$ rpki-client -vvf repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft File: C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft (raw, json) Hash identifier: vwvgl/ISvkrPa1bVF/5RmUNBhcRc9TZR523fpMNKHuI= Subject key identifier: 0E:90:07:01:21:97:D6:0E:91:F5:66:9E:37:8D:00:15:44:62:FE:D5 Authority key identifier: C7:F3:F7:AC:64:8C:60:73:C7:FE:73:62:71:A1:A8:E7:27:79:62:B7 Certificate issuer: /CN=C7F3F7AC648C6073C7FE736271A1A8E7277962B7 Certificate serial: 197782E4558035A571D612FA82EA22FFD5286320 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft Manifest number: 011C Signing time: Tue 05 Aug 2025 13:21:27 +0000 Manifest this update: Tue 05 Aug 2025 13:16:27 +0000 Manifest next update: Fri 08 Aug 2025 18:05:27 +0000 Files and hashes: 1: 3130332e3134342e3132392e302f32342d3234203d3e20313339343333.roa (hash: RIPwkwrtUM/4ffKNW9yUN28LgPyDGB1P3EsXYFO7WUY=) 2: C7F3F7AC648C6073C7FE736271A1A8E7277962B7.crl (hash: n0zSctA/PBOkCmm+HzyhofsisBiNodGoLVbmVlR388k=) 3: 3130332e3134342e3132382e302f32342d3234203d3e20313339343333.roa (hash: n0wSfYokNi/npNPzftcDmS3sdBSeLLSMYOoHz/p9hrE=) 4: 3130332e3134342e3132382e302f32332d3233203d3e20313339343333.roa (hash: fPtFW64rMVWWTfe0idTINB3BUS2Ju2ivrfcwXSv84rI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.crl rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 18:05:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:77:82:e4:55:80:35:a5:71:d6:12:fa:82:ea:22:ff:d5:28:63:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7F3F7AC648C6073C7FE736271A1A8E7277962B7 Validity Not Before: Aug 5 13:16:27 2025 GMT Not After : Aug 8 18:05:27 2025 GMT Subject: CN=0E9007012197D60E91F5669E378D00154462FED5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:31:44:e5:e2:b6:9f:da:9c:a3:31:dd:77:f7: fa:8c:3e:93:60:aa:2d:af:2b:48:b0:a7:22:21:d7: de:04:5c:a9:b4:92:56:75:20:3d:c4:9b:c0:1e:0d: 7e:29:8b:fa:8d:63:79:7e:0b:6b:9b:54:33:c1:43: 8b:10:bf:bc:e2:17:0e:ff:3a:9a:ba:4f:54:a1:75: c8:2c:6c:2a:25:6e:74:8e:be:0d:9d:8e:56:69:7c: 68:14:26:a4:e5:8a:fa:8c:04:3b:a7:ce:e3:b6:98: cc:c2:ec:8d:36:db:e5:a9:4e:9a:8f:06:28:29:ac: a3:0a:67:43:6f:90:42:a6:2f:aa:8c:9f:15:47:78: 4a:d5:58:32:60:7f:62:3d:31:f7:eb:62:f5:4f:e2: 19:9b:d8:1f:15:90:f9:49:06:e0:40:44:c8:ef:51: 87:79:ec:a3:16:c1:61:37:9d:cc:4e:35:82:ee:65: a5:8d:d2:f5:80:57:88:86:75:6a:86:cc:e1:43:cb: e4:41:9e:1a:f5:26:3e:51:ab:cf:59:93:ad:7f:61: d9:1c:5a:fd:ab:5b:9d:03:a2:c0:8e:20:17:ce:6f: 61:6f:32:a0:1f:5c:29:e5:e6:c2:6d:87:3c:2b:6c: 57:6e:d8:1a:d8:e7:99:5d:19:c9:c7:e8:3e:6a:4a: f3:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:90:07:01:21:97:D6:0E:91:F5:66:9E:37:8D:00:15:44:62:FE:D5 X509v3 Authority Key