$ rpki-client -vvf repo-rpki.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/7D52713C0D26932DC1EECC75CB0C11784C9B0592.mft File: 7D52713C0D26932DC1EECC75CB0C11784C9B0592.mft (raw, json) Hash identifier: Xxhc1U9WpQKeSHkLmpTm0ZjVd1pOQd0PNhSgD154Lp4= Subject key identifier: FD:9D:D9:36:34:6A:74:85:3D:0E:14:EC:E2:85:C4:74:ED:47:E5:C0 Authority key identifier: 7D:52:71:3C:0D:26:93:2D:C1:EE:CC:75:CB:0C:11:78:4C:9B:05:92 Certificate issuer: /CN=7D52713C0D26932DC1EECC75CB0C11784C9B0592 Certificate serial: 2897F7B81F1AFBC9F124FE1D3C71D55D888DB58E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D52713C0D26932DC1EECC75CB0C11784C9B0592.cer Subject info access: rsync://repo-rpki.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/7D52713C0D26932DC1EECC75CB0C11784C9B0592.mft Manifest number: 02A5 Signing time: Sat 06 Sep 2025 22:51:41 +0000 Manifest this update: Sat 06 Sep 2025 22:46:41 +0000 Manifest next update: Wed 10 Sep 2025 06:22:41 +0000 Files and hashes: 1: 7D52713C0D26932DC1EECC75CB0C11784C9B0592.crl (hash: TvXeOtwFuIFl6+XNjEDNreGU6lWYJ0SSWcbzv9WvBUQ=) 2: 323430353a623034303a3a2f33322d3332203d3e20313339393531.roa (hash: BOXleI82qkqA+XBkcaVMr9vBsmwOlXi/gSfu64m+8zY=) 3: 3130332e3134372e37322e302f32332d3234203d3e20313339393531.roa (hash: 00o5kwNuKSJ5PpNjUI86eyQMeGSOAboXshPfZ04uCOQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/7D52713C0D26932DC1EECC75CB0C11784C9B0592.crl rsync://repo-rpki.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/7D52713C0D26932DC1EECC75CB0C11784C9B0592.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D52713C0D26932DC1EECC75CB0C11784C9B0592.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 06:22:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:97:f7:b8:1f:1a:fb:c9:f1:24:fe:1d:3c:71:d5:5d:88:8d:b5:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D52713C0D26932DC1EECC75CB0C11784C9B0592 Validity Not Before: Sep 6 22:46:41 2025 GMT Not After : Sep 10 06:22:41 2025 GMT Subject: CN=FD9DD936346A74853D0E14ECE285C474ED47E5C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:59:a5:e7:b9:fe:6a:d3:7e:df:93:a2:7a:c1: f7:33:5e:dd:1d:33:75:70:81:f2:42:31:1b:dd:88: e5:64:b2:a2:59:f3:68:47:8e:43:77:fc:d2:90:cb: b8:2e:49:68:ca:dc:21:85:30:6a:b6:d4:60:a0:e3: ba:19:72:e1:e0:5c:1f:dc:45:e8:dc:e9:b1:d0:90: 85:ee:d9:03:c1:d1:b3:02:f8:24:5b:ee:a9:d0:69: 2f:ae:6f:bf:7e:2f:42:9b:67:59:f7:af:ab:ea:84: 9b:e7:f2:93:52:26:9d:f4:74:8f:e5:ff:6c:bb:c1: c3:3a:6a:97:be:a4:15:b2:f8:77:9c:b5:92:66:51: 9c:00:ac:ee:93:d3:c9:23:aa:b8:fb:e0:e1:eb:81: 93:54:dc:dd:01:90:ee:4d:e3:fc:28:07:7b:64:65: dc:3c:77:e8:e9:15:25:82:5e:01:5f:4f:1d:e7:d5: 75:3a:71:5e:30:2e:fd:d4:49:67:fe:64:83:ac:25: 29:dd:90:86:b1:84:ac:cc:2a:67:7f:a3:c3:a3:5b: 60:94:84:97:3a:43:3d:43:e3:3b:6a:be:56:ad:be: de:ba:cb:f8:1d:bf:df:7c:37:26:13:5e:d9:d9:a2: d5:7d:5f:3e:55:3d:8f:ea:2b:08:c1:f5:0a:2a:77: a5:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:9D:D9:36:34:6A:74:85:3D:0E:14:EC:E2:85:C4:74:ED:47:E5:C0 X509v3 Authority Key Identifier: keyid:7D:52:71:3C:0D:26:93:2D:C1:EE:CC:75:CB:0C:11:78:4C:9B:05:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/7D52713C0D26932DC1EECC75CB0C11784C9B0592.