$ rpki-client -vvf repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft File: 7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft (raw, json) Hash identifier: dHCH0Kl/dNebQKjn7ptnbmZhJ5Qlg8sFDa1pkDU1yg8= Subject key identifier: EB:BD:16:F3:66:6E:B2:CA:21:0D:4A:DE:71:DE:60:7C:38:8A:AA:CC Authority key identifier: 7D:9E:0E:E5:BE:72:73:60:81:01:D9:3C:5F:7F:B6:1C:BC:04:04:C7 Certificate issuer: /CN=7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7 Certificate serial: 3DD70DFF04D029609A4994BBDA3B2164970FB063 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft Manifest number: 9B Signing time: Sun 20 Jul 2025 20:50:00 +0000 Manifest this update: Sun 20 Jul 2025 20:45:00 +0000 Manifest next update: Thu 24 Jul 2025 04:01:00 +0000 Files and hashes: 1: 7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.crl (hash: XpeWk6/9bDZ9/GmqDG2KN0vgkYsvmr9J29eEklFEJcw=) 2: 3130332e3136392e3134332e302f32342d3234203d3e20313531353831.roa (hash: 4oT7xZVHG5/E0DX/QQMWoNUATmrhrxxUsrgCZ3ThGY4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.crl rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 00:11:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:d7:0d:ff:04:d0:29:60:9a:49:94:bb:da:3b:21:64:97:0f:b0:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7 Validity Not Before: Jul 20 20:45:00 2025 GMT Not After : Jul 24 04:01:00 2025 GMT Subject: CN=EBBD16F3666EB2CA210D4ADE71DE607C388AAACC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b0:c0:e6:bf:66:02:65:97:d9:48:bf:70:d2: 7b:40:75:07:35:1b:32:c5:05:47:f1:3a:dc:91:cd: dd:f1:80:99:5a:d2:b9:b5:8e:cb:03:b8:47:32:76: 68:bd:9e:df:7a:97:cf:70:9e:fb:07:a1:64:a0:b0: 72:4f:b5:2c:62:e8:ac:ed:ac:85:1f:5a:59:d2:9e: 37:57:0b:80:ee:65:2e:44:f5:4f:8c:eb:a5:26:f8: 90:74:53:14:e6:e9:82:bf:4c:7a:e0:58:99:64:56: 45:02:3e:fe:74:8a:de:b0:3f:e4:d8:5f:f5:bf:b9: 36:6c:57:06:84:16:16:b5:0a:85:47:fc:74:c6:25: 8c:a0:89:8e:86:1d:67:77:ba:12:6c:ed:7f:d4:4b: e3:fe:ee:4b:c8:f0:5e:1b:05:39:e2:02:7e:a6:95: 80:e5:69:ba:2c:75:5b:27:74:73:3f:85:ea:d9:12: a8:fa:ea:fa:ba:bc:aa:33:fe:17:d9:2f:9d:85:ab: 86:28:aa:65:cf:bb:15:44:d0:21:0d:fe:47:5c:63: ad:b4:f5:da:87:e4:a7:24:94:19:38:7f:c0:5d:0b: bc:78:e6:a6:4f:3d:ad:e3:69:6e:48:35:e3:5d:48: 16:7a:0e:1a:81:f7:99:ab:e4:90:49:b1:b4:67:b8: fc:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:BD:16:F3:66:6E:B2:CA:21:0D:4A:DE:71:DE:60:7C:38:8A:AA:CC X509v3 Authority Key Identifier: keyid:7D:9E:0E:E5:BE:72:73:60:81:01:D9:3C:5F:7F:B6:1C:BC:04:04:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:a3:78:7c:ba:eb:ee:44:92:f2:30:9b:3e:24:44:4c:d5:16: d4:cd:1a:c6:c1:64:99:6f:cf:7a:0c:f0:bf:03:59:31:ab:fe: ba:1c:ef:c0:5c:7f:bb:62:d8:90:99:c5:9c:ee:54:21:c5:b3: 94:dd:de:ee:a5:91:d5:27:c6:fc:88:f0:69:dd:e3:29:e6:08: ba:e9:19:13:f4:f0:f2:9b:1a:dc:48:21:50:df:f5:30:9b:d7: c4:c5:da:50:6f:6f:a0:04:42:e9:e7:1b:25:21:4d:2f:2d:f9: c1:8d:dd:77:d8:7c:b0:14:59:43:ea:d5:fb:2e:d5:f5:81:66: 5d:3b:71:51:1c:0a:4b:11:57:f8:aa:f9:22:99:f2:88:54:5f: 14:cf:b6:ab:26:44:e4:41:2f:25:bb:c0:f1:dd:18:18:f0:57: 61:e6:66:e6:d7:2e:3f:d3:57:56:f6:ba:c0:16:ba:ba:ea:26: cb:44:fd:85:10:6f:a3:12:34:08:84:c0:79:0a:f8:db:a1:20: d2:8d:51:8a:3c:89:49:5f:b5:98:f5:96:37:cd:0d:39:18:8d: 20:42:7d:29:1f:38:88:06:58:c2:9c:34:0e:5b:9f:43:e1:7e: b2:56:34:c3:98:88:7d:cc:c4:de:8d:e7:c0:fb:c2:81:de:8d: 65:58:c1:89 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPdcN/wTQKWCaSZS72jshZJcPsGMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q5RTBFRTVCRTcyNzM2MDgxMDFEOTNDNUY3RkI2MUNC QzA0MDRDNzAeFw0yNTA3MjAyMDQ1MDBaFw0yNTA3MjQwNDAxMDBaMDMxMTAvBgNV BAMTKEVCQkQxNkYzNjY2RUIyQ0EyMTBENEFERTcxREU2MDdDMzg4QUFBQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1sMDmv2YCZZfZSL9w0ntAdQc1 GzLFBUfxOtyRzd3xgJla0rm1jssDuEcydmi9nt96l89wnvsHoWSgsHJPtSxi6Kzt rIUfWlnSnjdXC4DuZS5E9U+M66Um+JB0UxTm6YK/THrgWJlkVkUCPv50it6wP+TY X/W/uTZsVwaEFha1CoVH/HTGJYygiY6GHWd3uhJs7X/US+P+7kvI8F4bBTniAn6m lYDlabosdVsndHM/herZEqj66vq6vKoz/hfZL52Fq4YoqmXPuxVE0CEN/kdcY620 9dqH5KcklBk4f8BdC7x45qZPPa3jaW5INeNdSBZ6DhqB95mr5JBJsbRnuPzLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU670W82ZussohDUrecd5gfDiKqswwHwYDVR0j BBgwFoAUfZ4O5b5yc2CBAdk8X3+2HLwEBMcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmRlMWE4ZS1jMmI4LTQ5OTYtOTQ5Mi02ZjkyYzJkZmVjN2EvMC83RDlFMEVFNUJF NzI3MzYwODEwMUQ5M0M1RjdGQjYxQ0JDMDQwNEM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q5RTBFRTVCRTcyNzM2MDgxMDFEOTNDNUY3RkI2MUNCQzA0 MDRDNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZkZTFhOGUtYzJiOC00OTk2LTk0 OTItNmY5MmMyZGZlYzdhLzAvN0Q5RTBFRTVCRTcyNzM2MDgxMDFEOTNDNUY3RkI2 MUNCQzA0MDRDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAByjeHy66+5EkvIwmz4kREzVFtTNGsbBZJlv z3oM8L8DWTGr/roc78Bcf7ti2JCZxZzuVCHFs5Td3u6lkdUnxvyI8Gnd4ynmCLrp GRP08PKbGtxIIVDf9TCb18TF2lBvb6AEQunnGyUhTS8t+cGN3XfYfLAUWUPq1fsu 1fWBZl07cVEcCksRV/iq+SKZ8ohUXxTPtqsmRORBLyW7wPHdGBjwV2HmZubXLj/T V1b2usAWurrqJstE/YUQb6MSNAiEwHkK+NuhINKNUYo8iUlftZj1ljfNDTkYjSBC fSkfOIgGWMKcNA5bn0PhfrJWNMOYiH3MxN6N58D7woHejWVYwYk= -----END CERTIFICATE-----Generated at Mon Jul 21 02:04:57 2025 by rpki-client