$ rpki-client -vvf repo-rpki.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/B7260D30835B9D812F7044ECE96F4FB8F698379C.mft File: B7260D30835B9D812F7044ECE96F4FB8F698379C.mft (raw, json) Hash identifier: qnzn7ntoayKXaaLK1ID2jW/FQznOQSxIU5DxQVI8HLI= Subject key identifier: 75:3E:30:B4:F5:A9:91:6F:89:3E:87:2B:4B:E2:10:E1:47:2E:67:27 Authority key identifier: B7:26:0D:30:83:5B:9D:81:2F:70:44:EC:E9:6F:4F:B8:F6:98:37:9C Certificate issuer: /CN=B7260D30835B9D812F7044ECE96F4FB8F698379C Certificate serial: 29FEA57CE1787B672D11ED2D0C0F16FA6DEF397C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7260D30835B9D812F7044ECE96F4FB8F698379C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/B7260D30835B9D812F7044ECE96F4FB8F698379C.mft Manifest number: 0328 Signing time: Mon 21 Jul 2025 02:51:44 +0000 Manifest this update: Mon 21 Jul 2025 02:46:44 +0000 Manifest next update: Thu 24 Jul 2025 03:43:44 +0000 Files and hashes: 1: B7260D30835B9D812F7044ECE96F4FB8F698379C.crl (hash: a/MuwEa24XrFltjawNjzsbRXFP+lJDpDt5ySAZLsByA=) 2: 3130332e3231372e3230382e302f32322d3234203d3e203338373630.roa (hash: C1fWM39iM3F6U+59gsqeYJ83me8iwLln6AeCDUtsAG4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/B7260D30835B9D812F7044ECE96F4FB8F698379C.crl rsync://repo-rpki.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/B7260D30835B9D812F7044ECE96F4FB8F698379C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7260D30835B9D812F7044ECE96F4FB8F698379C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 03:43:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:fe:a5:7c:e1:78:7b:67:2d:11:ed:2d:0c:0f:16:fa:6d:ef:39:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7260D30835B9D812F7044ECE96F4FB8F698379C Validity Not Before: Jul 21 02:46:44 2025 GMT Not After : Jul 24 03:43:44 2025 GMT Subject: CN=753E30B4F5A9916F893E872B4BE210E1472E6727 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:de:4f:53:c3:e5:2a:21:50:6d:cd:aa:e7:1b: f5:9e:f0:36:03:86:44:96:21:51:71:d3:84:bf:58: 36:6e:e6:b1:65:d0:f4:b4:f8:8a:82:a1:94:b4:93: 98:c8:e5:df:70:a0:7c:cd:07:b9:1e:09:5d:ad:1d: d2:bf:6d:e9:01:0c:64:97:d3:8c:29:5b:5a:0e:9b: e3:07:cc:3e:18:3a:d7:80:d4:74:9f:cb:cc:8e:23: c9:2b:9a:7b:33:33:71:45:e0:76:f3:37:92:7c:46: 4c:a7:f7:5a:d8:e5:38:5c:78:1e:7a:31:f0:c3:c2: 9f:ea:04:c8:d7:aa:7d:1c:61:ad:21:35:ac:d9:55: ee:11:80:04:5c:61:44:ef:f0:ba:de:99:0b:16:79: 08:02:44:44:58:99:11:c4:34:cd:41:62:4d:ec:39: a3:09:76:c4:c9:b3:ba:52:89:64:84:32:02:bf:0b: 8e:91:fd:26:cb:a6:e6:7e:fd:ff:bb:91:e2:06:e6: e1:4b:14:b9:1d:94:b9:5a:f7:42:a3:66:de:c3:20: b8:de:1d:cc:15:87:ea:ad:04:ce:4f:8b:6f:81:bd: 0b:99:1e:82:28:c0:24:c4:16:f9:f4:03:ad:ae:90: bc:8f:ea:8f:8d:fc:03:b2:66:c9:93:ab:5b:21:e1: e2:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 75:3E:30:B4:F5:A9:91:6F:89:3E:87:2B:4B:E2:10:E1:47:2E:67:27 X509v3 Authority Key Identifier: keyid:B7:26:0D:30:83:5B:9D:81:2F:70:44:EC:E9:6F:4F:B8:F6:98:37:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/B7260D30835B9D812F7044ECE96F4FB8F698379C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7260D30835B9D812F7044ECE96F4FB8F698379C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c3a5ffdc-151a-4aad-a2b7-432649de6dbe/0/B7260D30835B9D812F7044ECE96F4FB8F698379C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c0:c5:62:5a:76:49:74:18:4a:95:77:b2:b4:6b:26:e6:69:f6: e1:4f:f3:5d:2e:d4:e0:7d:a5:ee:3a:62:be:76:c5:ee:39:e2: 7e:7a:39:27:f6:c2:f4:99:3e:f7:e2:23:1f:f5:3d:78:df:31: c2:96:49:b8:1f:47:89:16:b2:37:4c:08:4a:d7:e2:95:49:d8: 08:58:ea:aa:28:4b:4e:e3:ce:b8:f5:ca:6f:6b:6d:f7:8d:6d: d0:63:ec:a8:df:ec:23:4a:06:56:b7:40:03:c2:07:db:4d:06: 09:18:a0:92:a0:d7:fd:28:7b:c9:4f:18:9f:15:f3:ea:bc:0d: 57:2f:12:28:37:8f:11:65:37:06:f9:41:b7:ce:e8:8c:8b:fe: ca:a8:03:f3:5e:ed:14:19:86:c7:71:2e:e1:a1:49:db:52:38: e6:be:ae:c7:79:cb:cf:01:e8:15:3c:d2:75:9f:7c:2a:0c:71: cc:47:43:c8:4d:09:ad:7c:71:50:f2:19:99:61:e2:44:51:67: 71:96:6d:11:d7:62:a7:0c:04:69:70:ff:e2:1a:33:fb:15:74: 71:43:ab:4a:26:56:58:09:62:df:fc:5a:91:62:05:58:44:77: ec:f0:74:20:ff:7f:75:0f:30:0e:12:3e:79:60:41:79:af:f7: 9d:7f:b2:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKf6lfOF4e2ctEe0tDA8W+m3vOXwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjcyNjBEMzA4MzVCOUQ4MTJGNzA0NEVDRTk2RjRGQjhG Njk4Mzc5QzAeFw0yNTA3MjEwMjQ2NDRaFw0yNTA3MjQwMzQzNDRaMDMxMTAvBgNV BAMTKDc1M0UzMEI0RjVBOTkxNkY4OTNFODcyQjRCRTIxMEUxNDcyRTY3MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCb3k9Tw+UqIVBtzarnG/We8DYD hkSWIVFx04S/WDZu5rFl0PS0+IqCoZS0k5jI5d9woHzNB7keCV2tHdK/bekBDGSX 04wpW1oOm+MHzD4YOteA1HSfy8yOI8krmnszM3FF4HbzN5J8Rkyn91rY5ThceB56 MfDDwp/qBMjXqn0cYa0hNazZVe4RgARcYUTv8LremQsWeQgCRERYmRHENM1BYk3s OaMJdsTJs7pSiWSEMgK/C46R/SbLpuZ+/f+7keIG5uFLFLkdlLla90KjZt7DILje HcwVh+qtBM5Pi2+BvQuZHoIowCTEFvn0A62ukLyP6o+N/AOyZsmTq1sh4eKbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdT4wtPWpkW+JPocrS+IQ4UcuZycwHwYDVR0j BBgwFoAUtyYNMINbnYEvcETs6W9PuPaYN5wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j M2E1ZmZkYy0xNTFhLTRhYWQtYTJiNy00MzI2NDlkZTZkYmUvMC9CNzI2MEQzMDgz NUI5RDgxMkY3MDQ0RUNFOTZGNEZCOEY2OTgzNzlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjcyNjBEMzA4MzVCOUQ4MTJGNzA0NEVDRTk2RjRGQjhGNjk4 Mzc5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzNhNWZmZGMtMTUxYS00YWFkLWEy YjctNDMyNjQ5ZGU2ZGJlLzAvQjcyNjBEMzA4MzVCOUQ4MTJGNzA0NEVDRTk2RjRG QjhGNjk4Mzc5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMDFYlp2SXQYSpV3srRrJuZp9uFP810u1OB9 pe46Yr52xe454n56OSf2wvSZPvfiIx/1PXjfMcKWSbgfR4kWsjdMCErX4pVJ2AhY 6qooS07jzrj1ym9rbfeNbdBj7Kjf7CNKBla3QAPCB9tNBgkYoJKg1/0oe8lPGJ8V 8+q8DVcvEig3jxFlNwb5QbfO6IyL/sqoA/Ne7RQZhsdxLuGhSdtSOOa+rsd5y88B 6BU80nWffCoMccxHQ8hNCa18cVDyGZlh4kRRZ3GWbRHXYqcMBGlw/+IaM/sVdHFD q0omVlgJYt/8WpFiBVhEd+zwdCD/f3UPMA4SPnlgQXmv951/suI= -----END CERTIFICATE-----Generated at Mon Jul 21 07:25:00 2025 by rpki-client