$ rpki-client -vvf repo-rpki.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/7ABD31DD828DD58C9D91180021903EA04D8EB58E.mft File: 7ABD31DD828DD58C9D91180021903EA04D8EB58E.mft (raw, json) Hash identifier: SEXsSFxO7I5MZ6jfyOtKlQ2aBCewn2rsnj2b6hbCUFs= Subject key identifier: C4:9A:40:A5:C8:DE:50:17:59:99:12:44:9D:50:1E:6B:A4:D7:96:23 Authority key identifier: 7A:BD:31:DD:82:8D:D5:8C:9D:91:18:00:21:90:3E:A0:4D:8E:B5:8E Certificate issuer: /CN=7ABD31DD828DD58C9D91180021903EA04D8EB58E Certificate serial: 215B024477B8E9F8A2FB14B63E6B9551579FAA14 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7ABD31DD828DD58C9D91180021903EA04D8EB58E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/7ABD31DD828DD58C9D91180021903EA04D8EB58E.mft Manifest number: B0 Signing time: Tue 22 Jul 2025 05:21:30 +0000 Manifest this update: Tue 22 Jul 2025 05:16:30 +0000 Manifest next update: Fri 25 Jul 2025 06:53:30 +0000 Files and hashes: 1: 7ABD31DD828DD58C9D91180021903EA04D8EB58E.crl (hash: oMVhFbIzxughd7LNf29mZw1eLbrTBlyDH/IIL6o7Qhs=) 2: 3135372e36362e32312e302f32342d3234203d3e20313431353932.roa (hash: 3IUGvQHYckh9j4psQSuGBFM7lfhV4EtYEKWC7HzE4TE=) 3: 3135372e36362e32302e302f32342d3234203d3e20313337333439.roa (hash: VWW2OjO2Nb0Oyhr5Vqe+VmM1lOl8RPUO1FTuyvBrHBg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/7ABD31DD828DD58C9D91180021903EA04D8EB58E.crl rsync://repo-rpki.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/7ABD31DD828DD58C9D91180021903EA04D8EB58E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7ABD31DD828DD58C9D91180021903EA04D8EB58E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 16:46:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:5b:02:44:77:b8:e9:f8:a2:fb:14:b6:3e:6b:95:51:57:9f:aa:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ABD31DD828DD58C9D91180021903EA04D8EB58E Validity Not Before: Jul 22 05:16:30 2025 GMT Not After : Jul 25 06:53:30 2025 GMT Subject: CN=C49A40A5C8DE5017599912449D501E6BA4D79623 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:78:15:4c:9e:14:75:49:20:65:ce:02:2c:51: a9:19:1f:c5:1c:6a:cb:fa:72:33:7d:fb:1c:16:6c: 50:aa:d9:ea:b8:97:8b:2a:f4:60:7a:7e:7c:d0:a3: 66:9b:e2:11:12:30:24:65:ca:e3:54:cb:e6:3c:db: 44:99:0d:ab:b4:83:80:a3:33:59:f3:13:56:67:da: e9:1b:84:2b:33:48:5e:b2:03:d1:0e:3b:ba:2b:fb: 69:a6:5e:e4:e5:8c:1c:5f:ac:9e:b5:b3:46:35:c0: fa:2d:a4:24:81:a8:8e:75:7f:d8:6c:ca:d7:6c:c8: 5d:22:57:b1:bb:8d:0e:3a:7e:1f:5d:df:73:eb:53: ce:9e:56:f1:59:8f:47:3b:93:5c:86:14:a5:19:bb: eb:b5:af:bf:3f:50:13:06:5c:cb:6d:49:a6:71:54: 4f:4b:45:81:0c:15:90:cf:fb:ab:81:9f:3f:c7:a5: 9f:55:92:b2:00:88:d5:99:02:c5:68:58:f6:d6:27: 8d:b6:31:df:1d:ee:95:3d:1a:86:3f:36:2d:d8:ef: 8b:37:e4:2e:0b:e8:dd:87:f9:cd:42:8a:7f:14:a4: ef:2a:6f:59:c7:4c:d7:8e:0b:74:8e:85:e3:c6:c9: d0:40:aa:ad:8b:65:16:ba:6e:17:6c:83:da:57:3c: c1:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:9A:40:A5:C8:DE:50:17:59:99:12:44:9D:50:1E:6B:A4:D7:96:23 X509v3 Authority