$ rpki-client -vvf repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.mft File: 7433AB64571BE1827F0BC97ED291976B6E3429FA.mft (raw, json) Hash identifier: w9RER788WpvQJMKWGFpfSwwdTEeMuMuJsBOPBYA1CdE= Subject key identifier: 62:B8:23:A5:F3:7F:CC:C7:1C:43:39:AE:47:84:94:3B:78:64:A4:A5 Authority key identifier: 74:33:AB:64:57:1B:E1:82:7F:0B:C9:7E:D2:91:97:6B:6E:34:29:FA Certificate issuer: /CN=7433AB64571BE1827F0BC97ED291976B6E3429FA Certificate serial: 482BEA6654EFFB7EE8A488227FD12633BC85CC1E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7433AB64571BE1827F0BC97ED291976B6E3429FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.mft Manifest number: 018C Signing time: Tue 22 Jul 2025 10:52:14 +0000 Manifest this update: Tue 22 Jul 2025 10:47:14 +0000 Manifest next update: Fri 25 Jul 2025 17:24:14 +0000 Files and hashes: 1: 3130332e37352e36322e302f32332d3234203d3e20313530353339.roa (hash: LDOqOfl8+d8Lz+/c+0knmLxGK2Kr8P4Ti1sIU0L3/wo=) 2: 3130332e37352e36322e302f32342d3234203d3e20313530353339.roa (hash: Foo7ECvYM8eC5QdFLfci515Pz4pdcUotJYsrxOmUjnQ=) 3: 3130332e37352e36332e302f32342d3234203d3e20313530353339.roa (hash: dt0M2E6hMVGXyd6wchuCJpbqgL7DjAEk9eGkYZfJTqo=) 4: 7433AB64571BE1827F0BC97ED291976B6E3429FA.crl (hash: rcgVs06HsQahRBVFHVIts8mCy10/s445/o+1dtLWXXY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.crl rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7433AB64571BE1827F0BC97ED291976B6E3429FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 17:24:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:2b:ea:66:54:ef:fb:7e:e8:a4:88:22:7f:d1:26:33:bc:85:cc:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7433AB64571BE1827F0BC97ED291976B6E3429FA Validity Not Before: Jul 22 10:47:14 2025 GMT Not After : Jul 25 17:24:14 2025 GMT Subject: CN=62B823A5F37FCCC71C4339AE4784943B7864A4A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:78:0e:f1:db:50:a3:7b:74:3c:f2:cd:73:2b: 19:45:db:4b:28:92:2a:ad:02:3a:bc:4b:4c:05:bb: 5a:ce:03:77:6e:a4:55:53:45:dc:a8:a0:62:33:c1: 77:18:5a:b5:ae:73:c1:b0:a6:35:e5:c6:65:ec:66: cd:6e:21:f0:1d:4c:62:0a:f3:19:e3:b2:45:ee:31: 0d:11:4b:0b:b9:8d:89:cf:95:83:e5:f5:aa:7e:6f: e7:9a:b9:56:3c:1e:cb:11:7a:70:00:8d:68:7f:36: 5e:1b:bc:e3:26:19:02:63:0c:cd:a3:af:02:1b:89: 33:6b:eb:3f:cf:8b:69:76:72:9b:df:ef:0a:d0:e3: 46:87:f5:c0:c3:a2:95:37:bd:69:11:c8:d4:79:30: 80:29:08:02:79:d9:d1:8f:5a:32:ee:26:63:b8:06: 4e:e4:b3:a3:98:59:54:1b:ac:77:6a:40:8e:6c:f3: e2:76:d0:04:f4:e4:46:c1:4c:f4:c2:f2:27:65:ab: a9:de:e3:01:5b:85:99:bf:f6:6a:1a:62:8f:80:64: 16:e4:f5:4f:b1:33:6d:5d:5c:70:ab:cc:26:56:15: e4:b2:23:fb:a4:1c:12:c2:1b:f2:2c:75:49:24:0b: b2:9e:fe:c5:eb:2d:56:3f:1c:05:1a:9c:e7:a7:aa: a8:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:B8:23:A5:F3:7F:CC:C7:1C:43:39:AE:47:84:94:3B:78:64:A4:A5 