$ rpki-client -vvf repo-rpki.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.mft File: 7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.mft (raw, json) Hash identifier: K7szH/vcvFZa6DMppdFiluArhq3L3km1CPkHpkYq+c4= Subject key identifier: 12:FA:A9:66:22:FF:D5:44:78:B7:0B:AB:E8:3A:1D:EE:E3:2A:52:08 Authority key identifier: 7C:E8:AF:BA:81:B9:A4:E0:B1:67:44:9B:4A:9C:A6:9B:88:73:C3:2C Certificate issuer: /CN=7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C Certificate serial: 16ECC2C2524B1CB8C838AB0F524F774451A571FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.mft Manifest number: 20 Signing time: Mon 21 Jul 2025 11:22:13 +0000 Manifest this update: Mon 21 Jul 2025 11:17:13 +0000 Manifest next update: Thu 24 Jul 2025 16:33:13 +0000 Files and hashes: 1: 7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.crl (hash: angBGz9+hdBCeMgd0pu+ExPsrNKZoAf/FTuWWSbWL30=) 2: 3130332e38332e3130302e302f32332d3234203d3e20313336303633.roa (hash: tP6gwHOQztpWiI7KNt68kDqlO1nwIWP+n+KVb4rQ1p0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.crl rsync://repo-rpki.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 16:33:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:ec:c2:c2:52:4b:1c:b8:c8:38:ab:0f:52:4f:77:44:51:a5:71:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C Validity Not Before: Jul 21 11:17:13 2025 GMT Not After : Jul 24 16:33:13 2025 GMT Subject: CN=12FAA96622FFD54478B70BABE83A1DEEE32A5208 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d4:84:3b:12:28:53:78:6b:9f:ee:77:4a:0e: c1:03:e4:33:45:dc:5e:ea:7f:86:1b:6e:6b:fb:0d: 03:9a:d3:84:6d:18:9d:ca:83:62:f2:00:91:91:3f: be:73:36:ee:02:ba:c5:fc:28:24:a9:a6:25:41:57: 99:99:52:08:3e:35:c2:ca:d4:59:6e:81:4c:56:c2: 3c:79:48:7e:57:7f:e6:6d:a1:26:3c:34:cd:2d:da: c9:4e:6a:5d:2d:eb:11:9c:ac:51:8e:24:8e:d5:cb: 71:30:d8:03:37:ad:eb:b6:79:6a:6b:61:43:f5:23: b2:c6:15:a2:f9:0f:cb:c8:db:41:de:9c:4f:04:19: e4:c7:84:40:b6:c6:48:fd:d2:55:2f:fb:15:d5:a3: f8:a2:e8:aa:ce:a0:73:ec:3a:b5:df:22:a4:ed:7a: 1f:90:17:55:b3:fb:04:f5:d3:b0:a8:79:08:af:d9: fd:1d:a8:50:a0:15:ad:0d:b0:14:19:51:c1:ea:1c: 2d:11:35:68:89:48:a6:df:ed:31:7f:4e:b7:42:47: 7f:de:eb:78:00:77:a1:1a:11:81:47:eb:9b:d6:b4: a4:2e:e9:70:2a:c1:98:56:bc:90:c7:a7:ca:4f:1a: 0d:1f:89:5c:fa:48:7c:65:e5:a8:a2:05:9b:57:d3: 5a:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:FA:A9:66:22:FF:D5:44:78:B7:0B:AB:E8:3A:1D:EE:E3:2A:52:08 X509v3 Authority Key Identifier: keyid:7C:E8:AF:BA:81:B9:A4:E0:B1:67:44:9B:4A:9C:A6:9B:88:73:C3:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:92:8d:98:cd:bd:33:04:f0:3a:57:7f:c4:db:e3:e3:28:9e: 