$ rpki-client -vvf repo-rpki.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/7E9242F2F0756C1DB232479261838C3701005D48.mft File: 7E9242F2F0756C1DB232479261838C3701005D48.mft (raw, json) Hash identifier: Uc8UrDe7xFdU7ioxiDN/5hwJpb3JVtsf2rbFytHCTBU= Subject key identifier: 89:F0:69:5E:F9:7B:2C:2E:61:81:90:31:4D:79:46:0B:ED:1D:8E:BA Authority key identifier: 7E:92:42:F2:F0:75:6C:1D:B2:32:47:92:61:83:8C:37:01:00:5D:48 Certificate issuer: /CN=7E9242F2F0756C1DB232479261838C3701005D48 Certificate serial: 4A298118EA273B2BD1181A969E841F19048123CD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E9242F2F0756C1DB232479261838C3701005D48.cer Subject info access: rsync://repo-rpki.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/7E9242F2F0756C1DB232479261838C3701005D48.mft Manifest number: 0221 Signing time: Sat 09 Aug 2025 07:42:01 +0000 Manifest this update: Sat 09 Aug 2025 07:37:01 +0000 Manifest next update: Tue 12 Aug 2025 12:06:01 +0000 Files and hashes: 1: 3130332e3138352e34382e302f32332d3234203d3e203538383230.roa (hash: sRruwoxKxC5v+4ajE2hcnIZkT8FBlsjjqaqL/hWChfA=) 2: 7E9242F2F0756C1DB232479261838C3701005D48.crl (hash: mp6Cbv/Ha0VXpHCaMco+7HliG9fC0rEcmIPADAwSu8E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/7E9242F2F0756C1DB232479261838C3701005D48.crl rsync://repo-rpki.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/7E9242F2F0756C1DB232479261838C3701005D48.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E9242F2F0756C1DB232479261838C3701005D48.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 12 Aug 2025 12:06:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:29:81:18:ea:27:3b:2b:d1:18:1a:96:9e:84:1f:19:04:81:23:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E9242F2F0756C1DB232479261838C3701005D48 Validity Not Before: Aug 9 07:37:01 2025 GMT Not After : Aug 12 12:06:01 2025 GMT Subject: CN=89F0695EF97B2C2E618190314D79460BED1D8EBA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:66:10:6d:24:44:f0:81:85:8c:00:be:b5:85: b0:5a:b1:a9:11:ce:ee:12:6a:f3:91:ec:1a:3c:c7: 98:fd:0d:ce:55:ef:21:e8:f3:4c:e1:0d:05:54:d0: e3:21:40:67:d3:02:61:70:9e:47:33:d1:df:36:3a: f9:77:7d:2c:33:cc:ee:57:8e:d5:9b:6f:78:e1:a6: 96:5d:95:99:24:81:a6:fe:04:8d:90:42:d4:7d:a7: 81:90:c5:6b:18:85:0b:c0:e9:b2:1f:ef:98:d1:08: ad:7f:ba:a2:ba:ff:26:f5:20:d4:f2:80:a3:f1:ee: ee:33:2d:92:15:41:28:24:76:d5:14:e6:cd:dc:16: f9:a5:d7:9f:37:41:4b:49:c4:4c:34:82:93:84:44: f1:97:c3:d9:7f:ad:c0:1e:62:24:5a:f2:bb:a7:1f: c9:90:b2:03:ba:16:0e:89:4f:07:de:41:18:af:46: 3e:1e:b7:0e:80:32:d1:ac:6f:0d:a0:63:2c:b3:89: 4c:e5:55:ac:ce:fa:f9:3e:fc:c0:71:4f:cb:96:69: f6:cf:e5:1c:89:1c:f8:03:ba:0d:1e:1a:f5:f3:72: 13:d5:fd:51:44:9a:f8:43:30:ce:04:e3:da:85:1a: a2:0d:c4:9b:c4:67:f8:97:ca:7a:64:b5:0b:f3:23: 51:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:F0:69:5E:F9:7B:2C:2E:61:81:90:31:4D:79:46:0B:ED:1D:8E:BA X509v3 Authority Key Identifier: keyid:7E:92:42:F2:F0:75:6C:1D:B2:32:47:92:61:83:8C:37:01:00:5D:48 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/7E9242F2F0756C1DB232479261838C3701005D48.