Key Identifier: keyid:7A:BD:31:DD:82:8D:D5:8C:9D:91:18:00:21:90:3E:A0:4D:8E:B5:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/7ABD31DD828DD58C9D91180021903EA04D8EB58E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7ABD31DD828DD58C9D91180021903EA04D8EB58E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/7ABD31DD828DD58C9D91180021903EA04D8EB58E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:74:6c:d4:39:d0:6a:42:bd:67:3c:77:bf:09:07:bb:76:c7: 74:e7:fb:9e:09:a9:d0:90:f1:0f:94:fd:da:9e:b6:e3:db:50: 54:cd:39:80:25:9f:6d:1f:02:21:6a:73:40:8b:9e:d7:57:ed: 5e:ad:57:a5:6d:2b:19:a5:65:59:50:80:81:f0:40:6e:f2:3e: 1d:26:e5:dc:61:b1:fb:b2:16:40:f6:a8:0e:c4:1c:88:0e:2a: a1:7f:37:ca:ad:9d:ec:e3:17:b2:42:00:84:22:9f:ec:88:3e: 72:87:84:56:ad:b4:0c:14:27:8a:33:52:d1:db:a5:ee:3b:38: c3:ed:cd:eb:68:5f:21:b3:b5:29:7b:62:03:87:72:6f:e5:b3: 6e:e3:03:0e:02:01:fe:cd:88:5c:4a:f5:39:96:1b:62:2c:ae: 40:01:13:e3:79:32:fe:0f:d7:2d:f7:0f:bb:d8:87:36:37:eb: 72:1c:25:bd:e8:9f:86:95:3c:06:8a:66:f0:e4:bf:cd:b4:99: e9:c8:bf:2e:58:c5:2e:82:9b:17:35:41:25:e8:76:13:1c:2c: f0:dc:14:05:33:aa:ae:b6:c8:bb:63:0a:8d:3a:3c:f1:5d:eb: da:f8:18:0e:54:0c:f1:3f:40:e9:b4:49:f5:26:d7:54:4c:77: e5:dd:b6:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIVsCRHe46fii+xS2PmuVUVefqhQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0FCRDMxREQ4MjhERDU4QzlEOTExODAwMjE5MDNFQTA0 RDhFQjU4RTAeFw0yNTA3MjIwNTE2MzBaFw0yNTA3MjUwNjUzMzBaMDMxMTAvBgNV BAMTKEM0OUE0MEE1QzhERTUwMTc1OTk5MTI0NDlENTAxRTZCQTRENzk2MjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCveBVMnhR1SSBlzgIsUakZH8Uc asv6cjN9+xwWbFCq2eq4l4sq9GB6fnzQo2ab4hESMCRlyuNUy+Y820SZDau0g4Cj M1nzE1Zn2ukbhCszSF6yA9EOO7or+2mmXuTljBxfrJ61s0Y1wPotpCSBqI51f9hs ytdsyF0iV7G7jQ46fh9d33PrU86eVvFZj0c7k1yGFKUZu+u1r78/UBMGXMttSaZx VE9LRYEMFZDP+6uBnz/HpZ9VkrIAiNWZAsVoWPbWJ422Md8d7pU9GoY/Ni3Y74s3 5C4L6N2H+c1Cin8UpO8qb1nHTNeOC3SOhePGydBAqq2LZRa6bhdsg9pXPMFbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxJpApcjeUBdZmRJEnVAea6TXliMwHwYDVR0j BBgwFoAUer0x3YKN1YydkRgAIZA+oE2OtY4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NWY1ZWYxOC02ZmZhLTRkNjktOGMwYy0zNTE4Y2ZhODc1OGUvMC83QUJEMzFERDgy OERENThDOUQ5MTE4MDAyMTkwM0VBMDREOEVCNThFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0FCRDMxREQ4MjhERDU4QzlEOTExODAwMjE5MDNFQTA0RDhF QjU4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjVmNWVmMTgtNmZmYS00ZDY5LThj MGMtMzUxOGNmYTg3NThlLzAvN0FCRDMxREQ4MjhERDU4QzlEOTExODAwMjE5MDNF QTA0RDhFQjU4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACF0bNQ50GpCvWc8d78JB7t2x3Tn+54JqdCQ 8Q+U/dqetuPbUFTNOYAln20fAiFqc0CLntdX7V6tV6VtKxmlZVlQgIHwQG7yPh0m 5dxhsfuyFkD2qA7EHIgOKqF/N8qtnezjF7JCAIQin+yIPnKHhFattAwUJ4ozUtHb pe47OMPtzetoXyGztSl7YgOHcm/ls27jAw4CAf7NiFxK9TmWG2IsrkABE+N5Mv4P 1y33D7vYhzY363IcJb3on4aVPAaKZvDkv820menIvy5YxS6Cmxc1QSXodhMcLPDc FAUzqq62yLtjCo06PPFd69r4GA5UDPE/QOm0SfUm11RMd+XdtlQ= -----END CERTIFICATE-----Generated at Tue Jul 22 21:47:02 2025 by rpki-client