$ rpki-client -vvf repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.mft File: 7376922C93BF667FFBBDAF0735AE73D1451B08C2.mft (raw, json) Hash identifier: xJCcHNTOIpVDu+7DpfWWaOrPIdCZL7ov/y09TmNGfEw= Subject key identifier: AB:28:36:22:6F:7D:C1:7F:6F:0A:76:75:33:9B:97:06:CF:1C:F1:08 Authority key identifier: 73:76:92:2C:93:BF:66:7F:FB:BD:AF:07:35:AE:73:D1:45:1B:08:C2 Certificate issuer: /CN=7376922C93BF667FFBBDAF0735AE73D1451B08C2 Certificate serial: 54A263045B1852F8023928E1E39A5F55083378F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7376922C93BF667FFBBDAF0735AE73D1451B08C2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.mft Manifest number: 04EA Signing time: Wed 06 Aug 2025 01:50:54 +0000 Manifest this update: Wed 06 Aug 2025 01:45:54 +0000 Manifest next update: Sat 09 Aug 2025 10:59:54 +0000 Files and hashes: 1: 3130332e38392e3135342e302f32342d3234203d3e20313333383030.roa (hash: 21L4D1hu21+7UR3Mn3cvc8Jhs/U+RaE8nhEhhkQ5YEA=) 2: 3130332e38392e3136342e302f32342d3234203d3e20313333383030.roa (hash: +2SP7VdADvevew0k00TuxJ1WZ3WZFkGqu4JZIMGxgpw=) 3: 3130332e38392e3136352e302f32342d3234203d3e20313333383030.roa (hash: 0V79HEBuKR1jbK8PkSQwyA4BziEgKvO+/ItR4BkRmQg=) 4: 7376922C93BF667FFBBDAF0735AE73D1451B08C2.crl (hash: pYHTc6unLCjEa5aVA03BsoSUIvoMAuda6dKCgsv6HAk=) 5: 3130332e372e3137362e302f32342d3234203d3e20313336303830.roa (hash: pULFJZ+nbfV5jOVZtN4jB+N6TsIyKwD9xJ39aFL57ak=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.crl rsync://repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7376922C93BF667FFBBDAF0735AE73D1451B08C2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 10:59:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:a2:63:04:5b:18:52:f8:02:39:28:e1:e3:9a:5f:55:08:33:78:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7376922C93BF667FFBBDAF0735AE73D1451B08C2 Validity Not Before: Aug 6 01:45:54 2025 GMT Not After : Aug 9 10:59:54 2025 GMT Subject: CN=AB2836226F7DC17F6F0A7675339B9706CF1CF108 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:e8:45:87:ee:90:19:8a:91:68:4b:88:60:b6: 4d:b2:d0:f0:c1:69:73:e1:24:2a:6b:57:87:6d:86: 84:b7:6b:cd:f6:5f:65:5d:c8:a1:fd:c7:59:a6:f9: 9e:45:ca:af:44:f4:fd:86:b7:16:be:42:c5:75:56: 46:34:34:db:29:da:b2:7d:1f:6c:a9:ee:5d:41:a8: 53:58:de:10:0e:b6:1d:22:2f:fc:99:62:3c:40:f5: e9:bd:02:7e:ab:44:79:a0:de:6d:1c:0c:15:f1:88: d6:53:c6:32:54:a2:d9:77:1f:36:09:bb:b2:3b:30: 0c:57:eb:d9:92:8e:a2:b9:eb:8b:de:92:7f:b6:63: 14:cb:b3:71:a2:0e:2b:ae:f2:1c:bb:31:95:0b:76: 66:1d:1c:7f:f1:8d:88:19:b8:d1:20:39:61:49:b9: 05:7d:8a:ea:26:6d:37:fa:88:0e:dc:e8:be:ba:d2: 00:97:62:d4:ad:8e:93:3a:b3:5c:d5:99:51:e1:be: 19:b2:7d:29:ca:17:cd:0f:d0:44:e4:b7:5e:94:c0: 8e:db:5b:5a:f8:9c:e2:ba:91:c1:2f:25:ac:f3:ac: f2:9c:aa:94:f2:6e:b8:72:34:2b:38:f5:8d:f3:55: 9a:2a:c1:fc:ce:0b:2b:45:c9:23:c3:ce:49:03:46: 10:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:28:36:22:6F:7D:C1:7F:6F:0A:76:75:33:9B:97:06:CF:1C:F1:08 X509v3 Authority Key Identifier: keyid:73:76:92:2C:93:BF:66:7F:FB:BD:AF:07:35:AE:73:D1:45:1B:08:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7376922C93BF667FFBBDAF0735AE73D1451B08C2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:9d:7a:d9:63:ec:c7:dd:ff:f6:80:b2:9d:a2:21:a9:e4:27: f2:76:d0:09:08:f8:dc:9d:b1:4c:7c:af:e2:eb:bf:72:81:80: 63:74:f1:d0:eb:b2:6a:a0:64:c0:28:8b:90:3e:6e:5b:70:cf: eb:90:03:06:6d:bb:e7:b3:13:1d:c7:9d:72:c5:38:73:2a:13: f7:96:29:9f:49:b7:92:10:bb:36:7e:f4:a0:f1:db:05:ce:1f: 65:a6:da:5d:05:4b:57:80:46:b5:29:d6:2b:1a:d2:39:83:45: 33:0a:d0:a3:28:3c:5b:dc:28:8d:91:e2:66:2c:39:58:e2:c2: 65:57:6c:54:07:a8:03:4b:b1:36:47:ea:c7:b5:49:f3:a9:0d: 12:3f:a9:76:c1:48:02:bd:50:14:ef:2e:aa:0e:28:de:b9:c7: bb:55:bf:19:68:1c:3b:b0:fc:c0:6f:e0:b1:1b:71:15:67:1a: 11:c3:96:56:d6:a3:ea:3d:05:dc:46:18:20:40:ef:31:db:9a: 98:a2:d5:2d:ce:63:2e:31:42:e3:d0:5f:a5:51:d7:14:4f:0b: 4d:6a:05:59:4e:82:f6:b5:a2:96:f9:6d:58:2e:93:de:f8:63: 06:6f:d0:b5:95:02:14:69:21:ec:99:af:9c:e9:65:63:cf:84: b0:6a:60:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVKJjBFsYUvgCOSjh45pfVQgzePQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzM3NjkyMkM5M0JGNjY3RkZCQkRBRjA3MzVBRTczRDE0 NTFCMDhDMjAeFw0yNTA4MDYwMTQ1NTRaFw0yNTA4MDkxMDU5NTRaMDMxMTAvBgNV BAMTKEFCMjgzNjIyNkY3REMxN0Y2RjBBNzY3NTMzOUI5NzA2Q0YxQ0YxMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCa6EWH7pAZipFoS4hgtk2y0PDB aXPhJCprV4dthoS3a832X2VdyKH9x1mm+Z5Fyq9E9P2Gtxa+QsV1VkY0NNsp2rJ9 H2yp7l1BqFNY3hAOth0iL/yZYjxA9em9An6rRHmg3m0cDBXxiNZTxjJUotl3HzYJ u7I7MAxX69mSjqK564vekn+2YxTLs3GiDiuu8hy7MZULdmYdHH/xjYgZuNEgOWFJ uQV9iuombTf6iA7c6L660gCXYtStjpM6s1zVmVHhvhmyfSnKF80P0ETkt16UwI7b W1r4nOK6kcEvJazzrPKcqpTybrhyNCs49Y3zVZoqwfzOCytFySPDzkkDRhA9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqyg2Im99wX9vCnZ1M5uXBs8c8QgwHwYDVR0j BBgwFoAUc3aSLJO/Zn/7va8HNa5z0UUbCMIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDE3NmRkZC1hOTgwLTQzZDYtOTRhNy05NWVlZGE1Mzk2NjUvMC83Mzc2OTIyQzkz QkY2NjdGRkJCREFGMDczNUFFNzNEMTQ1MUIwOEMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzM3NjkyMkM5M0JGNjY3RkZCQkRBRjA3MzVBRTczRDE0NTFC MDhDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQxNzZkZGQtYTk4MC00M2Q2LTk0 YTctOTVlZWRhNTM5NjY1LzAvNzM3NjkyMkM5M0JGNjY3RkZCQkRBRjA3MzVBRTcz RDE0NTFCMDhDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALKdetlj7Mfd//aAsp2iIankJ/J20AkI+Nyd sUx8r+Lrv3KBgGN08dDrsmqgZMAoi5A+bltwz+uQAwZtu+ezEx3HnXLFOHMqE/eW KZ9Jt5IQuzZ+9KDx2wXOH2Wm2l0FS1eARrUp1isa0jmDRTMK0KMoPFvcKI2R4mYs OVjiwmVXbFQHqANLsTZH6se1SfOpDRI/qXbBSAK9UBTvLqoOKN65x7tVvxloHDuw /MBv4LEbcRVnGhHDllbWo+o9BdxGGCBA7zHbmpii1S3OYy4xQuPQX6VR1xRPC01q BVlOgva1opb5bVguk974YwZv0LWVAhRpIeyZr5zpZWPPhLBqYOg= -----END CERTIFICATE-----Generated at Thu Aug 7 07:29:58 2025 by rpki-client