$ rpki-client -vvf repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft File: 7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft (raw, json) Hash identifier: IjQQOMg4zvDzC0FXZBja8rVYYRGJi9x+K+6gq/YfzE4= Subject key identifier: 9A:7B:34:46:FB:58:18:24:30:66:1B:A7:0B:C7:75:CA:55:EF:9E:0C Authority key identifier: 7C:A3:F2:C4:0F:E4:53:CE:E2:30:AF:59:49:85:B2:75:51:4F:5E:CF Certificate issuer: /CN=7CA3F2C40FE453CEE230AF594985B275514F5ECF Certificate serial: 4589BCA7DF1B90E8D8AC3088D945D313A1A5EBD5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA3F2C40FE453CEE230AF594985B275514F5ECF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft Manifest number: 018E Signing time: Fri 08 Aug 2025 02:02:14 +0000 Manifest this update: Fri 08 Aug 2025 01:57:14 +0000 Manifest next update: Mon 11 Aug 2025 12:59:14 +0000 Files and hashes: 1: 3130332e3139312e3131362e302f32332d3233203d3e20313439393137.roa (hash: wE41NZyo6Pm4ztOuQo15CxbV7OwbZAt3ABv1Or5h/i4=) 2: 3130332e3139312e3131362e302f32342d3234203d3e20313439393137.roa (hash: LYrLDsZTAbC2Myr0Hc+KOOGkdqztaoQ+U5C2aGpkGQc=) 3: 7CA3F2C40FE453CEE230AF594985B275514F5ECF.crl (hash: DRjRc3eudiQ387tMRKHAJ1f7ZAQsHVukufcaDaWxWZo=) 4: 3130332e3139312e3131372e302f32342d3234203d3e20313439393137.roa (hash: T5ujnMBfrRFq+9a4Ins8EQ3CJj6sZJk55UE2urIjcWM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.crl rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA3F2C40FE453CEE230AF594985B275514F5ECF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 12:59:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:89:bc:a7:df:1b:90:e8:d8:ac:30:88:d9:45:d3:13:a1:a5:eb:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CA3F2C40FE453CEE230AF594985B275514F5ECF Validity Not Before: Aug 8 01:57:14 2025 GMT Not After : Aug 11 12:59:14 2025 GMT Subject: CN=9A7B3446FB58182430661BA70BC775CA55EF9E0C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:ae:7d:16:d3:27:3d:3b:c5:2e:96:e1:b2:db: 73:6c:2a:95:df:89:71:3b:ca:54:49:3a:84:dc:dd: 59:b3:ef:6d:be:e7:89:41:3e:83:87:06:89:74:67: fb:7d:46:c3:05:28:df:b9:1a:8e:03:16:47:b1:43: 04:2f:53:a9:27:00:08:3d:b4:45:db:9b:93:b6:bb: c2:06:3c:0e:eb:53:d3:1c:ca:b2:5e:0c:c3:53:05: 40:8e:83:d0:67:40:3f:ab:bf:fa:1d:c0:4a:58:a3: 12:ea:39:c6:9b:7d:3b:b9:aa:2a:3f:be:40:58:32: c6:24:dc:70:2b:57:20:d0:a8:bb:e9:cc:4c:cf:5c: 8b:df:b1:40:d0:52:eb:71:60:3b:24:4d:9b:a5:c2: 4f:f0:48:76:8c:78:35:89:1c:b7:78:49:32:07:81: 5b:75:24:9b:fb:0d:05:98:1b:94:5e:f7:42:77:eb: 56:d3:f2:9b:72:91:ea:0e:3d:70:97:dc:99:35:90: 68:37:5a:6e:eb:59:ea:c9:7e:9e:25:2c:e1:19:14: fc:70:3a:3c:90:c0:94:d4:fe:5b:12:6d:03:bb:e6: 45:18:a0:60:d7:0e:a1:93:2f:20:b1:2f:bd:af:a0: ad:6d:d6:82:d5:d5:1f:db:70:5d:8a:76:b5:10:df: 23:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:7B:34:46:FB:58:18:24:30:66:1B:A7:0B:C7:75:CA:55:EF:9E:0C