$ rpki-client -vvf repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft File: C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft (raw, json) Hash identifier: RYTXCfAj3Z8eA/snqXwLwUmeWuFSgdC/H3eKDw6uhLU= Subject key identifier: C4:7F:49:40:E5:92:19:17:2B:1D:88:E1:7D:CD:B5:57:DF:A6:5D:B2 Authority key identifier: C0:7F:5A:E2:D9:DC:99:D0:AF:28:B6:B1:54:21:0C:91:1E:FB:1D:8A Certificate issuer: /CN=C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A Certificate serial: 194680405C8F762001724C0996946BC0988B8253 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft Manifest number: A3 Signing time: Sat 19 Jul 2025 17:11:55 +0000 Manifest this update: Sat 19 Jul 2025 17:06:55 +0000 Manifest next update: Tue 22 Jul 2025 19:34:55 +0000 Files and hashes: 1: C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.crl (hash: tqKPNwHwI34KP1VZ2OlNvEb/cGo49sFl/DuLpnioxpM=) 2: 323030313a6466343a6363303a3a2f34382d3438203d3e20313532383431.roa (hash: 67keM1hQfIucwuWQhvzKk8YthRoib+6jHGmIeaRFOqs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.crl rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 19:34:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:46:80:40:5c:8f:76:20:01:72:4c:09:96:94:6b:c0:98:8b:82:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A Validity Not Before: Jul 19 17:06:55 2025 GMT Not After : Jul 22 19:34:55 2025 GMT Subject: CN=C47F4940E59219172B1D88E17DCDB557DFA65DB2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9a:cf:64:73:ce:96:2a:c6:8d:a7:5c:af:79: d1:ec:12:b8:bb:09:43:a9:f3:da:68:41:82:bc:0f: 82:1d:e9:39:18:e6:05:e4:f0:98:2d:4d:77:8d:0f: 44:db:16:89:fe:99:20:9d:88:a6:cf:fa:28:97:86: 40:75:b1:5c:e8:40:ae:c4:62:cd:22:9f:d2:ca:9b: 18:2b:80:d3:bb:a2:7d:71:12:c7:79:98:0d:27:38: da:5b:b0:f1:bc:36:0b:ec:92:73:b1:c4:01:c8:9a: 7a:97:83:3e:dd:bb:33:64:8e:b7:5a:a9:9d:3a:c4: e1:65:52:4e:9c:cc:e9:5b:22:bd:83:c0:72:a4:5a: 28:67:f4:81:07:f7:2b:20:15:ad:55:0c:77:7d:69: 7a:8a:48:60:ee:a8:a6:3c:2e:b9:ff:46:3e:a2:91: 85:21:8b:14:66:c7:85:4f:9d:df:ba:ca:a3:54:03: 5c:17:67:ff:23:99:6d:ef:94:36:83:8e:9e:0f:ad: d4:36:f1:ab:7d:99:b6:79:68:81:da:1e:6c:57:d1: e5:c6:ba:e6:71:a0:5e:7e:ab:40:3e:65:0d:e8:a4: 1d:ea:3a:85:97:95:b2:c3:9f:83:f9:9a:bd:87:55: e5:07:a1:cc:44:18:ba:22:0e:f4:89:9c:9b:1c:ec: 7b:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:7F:49:40:E5:92:19:17:2B:1D:88:E1:7D:CD:B5:57:DF:A6:5D:B2 X509v3 Authority Key Identifier: keyid:C0:7F:5A:E2:D9:DC:99:D0:AF:28:B6:B1:54:21:0C:91:1E:FB:1D:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:5f:5b:b1:b2:ac:5f:02:4f:20:63:62:fd:d0:9f:47:53:9d: 