$ rpki-client -vvf repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.mft File: 7DA5F7B42931EE3A414B9A5B7996703DF70BD897.mft (raw, json) Hash identifier: itAzjwZL5xzASBjvE1SNWRDrA1bM5SrYnehCOa0OgJg= Subject key identifier: 3B:F0:10:75:2B:4D:14:A1:47:32:0E:2B:FE:C8:A5:CB:D0:2B:5E:4A Authority key identifier: 7D:A5:F7:B4:29:31:EE:3A:41:4B:9A:5B:79:96:70:3D:F7:0B:D8:97 Certificate issuer: /CN=7DA5F7B42931EE3A414B9A5B7996703DF70BD897 Certificate serial: 0E3D5BE4467C67F5FB9D2976FB356266296EAFBD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.mft Manifest number: 01CA Signing time: Fri 05 Sep 2025 17:10:49 +0000 Manifest this update: Fri 05 Sep 2025 17:05:49 +0000 Manifest next update: Mon 08 Sep 2025 17:27:49 +0000 Files and hashes: 1: 3130332e32372e3139322e302f32342d3234203d3e20313530323632.roa (hash: +MyXIra1tEzUh3Bqp100pCTB+NpiC7GT2NfbRpY5B8s=) 2: 3130332e32372e3139322e302f32332d3233203d3e20313530323632.roa (hash: BnJZN8kM3S7TwdBig6pEraKaEILe1NjioWa2vU9OOYk=) 3: 7DA5F7B42931EE3A414B9A5B7996703DF70BD897.crl (hash: za4OuIfmUQaA/mdcgSiooL0BsSV07F703rsEookafF4=) 4: 3130332e32372e3139332e302f32342d3234203d3e20313530323632.roa (hash: DIKWNEryKaLoYGYF33QjHgw88mY9IHI7dTm6jY/RF2g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.crl rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 17:27:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:3d:5b:e4:46:7c:67:f5:fb:9d:29:76:fb:35:62:66:29:6e:af:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7DA5F7B42931EE3A414B9A5B7996703DF70BD897 Validity Not Before: Sep 5 17:05:49 2025 GMT Not After : Sep 8 17:27:49 2025 GMT Subject: CN=3BF010752B4D14A147320E2BFEC8A5CBD02B5E4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:f2:a3:93:56:8d:f8:a5:5e:f3:97:88:bb:17: 6d:a1:5d:fc:0f:ca:6d:b8:f3:d1:6d:16:1b:6a:ed: 54:58:9c:1b:d8:a4:1a:82:bd:55:40:6b:38:78:44: e4:56:13:1a:14:46:7e:7f:ce:e3:93:e1:3e:c1:12: b5:1d:15:4e:31:f1:78:73:9f:b6:3f:21:c0:89:d5: aa:90:c8:e5:7b:af:38:59:6e:1e:6f:c6:ad:e5:1d: 22:05:e8:04:0a:7a:21:ba:52:48:b9:cf:6c:f8:61: af:7d:55:5e:55:68:ed:f5:10:2d:81:2f:a7:c9:ce: 0a:a7:d3:d7:3c:43:37:39:a0:58:8d:9d:7f:9f:50: 08:00:01:29:da:97:3c:97:cb:65:1a:1e:d5:46:ab: d4:9b:6d:1a:8b:20:67:f8:62:42:b1:b4:94:82:ee: 1d:7a:04:6b:8f:e0:bf:31:30:26:52:cc:77:33:e1: b5:ac:02:31:ec:99:c6:9b:d8:65:1d:bc:a8:9d:c2: ef:17:fa:17:03:5f:6f:fd:8d:14:ba:bc:4c:fd:f7: 9a:d0:dc:45:2c:6b:f3:33:0f:d9:3a:f6:c0:56:51: e2:44:55:90:cc:a3:0f:dc:e0:0a:69:0a:e3:ef:3b: 45:83:fc:8a:24:03:8f:89:a0:99:f3:f8:8e:cf:0c: 34:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:F0:10:75:2B:4D:14:A1:47:32:0E:2B:FE:C8:A5:CB:D0:2B:5E:4A X509v3 Authority Key Identifier: keyid:7D:A5:F7:B4:29:31:EE:3A:41:4B:9A:5B:79:96:70:3D:F7:0B:D8:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 54:47:e2:07:f0:a6:d5:c6:24:46:5c:6c:f6:17:9a:71:8d:1f: 13:55:97:e9:0d:c0:64:a5:14:f0:2c:99:7e:63:a9:47:54:d4: ae:9d:e3:67:79:05:39:83:bd:89:8d:f2:60:63:a9:e9:b8:25: f5:6e:bd:be:ad:91:a1:df:a0:a0:62:b0:89:ef:18:76:49:59: 8b:55:4d:4b:df:ae:e3:02:6d:fd:46:3b:4d:24:a5:98:99:78: ba:ef:e7:e9:2f:0c:cd:c3:99:a7:82:57:9f:4b:a8:04:57:2c: db:33:60:f0:1c:4b:74:4c:fa:92:47:20:02:f6:98:a0:73:96: 3b:5f:81:d5:74:c7:4a:c3:bd:77:11:42:7b:3f:cb:05:e4:9f: 19:e6:92:5c:88:13:ae:38:9b:13:44:19:af:6a:7c:6a:77:76: 23:09:4c:33:c9:da:3e:62:09:5a:fa:d5:80:8c:54:c9:34:12: 49:d2:a4:2f:56:07:31:bb:12:63:8b:96:40:d8:d5:ad:2c:3d: b8:7c:6a:8c:28:43:fe:07:6b:64:49:ad:38:27:2c:ae:cb:94: f9:31:af:62:fd:5a:fb:fc:5b:da:06:45:b7:29:32:25:e9:c6: 8b:a5:5d:1b:8d:c0:82:c6:2a:f5:9e:7a:17:05:e5:da:dc:b0: e8:3f:b5:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDj1b5EZ8Z/X7nSl2+zViZilur70wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0RBNUY3QjQyOTMxRUUzQTQxNEI5QTVCNzk5NjcwM0RG NzBCRDg5NzAeFw0yNTA5MDUxNzA1NDlaFw0yNTA5MDgxNzI3NDlaMDMxMTAvBgNV BAMTKDNCRjAxMDc1MkI0RDE0QTE0NzMyMEUyQkZFQzhBNUNCRDAyQjVFNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs8qOTVo34pV7zl4i7F22hXfwP ym2489FtFhtq7VRYnBvYpBqCvVVAazh4RORWExoURn5/zuOT4T7BErUdFU4x8Xhz n7Y/IcCJ1aqQyOV7rzhZbh5vxq3lHSIF6AQKeiG6Uki5z2z4Ya99VV5VaO31EC2B L6fJzgqn09c8Qzc5oFiNnX+fUAgAASnalzyXy2UaHtVGq9SbbRqLIGf4YkKxtJSC 7h16BGuP4L8xMCZSzHcz4bWsAjHsmcab2GUdvKidwu8X+hcDX2/9jRS6vEz995rQ 3EUsa/MzD9k69sBWUeJEVZDMow/c4AppCuPvO0WD/IokA4+JoJnz+I7PDDQ5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO/AQdStNFKFHMg4r/sily9ArXkowHwYDVR0j BBgwFoAUfaX3tCkx7jpBS5pbeZZwPfcL2JcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjI3YjE3Ni00YzE3LTQyNDQtYmFkZi1mNDk2YmNiMTVlMjAvMC83REE1RjdCNDI5 MzFFRTNBNDE0QjlBNUI3OTk2NzAzREY3MEJEODk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0RBNUY3QjQyOTMxRUUzQTQxNEI5QTVCNzk5NjcwM0RGNzBC RDg5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDIyN2IxNzYtNGMxNy00MjQ0LWJh ZGYtZjQ5NmJjYjE1ZTIwLzAvN0RBNUY3QjQyOTMxRUUzQTQxNEI5QTVCNzk5Njcw M0RGNzBCRDg5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFRH4gfwptXGJEZcbPYXmnGNHxNVl+kNwGSl FPAsmX5jqUdU1K6d42d5BTmDvYmN8mBjqem4JfVuvb6tkaHfoKBisInvGHZJWYtV TUvfruMCbf1GO00kpZiZeLrv5+kvDM3DmaeCV59LqARXLNszYPAcS3RM+pJHIAL2 mKBzljtfgdV0x0rDvXcRQns/ywXknxnmklyIE644mxNEGa9qfGp3diMJTDPJ2j5i CVr61YCMVMk0EknSpC9WBzG7EmOLlkDY1a0sPbh8aowoQ/4Ha2RJrTgnLK7LlPkx r2L9Wvv8W9oGRbcpMiXpxoulXRuNwILGKvWeehcF5drcsOg/tU0= -----END CERTIFICATE-----Generated at Sun Sep 7 15:36:47 2025 by rpki-client