$ rpki-client -vvf repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft File: 7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft (raw, json) Hash identifier: dBjwHAk0WOEYEMfuDstRZvWXV/04YWlyXHKXEKCb+aA= Subject key identifier: C9:10:54:B0:F6:9A:17:F4:CB:B5:3A:F6:CE:C6:83:83:DD:F3:6D:94 Authority key identifier: 7E:FA:64:C1:15:73:C2:92:E1:92:C2:CD:EA:C4:D5:F8:B8:C2:1D:BD Certificate issuer: /CN=7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD Certificate serial: 192B574F16166AC278EC1873F0C71E9A838B13E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft Manifest number: 0507 Signing time: Mon 15 Sep 2025 00:12:21 +0000 Manifest this update: Mon 15 Sep 2025 00:07:21 +0000 Manifest next update: Thu 18 Sep 2025 10:13:21 +0000 Files and hashes: 1: 323430323a333263303a3a2f33322d3332203d3e20313332363337.roa (hash: alekTqBBNWqAI5oX1dPM5eFA94/uemvvhURj4TPNUr4=) 2: 3130332e31392e35382e302f32342d3234203d3e20313332363337.roa (hash: Pfzw8Y0xsuh7UKTJV02Yk1orDZhcKdBrnY+4Hy9M/Ss=) 3: 3130332e31392e35372e302f32342d3234203d3e20313332363337.roa (hash: 3QyxS0wngZcXbj5VM1EbTD1iHrmW5SRruXkHQg8JcfQ=) 4: 3130332e31392e35362e302f32342d3234203d3e20313332363337.roa (hash: 1GyJK6Rqd4FApqF94uFU3YdEq/5dWlAXo/swD/OMmMQ=) 5: 3130332e31392e35392e302f32342d3234203d3e20313332363337.roa (hash: 9iu7ypE0DOgzIq5HMAnIVo4kGKAs2AlVlOiv5hSXbmQ=) 6: 7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.crl (hash: TWBJyEFiOIqGWnhOQ54ou6AMcaTvXqLUNi5X+ve1sOE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.crl rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 18 Sep 2025 10:13:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:2b:57:4f:16:16:6a:c2:78:ec:18:73:f0:c7:1e:9a:83:8b:13:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD Validity Not Before: Sep 15 00:07:21 2025 GMT Not After : Sep 18 10:13:21 2025 GMT Subject: CN=C91054B0F69A17F4CBB53AF6CEC68383DDF36D94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:eb:3d:06:2e:fb:32:50:8e:82:86:d6:4d:36: 1e:ae:04:e0:17:a8:15:ff:bf:84:5f:bb:33:2b:c4: 3f:94:72:83:f2:3a:b9:32:e1:f1:63:ff:12:22:d6: aa:3e:c5:b3:f0:c9:be:10:fb:32:7f:10:95:f6:50: 1e:1e:9d:25:7c:8a:b7:80:1b:b4:5b:13:37:61:59: 49:1e:10:e4:d4:49:0a:14:49:b7:48:77:71:12:80: 99:40:f9:dd:61:81:d0:9c:38:b4:4e:f5:57:08:0c: 2e:de:b4:0e:2a:39:3f:ab:fc:11:72:14:95:15:1f: bc:ac:c1:e0:07:3c:05:a4:fd:d1:00:1b:d0:a6:aa: aa:b1:a6:8a:66:e7:93:87:eb:64:ee:f7:de:82:5a: d0:3a:4c:ad:0c:0a:bd:40:2b:2f:f8:a3:f6:6f:9c: 48:07:84:50:8e:ae:94:ee:bf:c1:53:f8:28:0a:00: 40:07:2a:cb:25:e2:d6:a7:eb:a4:e0:b5:83:b1:a8: 6e:63:ff:23:ce:b8:fa:06:3d:15:5b:80:8f:4f:4c: a3:89:f3:9d:31:45:9e:5b:54:55:0e:87:39:b1:6b: 07:a7:2c:8b:48:66:64:ec:b4:0a:15:02:46:3b:3f: 58:c1:8d:fa:b3:ee:fc:15:99:52:23:e3:26:a5:29: 65:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:10:54:B0:F6:9A:17:F4:CB:B5:3A:F6:CE:C6:83:83:DD:F3:6D:94 X509v3 Authority Key Identifier: keyid:7E:FA:64:C1:15:73:C2:92:E1:92:C2:CD:EA:C4:D5:F8:B8:C2:1D:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:ae:32:16:81:54:94:26:86:9b:4b:6f:42:b0:f5:1c:92:79: 90:87:a3:a4:12:28:75:db:7e:87:e9:6e:be:73:1b:a3:84:2d: b6:4d:96:2a:ce:59:ef:db:68:ea:9e:ca:a0:03:c9:c5:81:1b: 44:f3:17:a9:f4:1e:9b:25:89:9c:fa:75:ca:8f:11:ed:c0:2c: 8b:cd:56:f7:16:7d:e0:34:ac:00:3e:69:45:75:63:8a:23:71: 33:01:62:2a:17:21:b1:b5:6a:97:64:14:f7:3d:ae:cb:a9:ae: a7:47:56:b1:93:76:b3:a7:62:70:76:d7:f1:f5:2c:c6:26:3b: 1b:bf:c4:bb:21:2b:e3:20:8d:f2:af:2a:7a:e9:ec:c1:ce:f6: b5:d4:5a:43:53:30:5b:57:67:15:92:f4:dd:d1:36:3d:04:34: 31:12:06:2f:99:f6:0e:b7:42:ad:86:0d:74:0b:e7:d9:f5:0d: 89:f4:17:9f:bb:0f:89:f1:90:b0:e5:b5:7c:37:ba:bf:35:4f: 78:a7:87:f4:ef:43:16:57:f3:16:5d:c7:6b:91:35:12:30:16: f3:94:e6:0e:d5:df:34:79:b0:48:ec:36:e3:1a:2f:a5:ab:8f: dc:d6:d5:73:ca:82:8f:9c:d5:36:e9:3c:89:1b:98:df:d7:71: 30:8b:bd:a0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGStXTxYWasJ47Bhz8McemoOLE+cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VGQTY0QzExNTczQzI5MkUxOTJDMkNERUFDNEQ1RjhC OEMyMURCRDAeFw0yNTA5MTUwMDA3MjFaFw0yNTA5MTgxMDEzMjFaMDMxMTAvBgNV BAMTKEM5MTA1NEIwRjY5QTE3RjRDQkI1M0FGNkNFQzY4MzgzRERGMzZEOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn6z0GLvsyUI6ChtZNNh6uBOAX qBX/v4RfuzMrxD+UcoPyOrky4fFj/xIi1qo+xbPwyb4Q+zJ/EJX2UB4enSV8ireA G7RbEzdhWUkeEOTUSQoUSbdId3ESgJlA+d1hgdCcOLRO9VcIDC7etA4qOT+r/BFy FJUVH7ysweAHPAWk/dEAG9Cmqqqxpopm55OH62Tu996CWtA6TK0MCr1AKy/4o/Zv nEgHhFCOrpTuv8FT+CgKAEAHKssl4tan66TgtYOxqG5j/yPOuPoGPRVbgI9PTKOJ 850xRZ5bVFUOhzmxawenLItIZmTstAoVAkY7P1jBjfqz7vwVmVIj4yalKWWjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyRBUsPaaF/TLtTr2zsaDg93zbZQwHwYDVR0j BBgwFoAUfvpkwRVzwpLhksLN6sTV+LjCHb0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDA5MjdlNi04YTBhLTRmYTctODk2OS05ZmI5ZDY5NDM5N2MvMC83RUZBNjRDMTE1 NzNDMjkyRTE5MkMyQ0RFQUM0RDVGOEI4QzIxREJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0VGQTY0QzExNTczQzI5MkUxOTJDMkNERUFDNEQ1RjhCOEMy MURCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQwOTI3ZTYtOGEwYS00ZmE3LTg5 NjktOWZiOWQ2OTQzOTdjLzAvN0VGQTY0QzExNTczQzI5MkUxOTJDMkNERUFDNEQ1 RjhCOEMyMURCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFKuMhaBVJQmhptLb0Kw9RySeZCHo6QSKHXb fofpbr5zG6OELbZNlirOWe/baOqeyqADycWBG0TzF6n0HpsliZz6dcqPEe3ALIvN VvcWfeA0rAA+aUV1Y4ojcTMBYioXIbG1apdkFPc9rsuprqdHVrGTdrOnYnB21/H1 LMYmOxu/xLshK+MgjfKvKnrp7MHO9rXUWkNTMFtXZxWS9N3RNj0ENDESBi+Z9g63 Qq2GDXQL59n1DYn0F5+7D4nxkLDltXw3ur81T3inh/TvQxZX8xZdx2uRNRIwFvOU 5g7V3zR5sEjsNuMaL6Wrj9zW1XPKgo+c1TbpPIkbmN/XcTCLvaA= -----END CERTIFICATE-----Generated at Mon Sep 15 13:45:55 2025 by rpki-client