$ rpki-client -vvf repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.mft File: C7840142ADE3E1876CB50EA3A410454EB3889153.mft (raw, json) Hash identifier: fg7QGScB4f3gc9Ms8oWwbhcVNqLjNg4yBK6+05ewH44= Subject key identifier: 63:29:27:99:EB:EB:23:2F:80:37:7C:37:45:D1:4B:A2:A9:B9:86:4D Authority key identifier: C7:84:01:42:AD:E3:E1:87:6C:B5:0E:A3:A4:10:45:4E:B3:88:91:53 Certificate issuer: /CN=C7840142ADE3E1876CB50EA3A410454EB3889153 Certificate serial: 6C61C478C036AB1CB4229201E094DFA10AD222A3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7840142ADE3E1876CB50EA3A410454EB3889153.cer Subject info access: rsync://repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.mft Manifest number: AA Signing time: Sat 19 Jul 2025 11:00:02 +0000 Manifest this update: Sat 19 Jul 2025 10:55:02 +0000 Manifest next update: Tue 22 Jul 2025 11:04:02 +0000 Files and hashes: 1: 323030313a6466323a633963303a3a2f34382d3438203d3e20313531353338.roa (hash: IoIyP//hrQlYB+aIBKE8acsqetTnMXLdLd08/ax7yKA=) 2: 3130332e3234382e382e302f32332d3234203d3e20313531353338.roa (hash: H6s77RONQxfYVUNz4YRn/C2zSuIhVFg1GTTCJsiiK0o=) 3: C7840142ADE3E1876CB50EA3A410454EB3889153.crl (hash: nixXb0NeUng7ezibB8yRZ9+fHWaQ4OCd4Cqnou+5LC4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.crl rsync://repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7840142ADE3E1876CB50EA3A410454EB3889153.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 11:04:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:61:c4:78:c0:36:ab:1c:b4:22:92:01:e0:94:df:a1:0a:d2:22:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7840142ADE3E1876CB50EA3A410454EB3889153 Validity Not Before: Jul 19 10:55:02 2025 GMT Not After : Jul 22 11:04:02 2025 GMT Subject: CN=63292799EBEB232F80377C3745D14BA2A9B9864D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:d1:a4:7b:f4:32:44:e0:dc:51:7d:11:fa:07: 34:aa:f6:cc:82:32:a5:3f:4b:9e:0a:a7:36:10:3d: 27:a4:47:9b:86:82:89:45:33:2a:24:b6:66:9b:fc: 69:da:0d:6d:5c:96:fe:e2:db:16:c4:fc:15:d9:2a: 93:dd:27:0e:0d:ed:f6:c9:ae:ea:e8:ac:cf:95:b8: 46:ca:3e:e2:00:0e:ee:59:29:8d:b5:de:2d:69:f1: c4:65:d9:c3:0a:b1:da:ff:78:8c:71:c0:b3:df:a7: 6d:ba:26:a8:28:18:d8:3e:c9:d0:92:16:5c:e5:dd: 36:80:fe:9a:63:70:ec:eb:4b:30:6d:cb:63:e0:b1: 08:27:6c:1b:63:ad:57:ef:9f:49:5d:96:60:b1:cc: 0e:5d:cc:bc:c7:e5:dc:37:fc:23:38:3b:f9:97:3e: b5:6c:33:b4:84:e5:3a:b5:f4:1d:93:6a:d3:a2:ba: 20:34:c9:44:a2:f2:42:c9:58:b5:02:73:83:03:2e: d6:a8:08:43:84:a7:24:4d:05:11:92:f3:85:dc:68: 69:e8:0f:56:1d:a5:0e:ac:2f:9c:f3:79:e0:8c:03: 8f:31:a7:76:69:65:33:75:a0:b4:d2:a1:9e:1f:dd: 61:4a:1c:65:84:08:c9:02:68:74:5e:44:7d:30:cf: 8e:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:29:27:99:EB:EB:23:2F:80:37:7C:37:45:D1:4B:A2:A9:B9:86:4D X509v3 Authority Key Identifier: keyid:C7:84:01:42:AD:E3:E1:87:6C:B5:0E:A3:A4:10:45:4E:B3:88:91:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7840142ADE3E1876CB50EA3A410454EB3889153.