$ rpki-client -vvf repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft File: 1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft (raw, json) Hash identifier: c7cD5nD0je0gjgZn38BwQSxnT5b/K4hzcHEW1TpHS5s= Subject key identifier: 34:64:29:77:0A:2E:D4:47:BB:E8:52:90:18:78:1C:7B:C7:35:44:F3 Authority key identifier: 1F:D7:CE:EC:69:DE:A7:83:83:83:31:7F:FB:0D:4A:10:7A:F4:57:2A Certificate issuer: /CN=1FD7CEEC69DEA7838383317FFB0D4A107AF4572A Certificate serial: 4068E7599CDD2792A9AEDA1D617BF3B30FAE2C38 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft Manifest number: 0468 Signing time: Wed 06 Aug 2025 09:42:17 +0000 Manifest this update: Wed 06 Aug 2025 09:37:17 +0000 Manifest next update: Sat 09 Aug 2025 17:42:17 +0000 Files and hashes: 1: 3130332e3232352e3137302e302f32342d3234203d3e203436303437.roa (hash: JJTSpueK+8xOey5mADXWIZ6VRAaWkGW2eN97ELtB3co=) 2: 3230322e392e36392e302f32342d3234203d3e203436303437.roa (hash: IGi6DrH51U07XomDWdoiKr2G5BS4MVMB5tHm0OIctaE=) 3: 3130332e3139352e3136382e302f32332d3234203d3e203436303437.roa (hash: bdO5l0ETxRn71OqLu5LsjllBOmAvc3iPhYJQJ+bSXoE=) 4: 1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl (hash: 3gdQ90XpJzjbiQuYD+zfE1eAbh4geOs0v4SsiqPMYHg=) 5: 323430353a316463303a3a2f33322d3438203d3e203436303437.roa (hash: R6jlOMebhI7dihMnvovn6K1+eHFopc71JfRc6zYxAOY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 17:42:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:68:e7:59:9c:dd:27:92:a9:ae:da:1d:61:7b:f3:b3:0f:ae:2c:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1FD7CEEC69DEA7838383317FFB0D4A107AF4572A Validity Not Before: Aug 6 09:37:17 2025 GMT Not After : Aug 9 17:42:17 2025 GMT Subject: CN=346429770A2ED447BBE8529018781C7BC73544F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:34:33:a8:df:af:17:a1:95:6a:2e:72:55:4a: 2f:d8:c3:16:72:06:2c:0e:92:81:61:f8:6b:51:40: c8:84:fa:9d:68:a8:0d:9e:7b:dc:32:e0:4c:8b:d3: c4:0a:6a:bf:cb:cf:53:f0:f1:44:85:94:ba:4b:04: dd:1e:4c:f7:59:0d:4f:3b:d8:dc:4c:3a:bf:db:89: d4:46:f1:e1:45:72:4b:aa:b6:22:e4:b0:65:d2:bc: dc:c1:d2:bc:2e:68:2c:e9:78:0e:0a:99:be:ea:cd: 26:f2:fa:75:6b:bb:0c:90:1e:11:29:27:5f:e4:5d: 4f:30:7c:54:f9:7d:12:c1:ba:60:e9:40:db:f7:70: b2:06:38:5d:39:4b:eb:96:a7:b8:89:a0:c8:bf:d3: de:22:ad:68:cc:d6:84:9d:77:94:a0:24:f7:8b:ac: 6d:8b:63:30:2c:7b:73:5e:da:b0:1d:92:14:9b:ca: 24:93:75:e7:e6:56:49:74:53:d1:87:15:0d:69:1b: 69:0a:6d:ff:ac:9f:05:34:19:23:92:e3:e1:5d:0c: fb:bc:61:2e:86:44:e1:de:e7:b5:96:6e:e8:9e:2d: 9a:f8:98:56:94:c7:1e:fe:94:89:6e:a3:2c:de:9e: 68:a0:b7:c3:66:d2:65:ee:14:36:f6:da:fc:99:e6: 05:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:64:29:77:0A:2E:D4:47:BB:E8:52:90:18:78:1C:7B:C7:35:44:F3 X509v3 Authority Key