$ rpki-client -vvf repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft File: D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft (raw, json) Hash identifier: 0rUQhM+uN2VeA3T8ahCezPbSvALvXf/NQzZd7Bx0P8o= Subject key identifier: 6A:0F:D5:32:50:ED:21:CE:7D:23:71:0D:8A:DA:F2:3A:CE:3D:CB:ED Authority key identifier: D7:C7:C6:E5:33:C4:1C:36:D9:23:CD:C5:9F:FC:1B:04:36:C3:9F:AF Certificate issuer: /CN=D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF Certificate serial: 1E89A1971A0BD3FFBB23B8ECC5D728025EA92B57 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft Manifest number: 0253 Signing time: Fri 08 Aug 2025 07:51:39 +0000 Manifest this update: Fri 08 Aug 2025 07:46:39 +0000 Manifest next update: Mon 11 Aug 2025 12:09:39 +0000 Files and hashes: 1: 3130332e3130322e3137362e302f32342d3234203d3e20313335343634.roa (hash: /nnnpT4J0Tuu/cwXNYMkIuOZtyJHbw8wTsT308/p5rw=) 2: 3130332e3130322e3137372e302f32342d3234203d3e20313335343634.roa (hash: oHkNyUxZ+91xlNVhfeWI9Dc0rmMp8x6qN96DcYOObkU=) 3: D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.crl (hash: DzYs2BN0WXQT3MayDrlKSFdM9PVyrNLOkWwRMqBVYDM=) 4: 3130332e3130322e3136372e302f32342d3234203d3e20313335343634.roa (hash: G2Aj1Erzi22dbwXIe5ZKOYeLnX3IptEzXgXL9BU+vU0=) 5: 3130332e37302e36382e302f32342d3234203d3e20313335343634.roa (hash: 2CoQGk4NMRfUrYnvT/UZsUPUuE84h2TZeseeJ7TfgPk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.crl rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 12:09:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:89:a1:97:1a:0b:d3:ff:bb:23:b8:ec:c5:d7:28:02:5e:a9:2b:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF Validity Not Before: Aug 8 07:46:39 2025 GMT Not After : Aug 11 12:09:39 2025 GMT Subject: CN=6A0FD53250ED21CE7D23710D8ADAF23ACE3DCBED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:8a:1a:bc:c7:5f:97:0c:4d:31:0b:aa:85:d5: 6c:b9:75:a0:68:26:c0:d3:fe:4f:43:e5:35:07:47: 7e:a5:df:53:67:62:5a:e8:9e:64:74:7a:8e:5e:c4: cf:08:45:53:c4:09:4f:bf:7a:38:f0:c7:69:bd:15: 7f:f6:5c:eb:8a:4a:a3:59:d6:0c:98:d8:cf:74:1b: 57:45:7a:79:b6:8d:c6:5e:69:84:e9:36:25:af:fa: b6:61:f8:2b:4e:f2:fa:dc:1c:f5:40:e9:84:97:e6: 26:a7:c0:f0:bd:7a:af:37:15:c5:8c:5e:02:da:12: 51:c1:2d:f6:97:54:94:6e:d2:1e:a8:13:2d:ef:b4: 4e:22:55:af:e5:06:76:ca:1d:39:b2:7c:d6:47:25: 8e:83:30:a9:2f:b2:a0:bb:b8:29:1a:7b:d3:da:e3: b5:57:95:9e:c4:41:3b:93:b8:f1:14:e3:3e:e0:1e: 42:3f:92:61:5b:73:d4:c2:5e:7a:41:45:17:07:77: 58:ec:98:05:a3:38:cc:b5:38:30:15:80:a2:32:10: 92:24:1a:b6:8b:13:15:53:dd:aa:b6:c3:cb:f6:d1: 0a:a2:7a:90:a5:e8:06:a2:2c:b8:7c:bb:77:24:b4: 15:00:19:a5:dd:32:58:73:82:cf:a2:27:0b:3f:66: 63:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:0F:D5:32:50:ED:21:CE:7D:23:71:0D:8A:DA:F2:3A:CE:3D:CB:ED