$ rpki-client -vvf repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.mft File: 7F8FE9F94ED4A8F169D2C8A37966D06216684756.mft (raw, json) Hash identifier: 4GIGD0sus+exPT7PfflhoZacR3Jh/U291OpfC6AQZWY= Subject key identifier: 92:1B:81:04:0C:96:04:73:7E:88:6E:B6:A5:46:CA:57:C3:92:96:D1 Authority key identifier: 7F:8F:E9:F9:4E:D4:A8:F1:69:D2:C8:A3:79:66:D0:62:16:68:47:56 Certificate issuer: /CN=7F8FE9F94ED4A8F169D2C8A37966D06216684756 Certificate serial: 5BB22E009EC4DD799D64B6B10154E119BAF78E4E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F8FE9F94ED4A8F169D2C8A37966D06216684756.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.mft Manifest number: A1 Signing time: Thu 07 Aug 2025 17:20:01 +0000 Manifest this update: Thu 07 Aug 2025 17:15:01 +0000 Manifest next update: Sun 10 Aug 2025 21:34:01 +0000 Files and hashes: 1: 33362e35302e3135342e302f32332d3234203d3e20313532303738.roa (hash: Op7L0f6zgAVUDBqJ1dF3rBL4LfH2t/QTkoViKXEVCPk=) 2: 7F8FE9F94ED4A8F169D2C8A37966D06216684756.crl (hash: KYCF+LOGygV6jgKHwN+dyHUaG3nX5jrlAhjhydMvtnc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.crl rsync://repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F8FE9F94ED4A8F169D2C8A37966D06216684756.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 21:34:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:b2:2e:00:9e:c4:dd:79:9d:64:b6:b1:01:54:e1:19:ba:f7:8e:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F8FE9F94ED4A8F169D2C8A37966D06216684756 Validity Not Before: Aug 7 17:15:01 2025 GMT Not After : Aug 10 21:34:01 2025 GMT Subject: CN=921B81040C9604737E886EB6A546CA57C39296D1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:fa:0c:ff:cf:7a:71:c3:7f:53:ae:25:0a:3e: 32:0e:aa:d8:45:9d:f8:ba:28:94:59:62:5e:2a:ea: f6:40:08:2c:95:a6:74:cd:de:81:52:25:4e:3e:ce: 73:09:99:7b:4e:d2:ac:1f:9d:f3:ca:e6:13:cc:db: e4:8c:3a:8b:59:a4:90:8d:e5:c2:e1:1d:61:4d:51: 44:e6:a1:56:04:11:13:77:8e:bd:0b:4f:74:96:3c: de:8e:90:01:7d:2d:cf:c0:66:97:23:56:8b:c5:c1: ef:b5:2e:74:88:8c:c4:f4:eb:e1:a2:32:fc:0c:a1: dd:1e:f2:97:88:f8:f3:ee:44:71:c3:36:1b:0e:82: 58:c7:33:e6:40:5b:c3:fe:4e:c2:2a:77:f6:b0:45: 97:9c:82:91:0d:13:16:44:bb:bc:8c:ea:86:7b:fe: df:c1:1d:28:d5:c3:86:f7:39:da:cf:b3:15:9a:f9: 66:30:46:cc:dc:bd:f2:ec:3a:f6:2a:da:e8:9a:d3: 92:f3:61:c7:e4:9c:f7:a7:b7:ce:19:a9:bf:b1:ee: 16:0d:a4:b8:11:d5:19:23:f1:d5:5a:64:0e:fc:7f: d2:e1:31:53:6f:b6:98:b9:bc:c5:48:f2:05:62:81: d5:fb:3b:92:f9:c5:0e:92:1c:3c:b1:7e:fe:fb:22: 53:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:1B:81:04:0C:96:04:73:7E:88:6E:B6:A5:46:CA:57:C3:92:96:D1 X509v3 Authority Key Identifier: keyid:7F:8F:E9:F9:4E:D4:A8:F1:69:D2:C8:A3:79:66:D0:62:16:68:47:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F8FE9F94ED4A8F169D2C8A37966D06216684756.