$ rpki-client -vvf repo-rpki.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/7ABD31DD828DD58C9D91180021903EA04D8EB58E.mft File: 7ABD31DD828DD58C9D91180021903EA04D8EB58E.mft (raw, json) Hash identifier: PdHYzCplYbN1xM3aRzmH9nvScVdp9q9mcPcj5/OkyjU= Subject key identifier: 78:08:E1:5F:E6:FF:ED:A6:09:1B:3B:9E:94:64:7E:D8:9B:D2:2D:F2 Authority key identifier: 7A:BD:31:DD:82:8D:D5:8C:9D:91:18:00:21:90:3E:A0:4D:8E:B5:8E Certificate issuer: /CN=7ABD31DD828DD58C9D91180021903EA04D8EB58E Certificate serial: 74CEA8D18946549CC479FFDDDEBA72E5041EA48F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7ABD31DD828DD58C9D91180021903EA04D8EB58E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/7ABD31DD828DD58C9D91180021903EA04D8EB58E.mft Manifest number: B7 Signing time: Wed 06 Aug 2025 23:01:31 +0000 Manifest this update: Wed 06 Aug 2025 22:56:31 +0000 Manifest next update: Sun 10 Aug 2025 09:04:31 +0000 Files and hashes: 1: 3135372e36362e32302e302f32342d3234203d3e20313337333439.roa (hash: VWW2OjO2Nb0Oyhr5Vqe+VmM1lOl8RPUO1FTuyvBrHBg=) 2: 7ABD31DD828DD58C9D91180021903EA04D8EB58E.crl (hash: sSHIP+gfrmrgduQCrvgAXyQD9GGSsW/Bj43hQ4wQTDI=) 3: 3135372e36362e32312e302f32342d3234203d3e20313431353932.roa (hash: 3IUGvQHYckh9j4psQSuGBFM7lfhV4EtYEKWC7HzE4TE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/7ABD31DD828DD58C9D91180021903EA04D8EB58E.crl rsync://repo-rpki.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/7ABD31DD828DD58C9D91180021903EA04D8EB58E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7ABD31DD828DD58C9D91180021903EA04D8EB58E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 09:04:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:ce:a8:d1:89:46:54:9c:c4:79:ff:dd:de:ba:72:e5:04:1e:a4:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ABD31DD828DD58C9D91180021903EA04D8EB58E Validity Not Before: Aug 6 22:56:31 2025 GMT Not After : Aug 10 09:04:31 2025 GMT Subject: CN=7808E15FE6FFEDA6091B3B9E94647ED89BD22DF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:30:6e:1f:70:3a:96:1f:f0:18:9a:12:77:75: 76:79:8c:0f:81:cd:fb:4e:c6:da:d3:08:b3:99:ee: 07:b9:af:32:66:79:c6:8a:7a:a3:42:fb:5d:65:8c: 32:10:56:6c:07:ba:2b:b0:dd:7e:cb:66:a8:ff:0f: 25:8d:2f:90:74:2b:ff:0e:27:a1:0a:0a:30:26:5a: a2:26:b2:29:58:90:78:c5:2d:41:e1:71:2d:16:20: 7d:a7:20:ba:a2:2e:22:9a:fd:01:d3:d2:aa:28:2a: 72:08:da:70:d9:92:5f:dd:fd:43:82:bc:d6:91:4f: 59:79:d7:bb:01:f7:23:8f:1b:ae:84:53:8e:63:f8: ed:f5:12:e7:14:e2:c4:97:4f:42:11:ec:bf:9d:c7: 58:bd:4f:aa:37:f9:09:d2:8f:8e:15:e5:d3:e0:db: 8c:a8:e0:ae:02:38:59:4a:d1:c3:09:9a:34:86:f5: d4:87:2a:11:d9:2d:3b:38:46:d9:bb:47:f8:44:68: 30:82:0b:f1:cd:a6:ac:19:7e:c5:ba:c7:a2:b3:47: 8a:ec:14:cb:1f:d8:d2:4c:14:69:59:e2:f5:96:64: 6d:80:dc:12:a0:7c:d2:21:56:79:ce:87:26:48:3f: 2b:dc:eb:ea:64:15:58:84:47:4c:7e:20:de:e9:25: e4:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:08:E1:5F:E6:FF:ED:A6:09:1B:3B:9E:94:64:7E:D8:9B:D2:2D:F2 X509v3 Authority