7b:53:5e:3f:21:71:a9:46:1a:ad:94:3b:b5:fb:d9:da:7d:a4: 79:78:e0:63:fa:41:c3:1c:57:5a:48:b6:fc:b1:61:10:19:d8: f8:ee:09:6a:e9:e9:99:6c:5e:1d:24:e1:76:a0:4e:91:d7:2e: 73:e7:d2:f1:5f:86:7f:21:e5:45:00:9a:96:e1:02:b0:c8:1a: e9:30:00:20:10:9a:d2:b8:d3:82:38:a8:1d:c2:b7:3b:3d:4e: 6c:af:5e:27:42:66:0a:20:91:be:25:11:3d:ef:00:0e:15:cd: b1:04:2c:8e:a3:5f:85:39:31:81:6a:fb:ed:1d:a6:db:35:62: 46:1b:f0:d9:d5:a7:1f:2c:de:6f:9f:26:cc:d5:53:12:08:af: 1a:97:63:96:38:57:a5:91:c6:d4:80:86:98:f9:b4:c0:83:e5: f7:cd:75:6e:0b:33:8f:90:b0:1a:ed:b5:24:47:cd:93:38:59: d0:a3:a5:cf:e2:1c:8a:d9:08:94:5c:7a:5e:21:65:a0:f8:c8: 67:37:03:3e:5a:13:b1:cb:af:58:cb:5f:e8:f7:b3:fc:d8:48: 9a:85:9a:e7:ff:8a:df:fe:b1:d3:85:96:38:01:6e:50:f4:74: 68:04:0e:9c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFuzCwlJLHLjIOKsPUk93RFGlcf4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NFOEFGQkE4MUI5QTRFMEIxNjc0NDlCNEE5Q0E2OUI4 ODczQzMyQzAeFw0yNTA3MjExMTE3MTNaFw0yNTA3MjQxNjMzMTNaMDMxMTAvBgNV BAMTKDEyRkFBOTY2MjJGRkQ1NDQ3OEI3MEJBQkU4M0ExREVFRTMyQTUyMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC11IQ7EihTeGuf7ndKDsED5DNF 3F7qf4Ybbmv7DQOa04RtGJ3Kg2LyAJGRP75zNu4CusX8KCSppiVBV5mZUgg+NcLK 1FlugUxWwjx5SH5Xf+ZtoSY8NM0t2slOal0t6xGcrFGOJI7Vy3Ew2AM3reu2eWpr YUP1I7LGFaL5D8vI20HenE8EGeTHhEC2xkj90lUv+xXVo/ii6KrOoHPsOrXfIqTt eh+QF1Wz+wT107CoeQiv2f0dqFCgFa0NsBQZUcHqHC0RNWiJSKbf7TF/TrdCR3/e 63gAd6EaEYFH65vWtKQu6XAqwZhWvJDHp8pPGg0fiVz6SHxl5aiiBZtX01oxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEvqpZiL/1UR4twur6Dod7uMqUggwHwYDVR0j BBgwFoAUfOivuoG5pOCxZ0SbSpymm4hzwywwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NmMwNjQ1NS0xNWMwLTRmM2QtODEzYi1jMDdiZWY3OGYwMjUvMC83Q0U4QUZCQTgx QjlBNEUwQjE2NzQ0OUI0QTlDQTY5Qjg4NzNDMzJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0NFOEFGQkE4MUI5QTRFMEIxNjc0NDlCNEE5Q0E2OUI4ODcz QzMyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDZjMDY0NTUtMTVjMC00ZjNkLTgx M2ItYzA3YmVmNzhmMDI1LzAvN0NFOEFGQkE4MUI5QTRFMEIxNjc0NDlCNEE5Q0E2 OUI4ODczQzMyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKGSjZjNvTME8DpXf8Tb4+MonntTXj8hcalG Gq2UO7X72dp9pHl44GP6QcMcV1pItvyxYRAZ2PjuCWrp6ZlsXh0k4XagTpHXLnPn 0vFfhn8h5UUAmpbhArDIGukwACAQmtK404I4qB3Ctzs9TmyvXidCZgogkb4lET3v AA4VzbEELI6jX4U5MYFq++0dpts1YkYb8NnVpx8s3m+fJszVUxIIrxqXY5Y4V6WR xtSAhpj5tMCD5ffNdW4LM4+QsBrttSRHzZM4WdCjpc/iHIrZCJRcel4hZaD4yGc3 Az5aE7HLr1jLX+j3s/zYSJqFmuf/it/+sdOFljgBblD0dGgEDpw= -----END CERTIFICATE-----Generated at Wed Jul 23 02:02:11 2025 by rpki-client