$ rpki-client -vvf repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft File: C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft (raw, json) Hash identifier: xc9ZKjFla+OmGuAXFRi6C9e/+KYqwcL/TmP+9Mm8dM8= Subject key identifier: 69:A2:8E:A4:DA:EA:AA:BE:88:8E:BF:B8:34:F8:C8:38:4B:51:DC:98 Authority key identifier: C7:83:94:27:F4:4C:8E:D8:9E:6C:27:20:F1:9C:CF:27:92:70:FD:2A Certificate issuer: /CN=C7839427F44C8ED89E6C2720F19CCF279270FD2A Certificate serial: 3B7CC96231CC66D571A2E2484FE02E8DB547AE52 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C7839427F44C8ED89E6C2720F19CCF279270FD2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft Manifest number: 85 Signing time: Sun 20 Jul 2025 00:51:04 +0000 Manifest this update: Sun 20 Jul 2025 00:46:04 +0000 Manifest next update: Wed 23 Jul 2025 10:45:04 +0000 Files and hashes: 1: 3135372e32302e3233382e302f32342d3234203d3e20313532343239.roa (hash: YUfWeO4Zp71JGwLmW0ExOlIuGUiX5R5EB5q+WHM4Ews=) 2: C7839427F44C8ED89E6C2720F19CCF279270FD2A.crl (hash: 0BwMJUEYgDAvnx3Y1vdi3BBoVR9Kc8Qq/sJU74fgRsA=) 3: 3135372e32302e3233392e302f32342d3234203d3e20313532343239.roa (hash: +vgEkqNs4IZ18TGSuIZbEqxX1A4966mLzeBSJvGF+d0=) 4: 3135372e32302e3233382e302f32332d3233203d3e20313532343239.roa (hash: 47XUtIsbPhvEMu3eZ7qPRDeVpw2v8OOWFwMXf8PZG1I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.crl rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C7839427F44C8ED89E6C2720F19CCF279270FD2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 10:45:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:7c:c9:62:31:cc:66:d5:71:a2:e2:48:4f:e0:2e:8d:b5:47:ae:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7839427F44C8ED89E6C2720F19CCF279270FD2A Validity Not Before: Jul 20 00:46:04 2025 GMT Not After : Jul 23 10:45:04 2025 GMT Subject: CN=69A28EA4DAEAAABE888EBFB834F8C8384B51DC98 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:90:f6:33:66:48:2b:b9:f4:e6:14:6d:a9:a1: 7d:43:a1:c1:a6:82:19:5d:a9:5e:e0:68:e2:88:5b: 5e:9b:59:1f:59:0f:ac:18:71:aa:d2:17:74:84:95: d3:69:d5:ed:fb:4c:2f:52:46:b4:bb:90:9a:ab:11: e7:0d:92:5b:63:e2:53:20:7c:f3:f9:ff:01:da:90: 10:24:09:1c:eb:ba:49:60:eb:43:c3:18:a8:0a:b6: da:98:51:ea:ee:58:65:44:be:ac:7e:35:73:ff:38: 97:b4:57:d5:9f:08:ac:40:f4:f5:5f:f0:6c:76:9e: 4e:80:d0:95:6e:d3:c4:f9:92:6b:e9:b8:33:b1:35: 5a:09:6c:84:dd:a1:db:24:26:e1:22:da:72:b6:d5: 26:7e:56:17:11:3e:12:fb:76:d9:8c:9f:1f:38:d1: 2a:2f:26:28:05:64:00:f9:7f:ee:cb:68:0f:41:fa: 8b:09:e9:b2:f2:43:c8:f3:dd:1a:8b:43:ed:4e:f3: 6a:04:99:a0:8f:14:ef:85:a8:ba:27:ff:78:10:93: dc:7a:8a:a0:1a:b7:a2:b4:1c:21:c7:d3:ca:11:ab: 03:f7:a3:3b:de:78:fa:bb:fb:a4:0f:12:00:5a:68: 05:55:89:ea:23:31:04:58:52:fb:88:04:1e:69:a4: 00:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:A2:8E:A4:DA:EA:AA:BE:88:8E:BF:B8:34:F8:C8:38:4B:51:DC:98 