Identifier: keyid:1F:D7:CE:EC:69:DE:A7:83:83:83:31:7F:FB:0D:4A:10:7A:F4:57:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9e129c94-c5a6-4dd4-b34a-7e353de6ce81/0/1FD7CEEC69DEA7838383317FFB0D4A107AF4572A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:75:8b:5c:be:51:df:23:fc:d8:3e:90:ff:f1:23:ab:2e:5e: 2c:80:ca:a5:b1:98:eb:c1:f7:ff:6d:dc:75:4c:de:c5:15:b4: 8f:99:29:e5:48:b4:05:4c:2c:33:6e:cf:74:a6:11:03:9e:c6: 04:d7:a3:fc:a9:ca:b9:3a:ea:ed:76:16:1b:07:fc:6b:13:8b: f7:b6:eb:fb:54:fa:d6:20:0b:2a:0b:83:51:1a:ab:54:08:56: 17:c0:bf:42:ca:d9:96:78:d1:2a:9f:11:64:00:dd:ac:3f:46: b9:50:7b:fb:14:40:2c:57:fd:29:05:4d:99:64:b1:59:b0:10: 3c:66:4b:3b:f8:0b:f7:0b:57:11:23:12:6c:c4:a6:df:ad:82: 81:ba:a8:7b:b6:96:77:f0:96:75:84:32:10:3f:ca:d5:ec:24: aa:73:08:18:a0:59:b7:d5:92:87:49:8b:8e:7d:c0:3c:63:a5: 8b:6d:a8:37:82:75:77:e5:3c:e2:2b:e6:72:19:97:6f:ac:c3: 8d:60:07:80:86:89:ee:73:3e:0d:a9:4f:4c:7c:51:61:71:01: 9d:86:b6:94:54:c7:a0:8f:6e:bc:ff:b9:06:3c:b4:a9:0d:14: bf:21:36:e3:95:1b:63:4c:ea:50:6f:b9:70:09:b7:8d:51:09: 3c:32:6f:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQGjnWZzdJ5KprtodYXvzsw+uLDgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRBMTA3 QUY0NTcyQTAeFw0yNTA4MDYwOTM3MTdaFw0yNTA4MDkxNzQyMTdaMDMxMTAvBgNV BAMTKDM0NjQyOTc3MEEyRUQ0NDdCQkU4NTI5MDE4NzgxQzdCQzczNTQ0RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8NDOo368XoZVqLnJVSi/YwxZy BiwOkoFh+GtRQMiE+p1oqA2ee9wy4EyL08QKar/Lz1Pw8USFlLpLBN0eTPdZDU87 2NxMOr/bidRG8eFFckuqtiLksGXSvNzB0rwuaCzpeA4Kmb7qzSby+nVruwyQHhEp J1/kXU8wfFT5fRLBumDpQNv3cLIGOF05S+uWp7iJoMi/094irWjM1oSdd5SgJPeL rG2LYzAse3Ne2rAdkhSbyiSTdefmVkl0U9GHFQ1pG2kKbf+snwU0GSOS4+FdDPu8 YS6GROHe57WWbuieLZr4mFaUxx7+lIluoyzenmigt8Nm0mXuFDb22vyZ5gVpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNGQpdwou1Ee76FKQGHgce8c1RPMwHwYDVR0j BBgwFoAUH9fO7Gnep4ODgzF/+w1KEHr0VyowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ZTEyOWM5NC1jNWE2LTRkZDQtYjM0YS03ZTM1M2RlNmNlODEvMC8xRkQ3Q0VFQzY5 REVBNzgzODM4MzMxN0ZGQjBENEExMDdBRjQ1NzJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRBMTA3QUY0 NTcyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOWUxMjljOTQtYzVhNi00ZGQ0LWIz NGEtN2UzNTNkZTZjZTgxLzAvMUZEN0NFRUM2OURFQTc4MzgzODMzMTdGRkIwRDRB MTA3QUY0NTcyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGx1i1y+Ud8j/Ng+kP/xI6suXiyAyqWxmOvB 9/9t3HVM3sUVtI+ZKeVItAVMLDNuz3SmEQOexgTXo/ypyrk66u12FhsH/GsTi/e2 6/tU+tYgCyoLg1Eaq1QIVhfAv0LK2ZZ40SqfEWQA3aw/RrlQe/sUQCxX/SkFTZlk sVmwEDxmSzv4C/cLVxEjEmzEpt+tgoG6qHu2lnfwlnWEMhA/ytXsJKpzCBigWbfV kodJi459wDxjpYttqDeCdXflPOIr5nIZl2+sw41gB4CGie5zPg2pT0x8UWFxAZ2G tpRUx6CPbrz/uQY8tKkNFL8hNuOVG2NM6lBvuXAJt41RCTwyb4M= -----END CERTIFICATE-----Generated at Thu Aug 7 03:18:28 2025 by rpki-client