$ rpki-client -vvf repo-rpki.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.mft File: 7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.mft (raw, json) Hash identifier: iqM42t/3B3eVfR/Im7F0lElrqg5QEUnPwoZmKmzRpsA= Subject key identifier: 36:0F:8B:F5:56:86:A8:4C:2D:6A:97:9D:8B:64:B4:64:FE:5F:52:19 Authority key identifier: 7C:E8:AF:BA:81:B9:A4:E0:B1:67:44:9B:4A:9C:A6:9B:88:73:C3:2C Certificate issuer: /CN=7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C Certificate serial: 076B2E1714EEB65102021804DBFFC2DDABF174BC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.mft Manifest number: 28 Signing time: Fri 08 Aug 2025 05:32:15 +0000 Manifest this update: Fri 08 Aug 2025 05:27:15 +0000 Manifest next update: Mon 11 Aug 2025 17:00:15 +0000 Files and hashes: 1: 7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.crl (hash: GsDqcVWuP5lNWj41O0G5sESt9a3PP8dR2W8+SXEEFZQ=) 2: 3130332e38332e3130302e302f32332d3234203d3e20313336303633.roa (hash: tP6gwHOQztpWiI7KNt68kDqlO1nwIWP+n+KVb4rQ1p0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.crl rsync://repo-rpki.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 17:00:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:6b:2e:17:14:ee:b6:51:02:02:18:04:db:ff:c2:dd:ab:f1:74:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C Validity Not Before: Aug 8 05:27:15 2025 GMT Not After : Aug 11 17:00:15 2025 GMT Subject: CN=360F8BF55686A84C2D6A979D8B64B464FE5F5219 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:26:5c:7e:06:da:08:73:4d:af:9a:7c:15:75: 77:92:b6:70:d8:01:3e:56:7b:74:dc:be:37:61:48: 58:a0:23:ea:ba:4e:ce:80:31:1e:0b:f4:e3:10:d4: 37:16:d4:f6:d7:6e:07:d5:7b:7f:98:5a:cc:f7:8d: 52:29:b7:f4:8b:9a:0c:e9:f2:f6:9f:b1:93:13:2f: 66:48:f1:fd:19:3f:53:6c:25:1f:50:e6:95:bf:d0: 21:c4:6c:f0:c2:fa:fb:d3:ae:1d:5d:bb:c3:3e:1f: d5:2d:0f:e7:e4:b6:8f:84:7e:73:ed:57:d6:10:d9: cf:de:6c:65:8c:81:62:e4:19:49:e5:0d:35:c0:d7: 85:82:d3:a7:01:af:3f:84:6a:de:cc:73:27:f4:6c: c4:81:1a:5a:c6:40:bb:5a:54:e9:cb:54:ef:48:97: 09:8e:c4:62:a3:c4:0e:dc:b0:1b:c3:29:cb:e4:7f: cc:57:76:dd:e5:b2:ff:8f:64:1f:3e:e5:62:c1:ae: 0b:49:aa:cb:6c:c7:53:19:bf:8f:18:84:43:1a:5f: 61:56:cc:2e:c0:56:1a:24:31:4b:23:f3:60:cd:db: 72:bc:aa:02:fb:b6:50:3f:ca:c9:5a:9e:d4:ad:6c: 91:41:19:1d:7a:35:a9:02:bf:f3:90:7c:a5:ec:9f: 7d:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:0F:8B:F5:56:86:A8:4C:2D:6A:97:9D:8B:64:B4:64:FE:5F:52:19 X509v3 Authority Key Identifier: keyid:7C:E8:AF:BA:81:B9:A4:E0:B1:67:44:9B:4A:9C:A6:9B:88:73:C3:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:17:5a:24:93:4d:80:e0:60:34:d4:dd:6b:25:6b:2b:3e:49: fe:19:42:67:b8:6d:24:55:78:c8:1f:93:b1:a8:07:2f:3f:a5: 5d:40:40:d6:e3:2d:19:a7:ec:c7:cc:51:74:cc:43:b8:22:71: ae:5b:b2:b1:e9:06:db:8d:de:c1:f2:6f:56:31:2a:c4:11:61: 66:d6:a4:3a:dc:2d:b8:75:b1:a2:82:78:f2:4e:ab:76:95:80: fd:b5:af:c0:84:d8:89:8c:ee:c1:90:f8:3c:a6:36:6d:a6:ab: 09:f1:e1:56:63:fd:1c:d8:b4:a4:e9:99:62:a1:cb:8f:06:05: b8:00:09:79:45:6a:40:fe:7e:7c:a5:34:be:6c:c2:37:8c:09: fc:84:73:80:74:3f:f8:53:91:9d:3e:ff:2c:69:ca:a2:12:d3: b9:09:f9:c8:57:43:7a:a8:9e:7c:ad:35:b0:b7:17:be:85:57: e6:7c:7f:3e:0c:0a:58:16:9f:57:d3:ec:6f:91:d7:33:6d:68: 40:fd:11:97:28:54:55:9e:63:75:8e:8f:6e:74:bf:9e:c9:1f: 4b:d1:af:7d:85:e4:1d:6b:b3:e4:07:05:a7:20:1a:5c:fd:f9: 37:a5:4d:19:ce:7c:d1:2f:5b:00:a7:76:5b:f2:4e:7f:90:fe: ce:52:3c:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB2suFxTutlECAhgE2//C3avxdLwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NFOEFGQkE4MUI5QTRFMEIxNjc0NDlCNEE5Q0E2OUI4 ODczQzMyQzAeFw0yNTA4MDgwNTI3MTVaFw0yNTA4MTExNzAwMTVaMDMxMTAvBgNV BAMTKDM2MEY4QkY1NTY4NkE4NEMyRDZBOTc5RDhCNjRCNDY0RkU1RjUyMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDJlx+BtoIc02vmnwVdXeStnDY AT5We3TcvjdhSFigI+q6Ts6AMR4L9OMQ1DcW1PbXbgfVe3+YWsz3jVIpt/SLmgzp 8vafsZMTL2ZI8f0ZP1NsJR9Q5pW/0CHEbPDC+vvTrh1du8M+H9UtD+fkto+EfnPt V9YQ2c/ebGWMgWLkGUnlDTXA14WC06cBrz+Eat7Mcyf0bMSBGlrGQLtaVOnLVO9I lwmOxGKjxA7csBvDKcvkf8xXdt3lsv+PZB8+5WLBrgtJqstsx1MZv48YhEMaX2FW zC7AVhokMUsj82DN23K8qgL7tlA/yslantStbJFBGR16NakCv/OQfKXsn30PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNg+L9VaGqEwtapedi2S0ZP5fUhkwHwYDVR0j BBgwFoAUfOivuoG5pOCxZ0SbSpymm4hzwywwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NmMwNjQ1NS0xNWMwLTRmM2QtODEzYi1jMDdiZWY3OGYwMjUvMC83Q0U4QUZCQTgx QjlBNEUwQjE2NzQ0OUI0QTlDQTY5Qjg4NzNDMzJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0NFOEFGQkE4MUI5QTRFMEIxNjc0NDlCNEE5Q0E2OUI4ODcz QzMyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDZjMDY0NTUtMTVjMC00ZjNkLTgx M2ItYzA3YmVmNzhmMDI1LzAvN0NFOEFGQkE4MUI5QTRFMEIxNjc0NDlCNEE5Q0E2 OUI4ODczQzMyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFIXWiSTTYDgYDTU3Wslays+Sf4ZQme4bSRV eMgfk7GoBy8/pV1AQNbjLRmn7MfMUXTMQ7gica5bsrHpBtuN3sHyb1YxKsQRYWbW pDrcLbh1saKCePJOq3aVgP21r8CE2ImM7sGQ+DymNm2mqwnx4VZj/RzYtKTpmWKh y48GBbgACXlFakD+fnylNL5swjeMCfyEc4B0P/hTkZ0+/yxpyqIS07kJ+chXQ3qo nnytNbC3F76FV+Z8fz4MClgWn1fT7G+R1zNtaED9EZcoVFWeY3WOj250v57JH0vR r32F5B1rs+QHBacgGlz9+TelTRnOfNEvWwCndlvyTn+Q/s5SPPc= -----END CERTIFICATE-----Generated at Sat Aug 9 22:42:24 2025 by rpki-client