$ rpki-client -vvf repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.mft File: 7E6A786ACEF684F37758FC4A6D8517CAD165FA77.mft (raw, json) Hash identifier: 6xJB0D317/A0OoBQ7zK72xu5PXCWb/MigmqOZE5DFWc= Subject key identifier: 13:68:7A:A0:93:9F:D7:37:4D:F9:92:D5:F1:CF:4B:39:5F:15:25:A6 Authority key identifier: 7E:6A:78:6A:CE:F6:84:F3:77:58:FC:4A:6D:85:17:CA:D1:65:FA:77 Certificate issuer: /CN=7E6A786ACEF684F37758FC4A6D8517CAD165FA77 Certificate serial: 28B7FFC13F3F8D8AC340B3E87F219574C28B9CB7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.mft Manifest number: 01A4 Signing time: Sun 20 Jul 2025 00:41:59 +0000 Manifest this update: Sun 20 Jul 2025 00:36:59 +0000 Manifest next update: Wed 23 Jul 2025 09:59:59 +0000 Files and hashes: 1: 3130332e3231332e3233312e302f32342d3234203d3e20313431313236.roa (hash: P26CLYaAiMviaHDVXlCPRfno/SeqGYyHaQquQlltu00=) 2: 7E6A786ACEF684F37758FC4A6D8517CAD165FA77.crl (hash: /NZ8ADUmw2dvK6yMCyApG5e8jewc14jQXH3lAk/aCyw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.crl rsync://repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 09:59:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:b7:ff:c1:3f:3f:8d:8a:c3:40:b3:e8:7f:21:95:74:c2:8b:9c:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E6A786ACEF684F37758FC4A6D8517CAD165FA77 Validity Not Before: Jul 20 00:36:59 2025 GMT Not After : Jul 23 09:59:59 2025 GMT Subject: CN=13687AA0939FD7374DF992D5F1CF4B395F1525A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:68:20:6d:d2:ec:3a:80:84:a1:2a:b0:86:04: dd:c1:9f:9f:1c:ef:d2:db:5f:c7:a8:7d:2a:95:f4: 61:92:60:f5:04:e8:eb:d1:1f:ef:7d:be:cd:80:c1: b0:f4:15:71:f0:07:92:be:72:73:37:3f:0d:68:a6: 4d:cc:ce:26:78:c2:df:87:e0:3a:2d:81:1e:c9:52: eb:31:63:7c:40:a9:47:9e:34:98:dc:aa:17:37:7e: 82:d5:4a:71:09:52:d5:8b:77:59:49:ca:bc:33:00: f7:5c:38:4a:b2:35:88:32:8f:16:1e:b5:0f:96:81: de:1b:ea:29:1e:7b:d7:3d:72:78:aa:20:d8:9b:e6: c8:db:40:d0:93:d1:eb:c0:7f:53:14:10:01:17:cd: 53:41:c6:d4:86:ab:a9:85:0e:9c:d1:cd:c9:e4:7c: 0f:71:fa:5d:2c:96:39:d5:ab:07:81:f3:db:47:30: ea:cb:48:3d:1e:c4:42:98:eb:5b:36:a6:9b:46:9b: e1:b8:65:76:ae:5f:16:7b:d6:9a:f6:10:4e:1a:11: b5:ef:0e:b9:eb:11:51:e8:44:cb:e9:94:4c:02:6c: fe:c3:1a:e3:8e:38:29:f7:80:c9:c2:77:5d:52:24: 4c:ff:c8:72:35:c0:28:ac:14:09:d6:af:10:d0:bc: 34:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 13:68:7A:A0:93:9F:D7:37:4D:F9:92:D5:F1:CF:4B:39:5F:15:25:A6 X509v3 Authority Key Identifier: keyid:7E:6A:78:6A:CE:F6:84:F3:77:58:FC:4A:6D:85:17:CA:D1:65:FA:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:54:af:c2:56:3f:eb:53:a9:bb:ee:bd:93:9e:0e:fa:b2:20: 