$ rpki-client -vvf repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft File: D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft (raw, json) Hash identifier: zy3bQP6ks8BmlEQ1GcORAeXLgjr1qAthqZoD+YUEpzI= Subject key identifier: 46:64:44:47:4D:AD:9F:09:A2:73:EA:88:9E:53:DE:6A:CF:37:94:BB Authority key identifier: D8:07:B5:A7:71:6C:B5:6D:03:6E:DE:4C:E9:94:63:2C:0D:3A:25:01 Certificate issuer: /CN=D807B5A7716CB56D036EDE4CE994632C0D3A2501 Certificate serial: 7CC85AB77FF0D085DD54B9C2F1521EF792144E39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D807B5A7716CB56D036EDE4CE994632C0D3A2501.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft Manifest number: 019B Signing time: Sat 19 Jul 2025 03:12:06 +0000 Manifest this update: Sat 19 Jul 2025 03:07:06 +0000 Manifest next update: Tue 22 Jul 2025 06:08:06 +0000 Files and hashes: 1: 3130332e3139312e3230302e302f32342d3234203d3e20313432333636.roa (hash: 71RKMRkCzf+dsSgq8Q8+9kiI589hG8/JWQHbUqhmZBU=) 2: D807B5A7716CB56D036EDE4CE994632C0D3A2501.crl (hash: probsTX9iFKQgeL4R8QsdHxqign8KAKzHyHCs8KkqRA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.crl rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D807B5A7716CB56D036EDE4CE994632C0D3A2501.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 06:08:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:c8:5a:b7:7f:f0:d0:85:dd:54:b9:c2:f1:52:1e:f7:92:14:4e:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D807B5A7716CB56D036EDE4CE994632C0D3A2501 Validity Not Before: Jul 19 03:07:06 2025 GMT Not After : Jul 22 06:08:06 2025 GMT Subject: CN=466444474DAD9F09A273EA889E53DE6ACF3794BB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:f1:3a:b6:39:be:4d:68:b1:5f:67:8e:5b:50: 3e:f2:a2:ce:40:9d:1f:4a:ea:b5:b9:54:ca:c4:9c: d9:71:f6:d7:56:71:f4:28:44:7f:f8:46:d3:84:6a: 70:dc:c3:b8:82:48:7b:58:14:7c:d3:84:f0:82:4b: 9b:20:e1:17:4a:8b:a7:be:ef:ce:1a:b3:93:db:83: bd:e0:b6:3a:a5:a7:56:d8:8f:68:e9:7f:d7:5d:04: 6f:32:e2:9f:56:82:f8:73:f4:ee:4d:59:a3:f8:e9: cf:b4:52:65:f4:2b:52:8b:71:94:77:b3:75:2e:cc: 9c:e7:43:66:5d:bf:d7:48:68:25:fe:9e:76:cb:8f: e7:ce:dc:1b:b8:d7:44:90:73:eb:c1:04:f4:b6:8b: 7b:01:78:5c:8a:6c:26:b9:42:35:b6:d2:a5:bd:e6: 1a:a7:c3:87:26:c8:b7:b9:6c:27:b1:0b:71:31:b1: e3:52:1a:f6:ea:a8:c5:1e:1f:d2:07:61:39:45:7e: 13:7f:c6:cf:fa:70:f6:2e:47:8d:f8:0f:9d:8a:ac: 32:38:4f:ee:0e:d7:7a:ac:2a:d4:d0:5b:5c:81:97: 18:05:3c:b5:2b:c3:c1:5a:b3:e8:f1:fe:c7:43:28: 17:4d:0e:aa:0e:db:6a:6b:fc:36:6a:20:8d:92:b8: ef:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:64:44:47:4D:AD:9F:09:A2:73:EA:88:9E:53:DE:6A:CF:37:94:BB X509v3 Authority Key Identifier: keyid:D8:07:B5:A7:71:6C:B5:6D:03:6E:DE:4C:E9:94:63:2C:0D:3A:25:01 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D807B5A7716CB56D036EDE4CE994632C0D3A2501.