19:93:95:02:f6:3f:0f:74:61:d6:64:fe:28:2d:de:a3:35:9b: 4b:22:e4:10:dd:9e:63:a9:59:93:e3:74:22:be:62:45:4d:ce: a3:d8:ba:cd:0c:7a:fd:83:b5:8a:ff:7f:85:f7:f7:ff:29:82: 95:fb:62:57:e5:54:66:18:e0:a4:5e:5e:a7:89:95:a9:0e:3d: 96:fc:ac:7f:15:80:15:51:3d:4c:8e:f1:c0:ca:3e:0e:b6:57: d8:d4:68:19:e9:f1:da:55:24:ff:fa:8f:6c:b1:0e:95:a2:49: bc:5a:c2:cb:9c:c6:b2:47:52:36:d1:70:0d:fb:6f:f1:5b:1d: 7e:54:00:8e:a6:74:6a:35:ee:98:7f:0f:18:6b:cf:12:87:26: 40:8f:32:bd:e2:8c:87:7a:b9:bc:41:82:7c:a9:ff:5a:3b:36: 2b:88:00:25:0a:88:38:87:fb:f0:fd:e4:3c:49:43:e4:e4:f1: bb:e3:ff:3f:02:c5:ef:6f:d9:a3:8c:44:c7:2b:51:c4:48:09: 28:5c:cb:37:de:b6:99:2b:86:50:61:42:0e:93:97:6b:35:db: c6:48:8c:e9:d9:a7:5f:ea:07:45:9c:04:a1:0b:d2:a8:cd:fa: 5a:a9:ce:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGUaAQFyPdiABckwJlpRrwJiLglMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA3RjVBRTJEOURDOTlEMEFGMjhCNkIxNTQyMTBDOTEx RUZCMUQ4QTAeFw0yNTA3MTkxNzA2NTVaFw0yNTA3MjIxOTM0NTVaMDMxMTAvBgNV BAMTKEM0N0Y0OTQwRTU5MjE5MTcyQjFEODhFMTdEQ0RCNTU3REZBNjVEQjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMms9kc86WKsaNp1yvedHsEri7 CUOp89poQYK8D4Id6TkY5gXk8JgtTXeND0TbFon+mSCdiKbP+iiXhkB1sVzoQK7E Ys0in9LKmxgrgNO7on1xEsd5mA0nONpbsPG8NgvsknOxxAHImnqXgz7duzNkjrda qZ06xOFlUk6czOlbIr2DwHKkWihn9IEH9ysgFa1VDHd9aXqKSGDuqKY8Lrn/Rj6i kYUhixRmx4VPnd+6yqNUA1wXZ/8jmW3vlDaDjp4PrdQ28at9mbZ5aIHaHmxX0eXG uuZxoF5+q0A+ZQ3opB3qOoWXlbLDn4P5mr2HVeUHocxEGLoiDvSJnJsc7HstAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxH9JQOWSGRcrHYjhfc21V9+mXbIwHwYDVR0j BBgwFoAUwH9a4tncmdCvKLaxVCEMkR77HYowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZTdkNzM4ZS0yY2M3LTRiZDItYmIyOC05MTQyZTFiYWEwYmEvMS9DMDdGNUFFMkQ5 REM5OUQwQUYyOEI2QjE1NDIxMEM5MTFFRkIxRDhBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzA3RjVBRTJEOURDOTlEMEFGMjhCNkIxNTQyMTBDOTExRUZC MUQ4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2U3ZDczOGUtMmNjNy00YmQyLWJi MjgtOTE0MmUxYmFhMGJhLzEvQzA3RjVBRTJEOURDOTlEMEFGMjhCNkIxNTQyMTBD OTExRUZCMUQ4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACRfW7GyrF8CTyBjYv3Qn0dTnRmTlQL2Pw90 YdZk/igt3qM1m0si5BDdnmOpWZPjdCK+YkVNzqPYus0Mev2DtYr/f4X39/8pgpX7 YlflVGYY4KReXqeJlakOPZb8rH8VgBVRPUyO8cDKPg62V9jUaBnp8dpVJP/6j2yx DpWiSbxawsucxrJHUjbRcA37b/FbHX5UAI6mdGo17ph/DxhrzxKHJkCPMr3ijId6 ubxBgnyp/1o7NiuIACUKiDiH+/D95DxJQ+Tk8bvj/z8Cxe9v2aOMRMcrUcRICShc yzfetpkrhlBhQg6Tl2s128ZIjOnZp1/qB0WcBKEL0qjN+lqpzqU= -----END CERTIFICATE-----Generated at Sun Jul 20 21:26:24 2025 by rpki-client