$ rpki-client -vvf repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/407919FF69A512DDAE7CCD48BE288F17073A5512.mft File: 407919FF69A512DDAE7CCD48BE288F17073A5512.mft (raw, json) Hash identifier: dYRxP8tVkq2U06ZSlVa+kACaQoIk62whNAEvsSz3gmc= Subject key identifier: 78:69:A4:3B:7D:33:DE:44:CD:C6:B7:87:91:5F:3C:DB:5A:12:AD:68 Authority key identifier: 40:79:19:FF:69:A5:12:DD:AE:7C:CD:48:BE:28:8F:17:07:3A:55:12 Certificate issuer: /CN=407919FF69A512DDAE7CCD48BE288F17073A5512 Certificate serial: 5400C86173D3778B5CDC68E56939B415AA9B443C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407919FF69A512DDAE7CCD48BE288F17073A5512.cer Subject info access: rsync://repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/407919FF69A512DDAE7CCD48BE288F17073A5512.mft Manifest number: 9A Signing time: Sun 20 Jul 2025 20:41:50 +0000 Manifest this update: Sun 20 Jul 2025 20:36:50 +0000 Manifest next update: Thu 24 Jul 2025 07:49:50 +0000 Files and hashes: 1: 407919FF69A512DDAE7CCD48BE288F17073A5512.crl (hash: wDXEa4VXm3snFITVIirjREgJM+CP2ZhYlZv1vdHo37U=) 2: 3130332e3132302e3233322e302f32342d3234203d3e20313337333834.roa (hash: rgW49bD9jOG05sHGGVXJ7K4U0Fs52fl5W3GSqo/JMxg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/407919FF69A512DDAE7CCD48BE288F17073A5512.crl rsync://repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/407919FF69A512DDAE7CCD48BE288F17073A5512.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407919FF69A512DDAE7CCD48BE288F17073A5512.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 07:49:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:00:c8:61:73:d3:77:8b:5c:dc:68:e5:69:39:b4:15:aa:9b:44:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=407919FF69A512DDAE7CCD48BE288F17073A5512 Validity Not Before: Jul 20 20:36:50 2025 GMT Not After : Jul 24 07:49:50 2025 GMT Subject: CN=7869A43B7D33DE44CDC6B787915F3CDB5A12AD68 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:5d:46:d7:90:ee:fa:b8:06:8e:bc:b5:4f:b4: fd:5e:01:b2:93:6f:67:a1:c6:7d:a0:1f:e2:18:1a: ce:5f:6a:6e:e1:92:e8:6c:b6:ca:db:48:a4:38:41: c8:25:17:0e:6a:1f:c0:c0:db:ce:92:2b:64:63:b2: 4b:20:80:e4:f6:59:b5:b8:0e:9a:72:f4:5b:c9:de: 6c:5e:58:32:17:17:5e:95:13:9f:65:50:e5:1f:a1: 2e:17:f5:84:dc:89:b3:24:bf:19:82:b9:f3:59:e4: a1:a1:1b:dd:9c:ee:bb:d5:d7:93:32:0b:59:d1:94: b8:b1:f6:76:7b:53:e6:26:71:12:bd:12:66:d2:48: e2:eb:ee:53:02:a8:00:1a:12:50:ba:8d:86:1e:c9: 2f:eb:4f:b7:9b:8b:3a:d8:03:f5:d2:16:d2:bf:5e: a9:01:03:4f:9c:43:4c:9c:f1:23:3b:e8:a4:45:2e: f2:a8:1a:a7:96:15:28:85:ea:69:3a:b6:c0:09:38: 70:23:e9:ae:67:ed:13:6b:b8:a6:b1:49:d0:70:bc: 63:2f:a1:df:6f:48:3b:e1:df:e6:1f:9c:34:c9:02: cc:9a:74:69:ed:e4:0f:e3:33:0f:6b:44:77:ee:2a: 21:5f:ce:55:6c:2a:2d:67:bb:9b:26:5b:a7:a5:ef: 66:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:69:A4:3B:7D:33:DE:44:CD:C6:B7:87:91:5F:3C:DB:5A:12:AD:68 X509v3 Authority Key Identifier: keyid:40:79:19:FF:69:A5:12:DD:AE:7C:CD:48:BE:28:8F:17:07:3A:55:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/407919FF69A512DDAE7CCD48BE288F17073A5512.