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:a9:29:f7:a4:5f:37:49:74:94:7b:8c:29:32:4e:19:f1:fb: d9:15:81:78:85:45:12:40:e1:1b:2a:ea:81:e9:e9:5f:10:3c: 64:6c:36:da:2b:55:72:15:f7:4b:9e:7b:21:ff:6b:76:c4:36: d6:d8:a3:28:bd:73:75:d7:69:f5:72:69:e7:bf:58:ed:7f:1e: 22:8f:f9:a0:97:c9:f5:8a:c1:f2:ff:b5:af:7b:04:fa:2f:ce: 0c:2d:aa:a0:9c:49:ae:91:9d:b7:a9:0f:b2:66:d6:3f:94:4f: e4:ca:2d:5c:83:63:46:15:10:3f:88:fb:83:cf:ef:5d:ac:8d: cd:46:ea:2c:a4:d9:50:09:3d:3d:ed:a5:98:e6:2d:0d:2c:bf: 54:10:2c:ac:ec:32:5a:b2:1f:2e:56:56:55:9c:56:d4:f4:e7: 69:eb:b5:ed:0c:3a:6f:ea:70:12:86:79:fe:c0:90:8c:45:a9: 37:43:5e:d6:8d:21:f4:12:82:96:5f:8f:09:fc:e5:f7:6b:56: b6:a8:76:8a:cd:10:f5:27:2a:3d:ea:fc:98:9a:3e:66:e3:b2: 97:2c:a4:28:df:58:ab:f3:fd:35:33:fc:8f:a5:84:46:9a:5a: b1:0d:93:38:6c:54:c7:b8:ee:59:f5:d6:41:ef:64:05:00:38: b1:83:b2:00 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW7IuAJ7E3XmdZLaxAVThGbr3jk4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Y4RkU5Rjk0RUQ0QThGMTY5RDJDOEEzNzk2NkQwNjIx NjY4NDc1NjAeFw0yNTA4MDcxNzE1MDFaFw0yNTA4MTAyMTM0MDFaMDMxMTAvBgNV BAMTKDkyMUI4MTA0MEM5NjA0NzM3RTg4NkVCNkE1NDZDQTU3QzM5Mjk2RDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw+gz/z3pxw39TriUKPjIOqthF nfi6KJRZYl4q6vZACCyVpnTN3oFSJU4+znMJmXtO0qwfnfPK5hPM2+SMOotZpJCN 5cLhHWFNUUTmoVYEERN3jr0LT3SWPN6OkAF9Lc/AZpcjVovFwe+1LnSIjMT06+Gi MvwMod0e8peI+PPuRHHDNhsOgljHM+ZAW8P+TsIqd/awRZecgpENExZEu7yM6oZ7 /t/BHSjVw4b3OdrPsxWa+WYwRszcvfLsOvYq2uia05LzYcfknPent84Zqb+x7hYN pLgR1Rkj8dVaZA78f9LhMVNvtpi5vMVI8gVigdX7O5L5xQ6SHDyxfv77IlOPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkhuBBAyWBHN+iG62pUbKV8OSltEwHwYDVR0j BBgwFoAUf4/p+U7UqPFp0sijeWbQYhZoR1YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzAwMjkyZi0yODY4LTQ3YjMtYWMyMS02MDBhNDY3YTcyMzcvMC83RjhGRTlGOTRF RDRBOEYxNjlEMkM4QTM3OTY2RDA2MjE2Njg0NzU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Y4RkU5Rjk0RUQ0QThGMTY5RDJDOEEzNzk2NkQwNjIxNjY4 NDc1Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjcwMDI5MmYtMjg2OC00N2IzLWFj MjEtNjAwYTQ2N2E3MjM3LzAvN0Y4RkU5Rjk0RUQ0QThGMTY5RDJDOEEzNzk2NkQw NjIxNjY4NDc1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGipKfekXzdJdJR7jCkyThnx+9kVgXiFRRJA 4Rsq6oHp6V8QPGRsNtorVXIV90ueeyH/a3bENtbYoyi9c3XXafVyaee/WO1/HiKP +aCXyfWKwfL/ta97BPovzgwtqqCcSa6RnbepD7Jm1j+UT+TKLVyDY0YVED+I+4PP 712sjc1G6iyk2VAJPT3tpZjmLQ0sv1QQLKzsMlqyHy5WVlWcVtT052nrte0MOm/q cBKGef7AkIxFqTdDXtaNIfQSgpZfjwn85fdrVraodorNEPUnKj3q/JiaPmbjspcs pCjfWKvz/TUz/I+lhEaaWrENkzhsVMe47ln11kHvZAUAOLGDsgA= -----END CERTIFICATE-----Generated at Sat Aug 9 01:07:27 2025 by rpki-client