$ rpki-client -vvf repo-rpki.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.mft File: 7008868799E77C42E437F0D7ACCF683CF5B2AA4E.mft (raw, json) Hash identifier: 9/mkW9LNIyS7aRUfev4niKP7Y30HOV7yJOmd3z4oF4w= Subject key identifier: 8F:26:F6:89:1F:8F:DB:7A:50:D8:04:CD:3F:E3:A5:38:EC:FE:65:29 Authority key identifier: 70:08:86:87:99:E7:7C:42:E4:37:F0:D7:AC:CF:68:3C:F5:B2:AA:4E Certificate issuer: /CN=7008868799E77C42E437F0D7ACCF683CF5B2AA4E Certificate serial: 419F4DC2C0F8A8C8737DB5D4FF747F2C29D6D925 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.mft Manifest number: 0490 Signing time: Thu 07 Aug 2025 02:11:19 +0000 Manifest this update: Thu 07 Aug 2025 02:06:19 +0000 Manifest next update: Sun 10 Aug 2025 03:26:19 +0000 Files and hashes: 1: 3130332e3134362e3139362e302f32342d3234203d3e20313339393431.roa (hash: V1cdbz2B4KnRWdpevX8pRA5Z1G9fpGPOBnApCOURAWY=) 2: 3130332e3134362e3139372e302f32342d3234203d3e20313339393431.roa (hash: a9rim8XhPQdPBnTRrhUohzYt6GpGCVRMKh2SkMkG9T8=) 3: 3130332e3134362e3139362e302f32332d3233203d3e20313339393431.roa (hash: lIIq1aJkVgn61JdaqWdkMl1np7mlcmVrzeimT0s2k+E=) 4: 7008868799E77C42E437F0D7ACCF683CF5B2AA4E.crl (hash: zQc6/99ALJeVp7EH3qrnA2ICQ/Qs2DO5l0xSSyml+EM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.crl rsync://repo-rpki.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 03:26:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:9f:4d:c2:c0:f8:a8:c8:73:7d:b5:d4:ff:74:7f:2c:29:d6:d9:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7008868799E77C42E437F0D7ACCF683CF5B2AA4E Validity Not Before: Aug 7 02:06:19 2025 GMT Not After : Aug 10 03:26:19 2025 GMT Subject: CN=8F26F6891F8FDB7A50D804CD3FE3A538ECFE6529 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:60:4d:c5:6d:94:5d:3f:22:be:be:96:3e:71: 28:64:74:93:80:4d:b8:22:1c:4e:0d:9b:2b:7a:63: 4e:72:5c:94:79:90:79:83:3b:72:85:1e:21:aa:07: 56:28:97:35:ef:19:86:e8:dd:ce:b8:3b:32:78:6e: 89:f5:97:13:bf:ea:01:0f:06:bf:f2:43:f5:fb:31: 00:63:e6:03:ed:be:84:c3:96:db:0c:da:04:07:6b: e3:8b:5c:2b:d0:a4:ec:27:bb:6a:f5:bf:88:37:02: 31:ea:d1:0e:31:60:d3:93:36:db:4d:6b:e9:cb:84: bc:87:37:39:d6:4e:6f:e8:79:6c:0b:d2:18:cb:45: 2c:a6:75:0d:e8:12:05:38:15:23:85:6a:62:68:f0: 3d:b5:9b:37:de:27:84:52:9a:f0:ed:85:75:30:7d: 75:b6:d5:be:00:70:d3:81:f1:27:15:c6:62:b6:d0: 46:1d:3f:3c:86:aa:87:14:3f:1b:16:fd:21:9a:fa: e4:d6:b3:aa:5e:ef:b9:9b:a7:7b:5f:dc:d5:b0:7b: f5:56:c7:e6:0d:71:dd:9f:97:10:33:1c:9e:c9:f7: 10:4f:b6:94:2e:b7:0d:79:38:62:90:83:8b:52:73: f6:fe:4d:42:a0:f8:2c:87:d6:5b:66:4a:84:97:07: 71:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:26:F6:89:1F:8F:DB:7A:50:D8:04:CD:3F:E3:A5:38:EC:FE:65:29 X509v3 