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D52713C0D26932DC1EECC75CB0C11784C9B0592.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/26652000-1f2c-4791-81b4-d4457cef1270/0/7D52713C0D26932DC1EECC75CB0C11784C9B0592.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:77:a7:04:19:fd:55:b4:ce:ff:74:e8:d9:83:80:ab:c3:ee: d3:63:f7:62:03:48:fb:2c:96:33:29:01:70:81:71:11:4c:9c: 64:c3:ab:32:4e:f2:0c:af:3d:6c:c4:37:1f:78:a1:bf:e7:90: d8:c9:2f:33:90:62:15:8b:72:92:15:f7:3c:57:37:bb:50:8d: ae:8e:f9:17:f8:89:dd:c9:1b:5c:c7:9e:39:2b:9b:6b:a6:11: 8f:d8:ff:5e:57:f1:50:cf:5f:cf:41:42:6c:25:26:a8:f9:f7: 4c:f7:96:aa:95:55:02:dd:25:6f:8e:55:4e:1c:72:fe:1d:05: 9b:37:76:7b:fe:61:20:d7:c9:82:8d:dd:7d:93:6e:3a:0d:ef: 52:16:1b:c1:6d:ce:5b:73:d5:f5:30:75:a1:df:f0:46:c0:e8: 4c:1f:15:6d:5c:89:70:d9:e6:cc:aa:2b:3c:36:f1:91:98:79: ce:79:08:05:6d:a9:9a:2d:c2:81:b2:89:ca:33:33:81:7a:62: 4a:2c:2b:43:c4:e2:42:5d:66:28:17:5b:b5:28:5e:da:32:65: 9f:da:53:31:d9:1f:33:a8:fa:87:b2:6b:03:e2:cb:25:b7:d0: c8:b6:ba:eb:8b:bf:de:27:47:99:b5:5e:33:e1:57:bf:29:b2: 35:91:bf:f7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKJf3uB8a+8nxJP4dPHHVXYiNtY4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q1MjcxM0MwRDI2OTMyREMxRUVDQzc1Q0IwQzExNzg0 QzlCMDU5MjAeFw0yNTA5MDYyMjQ2NDFaFw0yNTA5MTAwNjIyNDFaMDMxMTAvBgNV BAMTKEZEOUREOTM2MzQ2QTc0ODUzRDBFMTRFQ0UyODVDNDc0RUQ0N0U1QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDWaXnuf5q037fk6J6wfczXt0d M3VwgfJCMRvdiOVksqJZ82hHjkN3/NKQy7guSWjK3CGFMGq21GCg47oZcuHgXB/c Rejc6bHQkIXu2QPB0bMC+CRb7qnQaS+ub79+L0KbZ1n3r6vqhJvn8pNSJp30dI/l /2y7wcM6ape+pBWy+HectZJmUZwArO6T08kjqrj74OHrgZNU3N0BkO5N4/woB3tk Zdw8d+jpFSWCXgFfTx3n1XU6cV4wLv3USWf+ZIOsJSndkIaxhKzMKmd/o8OjW2CU hJc6Qz1D4ztqvlatvt66y/gdv998NyYTXtnZotV9Xz5VPY/qKwjB9Qoqd6UFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/Z3ZNjRqdIU9DhTs4oXEdO1H5cAwHwYDVR0j BBgwFoAUfVJxPA0mky3B7sx1ywwReEybBZIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NjY1MjAwMC0xZjJjLTQ3OTEtODFiNC1kNDQ1N2NlZjEyNzAvMC83RDUyNzEzQzBE MjY5MzJEQzFFRUNDNzVDQjBDMTE3ODRDOUIwNTkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q1MjcxM0MwRDI2OTMyREMxRUVDQzc1Q0IwQzExNzg0QzlC MDU5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjY2NTIwMDAtMWYyYy00NzkxLTgx YjQtZDQ0NTdjZWYxMjcwLzAvN0Q1MjcxM0MwRDI2OTMyREMxRUVDQzc1Q0IwQzEx Nzg0QzlCMDU5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH53pwQZ/VW0zv906NmDgKvD7tNj92IDSPss ljMpAXCBcRFMnGTDqzJO8gyvPWzENx94ob/nkNjJLzOQYhWLcpIV9zxXN7tQja6O +Rf4id3JG1zHnjkrm2umEY/Y/15X8VDPX89BQmwlJqj590z3lqqVVQLdJW+OVU4c cv4dBZs3dnv+YSDXyYKN3X2TbjoN71IWG8Ftzltz1fUwdaHf8EbA6EwfFW1ciXDZ 5syqKzw28ZGYec55CAVtqZotwoGyicozM4F6YkosK0PE4kJdZigXW7UoXtoyZZ/a UzHZHzOo+oeyawPiyyW30Mi2uuuLv94nR5m1XjPhV78psjWRv/c= -----END CERTIFICATE-----Generated at Sun Sep 7 15:36:47 2025 by rpki-client