$ rpki-client -vvf repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft File: 7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft (raw, json) Hash identifier: G+8+TTU0j7TdTB6FjXgFj1lbsmvCYfOqE364Nxu2cfw= Subject key identifier: 96:23:62:FB:6A:51:83:2C:22:8D:80:1E:15:61:7F:D4:94:F0:30:F9 Authority key identifier: 7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67 Certificate issuer: /CN=7D64B8F4CFB687141137D10F9E73FFD0BAB93F67 Certificate serial: 1973BC8E03251A74D272AC9D90BBBCA7F9B2C1C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer Subject info access: rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft Manifest number: 02AD Signing time: Sun 20 Jul 2025 00:32:11 +0000 Manifest this update: Sun 20 Jul 2025 00:27:11 +0000 Manifest next update: Wed 23 Jul 2025 03:19:11 +0000 Files and hashes: 1: 7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl (hash: GRC/Z2s+P5RIWjKILYgb2dUdRBbrUAs/LUP6RWpd1HQ=) 2: 323430313a383434303a3331313a3a2f34382d3438203d3e20313336313331.roa (hash: uNKV4J4iyB42iT7YiJbc/obq8TacFQRWwVPHqjYHdt4=) 3: 323430313a383434303a3a2f33322d3332203d3e20313336313331.roa (hash: J/TKA4DxZMeIQk5lGShBOGO9FvcMo90L9nK349bvEzs=) 4: 3130332e39372e37372e302f32342d3234203d3e20313336313331.roa (hash: rgwWhpicbIXeIE3pTFSF/nJgGhjsTFXordy0vbByPyc=) 5: 3130332e39372e37392e302f32342d3234203d3e20313336313331.roa (hash: g7TDmW1J5jNMb6eLJToYzt8xdajrekh1Q+uRWpcwKv0=) 6: 3130332e39372e37382e302f32342d3234203d3e20313336313331.roa (hash: gTWqsHLXGzmwOn5oUbLdKwsFxUOTG6JntDETCN1uoJg=) 7: 323430313a383434303a3233313a3a2f34382d3438203d3e20313336313331.roa (hash: 9q0QjNfZ8ZidXQKSI35eyNIOpPTa4MZHY+H9XcdTGqQ=) 8: 323430313a383434303a33313a3a2f34382d3438203d3e20313336313331.roa (hash: imoDv7fNxiS0ABFe1mnjo4w6QxU9zgowGM6VjXLrifM=) 9: 323430313a383434303a3133313a3a2f34382d3438203d3e20313336313331.roa (hash: 7XF+7tNQBQV2Wy0AsX8lBCySJ+ATYXgli7NY4z4VmfM=) 10: 3130332e39372e37362e302f32342d3234203d3e20313336313331.roa (hash: sppd+EBGEaepceJfNxlZXMQLq/sqMLGJt/R8ADFWUfE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 03:19:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:73:bc:8e:03:25:1a:74:d2:72:ac:9d:90:bb:bc:a7:f9:b2:c1:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D64B8F4CFB687141137D10F9E73FFD0BAB93F67 Validity Not Before: Jul 20 00:27:11 2025 GMT Not After : Jul 23 03:19:11 2025 GMT Subject: CN=962362FB6A51832C228D801E15617FD494F030F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:e3:7c:44:68:22:45:2b:a8:f1:c7:21:33:12: 2f:5a:dd:53:d5:70:4c:85:b1:1e:ca:da:ae:1b:a1: 7e:21:54:c0:d4:2e:b0:2e:b0:ee:ea:89:0d:f5:4b: 4a:9a:a0:63:9e:f6:73:22:1f:e5:61:fa:9c:07:c4: 2b:f0:b6:80:23:44:65:76:60:34:1c:b3:36:da:5b: 58:fd:b1:20:4d:8e:07:da:9b:ae:54:80:56:0d:f6: 18:b2:a3:31:fa:4f:60:5c:1e:1e:45:4f:61:b9:1b: ec:37:16:9f:29:8f:4f:86:9c:7f:59:36:8d:a4:5a: b5:10:58:11:b7:3b:84:cb:1d:b1:e3:4f:d1:e8:4c: 4c:72:7f:04:19:20:2f:41:20:fd:ee:10:33:e9:e3: 37:7c:aa:85:7a:bd:12:41:0a:9c:a6:e7:17:c6:6c: 