$ rpki-client -vvf repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft File: 7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft (raw, json) Hash identifier: c/E/tXG4UMRWll0vROI5SSHnUOg9IntQOIUwYbA8qXU= Subject key identifier: E5:65:95:7D:13:39:F3:72:91:46:07:30:30:83:6A:AE:B1:55:77:55 Authority key identifier: 7D:6E:DF:DB:21:B8:B7:E6:A7:5A:99:0A:7B:EC:AD:85:E8:BE:B9:53 Certificate issuer: /CN=7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953 Certificate serial: 5FC63C3C4D46BFBFEBBC280105E9CC1BF38A6E23 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft Manifest number: 01A2 Signing time: Wed 06 Aug 2025 22:00:05 +0000 Manifest this update: Wed 06 Aug 2025 21:55:05 +0000 Manifest next update: Sun 10 Aug 2025 02:36:05 +0000 Files and hashes: 1: 3130332e34362e352e302f32342d3234203d3e20313530343630.roa (hash: OiXuaCFeHNTNKTkxwDwZ/IJjAlYs+aZs7qWhd3mySzg=) 2: 3130332e34362e342e302f32342d3234203d3e20313530343630.roa (hash: 70RFcRoz1w22nVDdjd8xwvOHx9oaAPRDsiAFJSjZRVk=) 3: 3130332e34362e342e302f32332d3233203d3e20313530343630.roa (hash: NXHMc5cBUZitTQZ4ST9s7lp3tsPIg2LlkZ5yYQ7KPUA=) 4: 7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.crl (hash: qBWoPWZjkr94vONlF+Fb6iNB8BLMU+AkC9URy2ds2hE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.crl rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 02:36:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:c6:3c:3c:4d:46:bf:bf:eb:bc:28:01:05:e9:cc:1b:f3:8a:6e:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953 Validity Not Before: Aug 6 21:55:05 2025 GMT Not After : Aug 10 02:36:05 2025 GMT Subject: CN=E565957D1339F3729146073030836AAEB1557755 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:a1:54:80:0f:c3:a9:fa:e0:e6:7e:a7:43:12: 59:11:66:65:c6:c7:82:98:22:63:35:66:23:14:60: 3f:95:81:7e:22:7e:db:a9:da:dc:82:e8:1c:a3:e0: 24:c1:53:fd:40:a8:42:34:5f:60:36:f3:3f:d1:0e: fb:67:78:bc:db:9e:49:f9:89:c2:f3:37:40:ef:77: 7d:ae:f2:4d:88:ca:02:89:6e:65:81:36:ac:a3:f3: 6f:89:22:1d:c9:3c:d5:fc:a4:a0:73:a7:bc:ac:b6: cb:0f:35:05:ac:4b:0f:9d:09:02:22:14:1d:7e:aa: 24:27:9b:c3:82:4d:c5:30:91:95:64:9d:e6:88:6a: f5:a4:b1:40:39:3d:5c:fa:a7:4f:af:4f:2b:54:c1: 2c:0f:44:ed:b0:6d:13:62:bb:b8:18:da:be:30:c4: d0:2e:b5:19:86:09:57:91:90:40:d2:7c:31:35:a1: 4d:ad:2f:4a:05:18:e8:8e:e5:70:0c:50:3a:9c:f3: c5:ce:c3:da:7f:2c:2b:eb:aa:83:bc:ee:ef:c6:16: f9:f9:a1:fa:69:99:ce:92:88:b7:15:0c:b0:ae:be: 75:e0:61:7b:5e:c3:90:de:c5:77:ce:5f:b8:ed:5c: 7f:07:48:51:d0:9e:62:7d:51:8a:55:41:d3:6e:cf: 62:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:65:95:7D:13:39:F3:72:91:46:07:30:30:83:6A:AE:B1:55:77:55 X509v3 Authority Key Identifier: keyid:7D:6E:DF:DB:21:B8:B7:E6:A7:5A:99:0A:7B:EC:AD:85:E8:BE:B9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:9e:87:c0:73:2f:f1:36:65:47:1f:9d:bf:e3:cc:4a:06:86: 0e:85:a5:5e:f8:98:e3:00:7e:b6:07:1e:62:40:b1:0b:d2:60: 46:a0:15:2f:da:1b:60:11:9d:c8:a4:75:53:13:60:10:61:3e: 52:2e:4d:35:ab:53:f8:e9:6b:04:f5:47:16:87:51:9d:31:dc: d7:f8:54:41:b6:74:0e:9b:f2:a9:1a:0b:25:58:b9:ed:0d:cc: 48:44:72:ad:cd:6c:8d:fa:23:13:cd:c7:14:13:11:29:ed:40: 86:2b:8a:8d:43:da:56:bb:b0:87:79:cc:17:7a:6a:b6:40:c9: 9d:23:a9:0b:22:22:7f:96:4e:de:f7:eb:46:da:7f:42:e2:8c: 67:d4:47:47:c3:ec:b7:82:44:00:c4:77:ef:3c:b4:28:20:d6: 93:9f:a2:5a:c7:82:37:6a:e3:5c:22:04:96:e3:44:3b:08:ba: a5:5e:cb:bd:54:96:21:50:e3:57:52:47:ce:4a:94:bb:f2:c1: c6:e8:35:4d:38:f2:c5:d6:4b:c7:5c:98:a0:8d:0f:1e:ac:18: 56:ac:b9:eb:14:58:ca:b8:7e:e2:5d:7d:9d:c2:5d:89:a4:43: ab:5d:cc:d5:b0:da:7d:43:a3:fa:8b:5e:eb:f0:d8:08:82:67: 08:40:65:8a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX8Y8PE1Gv7/rvCgBBenMG/OKbiMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q2RURGREIyMUI4QjdFNkE3NUE5OTBBN0JFQ0FEODVF OEJFQjk1MzAeFw0yNTA4MDYyMTU1MDVaFw0yNTA4MTAwMjM2MDVaMDMxMTAvBgNV BAMTKEU1NjU5NTdEMTMzOUYzNzI5MTQ2MDczMDMwODM2QUFFQjE1NTc3NTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6oVSAD8Op+uDmfqdDElkRZmXG x4KYImM1ZiMUYD+VgX4iftup2tyC6Byj4CTBU/1AqEI0X2A28z/RDvtneLzbnkn5 icLzN0Dvd32u8k2IygKJbmWBNqyj82+JIh3JPNX8pKBzp7ystssPNQWsSw+dCQIi FB1+qiQnm8OCTcUwkZVkneaIavWksUA5PVz6p0+vTytUwSwPRO2wbRNiu7gY2r4w xNAutRmGCVeRkEDSfDE1oU2tL0oFGOiO5XAMUDqc88XOw9p/LCvrqoO87u/GFvn5 ofppmc6SiLcVDLCuvnXgYXtew5DexXfOX7jtXH8HSFHQnmJ9UYpVQdNuz2JnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5WWVfRM583KRRgcwMINqrrFVd1UwHwYDVR0j BBgwFoAUfW7f2yG4t+anWpkKe+ythei+uVMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmM4Y2RhNS0zNDgzLTQyYjAtYjM4NS1mYzA3MDcxNmZiY2MvMC83RDZFREZEQjIx QjhCN0U2QTc1QTk5MEE3QkVDQUQ4NUU4QkVCOTUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q2RURGREIyMUI4QjdFNkE3NUE5OTBBN0JFQ0FEODVFOEJF Qjk1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJjOGNkYTUtMzQ4My00MmIwLWIz ODUtZmMwNzA3MTZmYmNjLzAvN0Q2RURGREIyMUI4QjdFNkE3NUE5OTBBN0JFQ0FE ODVFOEJFQjk1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHCeh8BzL/E2ZUcfnb/jzEoGhg6FpV74mOMA frYHHmJAsQvSYEagFS/aG2ARncikdVMTYBBhPlIuTTWrU/jpawT1RxaHUZ0x3Nf4 VEG2dA6b8qkaCyVYue0NzEhEcq3NbI36IxPNxxQTESntQIYrio1D2la7sId5zBd6 arZAyZ0jqQsiIn+WTt7360baf0LijGfUR0fD7LeCRADEd+88tCgg1pOfolrHgjdq 41wiBJbjRDsIuqVey71UliFQ41dSR85KlLvywcboNU048sXWS8dcmKCNDx6sGFas uesUWMq4fuJdfZ3CXYmkQ6tdzNWw2n1Do/qLXuvw2AiCZwhAZYo= -----END CERTIFICATE-----Generated at Thu Aug 7 00:40:08 2025 by rpki-client