$ rpki-client -vvf repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft File: 7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft (raw, json) Hash identifier: f50DkUkuB92ZFiWNBXvNNKnWLUIHQymvP6lXrJC6NAI= Subject key identifier: D1:9A:07:82:CF:82:F2:E3:43:C4:A3:9E:7D:B6:D2:93:6C:4A:CF:7C Authority key identifier: 7E:8D:E1:54:9E:89:D4:B4:80:B5:56:69:5C:AB:E9:CE:7F:DF:5F:24 Certificate issuer: /CN=7E8DE1549E89D4B480B556695CABE9CE7FDF5F24 Certificate serial: 10F8421773C13FF2308120E8CCDC3F2DB009E85D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft Manifest number: 7C Signing time: Sun 07 Sep 2025 02:01:00 +0000 Manifest this update: Sun 07 Sep 2025 01:56:00 +0000 Manifest next update: Wed 10 Sep 2025 13:11:00 +0000 Files and hashes: 1: 7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.crl (hash: a9skkSEpIN0PtyRnjGP7ojKoVzWonGYLVjQmkEHuAic=) 2: 323030313a6466343a396134303a3a2f34382d3438203d3e20313533313439.roa (hash: TtLF2mCHfSEfxKosRTbgY2pYRo+Ox0NN2gzHDI6VY/0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.crl rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:f8:42:17:73:c1:3f:f2:30:81:20:e8:cc:dc:3f:2d:b0:09:e8:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E8DE1549E89D4B480B556695CABE9CE7FDF5F24 Validity Not Before: Sep 7 01:56:00 2025 GMT Not After : Sep 10 13:11:00 2025 GMT Subject: CN=D19A0782CF82F2E343C4A39E7DB6D2936C4ACF7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:ab:bb:e4:a9:c7:a5:9a:d6:74:bd:99:a7:b8: a9:70:5e:b0:c4:0f:ef:7b:1f:10:ac:38:f3:db:a2: 26:15:51:3a:69:a7:b6:c6:94:96:5e:f4:a0:1a:53: 86:d2:01:18:b5:cd:7c:36:28:2f:f7:c7:75:90:76: c1:fb:69:a2:a7:aa:e3:23:4d:43:76:df:17:34:fc: 97:8b:d4:cf:f9:24:5d:08:a7:76:49:c2:d5:31:01: ce:fb:fd:5f:ca:e3:c5:72:47:6e:42:c7:f2:fe:7c: 12:d3:0f:bf:44:f8:fd:0f:3e:94:7d:6b:5b:69:bc: 94:de:50:4f:f1:f5:8d:2b:1e:4f:b6:30:d9:a8:7d: b4:a8:10:6b:23:d5:13:17:b8:d1:10:14:7a:fd:fb: ac:8a:a9:f2:da:7c:9d:66:e4:60:e8:f0:cf:fb:38: 3b:20:d0:89:55:5e:56:e3:df:48:cf:c5:b7:0f:60: 1a:49:e2:86:b8:dd:16:9c:dd:ea:ef:41:45:b5:d9: 26:a6:f1:92:e9:2e:21:57:e2:20:2f:2e:0f:69:74: 7a:dd:e6:2f:5c:85:e4:ae:2d:43:18:c4:1e:29:b1: 0b:c4:3b:e1:69:f6:04:29:5b:95:20:6c:21:35:5c: f4:87:ef:7a:29:17:1e:e6:1c:33:92:55:cf:d3:83: 31:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:9A:07:82:CF:82:F2:E3:43:C4:A3:9E:7D:B6:D2:93:6C:4A:CF:7C X509v3 Authority Key Identifier: keyid:7E:8D:E1:54:9E:89:D4:B4:80:B5:56:69:5C:AB:E9:CE:7F:DF:5F:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:ed:31:26:b5:06:d3:3b:ca:d8:67:e4:b6:ac:2a:2f:51:c4: 