$ rpki-client -vvf repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft File: D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft (raw, json) Hash identifier: gs2tTW3wi5r5GzA1x1B/WM2cTcANHiYlrYtV/YCAbpE= Subject key identifier: A6:2F:49:09:46:0F:C4:9C:69:FF:1B:A9:79:69:DA:ED:DD:35:0E:F2 Authority key identifier: D7:C7:C6:E5:33:C4:1C:36:D9:23:CD:C5:9F:FC:1B:04:36:C3:9F:AF Certificate issuer: /CN=D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF Certificate serial: 3A5500EA89ACF713A0FACD3225CB27EDADE03926 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft Manifest number: 024C Signing time: Wed 23 Jul 2025 06:11:36 +0000 Manifest this update: Wed 23 Jul 2025 06:06:36 +0000 Manifest next update: Sat 26 Jul 2025 13:51:36 +0000 Files and hashes: 1: 3130332e3130322e3137362e302f32342d3234203d3e20313335343634.roa (hash: /nnnpT4J0Tuu/cwXNYMkIuOZtyJHbw8wTsT308/p5rw=) 2: 3130332e3130322e3136372e302f32342d3234203d3e20313335343634.roa (hash: G2Aj1Erzi22dbwXIe5ZKOYeLnX3IptEzXgXL9BU+vU0=) 3: D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.crl (hash: BWlW6qRGlcyYtaKGtOQWqmCTouwIzDKs3Em7VuVeUv0=) 4: 3130332e3130322e3137372e302f32342d3234203d3e20313335343634.roa (hash: oHkNyUxZ+91xlNVhfeWI9Dc0rmMp8x6qN96DcYOObkU=) 5: 3130332e37302e36382e302f32342d3234203d3e20313335343634.roa (hash: 2CoQGk4NMRfUrYnvT/UZsUPUuE84h2TZeseeJ7TfgPk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.crl rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 13:51:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:55:00:ea:89:ac:f7:13:a0:fa:cd:32:25:cb:27:ed:ad:e0:39:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF Validity Not Before: Jul 23 06:06:36 2025 GMT Not After : Jul 26 13:51:36 2025 GMT Subject: CN=A62F4909460FC49C69FF1BA97969DAEDDD350EF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:05:4e:f9:7d:01:dc:48:bf:27:6a:ee:d0:47: 4f:a5:02:e0:0c:ee:15:e0:d0:fc:3b:e5:30:b4:d2: d8:a3:87:6a:c9:6f:9f:fa:f4:f8:69:3d:d7:e9:cb: 08:2a:7d:a4:2a:a6:2a:9d:b1:72:08:8c:46:ff:4d: 7f:a0:72:5a:d5:f9:ad:2a:7e:d8:b3:38:e0:72:61: 6d:62:b2:3d:bd:81:3d:a0:20:1b:93:62:cb:a0:d0: db:fb:c7:0b:17:84:7a:40:17:64:dd:15:45:83:d5: 93:e0:73:5f:bf:50:d3:ba:33:f8:c5:2f:31:af:c7: fd:62:cd:4a:1e:15:65:28:81:0c:e5:b9:f0:64:98: 5b:d7:01:7b:f6:34:20:37:60:ce:60:e3:51:cd:bb: 84:ba:16:0f:1f:7f:ca:e1:dc:b8:5b:7c:d1:51:06: 78:31:97:da:2c:a0:0f:3e:56:b3:98:0c:c4:a0:ac: 63:de:84:e5:7b:2c:21:1b:65:ce:8e:37:3e:1a:ca: 6f:dd:05:04:5f:39:6e:e6:92:14:1b:93:1e:3b:f7: c1:ea:79:ce:82:4b:8b:ec:35:e6:cf:33:f8:ed:93: 1d:e3:59:5c:af:6a:9e:a8:37:56:bf:a0:2b:82:11: 73:3a:07:89:34:c0:3a:e6:b5:73:f7:a2:17:7b:91: b9:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:2F:49:09:46:0F:C4:9C:69:FF:1B:A9:79:69:DA:ED:DD:35:0E:F2 