X509v3 Authority Key Identifier: keyid:C7:83:94:27:F4:4C:8E:D8:9E:6C:27:20:F1:9C:CF:27:92:70:FD:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C7839427F44C8ED89E6C2720F19CCF279270FD2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:8c:cf:67:a9:87:db:d9:bc:4f:2f:14:7a:0e:16:5e:b8:67: b4:23:2b:2d:4b:28:05:8b:4e:e8:4c:3a:39:b2:56:4e:a6:7d: 0d:ed:54:d0:a9:52:53:42:de:f7:b6:19:91:63:18:f4:06:a4: 99:d8:2d:60:3b:7c:e7:b9:2d:31:4d:b5:46:7f:8f:87:dc:51: b8:a1:8d:36:14:75:31:bd:33:53:59:42:59:47:40:a3:0f:48: 4f:f0:40:32:39:dd:11:90:e2:76:51:ff:ed:a5:2e:5c:0f:19: a6:72:7e:17:80:c4:93:22:c4:0d:df:a2:5f:0d:42:22:2d:5a: b4:6e:92:a1:b7:10:b5:ff:51:36:7f:43:02:f2:50:49:95:3c: 68:7d:b2:38:c6:45:bb:60:bc:d1:fa:86:36:78:41:c4:3d:34: e0:f4:16:25:32:9b:90:25:af:4d:fa:2a:48:60:f4:b4:5c:79: 69:1a:0f:e9:8b:cb:67:62:2a:3e:c8:6c:06:de:bc:b0:c9:d2: 7e:f3:65:3c:d9:7c:94:ad:9c:6d:71:67:59:47:2c:1c:0b:77: 47:72:f2:9b:94:b8:19:34:f8:b7:77:18:4b:60:f8:ae:4b:5a: 17:7c:ee:fc:ec:a9:a7:15:1a:6e:be:a4:9e:f6:e9:b9:a7:ac: 36:b7:70:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO3zJYjHMZtVxouJIT+AujbVHrlIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc4Mzk0MjdGNDRDOEVEODlFNkMyNzIwRjE5Q0NGMjc5 MjcwRkQyQTAeFw0yNTA3MjAwMDQ2MDRaFw0yNTA3MjMxMDQ1MDRaMDMxMTAvBgNV BAMTKDY5QTI4RUE0REFFQUFBQkU4ODhFQkZCODM0RjhDODM4NEI1MURDOTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmkPYzZkgrufTmFG2poX1DocGm ghldqV7gaOKIW16bWR9ZD6wYcarSF3SEldNp1e37TC9SRrS7kJqrEecNkltj4lMg fPP5/wHakBAkCRzruklg60PDGKgKttqYUeruWGVEvqx+NXP/OJe0V9WfCKxA9PVf 8Gx2nk6A0JVu08T5kmvpuDOxNVoJbITdodskJuEi2nK21SZ+VhcRPhL7dtmMnx84 0SovJigFZAD5f+7LaA9B+osJ6bLyQ8jz3RqLQ+1O82oEmaCPFO+FqLon/3gQk9x6 iqAat6K0HCHH08oRqwP3ozveePq7+6QPEgBaaAVVieojMQRYUvuIBB5ppAC5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaaKOpNrqqr6Ijr+4NPjIOEtR3JgwHwYDVR0j BBgwFoAUx4OUJ/RMjtiebCcg8ZzPJ5Jw/SowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OGQxYzQ0OS05NzhjLTQ4NDUtYjgyMy1iNTkyNWE5MDU0MjcvMC9DNzgzOTQyN0Y0 NEM4RUQ4OUU2QzI3MjBGMTlDQ0YyNzkyNzBGRDJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzc4Mzk0MjdGNDRDOEVEODlFNkMyNzIwRjE5Q0NGMjc5Mjcw RkQyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMThkMWM0NDktOTc4Yy00ODQ1LWI4 MjMtYjU5MjVhOTA1NDI3LzAvQzc4Mzk0MjdGNDRDOEVEODlFNkMyNzIwRjE5Q0NG Mjc5MjcwRkQyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAESMz2eph9vZvE8vFHoOFl64Z7QjKy1LKAWL TuhMOjmyVk6mfQ3tVNCpUlNC3ve2GZFjGPQGpJnYLWA7fOe5LTFNtUZ/j4fcUbih jTYUdTG9M1NZQllHQKMPSE/wQDI53RGQ4nZR/+2lLlwPGaZyfheAxJMixA3fol8N QiItWrRukqG3ELX/UTZ/QwLyUEmVPGh9sjjGRbtgvNH6hjZ4QcQ9NOD0FiUym5Al r036Kkhg9LRceWkaD+mLy2diKj7IbAbevLDJ0n7zZTzZfJStnG1xZ1lHLBwLd0dy 8puUuBk0+Ld3GEtg+K5LWhd87vzsqacVGm6+pJ726bmnrDa3cA0= -----END CERTIFICATE-----Generated at Tue Jul 22 04:14:28 2025 by rpki-client