$ rpki-client -vvf repo-rpki.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.mft File: 007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.mft (raw, json) Hash identifier: tb9N5cxS2hsD8R11IR52ImGcNskMkJ1eSAJ72bAtrIc= Subject key identifier: 13:6B:75:F1:33:A1:A2:82:81:FB:0D:1C:4D:CC:AA:D5:B7:A8:B0:E4 Authority key identifier: 00:7C:91:B0:49:F7:35:F7:1F:2B:E8:CF:92:AE:AA:53:8D:6B:1F:0B Certificate issuer: /CN=007C91B049F735F71F2BE8CF92AEAA538D6B1F0B Certificate serial: 053264002DDED8DB846F28E84A300F6A7DEF773C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.mft Manifest number: 0129 Signing time: Thu 07 Aug 2025 20:22:18 +0000 Manifest this update: Thu 07 Aug 2025 20:17:18 +0000 Manifest next update: Mon 11 Aug 2025 03:35:18 +0000 Files and hashes: 1: 3130332e35382e3130342e302f32322d3234203d3e20313333383334.roa (hash: 50H8I9ev+6h3z0JMqGqieFay02FbZ2ohx0kZUlhDVNI=) 2: 007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.crl (hash: aIPT6WH87v3J9Mk3IBElmUBjXTSAg+J0bRcyUqVcDQg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.crl rsync://repo-rpki.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 03:35:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:32:64:00:2d:de:d8:db:84:6f:28:e8:4a:30:0f:6a:7d:ef:77:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=007C91B049F735F71F2BE8CF92AEAA538D6B1F0B Validity Not Before: Aug 7 20:17:18 2025 GMT Not After : Aug 11 03:35:18 2025 GMT Subject: CN=136B75F133A1A28281FB0D1C4DCCAAD5B7A8B0E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dc:35:7c:af:e7:6f:d9:a7:94:49:f8:85:1b:ec: 1c:6e:b4:c5:94:ac:5e:cb:75:b4:d7:f8:8e:2e:d9: b5:ac:a0:ed:6a:63:ff:40:8b:5b:87:2a:4a:90:29: b0:e0:12:8d:6f:7b:e4:7a:d1:52:5e:ee:9b:7c:29: 7d:2c:78:1f:fb:30:9c:4a:99:a8:95:99:81:2e:d3: d3:fd:ce:4b:b5:88:a8:84:dc:8b:f2:31:ba:5b:24: a0:e0:6b:e0:92:0b:86:9f:27:ac:0f:96:08:a9:16: 0a:1f:e2:b0:0a:bd:aa:23:2f:34:ec:e9:24:5a:c8: 82:32:29:ba:4b:e7:6b:7f:ac:19:ec:66:6d:3c:be: 33:69:26:17:d9:7f:41:bc:53:80:bf:58:6d:1d:3e: 12:71:b1:c7:62:ee:3c:14:20:57:ac:bc:f1:8d:7d: 26:84:0c:9a:0c:ce:35:40:68:a6:95:15:e2:3b:ab: 9c:a3:a1:1c:0e:ee:d1:74:84:83:e3:1a:15:4d:6a: 83:34:6d:82:80:23:13:c1:08:14:57:c6:be:0d:fb: 21:b5:68:78:37:7e:48:98:96:35:f0:a9:55:eb:78: d5:4e:d7:b4:df:9c:97:a9:bf:dd:38:13:e4:52:60: 7d:b6:6e:d2:5d:6f:da:0b:64:49:ec:b2:2d:30:49: ae:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:6B:75:F1:33:A1:A2:82:81:FB:0D:1C:4D:CC:AA:D5:B7:A8:B0:E4 X509v3 Authority Key Identifier: keyid:00:7C:91:B0:49:F7:35:F7:1F:2B:E8:CF:92:AE:AA:53:8D:6B:1F:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:42:c1:af:48:69:bb:d4:16:02:75:a6:7a:05:d9:28:df:16: 26:a9:93:6e:17:9b:cd:ce:43:d9:43:63:0f:82:07:f5:65:52: 9f:34:9a:35:2d:49:12:18:8e:a8:ba:d8:85:29:98:d1:ab:fa: 57:ca:cd:1e:5f:46:22:b2:34:20:1f:e1:f0:e4:c7:c7:69:80: cc:6e:42:bd:bb:09:43:a8:8e:29:5d:a8:5c:8a:98:0b:b8:c3: 8b:e3:92:13:2c:70:7d:19:1d:e5:0e:74:4a:d5:7e:0a:bb:eb: 0c:fb:ee:53:cd:5a:a5:4d:9a:8d:bb:ac:80:b3:9f:95:18:d1: 52:a1:5a:b2:bc:c2:0b:de:23:f9:a1:38:7f:4d:c5:eb:38:66: 0f:2e:94:29:3e:e7:28:62:07:70:59:26:ac:3a:30:0c:be:61: fe:12:f1:b6:b4:d1:a5:99:c7:81:5c:56:71:a8:12:93:4b:12: 80:4f:a6:a7:3a:3c:47:96:2e:ae:1f:23:1b:d0:dc:f9:ed:fa: a8:e9:45:f9:13:d0:76:cd:0f:5d:e9:cc:d0:28:eb:20:ed:11: d7:94:4b:9e:00:0c:07:b3:93:52:78:ea:ee:38:1c:d3:76:9a: ba:3d:7b:f2:41:3f:af:d7:d3:29:04:59:bf:c2:14:70:d7:ec: da:3c:ba:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBTJkAC3e2NuEbyjoSjAPan3vdzwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDA3QzkxQjA0OUY3MzVGNzFGMkJFOENGOTJBRUFBNTM4 RDZCMUYwQjAeFw0yNTA4MDcyMDE3MThaFw0yNTA4MTEwMzM1MThaMDMxMTAvBgNV BAMTKDEzNkI3NUYxMzNBMUEyODI4MUZCMEQxQzREQ0NBQUQ1QjdBOEIwRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDcNXyv52/Zp5RJ+IUb7BxutMWU rF7LdbTX+I4u2bWsoO1qY/9Ai1uHKkqQKbDgEo1ve+R60VJe7pt8KX0seB/7MJxK maiVmYEu09P9zku1iKiE3IvyMbpbJKDga+CSC4afJ6wPlgipFgof4rAKvaojLzTs 6SRayIIyKbpL52t/rBnsZm08vjNpJhfZf0G8U4C/WG0dPhJxscdi7jwUIFesvPGN fSaEDJoMzjVAaKaVFeI7q5yjoRwO7tF0hIPjGhVNaoM0bYKAIxPBCBRXxr4N+yG1 aHg3fkiYljXwqVXreNVO17TfnJepv904E+RSYH22btJdb9oLZEnssi0wSa4hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE2t18TOhooKB+w0cTcyq1beosOQwHwYDVR0j BBgwFoAUAHyRsEn3NfcfK+jPkq6qU41rHwswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzFhZGE5ZS1lMmE5LTQwMGUtOGRmZi05YmU0ODFhYmE1ODMvMC8wMDdDOTFCMDQ5 RjczNUY3MUYyQkU4Q0Y5MkFFQUE1MzhENkIxRjBCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDA3QzkxQjA0OUY3MzVGNzFGMkJFOENGOTJBRUFBNTM4RDZC MUYwQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODcxYWRhOWUtZTJhOS00MDBlLThk ZmYtOWJlNDgxYWJhNTgzLzAvMDA3QzkxQjA0OUY3MzVGNzFGMkJFOENGOTJBRUFB NTM4RDZCMUYwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJlCwa9IabvUFgJ1pnoF2SjfFiapk24Xm83O Q9lDYw+CB/VlUp80mjUtSRIYjqi62IUpmNGr+lfKzR5fRiKyNCAf4fDkx8dpgMxu Qr27CUOojildqFyKmAu4w4vjkhMscH0ZHeUOdErVfgq76wz77lPNWqVNmo27rICz n5UY0VKhWrK8wgveI/mhOH9Nxes4Zg8ulCk+5yhiB3BZJqw6MAy+Yf4S8ba00aWZ x4FcVnGoEpNLEoBPpqc6PEeWLq4fIxvQ3Pnt+qjpRfkT0HbND13pzNAo6yDtEdeU S54ADAezk1J46u44HNN2mro9e/JBP6/X0ykEWb/CFHDX7No8ups= -----END CERTIFICATE-----Generated at Sat Aug 9 20:43:41 2025 by rpki-client