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:e9:93:84:7d:92:4f:4f:fe:f3:72:80:b3:d8:93:cd:fe:35: e3:c1:9b:2a:97:2b:b7:8f:1e:f0:00:4f:53:04:f6:6f:2f:c9: 6b:9c:60:c1:a6:ad:3c:8d:05:a8:e5:fd:d2:e2:7b:72:9e:20: 8a:a2:c8:21:f8:55:4b:2c:2e:90:04:0d:17:ae:fc:97:38:e4: f4:c2:c5:d7:13:e3:f1:f3:ba:87:5b:5f:ee:01:be:45:02:b4: 2a:40:91:75:76:aa:a4:04:32:90:16:3f:dc:bc:3b:8c:c8:79: de:56:8a:6e:8c:21:24:15:fe:02:9b:88:cd:68:1f:0e:77:0c: a1:90:89:05:b4:e8:48:a3:b5:a0:dc:cc:1b:fc:cf:72:ec:36: 86:90:55:02:e6:44:48:5d:bb:6a:15:02:87:ef:cb:cf:98:20: 32:d0:04:3d:22:d9:8b:b2:e8:38:a4:97:42:56:5a:40:04:fe: c9:27:bb:c0:3b:53:9c:b1:22:3b:40:88:35:e4:51:f0:d6:ea: 2d:c8:63:7d:eb:25:f3:dc:8d:5f:f8:c4:5a:4c:f7:b4:7e:f5: 79:e5:15:4e:54:b5:4d:5f:1d:ed:97:c5:e9:79:67:0d:d6:b5: 29:c4:5b:82:9c:14:3c:ea:fb:97:91:58:58:4c:bf:f9:cd:1c: 97:56:7d:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbGHEeMA2qxy0IpIB4JTfoQrSIqMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc4NDAxNDJBREUzRTE4NzZDQjUwRUEzQTQxMDQ1NEVC Mzg4OTE1MzAeFw0yNTA3MTkxMDU1MDJaFw0yNTA3MjIxMTA0MDJaMDMxMTAvBgNV BAMTKDYzMjkyNzk5RUJFQjIzMkY4MDM3N0MzNzQ1RDE0QkEyQTlCOTg2NEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCh0aR79DJE4NxRfRH6BzSq9syC MqU/S54KpzYQPSekR5uGgolFMyoktmab/GnaDW1clv7i2xbE/BXZKpPdJw4N7fbJ rurorM+VuEbKPuIADu5ZKY213i1p8cRl2cMKsdr/eIxxwLPfp226JqgoGNg+ydCS Flzl3TaA/ppjcOzrSzBty2PgsQgnbBtjrVfvn0ldlmCxzA5dzLzH5dw3/CM4O/mX PrVsM7SE5Tq19B2TatOiuiA0yUSi8kLJWLUCc4MDLtaoCEOEpyRNBRGS84XcaGno D1YdpQ6sL5zzeeCMA48xp3ZpZTN1oLTSoZ4f3WFKHGWECMkCaHReRH0wz467AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYyknmevrIy+AN3w3RdFLoqm5hk0wHwYDVR0j BBgwFoAUx4QBQq3j4YdstQ6jpBBFTrOIkVMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OGY1YmE1ZS0xZjVjLTQyODQtOWExNi0wMTM1YTlmZDRlMjgvMC9DNzg0MDE0MkFE RTNFMTg3NkNCNTBFQTNBNDEwNDU0RUIzODg5MTUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzc4NDAxNDJBREUzRTE4NzZDQjUwRUEzQTQxMDQ1NEVCMzg4 OTE1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjhmNWJhNWUtMWY1Yy00Mjg0LTlh MTYtMDEzNWE5ZmQ0ZTI4LzAvQzc4NDAxNDJBREUzRTE4NzZDQjUwRUEzQTQxMDQ1 NEVCMzg4OTE1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIvpk4R9kk9P/vNygLPYk83+NePBmyqXK7eP HvAAT1ME9m8vyWucYMGmrTyNBajl/dLie3KeIIqiyCH4VUssLpAEDReu/Jc45PTC xdcT4/HzuodbX+4BvkUCtCpAkXV2qqQEMpAWP9y8O4zIed5Wim6MISQV/gKbiM1o Hw53DKGQiQW06EijtaDczBv8z3LsNoaQVQLmREhdu2oVAofvy8+YIDLQBD0i2Yuy 6Dikl0JWWkAE/sknu8A7U5yxIjtAiDXkUfDW6i3IY33rJfPcjV/4xFpM97R+9Xnl FU5UtU1fHe2Xxel5Zw3WtSnEW4KcFDzq+5eRWFhMv/nNHJdWfRc= -----END CERTIFICATE-----Generated at Mon Jul 21 10:29:33 2025 by rpki-client