X509v3 Authority Key Identifier: keyid:D7:C7:C6:E5:33:C4:1C:36:D9:23:CD:C5:9F:FC:1B:04:36:C3:9F:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:73:7e:77:db:c5:e2:6e:c4:29:0e:9f:ad:21:60:b4:ae:e1: 8e:2e:46:b1:d9:e0:8e:43:58:e8:5f:5a:35:ef:ee:e0:4b:88: 23:e3:dc:4f:0f:6b:ef:63:98:7f:8f:d4:c7:38:7c:29:42:e6: 22:4a:1b:cb:52:56:12:1b:aa:55:bd:c8:12:66:d3:87:f3:eb: 90:9c:19:87:50:88:e3:77:eb:fc:5f:0a:c8:6d:90:45:b2:76: a3:5d:80:10:0b:b4:37:cc:7b:24:4b:7b:19:21:98:ff:8f:88: 9d:0f:bd:ed:1e:0e:b0:ef:52:21:14:f5:8a:86:0e:df:03:32: f9:f9:85:30:7f:38:09:42:89:47:37:7d:b1:7c:af:45:32:f8: 16:ff:47:12:7e:6a:3c:86:4f:9a:35:dc:72:d6:54:a2:42:81: 02:c7:0b:ad:22:66:55:c0:36:e0:c3:66:12:81:84:e3:05:e2: d0:2c:a7:92:18:c9:87:3e:90:67:42:15:dd:2d:d6:48:e4:95: a4:59:2e:38:4b:95:76:3c:5e:ad:4f:55:3a:33:83:6d:82:30: f7:a0:d8:52:ea:cb:7d:9d:ff:97:14:b0:10:f2:f6:25:f5:30: b9:c7:dd:a2:26:54:bd:2b:ba:81:52:c0:fb:8d:d1:35:32:1e: d6:1f:93:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOlUA6oms9xOg+s0yJcsn7a3gOSYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdDN0M2RTUzM0M0MUMzNkQ5MjNDREM1OUZGQzFCMDQz NkMzOUZBRjAeFw0yNTA3MjMwNjA2MzZaFw0yNTA3MjYxMzUxMzZaMDMxMTAvBgNV BAMTKEE2MkY0OTA5NDYwRkM0OUM2OUZGMUJBOTc5NjlEQUVEREQzNTBFRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6BU75fQHcSL8nau7QR0+lAuAM 7hXg0Pw75TC00tijh2rJb5/69PhpPdfpywgqfaQqpiqdsXIIjEb/TX+gclrV+a0q ftizOOByYW1isj29gT2gIBuTYsug0Nv7xwsXhHpAF2TdFUWD1ZPgc1+/UNO6M/jF LzGvx/1izUoeFWUogQzlufBkmFvXAXv2NCA3YM5g41HNu4S6Fg8ff8rh3LhbfNFR Bngxl9osoA8+VrOYDMSgrGPehOV7LCEbZc6ONz4aym/dBQRfOW7mkhQbkx4798Hq ec6CS4vsNebPM/jtkx3jWVyvap6oN1a/oCuCEXM6B4k0wDrmtXP3ohd7kblTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpi9JCUYPxJxp/xupeWna7d01DvIwHwYDVR0j BBgwFoAU18fG5TPEHDbZI83Fn/wbBDbDn68wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTlhODUzOC1kYTQzLTQxNTgtYWJjMi04ZTYzYThlNDA4OTkvMC9EN0M3QzZFNTMz QzQxQzM2RDkyM0NEQzU5RkZDMUIwNDM2QzM5RkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDdDN0M2RTUzM0M0MUMzNkQ5MjNDREM1OUZGQzFCMDQzNkMz OUZBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTE5YTg1MzgtZGE0My00MTU4LWFi YzItOGU2M2E4ZTQwODk5LzAvRDdDN0M2RTUzM0M0MUMzNkQ5MjNDREM1OUZGQzFC MDQzNkMzOUZBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKlzfnfbxeJuxCkOn60hYLSu4Y4uRrHZ4I5D WOhfWjXv7uBLiCPj3E8Pa+9jmH+P1Mc4fClC5iJKG8tSVhIbqlW9yBJm04fz65Cc GYdQiON36/xfCshtkEWydqNdgBALtDfMeyRLexkhmP+PiJ0Pve0eDrDvUiEU9YqG Dt8DMvn5hTB/OAlCiUc3fbF8r0Uy+Bb/RxJ+ajyGT5o13HLWVKJCgQLHC60iZlXA NuDDZhKBhOMF4tAsp5IYyYc+kGdCFd0t1kjklaRZLjhLlXY8Xq1PVTozg22CMPeg 2FLqy32d/5cUsBDy9iX1MLnH3aImVL0ruoFSwPuN0TUyHtYfk+8= -----END CERTIFICATE-----Generated at Thu Jul 24 17:18:20 2025 by rpki-client