X509v3 Authority Key Identifier: keyid:74:33:AB:64:57:1B:E1:82:7F:0B:C9:7E:D2:91:97:6B:6E:34:29:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7433AB64571BE1827F0BC97ED291976B6E3429FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:bd:a3:e2:b2:dd:32:06:d0:45:ee:16:6f:93:e4:43:5a:7c: 4e:21:59:d7:ae:95:a3:60:f3:c3:5f:ea:0e:1c:4f:55:05:15: 25:b6:08:73:7a:e2:67:93:ab:2d:51:2a:47:3c:cc:5e:75:fc: ab:82:f0:1a:12:e4:18:32:44:48:ff:47:d1:1a:40:dc:38:e3: a8:43:56:a5:66:15:dd:e3:ad:86:37:2c:ae:78:fc:6d:fd:d0: d2:0b:cf:94:06:73:0f:ec:04:8e:f4:16:03:69:1e:be:40:ac: 51:67:ee:9d:2c:d4:9e:0d:99:45:5d:c4:be:2a:cb:f6:3f:9c: 99:0c:5e:51:b3:0a:99:a9:89:37:31:fa:e6:42:41:d4:75:6d: 5a:9f:aa:10:a6:99:9e:b0:a2:57:93:2e:ea:3f:4a:ea:7d:c6: 8b:85:52:88:8f:5f:0c:e2:27:53:56:71:e3:5f:ce:46:5e:93: 92:dd:71:c8:e6:21:d5:c9:30:2e:82:23:89:67:25:d5:64:bb: 98:87:4e:5e:0f:9d:f5:47:41:a3:84:d2:09:7d:1f:35:08:68: 0f:30:2e:29:95:ab:00:72:ed:c8:c8:37:71:fe:ec:27:60:33: f0:42:4c:71:b4:02:ce:4a:a8:b2:ea:f7:33:71:ab:51:af:38: 61:fe:ba:08 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSCvqZlTv+37opIgif9EmM7yFzB4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQzM0FCNjQ1NzFCRTE4MjdGMEJDOTdFRDI5MTk3NkI2 RTM0MjlGQTAeFw0yNTA3MjIxMDQ3MTRaFw0yNTA3MjUxNzI0MTRaMDMxMTAvBgNV BAMTKDYyQjgyM0E1RjM3RkNDQzcxQzQzMzlBRTQ3ODQ5NDNCNzg2NEE0QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZeA7x21Cje3Q88s1zKxlF20so kiqtAjq8S0wFu1rOA3dupFVTRdyooGIzwXcYWrWuc8GwpjXlxmXsZs1uIfAdTGIK 8xnjskXuMQ0RSwu5jYnPlYPl9ap+b+eauVY8HssRenAAjWh/Nl4bvOMmGQJjDM2j rwIbiTNr6z/Pi2l2cpvf7wrQ40aH9cDDopU3vWkRyNR5MIApCAJ52dGPWjLuJmO4 Bk7ks6OYWVQbrHdqQI5s8+J20AT05EbBTPTC8idlq6ne4wFbhZm/9moaYo+AZBbk 9U+xM21dXHCrzCZWFeSyI/ukHBLCG/IsdUkkC7Ke/sXrLVY/HAUanOenqqg5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYrgjpfN/zMccQzmuR4SUO3hkpKUwHwYDVR0j BBgwFoAUdDOrZFcb4YJ/C8l+0pGXa240KfowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w N2M4YTBjMy0zN2Y1LTQ2NjctYTQzMC02ZmExMTFkMzQzYWEvMC83NDMzQUI2NDU3 MUJFMTgyN0YwQkM5N0VEMjkxOTc2QjZFMzQyOUZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzQzM0FCNjQ1NzFCRTE4MjdGMEJDOTdFRDI5MTk3NkI2RTM0 MjlGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDdjOGEwYzMtMzdmNS00NjY3LWE0 MzAtNmZhMTExZDM0M2FhLzAvNzQzM0FCNjQ1NzFCRTE4MjdGMEJDOTdFRDI5MTk3 NkI2RTM0MjlGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAW9o+Ky3TIG0EXuFm+T5ENafE4hWdeulaNg 88Nf6g4cT1UFFSW2CHN64meTqy1RKkc8zF51/KuC8BoS5BgyREj/R9EaQNw446hD VqVmFd3jrYY3LK54/G390NILz5QGcw/sBI70FgNpHr5ArFFn7p0s1J4NmUVdxL4q y/Y/nJkMXlGzCpmpiTcx+uZCQdR1bVqfqhCmmZ6woleTLuo/Sup9xouFUoiPXwzi J1NWceNfzkZek5LdccjmIdXJMC6CI4lnJdVku5iHTl4PnfVHQaOE0gl9HzUIaA8w LimVqwBy7cjIN3H+7CdgM/BCTHG0As5KqLLq9zNxq1GvOGH+ugg= -----END CERTIFICATE-----Generated at Wed Jul 23 12:11:10 2025 by rpki-client