$ rpki-client -vvf repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft File: 7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft (raw, json) Hash identifier: AbdDCqcWiCBJP2T3uZj8JWR3xJy6S8svOh+/1kBXkxI= Subject key identifier: 30:A9:EE:12:60:22:D5:B8:EA:09:2E:24:BB:1A:D3:98:62:D8:73:18 Authority key identifier: 7F:DB:76:1B:09:E7:A9:A8:0C:D2:8C:84:A5:FF:DB:12:F5:C9:BB:D0 Certificate issuer: /CN=7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0 Certificate serial: 1989CF1D236D5511DC0CD392A6DF0924AB4DEADE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft Manifest number: 01EF Signing time: Thu 24 Jul 2025 20:21:01 +0000 Manifest this update: Thu 24 Jul 2025 20:16:01 +0000 Manifest next update: Mon 28 Jul 2025 07:37:01 +0000 Files and hashes: 1: 3130332e3138362e38382e302f32342d3234203d3e20313439373137.roa (hash: qKtIrqocYRtH9mFT0B1bJLwWXs7q8vOuLUP4J+rTPCk=) 2: 7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.crl (hash: hlR87plrg0Mkrn0/3oMuMOqtodt3dG44tZOvc9yLIiQ=) 3: 3130332e3138362e38392e302f32342d3234203d3e20313439373137.roa (hash: d85h85v2ptQz3vrVN5qkUm0+GStqZnlOAr5LKlkna3k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.crl rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 28 Jul 2025 06:22:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:89:cf:1d:23:6d:55:11:dc:0c:d3:92:a6:df:09:24:ab:4d:ea:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0 Validity Not Before: Jul 24 20:16:01 2025 GMT Not After : Jul 28 07:37:01 2025 GMT Subject: CN=30A9EE126022D5B8EA092E24BB1AD39862D87318 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:e1:9c:15:75:7b:45:3b:1e:6f:2f:0a:fb:ae: 5f:c5:2a:61:64:80:81:de:86:87:b5:7c:0e:08:50: 35:d4:2d:a2:23:17:28:34:fa:72:7b:67:68:76:d9: fe:57:39:13:9f:82:51:e2:eb:f8:37:32:e7:ab:23: 17:7a:2f:ed:dc:8a:d2:30:50:32:79:7e:e3:67:ba: 3e:b6:58:4a:6e:e8:16:69:55:f8:79:15:e5:77:89: c6:03:6c:57:39:2c:f3:98:3f:d7:a6:d3:46:c0:e2: 1a:4e:a2:32:5e:dd:a7:f0:bd:aa:13:f1:3c:b6:df: fd:2a:db:72:fc:e8:3e:92:43:91:48:09:1e:d1:12: 35:b4:96:13:44:97:60:24:64:95:4d:98:6b:d7:94: c2:3a:80:5b:01:2f:1e:10:9e:7e:d2:9b:05:19:00: e0:19:97:68:fa:53:f9:f9:29:4c:9d:dd:8e:b4:2e: ad:03:6f:55:33:9c:24:26:cd:a7:eb:8a:1b:9a:93: 78:3a:0a:41:96:86:d2:da:f9:eb:fa:08:bf:92:03: 76:58:6b:45:d7:7e:65:c9:4d:fe:c1:a7:92:ed:d9: e3:68:dd:dc:2e:32:78:2a:7c:6e:08:53:06:07:76: 2b:db:08:cc:30:03:51:f8:e0:72:d7:57:45:2e:90: ad:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:A9:EE:12:60:22:D5:B8:EA:09:2E:24:BB:1A:D3:98:62:D8:73:18 X509v3 Authority Key Identifier: keyid:7F:DB:76:1B:09:E7:A9:A8:0C:D2:8C:84:A5:FF:DB:12:F5:C9:BB:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:62:59:61:83:6f:69:2c:28:30:2c:a6:76:96:fc:96:4b:dc: de:13:2f:a1:9e:37:4b:ac:be:b6:60:3f:4d:d5:f3:46:1c:d7: a1:5f:9b:9f:94:58:08:22:be:2d:3f:ae:ae:1e:0c:60:96:24: 81:55:68:e7:45:74:89:64:8c:ff:28:63:61:a4:8a:99:51:54: dd:70:60:05:9f:c4:e2:8e:dc:e2:5b:08:5d:bc:cb:8d:41:e7: b7:89:8f:6f:de:27:70:00:51:ef:99:bd:fc:ad:00:f9:5f:4f: b8:ac:b5:9d:3d:7c:c0:cf:a3:a8:e8:fe:18:a6:aa:c9:d4:73: 1a:55:29:ee:d2:d0:dd:1b:41:a4:cd:f0:ef:bf:5c:1f:25:43: cc:34:dd:6c:d3:6b:c7:0d:2d:e1:31:45:50:1f:60:60:cb:d6: 45:28:15:e3:c4:fc:cd:88:25:c0:d3:fe:54:a6:82:35:5e:11: 5e:9f:08:a2:4d:5e:e7:cc:12:d2:bb:b9:f8:f0:ec:54:6b:53: 21:3c:a9:1d:5c:72:77:5d:8f:fc:eb:59:92:c0:4f:59:9b:de: d9:b7:86:78:be:79:c8:cb:f3:b6:62:9a:fc:02:1d:9e:3d:a1: 4a:00:3b:5b:4d:b5:e4:ac:09:d5:44:76:52:4c:8a:95:dd:90: a0:48:22:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGYnPHSNtVRHcDNOSpt8JJKtN6t4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ZEQjc2MUIwOUU3QTlBODBDRDI4Qzg0QTVGRkRCMTJG NUM5QkJEMDAeFw0yNTA3MjQyMDE2MDFaFw0yNTA3MjgwNzM3MDFaMDMxMTAvBgNV BAMTKDMwQTlFRTEyNjAyMkQ1QjhFQTA5MkUyNEJCMUFEMzk4NjJEODczMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDt4ZwVdXtFOx5vLwr7rl/FKmFk gIHehoe1fA4IUDXULaIjFyg0+nJ7Z2h22f5XOROfglHi6/g3MuerIxd6L+3citIw UDJ5fuNnuj62WEpu6BZpVfh5FeV3icYDbFc5LPOYP9em00bA4hpOojJe3afwvaoT 8Ty23/0q23L86D6SQ5FICR7REjW0lhNEl2AkZJVNmGvXlMI6gFsBLx4Qnn7SmwUZ AOAZl2j6U/n5KUyd3Y60Lq0Db1UznCQmzafrihuak3g6CkGWhtLa+ev6CL+SA3ZY a0XXfmXJTf7Bp5Lt2eNo3dwuMngqfG4IUwYHdivbCMwwA1H44HLXV0UukK2LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMKnuEmAi1bjqCS4kuxrTmGLYcxgwHwYDVR0j BBgwFoAUf9t2GwnnqagM0oyEpf/bEvXJu9AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzI5NWRlNi0yMDU4LTQ2YTctOTM2Yi0wNTJjZjJmYTkyMGQvMC83RkRCNzYxQjA5 RTdBOUE4MENEMjhDODRBNUZGREIxMkY1QzlCQkQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0ZEQjc2MUIwOUU3QTlBODBDRDI4Qzg0QTVGRkRCMTJGNUM5 QkJEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTMyOTVkZTYtMjA1OC00NmE3LTkz NmItMDUyY2YyZmE5MjBkLzAvN0ZEQjc2MUIwOUU3QTlBODBDRDI4Qzg0QTVGRkRC MTJGNUM5QkJEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAINiWWGDb2ksKDAspnaW/JZL3N4TL6GeN0us vrZgP03V80Yc16Ffm5+UWAgivi0/rq4eDGCWJIFVaOdFdIlkjP8oY2GkiplRVN1w YAWfxOKO3OJbCF28y41B57eJj2/eJ3AAUe+ZvfytAPlfT7istZ09fMDPo6jo/him qsnUcxpVKe7S0N0bQaTN8O+/XB8lQ8w03WzTa8cNLeExRVAfYGDL1kUoFePE/M2I JcDT/lSmgjVeEV6fCKJNXufMEtK7ufjw7FRrUyE8qR1ccnddj/zrWZLAT1mb3tm3 hni+ecjL87ZimvwCHZ49oUoAO1tNteSsCdVEdlJMipXdkKBIIhw= -----END CERTIFICATE-----Generated at Fri Jul 25 06:24:59 2025 by rpki-client