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e03e71fe-ad33-4d12-8720-43143ff01dbf/0/D807B5A7716CB56D036EDE4CE994632C0D3A2501.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:32:99:bb:15:0b:cc:b7:d3:2e:49:90:76:c5:33:83:de:3f: bb:b0:4d:dd:b8:bf:64:27:8d:da:5e:c2:7a:95:a6:d0:25:53: 6c:8e:7f:88:f8:08:53:e3:32:db:a6:72:03:44:ae:85:18:1a: 23:b1:d6:aa:4e:d6:f9:22:af:8d:ab:ba:fe:09:18:14:dc:1a: a8:62:d8:f9:dd:bf:09:7a:08:7c:45:62:0a:94:83:23:31:9f: e1:af:47:34:9f:ed:f7:1d:a8:a5:e0:c3:25:38:b3:b5:6c:d6: 11:64:45:7f:de:4d:2f:16:08:0f:76:dc:09:50:c8:9f:f9:1c: b2:9e:da:33:c7:39:d9:fd:6e:ac:52:14:7d:a5:74:1b:2e:32: 66:74:15:b6:02:e6:31:ef:f2:35:ca:b3:04:17:2c:25:c7:ca: 67:46:c9:6a:46:3b:32:4c:ab:df:16:60:10:ca:c8:2e:dd:7c: 8f:64:ef:c9:db:5a:d8:45:ad:f2:6a:8e:7d:06:2e:5e:43:a7: e5:88:08:4c:d0:3f:45:1b:7b:1f:b7:b0:e5:d2:e4:47:7d:10: 2f:33:57:a9:5d:48:0b:e4:a0:41:3f:02:e6:74:59:8c:4b:8b: 4a:80:71:22:ef:4e:c3:af:f1:86:33:af:09:03:1f:7c:5b:9b: 55:27:b5:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfMhat3/w0IXdVLnC8VIe95IUTjkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDgwN0I1QTc3MTZDQjU2RDAzNkVERTRDRTk5NDYzMkMw RDNBMjUwMTAeFw0yNTA3MTkwMzA3MDZaFw0yNTA3MjIwNjA4MDZaMDMxMTAvBgNV BAMTKDQ2NjQ0NDQ3NERBRDlGMDlBMjczRUE4ODlFNTNERTZBQ0YzNzk0QkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCx8Tq2Ob5NaLFfZ45bUD7yos5A nR9K6rW5VMrEnNlx9tdWcfQoRH/4RtOEanDcw7iCSHtYFHzThPCCS5sg4RdKi6e+ 784as5Pbg73gtjqlp1bYj2jpf9ddBG8y4p9Wgvhz9O5NWaP46c+0UmX0K1KLcZR3 s3UuzJznQ2Zdv9dIaCX+nnbLj+fO3Bu410SQc+vBBPS2i3sBeFyKbCa5QjW20qW9 5hqnw4cmyLe5bCexC3ExseNSGvbqqMUeH9IHYTlFfhN/xs/6cPYuR434D52KrDI4 T+4O13qsKtTQW1yBlxgFPLUrw8Fas+jx/sdDKBdNDqoO22pr/DZqII2SuO/nAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURmRER02tnwmic+qInlPeas83lLswHwYDVR0j BBgwFoAU2Ae1p3FstW0Dbt5M6ZRjLA06JQEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MDNlNzFmZS1hZDMzLTRkMTItODcyMC00MzE0M2ZmMDFkYmYvMC9EODA3QjVBNzcx NkNCNTZEMDM2RURFNENFOTk0NjMyQzBEM0EyNTAxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDgwN0I1QTc3MTZDQjU2RDAzNkVERTRDRTk5NDYzMkMwRDNB MjUwMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTAzZTcxZmUtYWQzMy00ZDEyLTg3 MjAtNDMxNDNmZjAxZGJmLzAvRDgwN0I1QTc3MTZDQjU2RDAzNkVERTRDRTk5NDYz MkMwRDNBMjUwMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACYymbsVC8y30y5JkHbFM4PeP7uwTd24v2Qn jdpewnqVptAlU2yOf4j4CFPjMtumcgNEroUYGiOx1qpO1vkir42ruv4JGBTcGqhi 2Pndvwl6CHxFYgqUgyMxn+GvRzSf7fcdqKXgwyU4s7Vs1hFkRX/eTS8WCA923AlQ yJ/5HLKe2jPHOdn9bqxSFH2ldBsuMmZ0FbYC5jHv8jXKswQXLCXHymdGyWpGOzJM q98WYBDKyC7dfI9k78nbWthFrfJqjn0GLl5Dp+WICEzQP0Ubex+3sOXS5Ed9EC8z V6ldSAvkoEE/AuZ0WYxLi0qAcSLvTsOv8YYzrwkDH3xbm1Unte0= -----END CERTIFICATE-----Generated at Sun Jul 20 21:25:20 2025 by rpki-client