49:a3:f0:bd:e1:f0:a2:ab:de:e6:25:22:c3:39:a6: 5e:ed:fb:a2:40:55:b4:13:90:ac:20:17:25:0b:d5: f4:9e:84:1a:bb:a8:80:50:ff:a7:cd:26:c9:16:83: 4f:e3:fe:17:60:11:d7:0f:a6:8a:f6:c7:49:b1:22: 95:54:2e:1f:7c:6e:06:1e:00:4e:d6:95:a1:63:69: 41:4f:50:31:cd:45:bc:bf:b2:6f:ee:78:73:ad:36: f4:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:23:62:FB:6A:51:83:2C:22:8D:80:1E:15:61:7F:D4:94:F0:30:F9 X509v3 Authority Key Identifier: keyid:7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:3e:03:2c:8b:1a:20:da:e7:38:b4:e8:bd:da:aa:d6:02:9b: 47:12:bf:5b:40:3a:ae:c2:8c:6d:d3:6e:ad:78:20:48:ae:08: ab:f2:0b:0f:01:6a:ee:b5:b6:69:ae:00:3d:e6:14:3d:a5:bb: 47:31:8c:64:36:97:7f:e6:2e:17:2e:55:b0:b1:c4:9c:03:90: b9:47:ee:0d:04:14:41:82:fd:35:16:33:2e:00:46:ff:ad:92: 4c:2e:12:ba:c5:2b:0a:ae:d2:98:9f:6c:b0:d4:37:3d:f2:ed: f2:df:92:5b:8f:53:2a:d5:57:06:2f:2e:1d:e4:3e:d5:5a:ac: e3:ea:a2:12:68:5f:63:fb:ef:49:e2:70:fa:eb:f3:ba:be:40: dc:e2:c3:f6:0b:fa:2b:3e:7d:cd:be:27:9c:35:a7:a3:38:21: 9b:a5:01:57:f5:b4:19:8b:6c:81:c0:0b:e0:ad:9b:0b:e3:41: ce:80:3c:d4:ee:1a:fb:64:29:e5:17:c9:c3:1e:28:00:55:11: 5e:4f:30:ca:6e:51:a1:4e:b6:45:7b:35:d3:b7:96:75:0c:7a: a4:5e:b4:b1:ff:81:b0:d4:53:86:d8:e9:2f:9b:50:63:41:f9: d6:d9:25:a2:ad:09:25:3e:f2:9b:9e:24:e8:d4:84:25:f7:42: 8b:5a:34:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGXO8jgMlGnTScqydkLu8p/mywcIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZGRDBC QUI5M0Y2NzAeFw0yNTA3MjAwMDI3MTFaFw0yNTA3MjMwMzE5MTFaMDMxMTAvBgNV BAMTKDk2MjM2MkZCNkE1MTgzMkMyMjhEODAxRTE1NjE3RkQ0OTRGMDMwRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDG43xEaCJFK6jxxyEzEi9a3VPV cEyFsR7K2q4boX4hVMDULrAusO7qiQ31S0qaoGOe9nMiH+Vh+pwHxCvwtoAjRGV2 YDQcszbaW1j9sSBNjgfam65UgFYN9hiyozH6T2BcHh5FT2G5G+w3Fp8pj0+GnH9Z No2kWrUQWBG3O4TLHbHjT9HoTExyfwQZIC9BIP3uEDPp4zd8qoV6vRJBCpym5xfG bEmj8L3h8KKr3uYlIsM5pl7t+6JAVbQTkKwgFyUL1fSehBq7qIBQ/6fNJskWg0/j /hdgEdcPpor2x0mxIpVULh98bgYeAE7WlaFjaUFPUDHNRby/sm/ueHOtNvSRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUliNi+2pRgywijYAeFWF/1JTwMPkwHwYDVR0j BBgwFoAUfWS49M+2hxQRN9EPnnP/0Lq5P2cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTdiMGQ3ZS1lYWRlLTQzMTgtYWIyMC04YzdmMmQ1YmU2OWYvMC83RDY0QjhGNENG QjY4NzE0MTEzN0QxMEY5RTczRkZEMEJBQjkzRjY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZGRDBCQUI5 M0Y2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTU3YjBkN2UtZWFkZS00MzE4LWFi MjAtOGM3ZjJkNWJlNjlmLzAvN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZG RDBCQUI5M0Y2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL4+AyyLGiDa5zi06L3aqtYCm0cSv1tAOq7C jG3Tbq14IEiuCKvyCw8Bau61tmmuAD3mFD2lu0cxjGQ2l3/mLhcuVbCxxJwDkLlH 7g0EFEGC/TUWMy4ARv+tkkwuErrFKwqu0pifbLDUNz3y7fLfkluPUyrVVwYvLh3k PtVarOPqohJoX2P770nicPrr87q+QNziw/YL+is+fc2+J5w1p6M4IZulAVf1tBmL bIHAC+CtmwvjQc6APNTuGvtkKeUXycMeKABVEV5PMMpuUaFOtkV7NdO3lnUMeqRe tLH/gbDUU4bY6S+bUGNB+dbZJaKtCSU+8pueJOjUhCX3QotaNMA= -----END CERTIFICATE-----Generated at Mon Jul 21 23:24:22 2025 by rpki-client