X509v3 Authority Key Identifier: keyid:7C:A3:F2:C4:0F:E4:53:CE:E2:30:AF:59:49:85:B2:75:51:4F:5E:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA3F2C40FE453CEE230AF594985B275514F5ECF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 90:db:4e:0f:3b:51:f1:8f:73:a8:8e:46:d7:48:75:f3:58:4d: ff:a0:68:b7:33:d3:5e:0b:e3:73:28:83:8d:8c:24:f7:09:90: c2:3c:67:32:3a:09:9e:44:34:dc:14:a0:5e:30:59:b3:07:12: 6a:37:09:14:8b:c6:6c:50:6d:f1:2e:9e:71:30:ea:1c:34:e5: 19:fa:ba:0c:86:ec:c5:78:3f:01:14:f7:37:0a:47:d6:a0:3d: f9:ea:34:4a:75:88:35:fe:47:be:16:5c:0f:ed:09:64:b9:c9: a3:82:40:89:d8:e2:2d:dc:cc:2f:0a:48:df:36:23:87:c1:6f: ec:70:29:25:7c:40:1e:16:9b:1e:92:1b:b3:c3:9b:d0:db:e7: 2d:e9:91:84:d6:4b:65:e7:d3:93:81:61:e5:80:55:74:50:cf: 44:b3:74:af:ee:9a:7d:1d:dd:c8:3e:4e:3f:37:9c:43:9e:69: 7b:66:4b:90:fd:cc:8f:5a:0f:c7:8c:6d:b0:39:5b:77:7f:e0: e3:0e:89:e5:0a:d7:80:a9:d0:89:5b:e2:d1:64:8c:3b:20:3b: b7:e2:c7:33:86:2d:5c:0d:95:13:8e:76:ef:b6:0b:3a:91:b7: 7a:62:7f:7b:d3:79:26:5a:ce:2b:f0:5d:25:34:47:66:cb:c2: 8b:25:c1:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURYm8p98bkOjYrDCI2UXTE6Gl69UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NBM0YyQzQwRkU0NTNDRUUyMzBBRjU5NDk4NUIyNzU1 MTRGNUVDRjAeFw0yNTA4MDgwMTU3MTRaFw0yNTA4MTExMjU5MTRaMDMxMTAvBgNV BAMTKDlBN0IzNDQ2RkI1ODE4MjQzMDY2MUJBNzBCQzc3NUNBNTVFRjlFMEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzrn0W0yc9O8UuluGy23NsKpXf iXE7ylRJOoTc3Vmz722+54lBPoOHBol0Z/t9RsMFKN+5Go4DFkexQwQvU6knAAg9 tEXbm5O2u8IGPA7rU9McyrJeDMNTBUCOg9BnQD+rv/odwEpYoxLqOcabfTu5qio/ vkBYMsYk3HArVyDQqLvpzEzPXIvfsUDQUutxYDskTZulwk/wSHaMeDWJHLd4STIH gVt1JJv7DQWYG5Re90J361bT8ptykeoOPXCX3Jk1kGg3Wm7rWerJfp4lLOEZFPxw OjyQwJTU/lsSbQO75kUYoGDXDqGTLyCxL72voK1t1oLV1R/bcF2KdrUQ3yPfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmns0RvtYGCQwZhunC8d1ylXvngwwHwYDVR0j BBgwFoAUfKPyxA/kU87iMK9ZSYWydVFPXs8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NmFkYWUyYS00N2I2LTRhZTUtOWMzZi0zZThjYjkyYTM5ODcvMC83Q0EzRjJDNDBG RTQ1M0NFRTIzMEFGNTk0OTg1QjI3NTUxNEY1RUNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0NBM0YyQzQwRkU0NTNDRUUyMzBBRjU5NDk4NUIyNzU1MTRG NUVDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTZhZGFlMmEtNDdiNi00YWU1LTlj M2YtM2U4Y2I5MmEzOTg3LzAvN0NBM0YyQzQwRkU0NTNDRUUyMzBBRjU5NDk4NUIy NzU1MTRGNUVDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJDbTg87UfGPc6iORtdIdfNYTf+gaLcz014L 43Mog42MJPcJkMI8ZzI6CZ5ENNwUoF4wWbMHEmo3CRSLxmxQbfEunnEw6hw05Rn6 ugyG7MV4PwEU9zcKR9agPfnqNEp1iDX+R74WXA/tCWS5yaOCQInY4i3czC8KSN82 I4fBb+xwKSV8QB4Wmx6SG7PDm9Db5y3pkYTWS2Xn05OBYeWAVXRQz0SzdK/umn0d 3cg+Tj83nEOeaXtmS5D9zI9aD8eMbbA5W3d/4OMOieUK14Cp0Ilb4tFkjDsgO7fi xzOGLVwNlROOdu+2CzqRt3pif3vTeSZazivwXSU0R2bLwoslwU8= -----END CERTIFICATE-----Generated at Sat Aug 9 05:52:52 2025 by rpki-client