6a:e5:5f:21:dc:68:af:a8:f2:8f:9b:fc:2b:ae:8a:d9:6f:9c: 97:be:2c:95:90:98:c4:a7:99:1c:87:09:06:22:5d:8d:6b:2c: 96:e4:5e:3c:f8:1a:de:ab:32:14:ec:6d:2e:b0:11:87:29:0d: ca:47:2b:e9:e3:d9:28:7e:d5:db:9f:32:b0:e9:4d:25:c7:3f: 88:27:46:aa:6b:b7:dd:0d:26:5f:40:b1:84:37:14:3c:99:3b: d3:c3:a7:12:09:4a:5a:19:c0:2a:58:7a:65:03:c1:f2:4e:bf: ad:82:21:77:28:bc:15:07:e4:0a:a1:c0:56:56:95:8d:d1:29: 1a:c6:93:c1:de:1b:19:da:53:15:c8:e3:45:96:f8:2b:3f:58: 13:e0:61:b9:3a:47:ef:ba:3d:0e:39:4c:94:11:df:fc:10:6f: 66:3d:1c:34:88:c9:fb:60:ac:01:00:2d:e9:53:e8:81:dd:c7: c9:4c:7c:99:dd:2f:eb:4c:ad:6f:b1:53:19:f6:74:56:ce:9e: c0:7d:24:6a:b9:86:43:db:5a:9d:95:1c:da:f7:bc:9e:9c:9f: d1:12:f1:84:3d:bb:bf:fd:df:62:b5:15:dc:e6:90:29:8b:df: c1:e7:0d:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKLf/wT8/jYrDQLPofyGVdMKLnLcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U2QTc4NkFDRUY2ODRGMzc3NThGQzRBNkQ4NTE3Q0FE MTY1RkE3NzAeFw0yNTA3MjAwMDM2NTlaFw0yNTA3MjMwOTU5NTlaMDMxMTAvBgNV BAMTKDEzNjg3QUEwOTM5RkQ3Mzc0REY5OTJENUYxQ0Y0QjM5NUYxNTI1QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3aCBt0uw6gIShKrCGBN3Bn58c 79LbX8eofSqV9GGSYPUE6OvRH+99vs2AwbD0FXHwB5K+cnM3Pw1opk3MziZ4wt+H 4DotgR7JUusxY3xAqUeeNJjcqhc3foLVSnEJUtWLd1lJyrwzAPdcOEqyNYgyjxYe tQ+Wgd4b6ikee9c9cniqINib5sjbQNCT0evAf1MUEAEXzVNBxtSGq6mFDpzRzcnk fA9x+l0sljnVqweB89tHMOrLSD0exEKY61s2pptGm+G4ZXauXxZ71pr2EE4aEbXv DrnrEVHoRMvplEwCbP7DGuOOOCn3gMnCd11SJEz/yHI1wCisFAnWrxDQvDT3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUE2h6oJOf1zdN+ZLV8c9LOV8VJaYwHwYDVR0j BBgwFoAUfmp4as72hPN3WPxKbYUXytFl+ncwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MjI5MmJhOC1hZDFhLTQxMzktOGMyMC01YjUyNmRhOTcwYmQvMC83RTZBNzg2QUNF RjY4NEYzNzc1OEZDNEE2RDg1MTdDQUQxNjVGQTc3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0U2QTc4NkFDRUY2ODRGMzc3NThGQzRBNkQ4NTE3Q0FEMTY1 RkE3Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTIyOTJiYTgtYWQxYS00MTM5LThj MjAtNWI1MjZkYTk3MGJkLzAvN0U2QTc4NkFDRUY2ODRGMzc3NThGQzRBNkQ4NTE3 Q0FEMTY1RkE3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABZUr8JWP+tTqbvuvZOeDvqyIGrlXyHcaK+o 8o+b/CuuitlvnJe+LJWQmMSnmRyHCQYiXY1rLJbkXjz4Gt6rMhTsbS6wEYcpDcpH K+nj2Sh+1dufMrDpTSXHP4gnRqprt90NJl9AsYQ3FDyZO9PDpxIJSloZwCpYemUD wfJOv62CIXcovBUH5AqhwFZWlY3RKRrGk8HeGxnaUxXI40WW+Cs/WBPgYbk6R++6 PQ45TJQR3/wQb2Y9HDSIyftgrAEALelT6IHdx8lMfJndL+tMrW+xUxn2dFbOnsB9 JGq5hkPbWp2VHNr3vJ6cn9ES8YQ9u7/932K1FdzmkCmL38HnDUc= -----END CERTIFICATE-----Generated at Sun Jul 20 21:24:18 2025 by rpki-client