$ rpki-client -vvf repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft File: 7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft (raw, json) Hash identifier: KtZ8ZOLgNHgSK6N9jKOWI3B3Dr/zgUi42HixsP7zTAA= Subject key identifier: E6:8B:CA:63:40:CF:58:F2:B1:E2:07:2C:2A:F0:47:B5:53:BF:B0:57 Authority key identifier: 7D:5A:E0:85:96:8D:C7:CB:31:10:23:F7:EB:E0:BF:8E:12:67:06:E4 Certificate issuer: /CN=7D5AE085968DC7CB311023F7EBE0BF8E126706E4 Certificate serial: 3509A2ED9CB4B7D86A98C056FF96E2B4393EBCC1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft Manifest number: 7B Signing time: Sun 10 Aug 2025 13:02:20 +0000 Manifest this update: Sun 10 Aug 2025 12:57:20 +0000 Manifest next update: Wed 13 Aug 2025 19:38:20 +0000 Files and hashes: 1: 3130332e38372e3139382e302f32342d3234203d3e20313336303837.roa (hash: V4UBKbCeji0pbV7a6XBtcRsd6l6kzHNKhpG08xb4pYs=) 2: 3130332e38372e3139362e302f32342d3234203d3e20313336303837.roa (hash: PKJay4YTUMIamculUnWc/1iHvOFg1R7DDFoaRZ7eMb0=) 3: 3130332e38372e3139372e302f32342d3234203d3e20313336303837.roa (hash: QdxrdH7DJeQ01d2yPs/0LNDYNMsAKR57bx9AHeSr82o=) 4: 7D5AE085968DC7CB311023F7EBE0BF8E126706E4.crl (hash: sutJi9VYpgix4TmMugtpikxs0n3Xw0Pc99WyM8Gppkc=) 5: 3130332e38372e3139392e302f32342d3234203d3e20313336303837.roa (hash: H2vMbusg9cc7KJr3RTfXCg88poNhf1lCs+Xogw0psfI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.crl rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 13 Aug 2025 19:38:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:09:a2:ed:9c:b4:b7:d8:6a:98:c0:56:ff:96:e2:b4:39:3e:bc:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D5AE085968DC7CB311023F7EBE0BF8E126706E4 Validity Not Before: Aug 10 12:57:20 2025 GMT Not After : Aug 13 19:38:20 2025 GMT Subject: CN=E68BCA6340CF58F2B1E2072C2AF047B553BFB057 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:bd:95:20:2e:d2:eb:9d:ee:68:86:20:42:f5: b5:19:46:57:3d:2e:83:34:85:8b:0a:0d:26:24:f0: 91:e3:62:bd:f0:1b:b7:c3:be:5a:ec:8a:6e:7b:bc: f0:68:02:a8:66:c3:05:24:39:c6:b6:da:31:4c:8a: 5b:b7:00:ca:26:a5:97:f3:7a:99:9b:37:53:84:e4: e2:6d:b2:e1:00:db:ba:f2:60:2f:e1:e8:6b:d3:a0: fd:70:bc:7f:e3:3b:b6:1b:76:aa:4b:dc:60:72:64: 33:61:dc:63:a6:3a:e1:35:3a:7e:cd:ca:4c:5f:a9: 42:39:bc:a9:18:6a:b5:7f:a2:82:f0:21:40:72:49: 06:e4:16:58:74:a5:f9:ea:47:14:77:26:9a:82:20: a3:a1:c5:30:5d:82:e3:b6:41:74:c2:5b:a6:0a:00: ab:1b:a2:18:87:39:2e:da:63:dc:7f:b9:da:5e:9a: 99:df:f5:82:bc:b3:d9:ce:fb:ae:fd:02:48:7a:36: 85:70:20:d8:43:bd:fb:6b:63:5a:7c:4a:ce:b6:ab: 07:32:cb:c4:c1:5f:84:30:72:18:2b:65:65:cf:32: 1b:1b:32:fe:7b:c4:dc:d8:db:71:af:d3:f7:82:f5: f1:11:da:04:27:22:ad:04:8f:92:bb:b9:fe:79:5a: 31:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:8B:CA:63:40:CF:58:F2:B1:E2:07:2C:2A:F0:47:B5:53:BF:B0:57 