52:77:01:73:83:e6:75:65:1f:94:e2:d8:be:b6:fa:25:ca:a2: fa:6d:19:da:18:f2:5f:04:5a:98:83:c2:1b:c9:2e:8c:c0:65: cd:c3:55:23:b5:2a:8d:e4:7b:b7:c6:78:28:da:39:08:44:59: d7:0a:3a:2f:56:d1:e0:a3:d6:98:f5:f4:4a:71:b6:42:85:17: 5b:85:74:60:1f:a6:38:17:7f:23:3c:40:c7:1f:19:9b:45:b7: 7a:95:b3:30:ac:c2:16:11:05:ed:0f:c0:8b:ee:f3:cb:c3:21: 3d:76:48:cf:18:78:5a:d6:a2:47:00:1a:8d:af:e4:a2:23:0c: f1:78:44:d7:2a:0e:6b:a8:da:dd:2c:78:99:55:cf:c4:17:cd: 59:fa:da:4c:0f:4b:eb:cb:02:73:55:14:08:db:31:3d:25:8b: 3e:48:c1:77:27:a2:2a:3f:d2:fa:54:0e:0c:18:cd:75:dc:c5: 1f:05:f4:33:d3:39:12:91:d2:24:02:ff:7a:d6:ae:2c:7a:c9: f7:fb:ef:c6:2e:07:59:17:3f:47:75:b0:32:a6:55:20:51:21: 44:ae:7c:b8:06:1f:c0:d1:82:d5:6a:22:71:92:b8:3b:5a:0f: e0:29:2e:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEPhCF3PBP/IwgSDozNw/LbAJ6F0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U4REUxNTQ5RTg5RDRCNDgwQjU1NjY5NUNBQkU5Q0U3 RkRGNUYyNDAeFw0yNTA5MDcwMTU2MDBaFw0yNTA5MTAxMzExMDBaMDMxMTAvBgNV BAMTKEQxOUEwNzgyQ0Y4MkYyRTM0M0M0QTM5RTdEQjZEMjkzNkM0QUNGN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyq7vkqcelmtZ0vZmnuKlwXrDE D+97HxCsOPPboiYVUTppp7bGlJZe9KAaU4bSARi1zXw2KC/3x3WQdsH7aaKnquMj TUN23xc0/JeL1M/5JF0Ip3ZJwtUxAc77/V/K48VyR25Cx/L+fBLTD79E+P0PPpR9 a1tpvJTeUE/x9Y0rHk+2MNmofbSoEGsj1RMXuNEQFHr9+6yKqfLafJ1m5GDo8M/7 ODsg0IlVXlbj30jPxbcPYBpJ4oa43Rac3ervQUW12Sam8ZLpLiFX4iAvLg9pdHrd 5i9cheSuLUMYxB4psQvEO+Fp9gQpW5UgbCE1XPSH73opFx7mHDOSVc/TgzGLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0ZoHgs+C8uNDxKOefbbSk2xKz3wwHwYDVR0j BBgwFoAUfo3hVJ6J1LSAtVZpXKvpzn/fXyQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2RjMDM0Zi0zODIzLTQ4YWYtOTUzZC1hYWE4NzNiMGZiNmEvMS83RThERTE1NDlF ODlENEI0ODBCNTU2Njk1Q0FCRTlDRTdGREY1RjI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0U4REUxNTQ5RTg5RDRCNDgwQjU1NjY5NUNBQkU5Q0U3RkRG NUYyNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNkYzAzNGYtMzgyMy00OGFmLTk1 M2QtYWFhODczYjBmYjZhLzEvN0U4REUxNTQ5RTg5RDRCNDgwQjU1NjY5NUNBQkU5 Q0U3RkRGNUYyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMbtMSa1BtM7ythn5LasKi9RxFJ3AXOD5nVl H5Ti2L62+iXKovptGdoY8l8EWpiDwhvJLozAZc3DVSO1Ko3ke7fGeCjaOQhEWdcK Oi9W0eCj1pj19EpxtkKFF1uFdGAfpjgXfyM8QMcfGZtFt3qVszCswhYRBe0PwIvu 88vDIT12SM8YeFrWokcAGo2v5KIjDPF4RNcqDmuo2t0seJlVz8QXzVn62kwPS+vL AnNVFAjbMT0liz5IwXcnoio/0vpUDgwYzXXcxR8F9DPTORKR0iQC/3rWrix6yff7 78YuB1kXP0d1sDKmVSBRIUSufLgGH8DRgtVqInGSuDtaD+ApLik= -----END CERTIFICATE-----Generated at Sun Sep 7 14:00:42 2025 by rpki-client