$ rpki-client -vvf repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft File: 7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft (raw, json) Hash identifier: t/G2/pzt9SSPgK99SPGGdts69mxVA2cxvwiILZVcmBY= Subject key identifier: 0A:57:26:BD:2B:A9:07:AA:75:9A:F2:1C:4C:4B:86:5C:5E:8E:4B:CC Authority key identifier: 7C:D5:24:05:24:67:F2:2D:D8:E5:7E:02:A1:C9:9E:DE:5A:8C:F2:49 Certificate issuer: /CN=7CD524052467F22DD8E57E02A1C99EDE5A8CF249 Certificate serial: 6628D3E6ABA0D9625208AE070B5043C703AAA924 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.cer Subject info access: rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft Manifest number: 04DD Signing time: Sun 20 Jul 2025 11:50:37 +0000 Manifest this update: Sun 20 Jul 2025 11:45:37 +0000 Manifest next update: Wed 23 Jul 2025 13:19:37 +0000 Files and hashes: 1: 7CD524052467F22DD8E57E02A1C99EDE5A8CF249.crl (hash: bwQBAABB97D0d8h2zdoRGBbbVImsVhNPQGD94Z6lrKo=) 2: 3130332e3135302e34342e302f32332d3234203d3e20313430333838.roa (hash: 9wWnuvCPEe0C8U6UVGeFeb9Dd9afvhSHPrMKavtgge8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.crl rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 13:19:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:28:d3:e6:ab:a0:d9:62:52:08:ae:07:0b:50:43:c7:03:aa:a9:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CD524052467F22DD8E57E02A1C99EDE5A8CF249 Validity Not Before: Jul 20 11:45:37 2025 GMT Not After : Jul 23 13:19:37 2025 GMT Subject: CN=0A5726BD2BA907AA759AF21C4C4B865C5E8E4BCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:b7:bc:93:84:6b:94:73:8a:4c:22:0a:e5:5a: 6b:dc:3d:c9:c8:f9:92:05:ea:41:20:2d:0d:1b:7e: d5:39:67:2c:9a:46:b4:eb:17:50:10:8b:c0:e5:0a: b5:ab:be:ab:b3:75:af:7a:7a:97:44:e2:2a:34:7d: d6:bb:52:4f:01:34:cd:46:3b:9d:4a:67:bc:82:a2: 31:cf:4f:30:4e:23:23:e7:37:b6:37:be:f6:c2:2c: 30:e4:4a:14:ca:3a:07:04:70:41:dd:8d:60:3d:2b: 02:de:e1:0c:14:d7:52:13:41:97:19:1e:e6:d1:8c: ca:a2:80:a5:09:32:32:ec:69:49:46:19:b6:53:76: d9:8f:20:03:99:2f:6d:3e:41:6d:ed:88:8c:a3:14: 49:ed:c2:1c:ee:78:85:84:9f:a1:90:15:97:5d:0a: 44:ee:03:01:fb:03:ac:e3:17:11:42:f8:ec:25:12: 58:8e:ca:46:c8:af:04:87:02:f5:e5:8b:51:ed:03: 83:ff:74:07:c6:10:8d:24:72:00:e8:da:66:0f:ce: 24:53:34:76:57:46:98:69:f5:e5:56:5b:55:37:c7: e2:92:e6:47:db:dc:15:e0:e8:57:85:b1:07:10:2a: 45:a6:40:0e:8a:c9:c7:10:9c:3f:70:2a:ce:41:80: ae:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:57:26:BD:2B:A9:07:AA:75:9A:F2:1C:4C:4B:86:5C:5E:8E:4B:CC X509v3 Authority Key Identifier: keyid:7C:D5:24:05:24:67:F2:2D:D8:E5:7E:02:A1:C9:9E:DE:5A:8C:F2:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption af:48:cc:80:9e:ba:d4:6a:ef:c2:f8:41:34:20:46:0f:05:31: 63:ac:23:65:57:a8:8d:58:7f:94:e2:8b:3d:e6:28:0f:8e:88: dc:a3:36:9a:ed:c1:da:ef:96:83:37:96:f9:0e:33:8f:f7:dd: 9a:a9:0b:49:70:2e:f0:d2:8c:9a:9e:34:e3:e4:2a:0d:11:62: 20:50:d8:d8:e0:43:e8:aa:ad:24:9c:02:ac:b9:1a:a0:45:52: e0:05:52:83:85:df:bb:f7:33:e6:72:55:15:25:4d:9c:85:19: 98:48:b2:27:ac:00:b4:b6:ce:69:73:1c:d7:21:25:75:bb:20: a5:2e:32:6f:ef:e5:d8:19:be:91:75:14:37:4b:1b:d9:b0:1d: 41:c0:5a:36:f2:80:39:0a:47:e5:14:0c:71:21:91:5c:db:91: f1:fa:30:68:2d:f2:d2:eb:98:23:cf:be:70:60:5a:dd:4d:00: 9b:78:48:2e:31:1c:8c:28:68:08:57:96:60:21:83:6f:fd:e8: 3a:d2:7c:db:42:10:63:bb:d9:a1:15:9d:27:bb:cb:7f:dc:a3: ff:c6:f4:16:64:84:5f:44:6e:34:3a:e2:61:7c:fc:8d:d9:4d: 71:52:c4:1c:06:07:1c:f3:0c:40:ea:ff:ff:3a:ea:d4:10:e8: fe:02:1e:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZijT5qug2WJSCK4HC1BDxwOqqSQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NENTI0MDUyNDY3RjIyREQ4RTU3RTAyQTFDOTlFREU1 QThDRjI0OTAeFw0yNTA3MjAxMTQ1MzdaFw0yNTA3MjMxMzE5MzdaMDMxMTAvBgNV BAMTKDBBNTcyNkJEMkJBOTA3QUE3NTlBRjIxQzRDNEI4NjVDNUU4RTRCQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6t7yThGuUc4pMIgrlWmvcPcnI +ZIF6kEgLQ0bftU5ZyyaRrTrF1AQi8DlCrWrvquzda96epdE4io0fda7Uk8BNM1G O51KZ7yCojHPTzBOIyPnN7Y3vvbCLDDkShTKOgcEcEHdjWA9KwLe4QwU11ITQZcZ HubRjMqigKUJMjLsaUlGGbZTdtmPIAOZL20+QW3tiIyjFEntwhzueIWEn6GQFZdd CkTuAwH7A6zjFxFC+OwlEliOykbIrwSHAvXli1HtA4P/dAfGEI0kcgDo2mYPziRT NHZXRphp9eVWW1U3x+KS5kfb3BXg6FeFsQcQKkWmQA6KyccQnD9wKs5BgK7xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUClcmvSupB6p1mvIcTEuGXF6OS8wwHwYDVR0j BBgwFoAUfNUkBSRn8i3Y5X4Cocme3lqM8kkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NGViNmVkZC1mMTNiLTQ5ZjAtYWQ4Ny02YjhlZTYxNGRjOGYvMC83Q0Q1MjQwNTI0 NjdGMjJERDhFNTdFMDJBMUM5OUVERTVBOENGMjQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0NENTI0MDUyNDY3RjIyREQ4RTU3RTAyQTFDOTlFREU1QThD RjI0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDRlYjZlZGQtZjEzYi00OWYwLWFk ODctNmI4ZWU2MTRkYzhmLzAvN0NENTI0MDUyNDY3RjIyREQ4RTU3RTAyQTFDOTlF REU1QThDRjI0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK9IzICeutRq78L4QTQgRg8FMWOsI2VXqI1Y f5Tiiz3mKA+OiNyjNprtwdrvloM3lvkOM4/33ZqpC0lwLvDSjJqeNOPkKg0RYiBQ 2NjgQ+iqrSScAqy5GqBFUuAFUoOF37v3M+ZyVRUlTZyFGZhIsiesALS2zmlzHNch JXW7IKUuMm/v5dgZvpF1FDdLG9mwHUHAWjbygDkKR+UUDHEhkVzbkfH6MGgt8tLr mCPPvnBgWt1NAJt4SC4xHIwoaAhXlmAhg2/96DrSfNtCEGO72aEVnSe7y3/co//G 9BZkhF9EbjQ64mF8/I3ZTXFSxBwGBxzzDEDq//866tQQ6P4CHno= -----END CERTIFICATE-----Generated at Mon Jul 21 02:07:41 2025 by rpki-client