooHsg16S3T+81+3054KWYFzq/V86UjlSgPThYdZQCsJ4SVe3nAoBLB3WcyY 7HiT7bi3bDaJmsV8RPZ527VLt4gUzSVnAp0CMLDmq7gnd9PN6iU= -----END CERTIFICATE-----Generated at Thu Aug 7 04:02:54 2025 by rpki-client