$ rpki-client -vvf repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft File: 7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft (raw, json) Hash identifier: nIk8eedTqe1UXAqNFhJLqOGVPr3T91ExiUKj98S2DT0= Subject key identifier: 01:74:19:6D:82:A6:6D:71:2F:8A:46:C2:C3:71:3F:B5:DA:79:7E:56 Authority key identifier: 7F:DB:76:1B:09:E7:A9:A8:0C:D2:8C:84:A5:FF:DB:12:F5:C9:BB:D0 Certificate issuer: /CN=7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0 Certificate serial: 6DA5D56C52E9649EA355BCF6C9EABF2793D930F7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft Manifest number: 01EE Signing time: Tue 22 Jul 2025 13:40:58 +0000 Manifest this update: Tue 22 Jul 2025 13:35:58 +0000 Manifest next update: Fri 25 Jul 2025 20:17:58 +0000 Files and hashes: 1: 3130332e3138362e38392e302f32342d3234203d3e20313439373137.roa (hash: d85h85v2ptQz3vrVN5qkUm0+GStqZnlOAr5LKlkna3k=) 2: 7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.crl (hash: AkmHfmF897v13xFKGm6i5/pHEpMGpS+ZoIfV8xG05co=) 3: 3130332e3138362e38382e302f32342d3234203d3e20313439373137.roa (hash: qKtIrqocYRtH9mFT0B1bJLwWXs7q8vOuLUP4J+rTPCk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.crl rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 20:17:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:a5:d5:6c:52:e9:64:9e:a3:55:bc:f6:c9:ea:bf:27:93:d9:30:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0 Validity Not Before: Jul 22 13:35:58 2025 GMT Not After : Jul 25 20:17:58 2025 GMT Subject: CN=0174196D82A66D712F8A46C2C3713FB5DA797E56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:29:b0:b9:bd:dc:51:68:10:10:25:1e:42:7f: 31:90:d6:01:40:9e:5f:35:47:68:16:00:f6:71:a1: a9:f5:a2:d8:c5:3d:af:58:01:a8:63:19:a9:8f:e6: 42:96:64:3a:b4:1c:d7:e0:48:b6:4e:db:4f:c7:01: 5e:e8:41:0c:50:b6:23:68:54:7f:89:55:a3:85:23: 4c:10:cc:61:4f:19:ba:6e:38:e3:1d:60:27:a7:12: 2e:b4:01:20:9b:67:50:cc:89:a6:9c:2e:0b:cf:e9: 58:39:e9:d3:21:30:34:94:fd:60:1a:19:b6:20:dc: 4c:28:d8:02:6c:67:dd:e8:1a:7e:ce:b1:b8:db:32: ed:0b:5a:b8:ec:94:c3:6e:a6:f3:2e:c4:a6:db:9b: 3a:97:f3:ba:4c:19:1e:5a:fc:00:ac:4c:02:ec:f0: 9c:21:db:4e:09:fb:72:13:97:12:8c:4a:70:65:e9: 0a:5e:61:a3:e8:c9:62:0b:5e:5f:00:21:59:e0:a6: 9c:f3:85:0a:27:ef:83:2e:44:94:83:64:22:55:b8: 6c:6b:57:84:37:33:0f:c0:78:98:13:b2:d3:a6:bd: b0:f5:dc:66:fa:f0:a5:51:3b:65:98:df:97:92:78: 8c:4a:76:29:5d:ab:92:0b:a6:70:c0:f7:77:ec:8b: 7a:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:74:19:6D:82:A6:6D:71:2F:8A:46:C2:C3:71:3F:B5:DA:79:7E:56 X509v3 Authority Key Identifier: keyid:7F:DB:76:1B:09:E7:A9:A8:0C:D2:8C:84:A5:FF:DB:12:F5:C9:BB:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:de:77:c7:02:68:7d:78:be:f8:2a:a1:67:94:96:a4:f1:68: ee:6f:ed:ae:db:ef:f9:60:a2:44:2a:96:2a:72:82:63:1e:e9: b1:74:3b:5a:e5:48:df:5f:5b:12:c6:87:02:fa:33:2e:79:ea: 9b:c3:e2:35:ce:69:dc:18:ca:27:09:ef:ac:66:86:99:16:87: 59:e9:e4:b9:d9:27:c7:92:34:17:3b:56:a9:23:b7:41:1d:2e: 56:a5:1d:91:8b:9c:76:d5:7c:a9:9c:c1:c6:a5:85:c4:d1:bf: 64:52:a4:78:85:91:bd:12:39:01:8a:97:ce:34:15:fd:ce:84: 2c:69:fb:35:8a:2b:fb:e1:d3:d0:38:b0:55:4a:ba:53:98:e3: f8:dc:60:57:e0:be:8a:c9:a8:8a:33:fe:e2:ac:82:da:25:6f: e9:c0:7f:89:c5:be:26:50:cd:ca:36:23:40:5b:73:17:51:72: 91:be:2a:8d:b6:29:05:33:05:7a:93:0b:2f:57:c2:36:5e:94: 5b:24:88:e1:77:e7:7e:22:02:d1:70:e5:fe:9d:94:6c:5f:f1: c9:a0:0b:56:52:72:ef:b5:75:56:ca:87:8f:f2:47:11:cf:a5: d0:b3:34:0c:8f:34:a2:1b:d8:7b:d7:c0:9e:8b:81:7d:23:ae: 93:54:80:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbaXVbFLpZJ6jVbz2yeq/J5PZMPcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ZEQjc2MUIwOUU3QTlBODBDRDI4Qzg0QTVGRkRCMTJG NUM5QkJEMDAeFw0yNTA3MjIxMzM1NThaFw0yNTA3MjUyMDE3NThaMDMxMTAvBgNV BAMTKDAxNzQxOTZEODJBNjZENzEyRjhBNDZDMkMzNzEzRkI1REE3OTdFNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrKbC5vdxRaBAQJR5CfzGQ1gFA nl81R2gWAPZxoan1otjFPa9YAahjGamP5kKWZDq0HNfgSLZO20/HAV7oQQxQtiNo VH+JVaOFI0wQzGFPGbpuOOMdYCenEi60ASCbZ1DMiaacLgvP6Vg56dMhMDSU/WAa GbYg3Ewo2AJsZ93oGn7OsbjbMu0LWrjslMNupvMuxKbbmzqX87pMGR5a/ACsTALs 8Jwh204J+3ITlxKMSnBl6QpeYaPoyWILXl8AIVngppzzhQon74MuRJSDZCJVuGxr V4Q3Mw/AeJgTstOmvbD13Gb68KVRO2WY35eSeIxKdildq5ILpnDA93fsi3rrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAXQZbYKmbXEvikbCw3E/tdp5flYwHwYDVR0j BBgwFoAUf9t2GwnnqagM0oyEpf/bEvXJu9AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzI5NWRlNi0yMDU4LTQ2YTctOTM2Yi0wNTJjZjJmYTkyMGQvMC83RkRCNzYxQjA5 RTdBOUE4MENEMjhDODRBNUZGREIxMkY1QzlCQkQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0ZEQjc2MUIwOUU3QTlBODBDRDI4Qzg0QTVGRkRCMTJGNUM5 QkJEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTMyOTVkZTYtMjA1OC00NmE3LTkz NmItMDUyY2YyZmE5MjBkLzAvN0ZEQjc2MUIwOUU3QTlBODBDRDI4Qzg0QTVGRkRC MTJGNUM5QkJEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH3ed8cCaH14vvgqoWeUlqTxaO5v7a7b7/lg okQqlipygmMe6bF0O1rlSN9fWxLGhwL6My556pvD4jXOadwYyicJ76xmhpkWh1np 5LnZJ8eSNBc7Vqkjt0EdLlalHZGLnHbVfKmcwcalhcTRv2RSpHiFkb0SOQGKl840 Ff3OhCxp+zWKK/vh09A4sFVKulOY4/jcYFfgvorJqIoz/uKsgtolb+nAf4nFviZQ zco2I0BbcxdRcpG+Ko22KQUzBXqTCy9XwjZelFskiOF3534iAtFw5f6dlGxf8cmg C1ZScu+1dVbKh4/yRxHPpdCzNAyPNKIb2HvXwJ6LgX0jrpNUgK4= -----END CERTIFICATE-----Generated at Wed Jul 23 02:03:47 2025 by rpki-client