$ rpki-client -vvf repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft File: 7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft (raw, json) Hash identifier: iECzDv31M63SsJwBOdaEi/bIUQg6mZoAoNYcMZZn6FQ= Subject key identifier: 38:29:F4:89:17:6F:5F:9F:1D:4D:A7:A3:02:D7:89:74:72:1A:5C:88 Authority key identifier: 7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67 Certificate issuer: /CN=7D64B8F4CFB687141137D10F9E73FFD0BAB93F67 Certificate serial: 1B40060B73E9594295A108256344FD121EE2741D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer Subject info access: rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft Manifest number: 02B4 Signing time: Mon 04 Aug 2025 18:02:12 +0000 Manifest this update: Mon 04 Aug 2025 17:57:12 +0000 Manifest next update: Thu 07 Aug 2025 18:25:12 +0000 Files and hashes: 1: 323430313a383434303a3133313a3a2f34382d3438203d3e20313336313331.roa (hash: 7XF+7tNQBQV2Wy0AsX8lBCySJ+ATYXgli7NY4z4VmfM=) 2: 3130332e39372e37392e302f32342d3234203d3e20313336313331.roa (hash: g7TDmW1J5jNMb6eLJToYzt8xdajrekh1Q+uRWpcwKv0=) 3: 3130332e39372e37362e302f32342d3234203d3e20313336313331.roa (hash: sppd+EBGEaepceJfNxlZXMQLq/sqMLGJt/R8ADFWUfE=) 4: 323430313a383434303a33313a3a2f34382d3438203d3e20313336313331.roa (hash: imoDv7fNxiS0ABFe1mnjo4w6QxU9zgowGM6VjXLrifM=) 5: 323430313a383434303a3233313a3a2f34382d3438203d3e20313336313331.roa (hash: 9q0QjNfZ8ZidXQKSI35eyNIOpPTa4MZHY+H9XcdTGqQ=) 6: 7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl (hash: xq7eoKHpj+fMQVicgixk3ze76yzNOggYFUSCV80uMLc=) 7: 3130332e39372e37372e302f32342d3234203d3e20313336313331.roa (hash: rgwWhpicbIXeIE3pTFSF/nJgGhjsTFXordy0vbByPyc=) 8: 323430313a383434303a3a2f33322d3332203d3e20313336313331.roa (hash: J/TKA4DxZMeIQk5lGShBOGO9FvcMo90L9nK349bvEzs=) 9: 3130332e39372e37382e302f32342d3234203d3e20313336313331.roa (hash: gTWqsHLXGzmwOn5oUbLdKwsFxUOTG6JntDETCN1uoJg=) 10: 323430313a383434303a3331313a3a2f34382d3438203d3e20313336313331.roa (hash: uNKV4J4iyB42iT7YiJbc/obq8TacFQRWwVPHqjYHdt4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 Aug 2025 18:25:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:40:06:0b:73:e9:59:42:95:a1:08:25:63:44:fd:12:1e:e2:74:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D64B8F4CFB687141137D10F9E73FFD0BAB93F67 Validity Not Before: Aug 4 17:57:12 2025 GMT Not After : Aug 7 18:25:12 2025 GMT Subject: CN=3829F489176F5F9F1D4DA7A302D78974721A5C88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:15:3b:cc:40:e9:88:f3:7a:74:35:09:cc:2d: fe:da:e7:0d:7d:0b:14:b4:ea:e4:cb:ea:b1:56:4a: 24:ea:4f:c2:c3:a3:30:51:23:2c:25:ad:1e:83:1a: 71:2b:28:6d:1a:36:04:85:5a:2e:ba:fc:2c:76:9d: e9:9b:28:f8:e1:4a:19:09:f0:18:f7:14:3a:ba:56: 72:7d:a1:ce:eb:6c:6c:4f:08:1d:d9:1a:93:59:5f: d8:52:74:df:8a:bb:55:78:54:49:f3:5d:0e:81:0b: 17:8c:54:73:7f:3b:80:10:93:17:e8:48:01:ec:0c: 14:17:05:52:cc:a2:e2:79:a7:46:61:33:f5:d2:38: 1c:aa:c4:10:85:e7:9a:f8:ef:7c:7c:16:76:bd:a3: fa:86:89:38:f8:72:4c:cd:47:b2:88:99:a5:85:02: da:cd:60:32:3f:fc:ca:27:69:30:3f:8d:80:2a:2c: 22:cb:f8:ad:ed:23:14:25:42:2f:4f:ca:d2:3c:93: 33:cf:a0:a3:c0:58:c8:f7:86:59:29:a4:3a:2c:5c: 3f:b4:53:3e:e2:d5:ff:ff:4c:59:36:93:b2:01:9b: 30:37:d0:b1:96:cd:a6:07:4b:23:a2:f2:e0:42:99: 4c:9d:80:12:0a:35:20:3f:6d:15:da:81:46:47:25: a6:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:29:F4:89:17:6F:5F:9F:1D:4D:A7:A3:02:D7:89:74:72:1A:5C:88 X509v3 Authority Key Identifier: keyid:7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:42:1b:a6:74:70:57:bf:cf:af:c2:a0:97:19:54:55:85:33: 58:65:5b:e6:3c:32:35:fd:9d:2d:58:6d:c3:24:79:6a:31:a7: 67:ef:f4:6c:c5:29:6c:ec:de:25:25:b1:95:06:92:02:02:3b: 85:c6:b4:97:1d:67:32:dd:bc:aa:96:47:a8:84:74:ea:6d:c0: 8b:f6:18:ec:1a:b9:90:46:3c:89:28:83:62:b1:47:dc:53:4c: 8f:03:be:25:57:ac:17:92:b6:9b:fb:5a:61:e4:eb:35:be:4a: cb:ce:37:b5:f0:8e:31:43:b9:1e:f5:6a:dd:f0:9a:84:ea:5f: d5:58:c0:9a:68:fd:b6:83:ca:81:fe:74:7c:c4:a1:3a:65:bc: 6b:e0:fd:97:bb:1a:c8:75:a7:4c:c7:d9:fa:90:99:bb:d6:b1: cd:05:f5:ba:a8:eb:aa:81:d1:b9:39:5d:3f:19:e1:88:b9:7e: 90:2b:8a:57:4d:d2:e1:51:bc:e5:4a:82:19:7d:ab:a7:26:30: ca:03:45:47:51:93:73:f0:ae:8f:df:35:99:f4:b1:2e:9f:c0: d6:92:b2:91:1d:69:5a:a6:3a:c3:4c:a7:ea:f3:e7:62:09:d9: 1b:23:0a:9b:7d:1c:ae:20:ba:b5:68:65:76:0a:52:7d:12:62: 7a:b1:c7:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG0AGC3PpWUKVoQglY0T9Eh7idB0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZGRDBC QUI5M0Y2NzAeFw0yNTA4MDQxNzU3MTJaFw0yNTA4MDcxODI1MTJaMDMxMTAvBgNV BAMTKDM4MjlGNDg5MTc2RjVGOUYxRDREQTdBMzAyRDc4OTc0NzIxQTVDODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvFTvMQOmI83p0NQnMLf7a5w19 CxS06uTL6rFWSiTqT8LDozBRIywlrR6DGnErKG0aNgSFWi66/Cx2nembKPjhShkJ 8Bj3FDq6VnJ9oc7rbGxPCB3ZGpNZX9hSdN+Ku1V4VEnzXQ6BCxeMVHN/O4AQkxfo SAHsDBQXBVLMouJ5p0ZhM/XSOByqxBCF55r473x8Fna9o/qGiTj4ckzNR7KImaWF AtrNYDI//MonaTA/jYAqLCLL+K3tIxQlQi9PytI8kzPPoKPAWMj3hlkppDosXD+0 Uz7i1f//TFk2k7IBmzA30LGWzaYHSyOi8uBCmUydgBIKNSA/bRXagUZHJaZvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOCn0iRdvX58dTaejAteJdHIaXIgwHwYDVR0j BBgwFoAUfWS49M+2hxQRN9EPnnP/0Lq5P2cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTdiMGQ3ZS1lYWRlLTQzMTgtYWIyMC04YzdmMmQ1YmU2OWYvMC83RDY0QjhGNENG QjY4NzE0MTEzN0QxMEY5RTczRkZEMEJBQjkzRjY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZGRDBCQUI5 M0Y2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTU3YjBkN2UtZWFkZS00MzE4LWFi MjAtOGM3ZjJkNWJlNjlmLzAvN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZG RDBCQUI5M0Y2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ9CG6Z0cFe/z6/CoJcZVFWFM1hlW+Y8MjX9 nS1YbcMkeWoxp2fv9GzFKWzs3iUlsZUGkgICO4XGtJcdZzLdvKqWR6iEdOptwIv2 GOwauZBGPIkog2KxR9xTTI8DviVXrBeStpv7WmHk6zW+SsvON7XwjjFDuR71at3w moTqX9VYwJpo/baDyoH+dHzEoTplvGvg/Ze7Gsh1p0zH2fqQmbvWsc0F9bqo66qB 0bk5XT8Z4Yi5fpArildN0uFRvOVKghl9q6cmMMoDRUdRk3Pwro/fNZn0sS6fwNaS spEdaVqmOsNMp+rz52IJ2RsjCpt9HK4gurVoZXYKUn0SYnqxx9s= -----END CERTIFICATE-----Generated at Wed Aug 6 18:30:03 2025 by rpki-client