$ rpki-client -vvf repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.mft File: 7376922C93BF667FFBBDAF0735AE73D1451B08C2.mft (raw, json) Hash identifier: yU6jWsbKn6NNPYHpL2i7aPYcNyk9tMR7SFSCn6Ds9S0= Subject key identifier: 47:F8:DF:34:16:82:04:5B:45:B9:9C:AB:D4:13:FB:33:0A:EA:69:65 Authority key identifier: 73:76:92:2C:93:BF:66:7F:FB:BD:AF:07:35:AE:73:D1:45:1B:08:C2 Certificate issuer: /CN=7376922C93BF667FFBBDAF0735AE73D1451B08C2 Certificate serial: 719C559BB4940FB59EE3FC31B7035569908F213B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7376922C93BF667FFBBDAF0735AE73D1451B08C2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.mft Manifest number: 04E2 Signing time: Fri 18 Jul 2025 16:10:52 +0000 Manifest this update: Fri 18 Jul 2025 16:05:52 +0000 Manifest next update: Tue 22 Jul 2025 00:09:52 +0000 Files and hashes: 1: 3130332e38392e3136342e302f32342d3234203d3e20313333383030.roa (hash: +2SP7VdADvevew0k00TuxJ1WZ3WZFkGqu4JZIMGxgpw=) 2: 3130332e38392e3135342e302f32342d3234203d3e20313333383030.roa (hash: 21L4D1hu21+7UR3Mn3cvc8Jhs/U+RaE8nhEhhkQ5YEA=) 3: 3130332e38392e3136352e302f32342d3234203d3e20313333383030.roa (hash: 0V79HEBuKR1jbK8PkSQwyA4BziEgKvO+/ItR4BkRmQg=) 4: 3130332e372e3137362e302f32342d3234203d3e20313336303830.roa (hash: pULFJZ+nbfV5jOVZtN4jB+N6TsIyKwD9xJ39aFL57ak=) 5: 7376922C93BF667FFBBDAF0735AE73D1451B08C2.crl (hash: whd2RwevT+P5W1OwUeKm0hJii/YTipC1ijh1/HFzPqA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.crl rsync://repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7376922C93BF667FFBBDAF0735AE73D1451B08C2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 00:09:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:9c:55:9b:b4:94:0f:b5:9e:e3:fc:31:b7:03:55:69:90:8f:21:3b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7376922C93BF667FFBBDAF0735AE73D1451B08C2 Validity Not Before: Jul 18 16:05:52 2025 GMT Not After : Jul 22 00:09:52 2025 GMT Subject: CN=47F8DF341682045B45B99CABD413FB330AEA6965 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8e:2e:85:d5:09:f9:b1:fc:bc:2c:ac:e5:fe: a2:9c:bc:26:c1:1e:a6:84:9f:11:37:6e:a9:08:ef: 03:b9:5f:d3:25:e7:8c:67:4e:94:29:66:14:62:f4: a1:95:c2:a5:89:60:ee:e2:57:95:91:13:37:31:7a: 0c:5e:8e:95:27:b1:c2:0c:4e:17:19:49:07:b7:0f: 2d:3d:bf:ab:7a:7b:32:71:77:f2:af:bb:eb:06:0e: cb:a0:05:18:ab:3b:1e:cb:4d:d8:4a:76:57:b0:4a: 66:78:25:42:6e:9f:e7:f8:d0:62:54:d5:d0:67:bd: 4e:4e:f8:41:da:10:a5:c5:bb:67:02:c7:1d:1a:a8: 44:73:63:27:e3:d4:80:29:58:87:d0:63:95:9f:c1: 5e:d5:a5:81:d0:63:65:9e:b5:99:82:33:0e:3e:6d: e3:45:84:c4:f8:cd:2c:b0:02:e9:d8:34:c3:12:0b: 5c:38:02:0d:3b:b3:bf:ce:62:4d:75:7c:24:59:fb: 25:8e:88:a6:db:4a:a8:88:63:bc:a5:0d:71:23:ec: 08:50:de:7e:3b:47:a8:a0:e4:4f:c7:0a:61:7b:0a: d3:5b:72:f0:63:2f:2c:72:d6:1c:06:98:eb:d7:ee: 35:07:47:fd:0a:f8:fa:b6:5e:97:df:e5:52:59:81: 84:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:F8:DF:34:16:82:04:5B:45:B9:9C:AB:D4:13:FB:33:0A:EA:69:65 X509v3 Authority Key Identifier: keyid:73:76:92:2C:93:BF:66:7F:FB:BD:AF:07:35:AE:73:D1:45:1B:08:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7376922C93BF667FFBBDAF0735AE73D1451B08C2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:17:96:b9:99:9a:35:4c:29:1f:8f:a4:e4:60:21:dd:63:46: 75:ed:c8:e3:07:58:53:dc:c0:a7:94:95:16:f0:cc:15:50:17: 2b:9f:c0:9f:9b:1d:ba:ff:9d:42:6c:a2:1a:e4:d1:70:e8:78: cb:74:09:56:c8:bf:44:b8:6e:8b:38:fe:8a:bb:8b:cd:0a:8e: ac:4f:0e:df:44:52:70:bd:97:10:c3:7e:93:f6:8c:de:31:ea: 52:32:1f:52:cc:2f:f5:1f:70:74:88:97:ff:16:36:56:9d:02: 99:29:d8:2b:a9:3b:7f:57:d9:9c:66:5f:8e:f5:9b:36:99:68: 3b:db:9c:be:bb:2b:32:e0:7d:a3:bd:43:41:07:65:a8:7c:4a: 1a:81:cc:a4:61:83:71:48:5a:56:64:c4:fe:27:ae:38:a0:93: 94:e8:3a:cf:d8:c0:7c:38:81:30:f4:49:23:ac:0f:cc:e3:82: aa:46:87:83:5c:59:a9:00:87:24:c0:97:e1:c7:b0:9f:dd:7a: 53:f3:4d:ed:8b:f8:0f:01:3b:ef:39:32:b7:ae:33:f8:50:bb: ed:c2:14:80:2a:ee:3e:88:6a:16:d7:a9:93:b7:9a:24:37:9b: 5e:0d:00:0a:3f:2b:a3:21:24:5e:3f:63:60:74:29:19:1e:a4: ce:49:f4:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcZxVm7SUD7We4/wxtwNVaZCPITswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzM3NjkyMkM5M0JGNjY3RkZCQkRBRjA3MzVBRTczRDE0 NTFCMDhDMjAeFw0yNTA3MTgxNjA1NTJaFw0yNTA3MjIwMDA5NTJaMDMxMTAvBgNV BAMTKDQ3RjhERjM0MTY4MjA0NUI0NUI5OUNBQkQ0MTNGQjMzMEFFQTY5NjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+ji6F1Qn5sfy8LKzl/qKcvCbB HqaEnxE3bqkI7wO5X9Ml54xnTpQpZhRi9KGVwqWJYO7iV5WREzcxegxejpUnscIM ThcZSQe3Dy09v6t6ezJxd/Kvu+sGDsugBRirOx7LTdhKdlewSmZ4JUJun+f40GJU 1dBnvU5O+EHaEKXFu2cCxx0aqERzYyfj1IApWIfQY5WfwV7VpYHQY2WetZmCMw4+ beNFhMT4zSywAunYNMMSC1w4Ag07s7/OYk11fCRZ+yWOiKbbSqiIY7ylDXEj7AhQ 3n47R6ig5E/HCmF7CtNbcvBjLyxy1hwGmOvX7jUHR/0K+Pq2Xpff5VJZgYRXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR/jfNBaCBFtFuZyr1BP7MwrqaWUwHwYDVR0j BBgwFoAUc3aSLJO/Zn/7va8HNa5z0UUbCMIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDE3NmRkZC1hOTgwLTQzZDYtOTRhNy05NWVlZGE1Mzk2NjUvMC83Mzc2OTIyQzkz QkY2NjdGRkJCREFGMDczNUFFNzNEMTQ1MUIwOEMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzM3NjkyMkM5M0JGNjY3RkZCQkRBRjA3MzVBRTczRDE0NTFC MDhDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQxNzZkZGQtYTk4MC00M2Q2LTk0 YTctOTVlZWRhNTM5NjY1LzAvNzM3NjkyMkM5M0JGNjY3RkZCQkRBRjA3MzVBRTcz RDE0NTFCMDhDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAIXlrmZmjVMKR+PpORgId1jRnXtyOMHWFPc wKeUlRbwzBVQFyufwJ+bHbr/nUJsohrk0XDoeMt0CVbIv0S4bos4/oq7i80KjqxP Dt9EUnC9lxDDfpP2jN4x6lIyH1LML/UfcHSIl/8WNladApkp2CupO39X2ZxmX471 mzaZaDvbnL67KzLgfaO9Q0EHZah8ShqBzKRhg3FIWlZkxP4nrjigk5ToOs/YwHw4 gTD0SSOsD8zjgqpGh4NcWakAhyTAl+HHsJ/delPzTe2L+A8BO+85MreuM/hQu+3C FIAq7j6IahbXqZO3miQ3m14NAAo/K6MhJF4/Y2B0KRkepM5J9NA= -----END CERTIFICATE-----Generated at Sun Jul 20 21:29:25 2025 by rpki-client