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407919FF69A512DDAE7CCD48BE288F17073A5512.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/72c00f79-49eb-4525-9026-a238ff448070/0/407919FF69A512DDAE7CCD48BE288F17073A5512.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:70:c1:e1:36:70:4a:f2:c3:fb:5b:57:16:07:91:15:da:f5: ec:ff:6a:72:59:5f:5c:9d:d4:35:d4:7d:85:c6:2e:89:fe:a6: 8c:00:f7:c8:bb:d1:fe:15:41:fb:7a:5b:04:23:c8:18:10:1e: af:9f:bf:9b:c6:06:6f:c5:b3:36:b9:37:8d:53:d4:55:6a:40: 44:8c:26:15:ad:40:9d:11:e4:97:e5:83:6c:8a:ce:b4:2f:f0: 9e:94:a0:eb:62:5a:94:15:74:4b:10:27:bf:45:b3:a7:b5:fa: e1:81:3f:df:82:3f:ea:99:94:ba:31:2b:dd:67:ca:1c:b0:f2: d5:bb:f3:c7:a4:71:eb:45:2c:9c:ff:1b:f1:47:29:f4:45:a4: b9:42:e1:7c:e6:92:bd:c5:de:62:a4:88:55:01:11:83:5a:17: f6:be:b1:1b:88:38:86:9f:82:db:02:5f:f5:e6:a2:44:dc:52: 7f:c2:5f:87:fa:9a:ee:98:22:55:16:8c:55:f4:51:24:58:ba: 49:20:e2:a6:40:19:b0:c0:ad:6c:9a:2e:56:32:e9:b4:75:94: f9:82:12:ab:86:5f:83:0a:39:6e:11:cf:3d:91:5b:80:16:54: ed:38:f1:ca:90:5c:c1:d3:a0:e4:68:a7:12:52:9c:22:12:70: 1d:35:bc:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVADIYXPTd4tc3GjlaTm0FaqbRDwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA3OTE5RkY2OUE1MTJEREFFN0NDRDQ4QkUyODhGMTcw NzNBNTUxMjAeFw0yNTA3MjAyMDM2NTBaFw0yNTA3MjQwNzQ5NTBaMDMxMTAvBgNV BAMTKDc4NjlBNDNCN0QzM0RFNDRDREM2Qjc4NzkxNUYzQ0RCNUExMkFENjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyXUbXkO76uAaOvLVPtP1eAbKT b2ehxn2gH+IYGs5fam7hkuhstsrbSKQ4QcglFw5qH8DA286SK2RjsksggOT2WbW4 Dppy9FvJ3mxeWDIXF16VE59lUOUfoS4X9YTcibMkvxmCufNZ5KGhG92c7rvV15My C1nRlLix9nZ7U+YmcRK9EmbSSOLr7lMCqAAaElC6jYYeyS/rT7ebizrYA/XSFtK/ XqkBA0+cQ0yc8SM76KRFLvKoGqeWFSiF6mk6tsAJOHAj6a5n7RNruKaxSdBwvGMv od9vSDvh3+YfnDTJAsyadGnt5A/jMw9rRHfuKiFfzlVsKi1nu5smW6el72YzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeGmkO30z3kTNxreHkV8821oSrWgwHwYDVR0j BBgwFoAUQHkZ/2mlEt2ufM1IviiPFwc6VRIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 MmMwMGY3OS00OWViLTQ1MjUtOTAyNi1hMjM4ZmY0NDgwNzAvMC80MDc5MTlGRjY5 QTUxMkREQUU3Q0NENDhCRTI4OEYxNzA3M0E1NTEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA3OTE5RkY2OUE1MTJEREFFN0NDRDQ4QkUyODhGMTcwNzNB NTUxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzJjMDBmNzktNDllYi00NTI1LTkw MjYtYTIzOGZmNDQ4MDcwLzAvNDA3OTE5RkY2OUE1MTJEREFFN0NDRDQ4QkUyODhG MTcwNzNBNTUxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJNwweE2cEryw/tbVxYHkRXa9ez/anJZX1yd 1DXUfYXGLon+powA98i70f4VQft6WwQjyBgQHq+fv5vGBm/Fsza5N41T1FVqQESM JhWtQJ0R5Jflg2yKzrQv8J6UoOtiWpQVdEsQJ79Fs6e1+uGBP9+CP+qZlLoxK91n yhyw8tW788ekcetFLJz/G/FHKfRFpLlC4Xzmkr3F3mKkiFUBEYNaF/a+sRuIOIaf gtsCX/XmokTcUn/CX4f6mu6YIlUWjFX0USRYukkg4qZAGbDArWyaLlYy6bR1lPmC EquGX4MKOW4Rzz2RW4AWVO048cqQXMHToORopxJSnCIScB01vGI= -----END CERTIFICATE-----Generated at Tue Jul 22 11:55:14 2025 by rpki-client