$ rpki-client -vvf repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft File: 7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft (raw, json) Hash identifier: zv9bkzyH/xgeSZyz6MtelS764rligD2VLQcps6N/xGc= Subject key identifier: 54:7C:0B:80:6F:04:28:86:61:D7:CC:AF:CA:BC:74:B0:49:77:B0:F0 Authority key identifier: 7E:8D:E1:54:9E:89:D4:B4:80:B5:56:69:5C:AB:E9:CE:7F:DF:5F:24 Certificate issuer: /CN=7E8DE1549E89D4B480B556695CABE9CE7FDF5F24 Certificate serial: 6127DE312D05FD719ABA465BD329244E9C2D39CB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft Manifest number: 67 Signing time: Sun 20 Jul 2025 14:30:59 +0000 Manifest this update: Sun 20 Jul 2025 14:25:59 +0000 Manifest next update: Wed 23 Jul 2025 22:26:59 +0000 Files and hashes: 1: 323030313a6466343a396134303a3a2f34382d3438203d3e20313533313439.roa (hash: TtLF2mCHfSEfxKosRTbgY2pYRo+Ox0NN2gzHDI6VY/0=) 2: 7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.crl (hash: oQF1Nm5ht7BRLHmBXbfFlPpT4oRhmw0PKwDIts41j+o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.crl rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 22:26:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:27:de:31:2d:05:fd:71:9a:ba:46:5b:d3:29:24:4e:9c:2d:39:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E8DE1549E89D4B480B556695CABE9CE7FDF5F24 Validity Not Before: Jul 20 14:25:59 2025 GMT Not After : Jul 23 22:26:59 2025 GMT Subject: CN=547C0B806F04288661D7CCAFCABC74B04977B0F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:12:2a:48:20:61:a8:1b:1b:1e:d1:99:9f:73: 99:fb:98:1c:6f:49:2a:7e:b7:e6:fc:f7:9f:41:95: d7:13:4c:16:dc:36:44:d7:58:dd:b7:04:c7:ff:8a: 7a:e5:61:d8:8b:fd:25:7d:6f:d0:9c:6d:d1:df:3e: b7:5a:97:29:70:3d:0d:ba:fb:a3:50:94:1c:f7:6e: c4:b9:ee:28:12:89:1c:a9:83:8b:de:c2:1e:27:f1: b2:cb:4e:5c:70:6a:3b:55:7d:cc:27:91:e2:c5:6a: 1d:e7:34:64:6d:f8:33:48:fe:2d:39:73:79:7c:04: 53:3a:8d:4c:5f:03:44:24:51:22:cf:72:33:ed:02: 8e:f8:b1:d6:0b:96:97:55:c0:17:c0:02:be:e2:aa: bc:82:25:8f:09:88:82:93:56:48:30:12:dc:b5:cd: 90:e5:b7:2e:e8:e4:12:13:e6:ff:28:5e:34:39:2d: ea:47:cf:71:ce:1b:ab:73:df:8a:65:7e:03:54:aa: d4:3e:3e:56:ee:92:12:77:c3:d0:9d:28:75:b3:9d: 65:d9:8c:c6:47:4e:d8:13:0f:bd:87:14:cc:b6:61: 1f:67:ec:ce:1d:32:5f:27:c2:fc:ff:b0:5c:4e:c1: 63:e4:c7:75:5f:ff:06:d2:2d:c6:da:8a:7c:cf:84: 61:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:7C:0B:80:6F:04:28:86:61:D7:CC:AF:CA:BC:74:B0:49:77:B0:F0 X509v3 Authority Key Identifier: keyid:7E:8D:E1:54:9E:89:D4:B4:80:B5:56:69:5C:AB:E9:CE:7F:DF:5F:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:8b:62:37:54:1a:d2:07:ac:29:d1:25:5f:d0:fc:23:4b:99: c9:a9:e5:7b:ec:20:78:ea:25:e3:95:b0:7d:94:68:24:15:a0: f9:fd:81:c5:72:44:4a:9a:b4:9f:ce:68:10:51:69:a3:27:0c: 83:7b:2f:30:9a:25:b1:0c:22:21:68:6f:7c:59:d5:d5:f0:70: 37:e7:fb:2d:33:6c:3d:33:f2:fc:c1:85:f9:03:99:4d:e6:fa: 21:69:75:1d:3e:a4:1b:29:2f:6f:c2:cb:78:5a:1c:d9:94:4e: 18:e3:36:21:01:69:72:f6:40:cc:91:45:12:20:f9:49:99:03: e8:7e:bd:fb:7b:b9:be:21:17:d4:72:1e:c5:0a:87:64:a2:b7: c9:ab:7b:97:55:86:19:ac:18:dd:c1:ad:4e:b8:96:fb:bc:c7: b1:50:68:2b:ea:ec:f9:5d:89:e0:07:dc:5c:70:e8:2d:41:fa: 21:37:af:bb:48:1c:e7:4e:15:be:30:aa:05:e6:b0:63:7e:3e: dd:9c:3b:4a:97:d4:e2:a6:40:07:55:a5:9e:66:7d:36:88:4e: 9a:90:c1:f6:31:dd:ca:73:4e:f2:43:3a:b6:06:0e:07:69:1f: 67:39:37:7d:be:15:1d:67:17:95:4e:09:cb:aa:4b:c4:06:75: 9a:a0:cc:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYSfeMS0F/XGaukZb0ykkTpwtOcswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U4REUxNTQ5RTg5RDRCNDgwQjU1NjY5NUNBQkU5Q0U3 RkRGNUYyNDAeFw0yNTA3MjAxNDI1NTlaFw0yNTA3MjMyMjI2NTlaMDMxMTAvBgNV BAMTKDU0N0MwQjgwNkYwNDI4ODY2MUQ3Q0NBRkNBQkM3NEIwNDk3N0IwRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZEipIIGGoGxse0Zmfc5n7mBxv SSp+t+b8959BldcTTBbcNkTXWN23BMf/inrlYdiL/SV9b9CcbdHfPrdalylwPQ26 +6NQlBz3bsS57igSiRypg4vewh4n8bLLTlxwajtVfcwnkeLFah3nNGRt+DNI/i05 c3l8BFM6jUxfA0QkUSLPcjPtAo74sdYLlpdVwBfAAr7iqryCJY8JiIKTVkgwEty1 zZDlty7o5BIT5v8oXjQ5LepHz3HOG6tz34plfgNUqtQ+PlbukhJ3w9CdKHWznWXZ jMZHTtgTD72HFMy2YR9n7M4dMl8nwvz/sFxOwWPkx3Vf/wbSLcbainzPhGERAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVHwLgG8EKIZh18yvyrx0sEl3sPAwHwYDVR0j BBgwFoAUfo3hVJ6J1LSAtVZpXKvpzn/fXyQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2RjMDM0Zi0zODIzLTQ4YWYtOTUzZC1hYWE4NzNiMGZiNmEvMS83RThERTE1NDlF ODlENEI0ODBCNTU2Njk1Q0FCRTlDRTdGREY1RjI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0U4REUxNTQ5RTg5RDRCNDgwQjU1NjY5NUNBQkU5Q0U3RkRG NUYyNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNkYzAzNGYtMzgyMy00OGFmLTk1 M2QtYWFhODczYjBmYjZhLzEvN0U4REUxNTQ5RTg5RDRCNDgwQjU1NjY5NUNBQkU5 Q0U3RkRGNUYyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHCLYjdUGtIHrCnRJV/Q/CNLmcmp5XvsIHjq JeOVsH2UaCQVoPn9gcVyREqatJ/OaBBRaaMnDIN7LzCaJbEMIiFob3xZ1dXwcDfn +y0zbD0z8vzBhfkDmU3m+iFpdR0+pBspL2/Cy3haHNmUThjjNiEBaXL2QMyRRRIg +UmZA+h+vft7ub4hF9RyHsUKh2Sit8mre5dVhhmsGN3BrU64lvu8x7FQaCvq7Pld ieAH3Fxw6C1B+iE3r7tIHOdOFb4wqgXmsGN+Pt2cO0qX1OKmQAdVpZ5mfTaITpqQ wfYx3cpzTvJDOrYGDgdpH2c5N32+FR1nF5VOCcuqS8QGdZqgzBE= -----END CERTIFICATE-----Generated at Mon Jul 21 02:07:29 2025 by rpki-client