$ rpki-client -vvf repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft File: 7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft (raw, json) Hash identifier: 6J4N8xdH9mRZByastaobb0MNJBvOUG8hXoCjfgBFsJo= Subject key identifier: 8D:31:5D:AD:EB:B2:4F:FF:81:50:43:FA:95:60:73:07:BA:F7:08:79 Authority key identifier: 7D:6E:DF:DB:21:B8:B7:E6:A7:5A:99:0A:7B:EC:AD:85:E8:BE:B9:53 Certificate issuer: /CN=7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953 Certificate serial: 099BAF90107F7A9F31FB78A225FC02A77F88ACDD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft Manifest number: 019A Signing time: Sat 19 Jul 2025 18:10:04 +0000 Manifest this update: Sat 19 Jul 2025 18:05:04 +0000 Manifest next update: Wed 23 Jul 2025 00:54:04 +0000 Files and hashes: 1: 3130332e34362e342e302f32332d3233203d3e20313530343630.roa (hash: NXHMc5cBUZitTQZ4ST9s7lp3tsPIg2LlkZ5yYQ7KPUA=) 2: 7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.crl (hash: 1G8mF08duwO/MaHVKgDvvBZmHDxpl1jqW4IRGSaNEcs=) 3: 3130332e34362e352e302f32342d3234203d3e20313530343630.roa (hash: OiXuaCFeHNTNKTkxwDwZ/IJjAlYs+aZs7qWhd3mySzg=) 4: 3130332e34362e342e302f32342d3234203d3e20313530343630.roa (hash: 70RFcRoz1w22nVDdjd8xwvOHx9oaAPRDsiAFJSjZRVk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.crl rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 00:54:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:9b:af:90:10:7f:7a:9f:31:fb:78:a2:25:fc:02:a7:7f:88:ac:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953 Validity Not Before: Jul 19 18:05:04 2025 GMT Not After : Jul 23 00:54:04 2025 GMT Subject: CN=8D315DADEBB24FFF815043FA95607307BAF70879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:36:46:36:23:98:ec:89:62:2d:66:3c:b2:7d: c2:12:3c:bb:58:fb:89:f9:c4:db:34:b8:81:82:7d: 9f:4b:eb:7c:2c:56:91:a8:9c:a3:4c:f9:a0:be:42: 6e:7f:34:7f:d1:62:af:84:35:ba:1f:e9:4d:fb:fb: a3:ac:74:85:a8:06:12:29:d5:d6:1c:7d:01:38:7d: 5b:bd:d2:a2:36:db:1a:98:f4:05:fe:ae:13:c7:52: 89:04:25:9c:b7:ee:8e:ae:3c:7e:71:3d:60:3a:b1: e2:34:26:30:e3:de:83:0b:ff:c9:33:fa:20:b0:8c: 92:1f:d7:f0:63:fc:38:ae:68:ac:35:de:ed:c1:5c: 58:ce:1f:81:3c:5d:e5:6d:ba:91:4b:c5:bb:40:95: 1c:d1:57:f4:28:0a:2d:af:de:0b:36:7a:e7:fb:e5: 2b:fe:58:de:56:8f:14:da:93:b1:d8:e1:4f:e4:bd: 00:36:b5:bf:b0:bc:ab:0a:d9:79:67:93:48:9e:31: c9:e9:f5:82:20:1b:a6:04:24:7a:bb:08:ff:ae:90: c6:b9:c5:62:a5:e4:25:17:ee:97:39:ed:cf:ee:1f: 9c:05:84:79:2b:17:0e:cd:c1:dc:25:8b:0a:6a:0a: c2:20:7d:dc:ce:4e:fe:e6:f8:cd:db:b1:c9:2b:30: ab:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:31:5D:AD:EB:B2:4F:FF:81:50:43:FA:95:60:73:07:BA:F7:08:79 X509v3 Authority Key Identifier: keyid:7D:6E:DF:DB:21:B8:B7:E6:A7:5A:99:0A:7B:EC:AD:85:E8:BE:B9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:f9:ee:9f:1e:81:6d:ef:63:92:99:08:46:72:30:82:2a:68: 88:80:e2:65:0f:81:39:e8:b2:a2:c2:d8:fc:b4:6b:56:b6:17: 20:1e:61:48:8f:c2:e4:c3:34:5a:7b:f7:c9:37:f9:70:3e:1f: 3b:f4:19:e2:24:0a:fe:2e:7f:01:83:13:da:b6:ff:ea:49:cd: 64:62:dc:3b:77:8a:cf:b2:be:05:28:08:d3:b2:f3:84:f6:aa: 8e:89:e7:45:1c:0a:f9:a4:8e:a7:ea:cb:34:53:38:94:32:76: c5:b4:6c:bd:6b:e6:a9:df:22:f3:0b:3f:dc:4f:3b:02:bb:ee: e8:09:c4:9b:30:a0:7d:1e:fe:ae:64:13:7f:c4:93:9f:e9:ef: c2:35:47:69:d3:77:41:f0:c6:e4:04:08:05:92:1a:85:a0:2e: 3d:1f:f4:58:82:da:8c:34:16:83:7f:31:bd:f0:1c:a4:b6:d2: 79:5e:da:1c:06:ab:37:b5:f4:ce:bf:f3:53:6f:7b:7b:b3:84: 9d:82:c1:42:e8:93:52:46:c8:d0:ce:82:72:38:d2:fb:14:f1: ad:97:0d:57:ad:c9:42:08:4b:1c:99:a2:0f:89:51:dd:bd:a2: 2b:e5:79:56:eb:3d:43:1c:37:52:04:ba:47:2f:8a:eb:92:3d: a0:1e:59:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCZuvkBB/ep8x+3iiJfwCp3+IrN0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q2RURGREIyMUI4QjdFNkE3NUE5OTBBN0JFQ0FEODVF OEJFQjk1MzAeFw0yNTA3MTkxODA1MDRaFw0yNTA3MjMwMDU0MDRaMDMxMTAvBgNV BAMTKDhEMzE1REFERUJCMjRGRkY4MTUwNDNGQTk1NjA3MzA3QkFGNzA4NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6NkY2I5jsiWItZjyyfcISPLtY +4n5xNs0uIGCfZ9L63wsVpGonKNM+aC+Qm5/NH/RYq+ENbof6U37+6OsdIWoBhIp 1dYcfQE4fVu90qI22xqY9AX+rhPHUokEJZy37o6uPH5xPWA6seI0JjDj3oML/8kz +iCwjJIf1/Bj/DiuaKw13u3BXFjOH4E8XeVtupFLxbtAlRzRV/QoCi2v3gs2euf7 5Sv+WN5WjxTak7HY4U/kvQA2tb+wvKsK2Xlnk0ieMcnp9YIgG6YEJHq7CP+ukMa5 xWKl5CUX7pc57c/uH5wFhHkrFw7NwdwliwpqCsIgfdzOTv7m+M3bsckrMKtfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjTFdreuyT/+BUEP6lWBzB7r3CHkwHwYDVR0j BBgwFoAUfW7f2yG4t+anWpkKe+ythei+uVMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmM4Y2RhNS0zNDgzLTQyYjAtYjM4NS1mYzA3MDcxNmZiY2MvMC83RDZFREZEQjIx QjhCN0U2QTc1QTk5MEE3QkVDQUQ4NUU4QkVCOTUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q2RURGREIyMUI4QjdFNkE3NUE5OTBBN0JFQ0FEODVFOEJF Qjk1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJjOGNkYTUtMzQ4My00MmIwLWIz ODUtZmMwNzA3MTZmYmNjLzAvN0Q2RURGREIyMUI4QjdFNkE3NUE5OTBBN0JFQ0FE ODVFOEJFQjk1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANL57p8egW3vY5KZCEZyMIIqaIiA4mUPgTno sqLC2Py0a1a2FyAeYUiPwuTDNFp798k3+XA+Hzv0GeIkCv4ufwGDE9q2/+pJzWRi 3Dt3is+yvgUoCNOy84T2qo6J50UcCvmkjqfqyzRTOJQydsW0bL1r5qnfIvMLP9xP OwK77ugJxJswoH0e/q5kE3/Ek5/p78I1R2nTd0HwxuQECAWSGoWgLj0f9FiC2ow0 FoN/Mb3wHKS20nle2hwGqze19M6/81Nve3uzhJ2CwULok1JGyNDOgnI40vsU8a2X DVetyUIISxyZog+JUd29oivleVbrPUMcN1IEukcviuuSPaAeWag= -----END CERTIFICATE-----Generated at Sun Jul 20 21:31:26 2025 by rpki-client