$ rpki-client -vvf repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft File: 7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft (raw, json) Hash identifier: ZUstGDcXpgfzHxY3qYwvSSux9lHH1UD2sw89e+6S7jo= Subject key identifier: 3E:B8:C3:4C:AB:93:9A:8B:48:BF:D1:C4:99:CB:BA:1B:46:A5:BA:03 Authority key identifier: 7C:4D:FD:78:91:4D:C1:F6:61:30:F2:56:AE:69:D9:FA:84:39:48:DC Certificate issuer: /CN=7C4DFD78914DC1F66130F256AE69D9FA843948DC Certificate serial: 1889641DB1930E3324FB63BF83BAE84A05B787B0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4DFD78914DC1F66130F256AE69D9FA843948DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft Manifest number: 78 Signing time: Sun 20 Jul 2025 23:01:09 +0000 Manifest this update: Sun 20 Jul 2025 22:56:09 +0000 Manifest next update: Thu 24 Jul 2025 01:19:09 +0000 Files and hashes: 1: 3136302e3138372e3133362e302f32342d3234203d3e20313533313233.roa (hash: HJdK4DRAmRrZWLjILXhoJkILfMyC0BwC4uGRxH8TEAM=) 2: 7C4DFD78914DC1F66130F256AE69D9FA843948DC.crl (hash: McgV9WX3whm+LqcoBKcNr00H3yRgThR/bogH/RXZgCI=) 3: 3136302e3138372e3133372e302f32342d3234203d3e20313533313233.roa (hash: lAtUfGS13GDkvr/Pm9PSGFkJR4Rstob6+L+fcyUN72Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.crl rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4DFD78914DC1F66130F256AE69D9FA843948DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 01:19:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:89:64:1d:b1:93:0e:33:24:fb:63:bf:83:ba:e8:4a:05:b7:87:b0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C4DFD78914DC1F66130F256AE69D9FA843948DC Validity Not Before: Jul 20 22:56:09 2025 GMT Not After : Jul 24 01:19:09 2025 GMT Subject: CN=3EB8C34CAB939A8B48BFD1C499CBBA1B46A5BA03 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:4b:49:1b:bb:fe:b0:3c:01:ed:eb:b3:16:70: 92:0c:d9:60:08:0d:d6:ad:9b:a9:88:fd:52:c5:94: d0:da:8a:46:4f:37:6e:ac:2d:e8:1c:e5:5e:50:78: 66:b8:9e:1e:da:f0:87:08:ce:5f:0f:a4:74:b2:e0: ca:4f:a5:4c:56:96:66:43:b4:43:bc:db:2b:37:2e: 08:f9:99:a4:14:cb:64:7f:d2:82:27:73:fa:53:3b: 11:58:ca:db:ed:69:6a:65:82:c9:ab:c8:1f:a2:1b: b3:c3:ed:05:ef:c0:e6:92:de:ff:3d:a1:eb:7b:aa: 4d:46:17:fe:d5:d0:2b:90:d6:e1:55:9f:f2:a4:df: 0b:67:67:b6:64:38:f6:9e:47:f3:c0:b6:f5:e2:72: 72:5c:6e:1e:8c:46:a3:09:1b:d7:41:30:31:8b:00: e5:af:7b:fe:b7:e7:c3:1f:bb:aa:97:85:37:38:a0: 63:09:55:66:df:f9:c8:30:e8:b3:4e:45:38:44:b0: 4c:27:37:ec:7f:a0:31:d2:b1:8a:90:fb:2a:5d:87: 95:ee:ce:f1:c3:a6:d5:47:b4:f1:77:74:d1:f5:f1: 26:ae:f0:13:e4:6a:68:b7:0e:72:78:09:5d:63:b8: 5b:82:fb:9e:8a:03:11:0a:3e:86:a9:d2:5d:7b:04: cf:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3E:B8:C3:4C:AB:93:9A:8B:48:BF:D1:C4:99:CB:BA:1B:46:A5:BA:03 X509v3 Authority Key Identifier: keyid:7C:4D:FD:78:91:4D:C1:F6:61:30:F2:56:AE:69:D9:FA:84:39:48:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4DFD78914DC1F66130F256AE69D9FA843948DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:5a:df:d0:87:78:68:f1:ab:7d:2f:8a:07:1c:98:37:ec:47: b0:db:92:0c:9f:1f:48:ba:92:25:12:29:ac:4a:33:20:7f:0a: 29:49:73:30:33:dc:1a:db:a6:d4:e7:25:9b:6b:cf:dd:55:27: c5:c6:4b:11:6d:16:42:2c:8e:cb:74:4d:45:68:20:a2:05:f9: 1e:1e:79:16:4f:62:55:1b:51:20:46:dd:ee:6b:5f:4e:c9:3f: ec:ae:4b:44:94:73:5d:da:2d:f7:9b:aa:a6:15:09:5f:e1:34: f2:6d:ca:e7:71:98:19:b2:75:ba:ac:89:70:d1:67:57:36:69: 57:5d:99:d2:9f:44:36:de:f1:4b:3b:bb:45:0c:a9:57:27:22: 1f:2f:69:86:f6:85:5a:66:50:1c:54:15:71:fa:7e:6b:e9:e7: 60:24:d7:df:dd:32:cc:c5:cc:22:2c:25:7b:69:3e:a1:f0:b0: f7:0e:49:05:24:58:57:28:c7:ee:23:5e:b2:05:14:80:60:57: d1:ba:d4:a6:16:ee:d9:ba:83:a6:ae:7e:a3:3c:06:83:31:54: 81:14:21:10:5b:39:2e:33:04:72:6a:d0:f7:7d:68:e9:39:c6: 5b:c1:08:03:0d:dc:8a:6c:3a:c1:25:34:01:cb:49:64:c6:5d: d8:f1:66:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGIlkHbGTDjMk+2O/g7roSgW3h7AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M0REZENzg5MTREQzFGNjYxMzBGMjU2QUU2OUQ5RkE4 NDM5NDhEQzAeFw0yNTA3MjAyMjU2MDlaFw0yNTA3MjQwMTE5MDlaMDMxMTAvBgNV BAMTKDNFQjhDMzRDQUI5MzlBOEI0OEJGRDFDNDk5Q0JCQTFCNDZBNUJBMDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlS0kbu/6wPAHt67MWcJIM2WAI Ddatm6mI/VLFlNDaikZPN26sLegc5V5QeGa4nh7a8IcIzl8PpHSy4MpPpUxWlmZD tEO82ys3Lgj5maQUy2R/0oInc/pTOxFYytvtaWplgsmryB+iG7PD7QXvwOaS3v89 oet7qk1GF/7V0CuQ1uFVn/Kk3wtnZ7ZkOPaeR/PAtvXicnJcbh6MRqMJG9dBMDGL AOWve/6358Mfu6qXhTc4oGMJVWbf+cgw6LNORThEsEwnN+x/oDHSsYqQ+ypdh5Xu zvHDptVHtPF3dNH18Sau8BPkami3DnJ4CV1juFuC+56KAxEKPoap0l17BM8/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPrjDTKuTmotIv9HEmcu6G0alugMwHwYDVR0j BBgwFoAUfE39eJFNwfZhMPJWrmnZ+oQ5SNwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTkyMzM5Ny04Y2Y4LTRjZWYtODg1Ni0wZDI2OGQ3M2VkYjEvMC83QzRERkQ3ODkx NERDMUY2NjEzMEYyNTZBRTY5RDlGQTg0Mzk0OERDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0M0REZENzg5MTREQzFGNjYxMzBGMjU2QUU2OUQ5RkE4NDM5 NDhEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2E5MjMzOTctOGNmOC00Y2VmLTg4 NTYtMGQyNjhkNzNlZGIxLzAvN0M0REZENzg5MTREQzFGNjYxMzBGMjU2QUU2OUQ5 RkE4NDM5NDhEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGRa39CHeGjxq30vigccmDfsR7DbkgyfH0i6 kiUSKaxKMyB/CilJczAz3BrbptTnJZtrz91VJ8XGSxFtFkIsjst0TUVoIKIF+R4e eRZPYlUbUSBG3e5rX07JP+yuS0SUc13aLfebqqYVCV/hNPJtyudxmBmydbqsiXDR Z1c2aVddmdKfRDbe8Us7u0UMqVcnIh8vaYb2hVpmUBxUFXH6fmvp52Ak19/dMszF zCIsJXtpPqHwsPcOSQUkWFcox+4jXrIFFIBgV9G61KYW7tm6g6aufqM8BoMxVIEU IRBbOS4zBHJq0Pd9aOk5xlvBCAMN3IpsOsElNAHLSWTGXdjxZuw= -----END CERTIFICATE-----Generated at Mon Jul 21 18:06:42 2025 by rpki-client