Authority Key Identifier: keyid:70:08:86:87:99:E7:7C:42:E4:37:F0:D7:AC:CF:68:3C:F5:B2:AA:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:6c:21:03:d2:d9:92:52:db:15:4a:07:15:d4:9a:14:ca:db: 6d:bf:21:14:06:51:70:dc:15:12:11:5f:63:22:8b:4d:38:6c: 25:39:93:66:c3:f6:e8:f9:89:ca:5e:0c:1b:6c:67:01:7a:b5: 08:0d:c4:3a:1d:5c:ee:ef:e2:9a:7b:de:8d:df:e0:fc:50:b8: ca:fe:23:9f:04:db:e7:c0:c1:f0:c6:ec:6d:32:6e:a2:57:07: 35:6d:b6:0b:14:94:4f:db:61:d6:df:3e:6b:e8:48:29:f7:65: b6:8b:a2:7e:ca:a3:8a:b5:a8:66:28:17:aa:35:f7:9f:a8:9c: 24:9b:43:eb:44:d7:c6:4f:21:a8:bc:64:92:1f:31:ac:b0:78: bb:0b:ff:7f:24:a3:66:d1:6a:79:17:db:6f:34:aa:32:9f:c8: 3c:20:96:83:47:26:c6:25:b8:31:8f:e9:a8:bc:5e:12:30:02: 20:18:9e:49:91:7d:2d:86:88:8d:e9:61:9f:06:f8:41:4f:e6: cb:f2:d3:59:6e:a2:6e:54:b5:3e:c8:83:cd:19:e7:16:be:6c: 46:a6:6f:bb:4d:13:ec:0a:ad:8f:19:55:19:8d:10:50:2a:60: 5d:17:80:c0:3d:aa:5b:53:6d:e8:64:6f:2f:fe:56:f6:23:01: 18:44:36:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQZ9NwsD4qMhzfbXU/3R/LCnW2SUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAwODg2ODc5OUU3N0M0MkU0MzdGMEQ3QUNDRjY4M0NG NUIyQUE0RTAeFw0yNTA4MDcwMjA2MTlaFw0yNTA4MTAwMzI2MTlaMDMxMTAvBgNV BAMTKDhGMjZGNjg5MUY4RkRCN0E1MEQ4MDRDRDNGRTNBNTM4RUNGRTY1MjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChYE3FbZRdPyK+vpY+cShkdJOA TbgiHE4Nmyt6Y05yXJR5kHmDO3KFHiGqB1YolzXvGYbo3c64OzJ4bon1lxO/6gEP Br/yQ/X7MQBj5gPtvoTDltsM2gQHa+OLXCvQpOwnu2r1v4g3AjHq0Q4xYNOTNttN a+nLhLyHNznWTm/oeWwL0hjLRSymdQ3oEgU4FSOFamJo8D21mzfeJ4RSmvDthXUw fXW21b4AcNOB8ScVxmK20EYdPzyGqocUPxsW/SGa+uTWs6pe77mbp3tf3NWwe/VW x+YNcd2flxAzHJ7J9xBPtpQutw15OGKQg4tSc/b+TUKg+CyH1ltmSoSXB3G1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjyb2iR+P23pQ2ATNP+OlOOz+ZSkwHwYDVR0j BBgwFoAUcAiGh5nnfELkN/DXrM9oPPWyqk4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MzUwNDhjNi04Y2NkLTQ2M2QtYWQzNC1hZTc0Mjg2NDdhOWMvMC83MDA4ODY4Nzk5 RTc3QzQyRTQzN0YwRDdBQ0NGNjgzQ0Y1QjJBQTRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzAwODg2ODc5OUU3N0M0MkU0MzdGMEQ3QUNDRjY4M0NGNUIy QUE0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODM1MDQ4YzYtOGNjZC00NjNkLWFk MzQtYWU3NDI4NjQ3YTljLzAvNzAwODg2ODc5OUU3N0M0MkU0MzdGMEQ3QUNDRjY4 M0NGNUIyQUE0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADJsIQPS2ZJS2xVKBxXUmhTK222/IRQGUXDc FRIRX2Mii004bCU5k2bD9uj5icpeDBtsZwF6tQgNxDodXO7v4pp73o3f4PxQuMr+ I58E2+fAwfDG7G0ybqJXBzVttgsUlE/bYdbfPmvoSCn3ZbaLon7Ko4q1qGYoF6o1 95+onCSbQ+tE18ZPIai8ZJIfMayweLsL/38ko2bRankX2280qjKfyDwgloNHJsYl uDGP6ai8XhIwAiAYnkmRfS2GiI3pYZ8G+EFP5svy01luom5UtT7Ig80Z5xa+bEam b7tNE+wKrY8ZVRmNEFAqYF0XgMA9qltTbehkby/+VvYjARhENi8= -----END CERTIFICATE-----Generated at Sat Aug 9 01:24:07 2025 by rpki-client