X509v3 Authority Key Identifier: keyid:7D:5A:E0:85:96:8D:C7:CB:31:10:23:F7:EB:E0:BF:8E:12:67:06:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:36:b9:8c:f6:f6:0f:a9:3c:09:a5:5e:e8:b5:dd:d9:00:d1: 74:0e:4c:6b:f0:11:f0:3c:7b:a6:87:9c:d6:51:bf:92:a8:d8: 88:e9:8c:7d:fc:2a:23:9d:e4:d4:33:ba:38:09:bd:da:36:08: e2:aa:f5:8c:c8:8f:ff:10:d4:13:29:bd:69:42:0e:c2:e4:52: 78:42:48:77:a5:ec:c4:a2:bb:7c:ae:bd:21:f6:43:ce:69:7b: 8e:dc:85:cc:d4:ed:4b:d6:20:03:40:7b:6f:32:57:cb:9c:93: 51:74:e7:8c:ff:8e:be:d6:ee:5d:8a:9b:17:c0:86:c5:dd:27: e4:5a:d6:47:b8:23:cc:50:31:49:11:b4:d5:a6:9b:83:22:ce: 54:22:09:b8:1c:e0:b4:87:67:01:f7:55:75:39:3d:db:74:f7: 78:84:d2:2b:17:e5:9e:f6:bc:71:05:35:73:bf:6a:c4:77:4f: 22:dd:d5:8b:a4:24:ab:e7:85:4a:09:10:d6:3b:4e:43:c9:04: b9:ff:cd:d7:bc:32:76:10:42:12:b6:13:6f:fb:67:19:5f:80: ce:e6:5b:78:4a:03:37:fd:ce:7a:92:71:27:89:77:48:09:b8: f5:ba:b1:93:0c:b9:2f:43:51:d7:8a:3b:ec:8c:bf:69:60:a0: 22:27:76:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNQmi7Zy0t9hqmMBW/5bitDk+vMEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q1QUUwODU5NjhEQzdDQjMxMTAyM0Y3RUJFMEJGOEUx MjY3MDZFNDAeFw0yNTA4MTAxMjU3MjBaFw0yNTA4MTMxOTM4MjBaMDMxMTAvBgNV BAMTKEU2OEJDQTYzNDBDRjU4RjJCMUUyMDcyQzJBRjA0N0I1NTNCRkIwNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrvZUgLtLrne5ohiBC9bUZRlc9 LoM0hYsKDSYk8JHjYr3wG7fDvlrsim57vPBoAqhmwwUkOca22jFMilu3AMompZfz epmbN1OE5OJtsuEA27ryYC/h6GvToP1wvH/jO7YbdqpL3GByZDNh3GOmOuE1On7N ykxfqUI5vKkYarV/ooLwIUBySQbkFlh0pfnqRxR3JpqCIKOhxTBdguO2QXTCW6YK AKsbohiHOS7aY9x/udpempnf9YK8s9nO+679Akh6NoVwINhDvftrY1p8Ss62qwcy y8TBX4QwchgrZWXPMhsbMv57xNzY23Gv0/eC9fER2gQnIq0Ej5K7uf55WjFRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5ovKY0DPWPKx4gcsKvBHtVO/sFcwHwYDVR0j BBgwFoAUfVrghZaNx8sxECP36+C/jhJnBuQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NmU2M2NkMi1mYjNjLTQxYjItYjk2Yi1hYjIzNDQyMGEyMTEvMC83RDVBRTA4NTk2 OERDN0NCMzExMDIzRjdFQkUwQkY4RTEyNjcwNkU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q1QUUwODU5NjhEQzdDQjMxMTAyM0Y3RUJFMEJGOEUxMjY3 MDZFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTZlNjNjZDItZmIzYy00MWIyLWI5 NmItYWIyMzQ0MjBhMjExLzAvN0Q1QUUwODU5NjhEQzdDQjMxMTAyM0Y3RUJFMEJG OEUxMjY3MDZFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD42uYz29g+pPAmlXui13dkA0XQOTGvwEfA8 e6aHnNZRv5Ko2IjpjH38KiOd5NQzujgJvdo2COKq9YzIj/8Q1BMpvWlCDsLkUnhC SHel7MSiu3yuvSH2Q85pe47chczU7UvWIANAe28yV8uck1F054z/jr7W7l2KmxfA hsXdJ+Ra1ke4I8xQMUkRtNWmm4MizlQiCbgc4LSHZwH3VXU5Pdt093iE0isX5Z72 vHEFNXO/asR3TyLd1YukJKvnhUoJENY7TkPJBLn/zde8MnYQQhK2E2/7ZxlfgM7m W3hKAzf9znqScSeJd0gJuPW6sZMMuS9DUdeKO+yMv2lgoCIndqk= -----END CERTIFICATE-----Generated at Mon Aug 11 05:52:28 2025 by rpki-client