Identifier: keyid:C7:F3:F7:AC:64:8C:60:73:C7:FE:73:62:71:A1:A8:E7:27:79:62:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:0d:81:a2:54:4c:e8:c0:6c:0f:04:ea:af:cb:65:40:7c:e9: c0:d5:5b:ac:1d:58:b2:6b:f9:98:7a:95:2a:5c:3b:19:1f:02: 93:37:47:ce:1f:2a:ec:25:45:61:e4:94:cc:bc:79:a1:d2:df: c3:40:27:c4:1b:3f:46:54:1a:40:f4:f2:aa:04:e6:17:28:9e: a6:14:b0:e1:d1:ee:be:e7:bb:26:06:d2:a0:aa:ab:ad:f9:7e: e5:95:d0:e4:f2:3c:01:69:45:c9:c6:5d:1f:d6:e6:b2:90:5f: 3c:09:90:c4:6b:5e:0b:68:3c:06:04:60:7c:13:bd:d7:e3:e7: f1:cb:73:63:de:7f:cd:e7:7a:4b:92:c1:88:09:d4:c6:ff:61: b1:b6:05:f8:7d:0e:f4:98:f2:34:4f:61:b7:d8:d6:6f:09:13: 98:dc:bc:df:34:1c:d8:f0:31:51:31:88:a7:30:46:ee:c2:a6: ad:0e:16:53:66:66:82:f1:78:68:9c:05:59:fe:53:b1:a2:4c: 59:4d:8c:35:38:dc:3c:41:83:c2:55:8c:df:ed:a1:1c:34:e6: 61:61:27:72:ca:cb:24:94:da:18:0a:38:d5:e6:9a:83:56:76: 0e:34:dc:ad:cd:4d:12:e2:2e:a0:0c:85:3e:a2:df:d3:5c:c5: b4:71:c6:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGXeC5FWANaVx1hL6guoi/9UoYyAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdGM0Y3QUM2NDhDNjA3M0M3RkU3MzYyNzFBMUE4RTcy Nzc5NjJCNzAeFw0yNTA4MDUxMzE2MjdaFw0yNTA4MDgxODA1MjdaMDMxMTAvBgNV BAMTKDBFOTAwNzAxMjE5N0Q2MEU5MUY1NjY5RTM3OEQwMDE1NDQ2MkZFRDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCiMUTl4raf2pyjMd139/qMPpNg qi2vK0iwpyIh194EXKm0klZ1ID3Em8AeDX4pi/qNY3l+C2ubVDPBQ4sQv7ziFw7/ Opq6T1ShdcgsbColbnSOvg2djlZpfGgUJqTlivqMBDunzuO2mMzC7I022+WpTpqP BigprKMKZ0NvkEKmL6qMnxVHeErVWDJgf2I9MffrYvVP4hmb2B8VkPlJBuBARMjv UYd57KMWwWE3ncxONYLuZaWN0vWAV4iGdWqGzOFDy+RBnhr1Jj5Rq89Zk61/Ydkc Wv2rW50DosCOIBfOb2FvMqAfXCnl5sJthzwrbFdu2BrY55ldGcnH6D5qSvONAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDpAHASGX1g6R9WaeN40AFURi/tUwHwYDVR0j BBgwFoAUx/P3rGSMYHPH/nNicaGo5yd5YrcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OWY1NzVkYi1jNzM4LTRiOGUtYjM2YS02YjAyMGM2Njg0OWQvMC9DN0YzRjdBQzY0 OEM2MDczQzdGRTczNjI3MUExQThFNzI3Nzk2MkI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzdGM0Y3QUM2NDhDNjA3M0M3RkU3MzYyNzFBMUE4RTcyNzc5 NjJCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTlmNTc1ZGItYzczOC00YjhlLWIz NmEtNmIwMjBjNjY4NDlkLzAvQzdGM0Y3QUM2NDhDNjA3M0M3RkU3MzYyNzFBMUE4 RTcyNzc5NjJCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFoNgaJUTOjAbA8E6q/LZUB86cDVW6wdWLJr +Zh6lSpcOxkfApM3R84fKuwlRWHklMy8eaHS38NAJ8QbP0ZUGkD08qoE5hconqYU sOHR7r7nuyYG0qCqq635fuWV0OTyPAFpRcnGXR/W5rKQXzwJkMRrXgtoPAYEYHwT vdfj5/HLc2Pef83nekuSwYgJ1Mb/YbG2Bfh9DvSY8jRPYbfY1m8JE5jcvN80HNjw MVExiKcwRu7Cpq0OFlNmZoLxeGicBVn+U7GiTFlNjDU43DxBg8JVjN/toRw05mFh J3LKyySU2hgKONXmmoNWdg403K3NTRLiLqAMhT6i39NcxbRxxt8= -----END CERTIFICATE-----Generated at Wed Aug 6 14:07:33 2025 by rpki-client