X509v3 Authority Key Identifier: keyid:D7:C7:C6:E5:33:C4:1C:36:D9:23:CD:C5:9F:FC:1B:04:36:C3:9F:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:23:e7:28:0f:33:13:3c:f0:a3:e3:ec:e3:5b:e2:d5:26:88: fb:23:4a:ce:ce:8a:09:39:b0:e9:77:cc:4b:9a:24:38:90:f4: 29:0c:84:21:52:25:df:d7:3b:f8:04:f9:64:26:55:0b:45:bf: 7f:59:50:c2:06:f9:70:ae:29:5a:64:08:2b:52:07:20:56:a6: 34:a0:b9:4a:fc:17:79:26:80:fd:c7:e6:97:77:d9:57:b3:37: 8e:55:0e:44:b4:70:1f:39:47:b8:4d:5b:28:02:cb:1f:38:0d: a5:e4:72:b6:ac:b8:69:ec:d5:25:6a:6c:42:02:2e:1d:f5:6a: 4a:2f:2f:54:7d:3e:ef:cf:97:49:63:e9:03:41:0d:7c:1e:db: 49:bc:93:4b:cc:bd:00:35:b6:a6:ea:b5:ca:4f:a7:85:1f:9b: a1:c7:5f:df:20:7d:3f:8f:10:4c:7c:5e:4c:95:14:0c:21:a5: 7d:be:35:c8:da:29:b2:f4:7c:97:fa:e4:9f:e9:78:82:10:8d: f6:7d:2f:7d:b2:2f:6b:8c:65:fc:ed:12:df:bb:d9:3a:e9:a5: 38:9a:af:dc:5e:44:1e:27:fc:c8:56:46:35:a5:17:1d:4f:ad: ef:05:d1:2c:07:07:43:ba:b3:22:80:ae:7c:7c:61:9b:59:f1: 12:8d:35:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHomhlxoL0/+7I7jsxdcoAl6pK1cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdDN0M2RTUzM0M0MUMzNkQ5MjNDREM1OUZGQzFCMDQz NkMzOUZBRjAeFw0yNTA4MDgwNzQ2MzlaFw0yNTA4MTExMjA5MzlaMDMxMTAvBgNV BAMTKDZBMEZENTMyNTBFRDIxQ0U3RDIzNzEwRDhBREFGMjNBQ0UzRENCRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZihq8x1+XDE0xC6qF1Wy5daBo JsDT/k9D5TUHR36l31NnYlronmR0eo5exM8IRVPECU+/ejjwx2m9FX/2XOuKSqNZ 1gyY2M90G1dFenm2jcZeaYTpNiWv+rZh+CtO8vrcHPVA6YSX5ianwPC9eq83FcWM XgLaElHBLfaXVJRu0h6oEy3vtE4iVa/lBnbKHTmyfNZHJY6DMKkvsqC7uCkae9Pa 47VXlZ7EQTuTuPEU4z7gHkI/kmFbc9TCXnpBRRcHd1jsmAWjOMy1ODAVgKIyEJIk GraLExVT3aq2w8v20QqiepCl6AaiLLh8u3cktBUAGaXdMlhzgs+iJws/ZmMDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUag/VMlDtIc59I3ENitryOs49y+0wHwYDVR0j BBgwFoAU18fG5TPEHDbZI83Fn/wbBDbDn68wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTlhODUzOC1kYTQzLTQxNTgtYWJjMi04ZTYzYThlNDA4OTkvMC9EN0M3QzZFNTMz QzQxQzM2RDkyM0NEQzU5RkZDMUIwNDM2QzM5RkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDdDN0M2RTUzM0M0MUMzNkQ5MjNDREM1OUZGQzFCMDQzNkMz OUZBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTE5YTg1MzgtZGE0My00MTU4LWFi YzItOGU2M2E4ZTQwODk5LzAvRDdDN0M2RTUzM0M0MUMzNkQ5MjNDREM1OUZGQzFC MDQzNkMzOUZBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIwj5ygPMxM88KPj7ONb4tUmiPsjSs7Oigk5 sOl3zEuaJDiQ9CkMhCFSJd/XO/gE+WQmVQtFv39ZUMIG+XCuKVpkCCtSByBWpjSg uUr8F3kmgP3H5pd32VezN45VDkS0cB85R7hNWygCyx84DaXkcrasuGns1SVqbEIC Lh31akovL1R9Pu/Pl0lj6QNBDXwe20m8k0vMvQA1tqbqtcpPp4Ufm6HHX98gfT+P EEx8XkyVFAwhpX2+NcjaKbL0fJf65J/peIIQjfZ9L32yL2uMZfztEt+72TrppTia r9xeRB4n/MhWRjWlFx1Pre8F0SwHB0O6syKArnx8YZtZ8RKNNSo= -----END CERTIFICATE-----Generated at Sun Aug 10 05:35:47 2025 by rpki-client