$ rpki-client -vvf repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft File: 7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft (raw, json) Hash identifier: iUQFsJico6bBSeLM2eYbd75TzYl2TFOx43zadlyFOmU= Subject key identifier: 02:36:A3:25:A9:4E:88:96:59:38:3D:62:8D:05:05:2E:33:57:45:04 Authority key identifier: 7C:4D:FD:78:91:4D:C1:F6:61:30:F2:56:AE:69:D9:FA:84:39:48:DC Certificate issuer: /CN=7C4DFD78914DC1F66130F256AE69D9FA843948DC Certificate serial: 76F5B5CE390F60FC4575A1ED6E19E6BAEAE9E70C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4DFD78914DC1F66130F256AE69D9FA843948DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft Manifest number: 8D Signing time: Sat 06 Sep 2025 13:41:12 +0000 Manifest this update: Sat 06 Sep 2025 13:36:12 +0000 Manifest next update: Tue 09 Sep 2025 18:23:12 +0000 Files and hashes: 1: 7C4DFD78914DC1F66130F256AE69D9FA843948DC.crl (hash: 5sKCWLNiTn7+tTWOGErWeM449dqJeioBpsY2KYICTOk=) 2: 3136302e3138372e3133362e302f32342d3234203d3e20313533313233.roa (hash: HJdK4DRAmRrZWLjILXhoJkILfMyC0BwC4uGRxH8TEAM=) 3: 3136302e3138372e3133372e302f32342d3234203d3e20313533313233.roa (hash: lAtUfGS13GDkvr/Pm9PSGFkJR4Rstob6+L+fcyUN72Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.crl rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4DFD78914DC1F66130F256AE69D9FA843948DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 18:23:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:f5:b5:ce:39:0f:60:fc:45:75:a1:ed:6e:19:e6:ba:ea:e9:e7:0c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C4DFD78914DC1F66130F256AE69D9FA843948DC Validity Not Before: Sep 6 13:36:12 2025 GMT Not After : Sep 9 18:23:12 2025 GMT Subject: CN=0236A325A94E889659383D628D05052E33574504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:e1:8b:50:c0:3a:2d:93:67:74:3e:63:83:55: d1:56:0c:59:5f:9d:da:a1:9e:c7:7f:8d:e5:5d:8a: d3:33:e2:37:06:3f:12:a5:7a:37:dd:69:c0:82:6f: d3:4b:de:7d:a5:60:f8:7d:61:12:e7:a1:d4:2f:62: 2e:17:58:5d:6b:8f:1d:0e:bc:db:50:b5:4b:de:71: 07:c1:bb:b4:f0:6d:73:de:37:4f:22:2a:98:9f:7b: 1a:9b:fb:bb:4b:e9:8b:a5:83:7b:a3:7c:eb:c3:b3: ab:37:6d:d7:32:92:4a:2e:38:3b:11:e2:4a:52:9b: f4:59:91:4d:22:8c:c0:cf:af:56:a0:1d:0d:9a:8a: 50:62:92:ac:1d:ec:1b:18:a3:16:07:c7:9d:6d:c1: d5:c6:8b:1a:7b:b1:97:ef:40:ee:be:cf:1f:30:2a: b0:f5:41:ba:33:02:6c:95:67:3c:e1:67:69:57:1f: b1:4a:fd:93:42:ef:6c:d2:ee:17:fa:b8:b7:85:a8: ab:db:3b:b4:cb:f3:dc:c9:68:fc:f3:c4:65:f7:88: 42:d6:1a:9e:20:ae:91:23:61:3e:6f:2e:0f:3e:6f: e2:9c:29:fd:e6:fd:f6:e4:1e:26:0b:1d:70:83:22: 28:8f:ee:4b:9c:58:dc:76:8d:24:54:10:17:bd:dd: e8:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:36:A3:25:A9:4E:88:96:59:38:3D:62:8D:05:05:2E:33:57:45:04 X509v3 Authority Key Identifier: keyid:7C:4D:FD:78:91:4D:C1:F6:61:30:F2:56:AE:69:D9:FA:84:39:48:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4DFD78914DC1F66130F256AE69D9FA843948DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:c2:f6:ba:69:70:ab:0a:31:e2:71:0f:95:ed:9f:97:2a:c6: a7:29:1a:e3:4d:1d:36:9b:3d:95:27:a8:71:e1:77:5c:6e:f6: 25:d6:59:59:62:1e:27:30:7c:0e:84:61:dd:f6:e8:af:c8:04: 75:d5:a5:a4:27:09:c9:f9:9e:2e:dd:b7:43:7b:34:90:85:36: 62:72:a6:e1:3e:dc:80:b3:6f:04:ee:95:75:ba:94:ce:0f:4b: 7c:94:fa:59:be:a0:bb:c8:ec:41:eb:15:cc:d5:35:5d:06:65: e1:98:5f:e2:dd:88:c5:a0:20:78:d7:4a:d5:d7:e8:07:7b:fb: e5:35:e1:74:45:6f:4d:eb:dc:0a:6f:99:53:bf:b4:9e:ce:62: aa:98:a1:d9:30:11:33:6d:14:b3:e6:eb:04:ea:88:90:61:f3: fe:69:04:0a:16:6f:65:3f:49:29:07:f8:aa:19:d1:6d:50:f0: cf:41:7d:3a:53:8c:15:78:85:84:d8:fc:0d:d7:98:cb:10:47: 87:d3:f1:2c:83:15:43:c9:db:81:68:b0:4e:81:0f:91:c8:76: 17:b4:c7:ba:d5:b4:d2:58:d0:36:e5:9e:35:b2:18:8e:07:a5: 56:91:18:b8:50:83:ee:4d:26:c5:ff:11:1e:0c:63:98:3b:fc: c8:9d:d1:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdvW1zjkPYPxFdaHtbhnmuurp5wwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M0REZENzg5MTREQzFGNjYxMzBGMjU2QUU2OUQ5RkE4 NDM5NDhEQzAeFw0yNTA5MDYxMzM2MTJaFw0yNTA5MDkxODIzMTJaMDMxMTAvBgNV BAMTKDAyMzZBMzI1QTk0RTg4OTY1OTM4M0Q2MjhEMDUwNTJFMzM1NzQ1MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM4YtQwDotk2d0PmODVdFWDFlf ndqhnsd/jeVditMz4jcGPxKlejfdacCCb9NL3n2lYPh9YRLnodQvYi4XWF1rjx0O vNtQtUvecQfBu7TwbXPeN08iKpifexqb+7tL6Yulg3ujfOvDs6s3bdcykkouODsR 4kpSm/RZkU0ijMDPr1agHQ2ailBikqwd7BsYoxYHx51twdXGixp7sZfvQO6+zx8w KrD1QbozAmyVZzzhZ2lXH7FK/ZNC72zS7hf6uLeFqKvbO7TL89zJaPzzxGX3iELW Gp4grpEjYT5vLg8+b+KcKf3m/fbkHiYLHXCDIiiP7kucWNx2jSRUEBe93ejpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAjajJalOiJZZOD1ijQUFLjNXRQQwHwYDVR0j BBgwFoAUfE39eJFNwfZhMPJWrmnZ+oQ5SNwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTkyMzM5Ny04Y2Y4LTRjZWYtODg1Ni0wZDI2OGQ3M2VkYjEvMC83QzRERkQ3ODkx NERDMUY2NjEzMEYyNTZBRTY5RDlGQTg0Mzk0OERDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0M0REZENzg5MTREQzFGNjYxMzBGMjU2QUU2OUQ5RkE4NDM5 NDhEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2E5MjMzOTctOGNmOC00Y2VmLTg4 NTYtMGQyNjhkNzNlZGIxLzAvN0M0REZENzg5MTREQzFGNjYxMzBGMjU2QUU2OUQ5 RkE4NDM5NDhEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKHC9rppcKsKMeJxD5Xtn5cqxqcpGuNNHTab PZUnqHHhd1xu9iXWWVliHicwfA6EYd326K/IBHXVpaQnCcn5ni7dt0N7NJCFNmJy puE+3ICzbwTulXW6lM4PS3yU+lm+oLvI7EHrFczVNV0GZeGYX+LdiMWgIHjXStXX 6Ad7++U14XRFb03r3ApvmVO/tJ7OYqqYodkwETNtFLPm6wTqiJBh8/5pBAoWb2U/ SSkH+KoZ0W1Q8M9BfTpTjBV4hYTY/A3XmMsQR4fT8SyDFUPJ24FosE6BD5HIdhe0 x7rVtNJY0DblnjWyGI4HpVaRGLhQg+5NJsX/ER4MY5g7/Mid0Xo= -----END CERTIFICATE-----Generated at Mon Sep 8 05:11:15 2025 by rpki-client