$ rpki-client -vvf repo-rpki.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.mft File: 7008868799E77C42E437F0D7ACCF683CF5B2AA4E.mft (raw, json) Hash identifier: V2g4smIzGjjAu2FmSn/zJP4RlYQZJILMNjbihBjzKOc= Subject key identifier: 6A:6C:84:D3:B8:C0:E6:7C:8B:8C:70:E2:5B:94:4F:2E:EB:8E:54:88 Authority key identifier: 70:08:86:87:99:E7:7C:42:E4:37:F0:D7:AC:CF:68:3C:F5:B2:AA:4E Certificate issuer: /CN=7008868799E77C42E437F0D7ACCF683CF5B2AA4E Certificate serial: 54A67924E689A60211276D83338AF9E5A504BF16 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.mft Manifest number: 0489 Signing time: Tue 22 Jul 2025 06:11:17 +0000 Manifest this update: Tue 22 Jul 2025 06:06:17 +0000 Manifest next update: Fri 25 Jul 2025 13:18:17 +0000 Files and hashes: 1: 3130332e3134362e3139362e302f32342d3234203d3e20313339393431.roa (hash: V1cdbz2B4KnRWdpevX8pRA5Z1G9fpGPOBnApCOURAWY=) 2: 3130332e3134362e3139372e302f32342d3234203d3e20313339393431.roa (hash: a9rim8XhPQdPBnTRrhUohzYt6GpGCVRMKh2SkMkG9T8=) 3: 3130332e3134362e3139362e302f32332d3233203d3e20313339393431.roa (hash: lIIq1aJkVgn61JdaqWdkMl1np7mlcmVrzeimT0s2k+E=) 4: 7008868799E77C42E437F0D7ACCF683CF5B2AA4E.crl (hash: PJFoQ1+ZNMO4/7pqmsHSLllxsWAlXMbmtdsQMzVMisE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.crl rsync://repo-rpki.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 13:18:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:a6:79:24:e6:89:a6:02:11:27:6d:83:33:8a:f9:e5:a5:04:bf:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7008868799E77C42E437F0D7ACCF683CF5B2AA4E Validity Not Before: Jul 22 06:06:17 2025 GMT Not After : Jul 25 13:18:17 2025 GMT Subject: CN=6A6C84D3B8C0E67C8B8C70E25B944F2EEB8E5488 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:8e:bb:57:59:79:b2:12:c5:f4:c0:b7:e5:96: 12:52:62:3a:45:25:7b:71:ca:3a:d1:47:b4:6a:9f: 46:2a:2e:93:c0:ec:e2:97:e2:cc:4e:d9:e0:a6:ea: 25:09:4d:94:ea:b2:90:43:c6:af:6e:99:fc:4a:c9: 73:b1:fa:e1:2c:de:76:94:bc:d4:12:06:9f:05:18: c9:1f:c4:c0:86:30:b7:df:fb:3b:00:cf:f1:af:07: dc:2f:57:f1:a8:ac:5b:03:4d:27:e4:0c:8b:41:fc: 9d:90:8b:16:cc:3e:71:dd:d9:7e:35:75:78:21:75: 5f:7e:8c:8f:b6:5f:83:69:49:de:10:5a:68:59:3b: 24:1e:a2:6f:00:e0:6e:56:82:eb:ad:66:54:32:74: 04:bd:92:b6:57:79:99:bd:d5:1a:ed:fc:bf:91:a7: 4b:c8:44:f4:c7:67:2a:db:71:32:07:a2:52:1c:98: d6:bc:06:b2:56:4a:50:e5:ff:32:39:e3:22:b7:b1: 10:fe:f5:bf:85:4e:b9:ee:53:7f:20:44:2e:76:b5: de:23:68:a5:08:47:e6:96:19:6b:18:d3:c8:9d:fb: e2:b6:8e:46:e7:00:ae:00:5b:25:5a:98:ed:ac:c4: 35:2c:bf:58:44:0e:ec:fd:03:76:c3:66:bf:75:01: 85:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:6C:84:D3:B8:C0:E6:7C:8B:8C:70:E2:5B:94:4F:2E:EB:8E:54:88 X509v3 Authority Key Identifier: keyid:70:08:86:87:99:E7:7C:42:E4:37:F0:D7:AC:CF:68:3C:F5:B2:AA:4E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/835048c6-8ccd-463d-ad34-ae7428647a9c/0/7008868799E77C42E437F0D7ACCF683CF5B2AA4E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:b7:7e:ce:97:a0:0b:69:f1:d5:f3:fd:8b:f7:15:9a:fd:d2: d4:bc:52:d8:8b:7d:79:15:db:0e:69:0b:76:86:31:64:76:6b: 93:07:2c:2d:2d:5a:73:18:6d:0f:cc:0e:c7:ac:c4:ba:f3:2e: 17:df:89:45:7c:3c:ae:07:d9:bb:bf:ec:fd:56:04:f7:9f:c7: b6:5e:3d:3f:1e:c8:a2:78:c2:39:51:36:4d:fa:92:b0:78:ce: 81:2b:51:e9:3e:02:cc:d5:98:36:ff:0e:a8:b8:48:e6:38:2f: b3:47:77:77:51:a8:bb:d4:13:36:ec:e5:92:4f:08:8f:1f:0d: 3a:21:27:2f:34:a3:46:2e:53:78:a4:ca:0a:ab:29:b8:70:b2: 8a:a1:8f:bd:c1:88:43:f7:3b:aa:18:da:d3:12:6b:8e:1f:8b: 72:b4:2c:d0:9b:1a:b7:ad:aa:26:6b:88:0e:c6:b8:f9:81:2e: dc:b1:e4:da:d4:bc:8c:68:da:7b:2d:ef:dc:12:b3:07:46:ad: cd:91:32:d9:56:c8:3c:3a:90:56:50:1a:e5:85:45:f4:5e:13: bf:db:ea:0b:e8:2f:6c:44:09:75:76:b0:1b:55:3c:41:10:22: 86:8d:1f:74:65:d0:2d:ef:dd:64:ed:d2:94:81:f5:8c:33:64: 89:fb:ed:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVKZ5JOaJpgIRJ22DM4r55aUEvxYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzAwODg2ODc5OUU3N0M0MkU0MzdGMEQ3QUNDRjY4M0NG NUIyQUE0RTAeFw0yNTA3MjIwNjA2MTdaFw0yNTA3MjUxMzE4MTdaMDMxMTAvBgNV BAMTKDZBNkM4NEQzQjhDMEU2N0M4QjhDNzBFMjVCOTQ0RjJFRUI4RTU0ODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUjrtXWXmyEsX0wLfllhJSYjpF JXtxyjrRR7Rqn0YqLpPA7OKX4sxO2eCm6iUJTZTqspBDxq9umfxKyXOx+uEs3naU vNQSBp8FGMkfxMCGMLff+zsAz/GvB9wvV/GorFsDTSfkDItB/J2QixbMPnHd2X41 dXghdV9+jI+2X4NpSd4QWmhZOyQeom8A4G5WguutZlQydAS9krZXeZm91Rrt/L+R p0vIRPTHZyrbcTIHolIcmNa8BrJWSlDl/zI54yK3sRD+9b+FTrnuU38gRC52td4j aKUIR+aWGWsY08id++K2jkbnAK4AWyVamO2sxDUsv1hEDuz9A3bDZr91AYWNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUamyE07jA5nyLjHDiW5RPLuuOVIgwHwYDVR0j BBgwFoAUcAiGh5nnfELkN/DXrM9oPPWyqk4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MzUwNDhjNi04Y2NkLTQ2M2QtYWQzNC1hZTc0Mjg2NDdhOWMvMC83MDA4ODY4Nzk5 RTc3QzQyRTQzN0YwRDdBQ0NGNjgzQ0Y1QjJBQTRFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzAwODg2ODc5OUU3N0M0MkU0MzdGMEQ3QUNDRjY4M0NGNUIy QUE0RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODM1MDQ4YzYtOGNjZC00NjNkLWFk MzQtYWU3NDI4NjQ3YTljLzAvNzAwODg2ODc5OUU3N0M0MkU0MzdGMEQ3QUNDRjY4 M0NGNUIyQUE0RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABa3fs6XoAtp8dXz/Yv3FZr90tS8UtiLfXkV 2w5pC3aGMWR2a5MHLC0tWnMYbQ/MDsesxLrzLhffiUV8PK4H2bu/7P1WBPefx7Ze PT8eyKJ4wjlRNk36krB4zoErUek+AszVmDb/Dqi4SOY4L7NHd3dRqLvUEzbs5ZJP CI8fDTohJy80o0YuU3ikygqrKbhwsoqhj73BiEP3O6oY2tMSa44fi3K0LNCbGret qiZriA7GuPmBLtyx5NrUvIxo2nst79wSswdGrc2RMtlWyDw6kFZQGuWFRfReE7/b 6gvoL2xECXV2sBtVPEEQIoaNH3Rl0C3v3WTt0pSB9YwzZIn77fk= -----END CERTIFICATE-----Generated at Wed Jul 23 02:20:31 2025 by rpki-client