Key Identifier: keyid:7A:BD:31:DD:82:8D:D5:8C:9D:91:18:00:21:90:3E:A0:4D:8E:B5:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/7ABD31DD828DD58C9D91180021903EA04D8EB58E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7ABD31DD828DD58C9D91180021903EA04D8EB58E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/7ABD31DD828DD58C9D91180021903EA04D8EB58E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:37:c8:98:8e:d2:ef:1e:55:4d:df:00:c0:49:0e:7e:85:d8: b8:14:5c:27:3a:d3:77:59:82:c3:9e:1c:7d:33:f2:3c:45:4c: 95:52:aa:e3:04:c9:49:29:e3:90:4c:45:17:0e:36:4c:62:b3: 52:90:db:de:24:e9:b6:cd:9f:ef:d1:31:7a:3a:03:8a:74:79: 45:3e:61:79:9c:30:ae:9a:18:5e:fc:d1:85:c0:74:f2:1f:d6: 88:f8:a8:35:58:4f:8e:4a:02:2e:12:d3:e3:96:9c:63:11:74: 62:6f:0b:20:63:72:15:7a:ff:68:12:4b:0a:cf:dc:0f:2d:5b: ce:d6:d6:a7:f8:21:93:64:ac:5f:2b:5e:5d:f7:35:c6:c2:3b: 8b:b5:dc:ca:0e:5d:f7:a7:d5:ec:c4:71:71:e2:24:95:32:bc: 53:61:0e:5b:62:cc:7c:53:ee:f3:b9:30:19:70:b1:86:d6:6b: 09:2a:5e:2c:37:cd:83:ef:95:16:d7:4f:f0:0d:42:9f:b0:b8: 12:dd:92:5c:b1:03:b6:00:2f:d6:e9:6c:a9:14:a8:a2:00:39: 9b:a1:1d:1f:47:28:b6:ed:9b:d7:f1:3a:17:1b:12:83:8c:77: aa:37:19:f9:85:50:4d:72:1a:7c:b9:e2:cc:d5:73:d4:e9:b2: 9a:da:cd:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdM6o0YlGVJzEef/d3rpy5QQepI8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0FCRDMxREQ4MjhERDU4QzlEOTExODAwMjE5MDNFQTA0 RDhFQjU4RTAeFw0yNTA4MDYyMjU2MzFaFw0yNTA4MTAwOTA0MzFaMDMxMTAvBgNV BAMTKDc4MDhFMTVGRTZGRkVEQTYwOTFCM0I5RTk0NjQ3RUQ4OUJEMjJERjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5MG4fcDqWH/AYmhJ3dXZ5jA+B zftOxtrTCLOZ7ge5rzJmecaKeqNC+11ljDIQVmwHuiuw3X7LZqj/DyWNL5B0K/8O J6EKCjAmWqImsilYkHjFLUHhcS0WIH2nILqiLiKa/QHT0qooKnII2nDZkl/d/UOC vNaRT1l517sB9yOPG66EU45j+O31EucU4sSXT0IR7L+dx1i9T6o3+QnSj44V5dPg 24yo4K4COFlK0cMJmjSG9dSHKhHZLTs4Rtm7R/hEaDCCC/HNpqwZfsW6x6KzR4rs FMsf2NJMFGlZ4vWWZG2A3BKgfNIhVnnOhyZIPyvc6+pkFViER0x+IN7pJeRzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeAjhX+b/7aYJGzuelGR+2JvSLfIwHwYDVR0j BBgwFoAUer0x3YKN1YydkRgAIZA+oE2OtY4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NWY1ZWYxOC02ZmZhLTRkNjktOGMwYy0zNTE4Y2ZhODc1OGUvMC83QUJEMzFERDgy OERENThDOUQ5MTE4MDAyMTkwM0VBMDREOEVCNThFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0FCRDMxREQ4MjhERDU4QzlEOTExODAwMjE5MDNFQTA0RDhF QjU4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjVmNWVmMTgtNmZmYS00ZDY5LThj MGMtMzUxOGNmYTg3NThlLzAvN0FCRDMxREQ4MjhERDU4QzlEOTExODAwMjE5MDNF QTA0RDhFQjU4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEw3yJiO0u8eVU3fAMBJDn6F2LgUXCc603dZ gsOeHH0z8jxFTJVSquMEyUkp45BMRRcONkxis1KQ294k6bbNn+/RMXo6A4p0eUU+ YXmcMK6aGF780YXAdPIf1oj4qDVYT45KAi4S0+OWnGMRdGJvCyBjchV6/2gSSwrP 3A8tW87W1qf4IZNkrF8rXl33NcbCO4u13MoOXfen1ezEcXHiJJUyvFNhDltizHxT 7vO5MBlwsYbWawkqXiw3zYPvlRbXT/ANQp+wuBLdklyxA7YAL9bpbKkUqKIAOZuh HR9HKLbtm9fxOhcbEoOMd6o3GfmFUE1yGny54szVc9TpsprazbE= -----END CERTIFICATE-----Generated at Sat Aug 9 05:50:14 2025 by rpki-client