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E9242F2F0756C1DB232479261838C3701005D48.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/999688a9-e78d-4aba-83bc-5178679120ad/0/7E9242F2F0756C1DB232479261838C3701005D48.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:3d:98:b9:72:e8:a9:b0:5b:1e:b3:2b:dc:9b:b8:6e:3c:3f: 6f:d5:32:f7:49:94:8f:5b:4e:f3:9f:25:34:93:eb:08:92:a8: cf:5a:8f:61:2e:99:ef:38:69:e1:ab:a5:ce:8a:fa:3a:db:5b: 37:4b:ae:6f:6f:ab:90:a4:df:80:82:e7:b5:62:bf:27:28:4a: 3c:ab:b1:43:94:cc:c7:0c:91:5a:ef:5e:4b:b3:9a:01:3a:b7: 5d:fc:ed:3b:02:b2:11:a9:31:fd:cd:94:c3:36:d5:2e:bf:ac: 20:d0:5d:3a:c0:2a:14:67:56:14:e7:4f:4f:8d:43:50:ec:19: 54:db:5e:80:c0:63:21:e2:6e:c0:0e:e1:d7:66:ad:69:38:9c: 50:e6:96:06:be:47:94:2c:90:17:62:a9:32:b5:7f:54:80:9e: 2f:f6:a4:d5:e4:51:9f:78:a7:98:29:f5:cb:fa:d7:52:48:06: 5c:61:2a:89:9c:25:13:07:81:5e:b9:50:9a:9a:8d:47:7d:53: c2:a9:b3:de:6f:81:31:e4:b3:fc:47:45:43:42:67:4d:ed:e9: 3a:fe:76:e0:25:8c:56:e6:6f:c2:35:da:5a:35:9b:7c:da:e8: 82:c2:db:d9:83:f1:fe:ca:d5:8b:1d:dc:a7:83:80:5f:3b:58: 2d:6d:70:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSimBGOonOyvRGBqWnoQfGQSBI80wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U5MjQyRjJGMDc1NkMxREIyMzI0NzkyNjE4MzhDMzcw MTAwNUQ0ODAeFw0yNTA4MDkwNzM3MDFaFw0yNTA4MTIxMjA2MDFaMDMxMTAvBgNV BAMTKDg5RjA2OTVFRjk3QjJDMkU2MTgxOTAzMTRENzk0NjBCRUQxRDhFQkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAZhBtJETwgYWMAL61hbBasakR zu4SavOR7Bo8x5j9Dc5V7yHo80zhDQVU0OMhQGfTAmFwnkcz0d82Ovl3fSwzzO5X jtWbb3jhppZdlZkkgab+BI2QQtR9p4GQxWsYhQvA6bIf75jRCK1/uqK6/yb1INTy gKPx7u4zLZIVQSgkdtUU5s3cFvml1583QUtJxEw0gpOERPGXw9l/rcAeYiRa8run H8mQsgO6Fg6JTwfeQRivRj4etw6AMtGsbw2gYyyziUzlVazO+vk+/MBxT8uWafbP 5RyJHPgDug0eGvXzchPV/VFEmvhDMM4E49qFGqINxJvEZ/iXynpktQvzI1HbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUifBpXvl7LC5hgZAxTXlGC+0djrowHwYDVR0j BBgwFoAUfpJC8vB1bB2yMkeSYYOMNwEAXUgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTk2ODhhOS1lNzhkLTRhYmEtODNiYy01MTc4Njc5MTIwYWQvMC83RTkyNDJGMkYw NzU2QzFEQjIzMjQ3OTI2MTgzOEMzNzAxMDA1RDQ4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0U5MjQyRjJGMDc1NkMxREIyMzI0NzkyNjE4MzhDMzcwMTAw NUQ0OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk5Njg4YTktZTc4ZC00YWJhLTgz YmMtNTE3ODY3OTEyMGFkLzAvN0U5MjQyRjJGMDc1NkMxREIyMzI0NzkyNjE4MzhD MzcwMTAwNUQ0OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFo9mLly6KmwWx6zK9ybuG48P2/VMvdJlI9b TvOfJTST6wiSqM9aj2Eume84aeGrpc6K+jrbWzdLrm9vq5Ck34CC57VivycoSjyr sUOUzMcMkVrvXkuzmgE6t1387TsCshGpMf3NlMM21S6/rCDQXTrAKhRnVhTnT0+N Q1DsGVTbXoDAYyHibsAO4ddmrWk4nFDmlga+R5QskBdiqTK1f1SAni/2pNXkUZ94 p5gp9cv611JIBlxhKomcJRMHgV65UJqajUd9U8Kps95vgTHks/xHRUNCZ03t6Tr+ duAljFbmb8I12lo1m3za6ILC29mD8f7K1Ysd3KeDgF87WC1tcB0= -----END CERTIFICATE-----Generated at Sun Aug 10 03:49:38 2025 by rpki-client