$ rpki-client -vvf repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft File: 7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft (raw, json) Hash identifier: n0P8Y3U7TvGpIl24h5Z3Ob2y7x4M/MxuOxOevjgudS8= Subject key identifier: D4:1F:A1:90:0D:F3:8E:5A:20:8B:44:AD:50:EA:A5:48:ED:4B:A9:EF Authority key identifier: 7C:D5:24:05:24:67:F2:2D:D8:E5:7E:02:A1:C9:9E:DE:5A:8C:F2:49 Certificate issuer: /CN=7CD524052467F22DD8E57E02A1C99EDE5A8CF249 Certificate serial: 3CFD13387BC172CF992BA2012DAF66582FF0A786 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.cer Subject info access: rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft Manifest number: 04F2 Signing time: Fri 05 Sep 2025 03:30:37 +0000 Manifest this update: Fri 05 Sep 2025 03:25:37 +0000 Manifest next update: Mon 08 Sep 2025 13:33:37 +0000 Files and hashes: 1: 7CD524052467F22DD8E57E02A1C99EDE5A8CF249.crl (hash: VxtnbBJpm7LnTnOE2BjQ/p+EeDvWiz7GIJLPL8bw+Gs=) 2: 3130332e3135302e34342e302f32332d3234203d3e20313430333838.roa (hash: 9wWnuvCPEe0C8U6UVGeFeb9Dd9afvhSHPrMKavtgge8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.crl rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 13:33:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:fd:13:38:7b:c1:72:cf:99:2b:a2:01:2d:af:66:58:2f:f0:a7:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CD524052467F22DD8E57E02A1C99EDE5A8CF249 Validity Not Before: Sep 5 03:25:37 2025 GMT Not After : Sep 8 13:33:37 2025 GMT Subject: CN=D41FA1900DF38E5A208B44AD50EAA548ED4BA9EF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:f1:4f:c8:be:53:5f:63:d2:8d:d9:a5:4f:66: 94:b5:20:d6:b3:cb:62:32:24:2e:65:e6:c7:42:06: 00:65:97:1b:64:a3:2a:a7:fc:5a:27:ae:1e:41:8a: 92:04:11:b1:95:b4:58:05:f9:54:f2:e4:15:cd:d0: 1b:6f:22:ad:36:ef:63:77:ef:8d:91:0c:74:39:06: 96:9e:5e:00:75:83:55:d0:fe:13:71:d6:6c:99:2d: dc:a4:e8:37:ae:9e:6c:77:f3:84:1d:f1:01:26:71: c2:ca:8b:9b:7b:ec:df:82:70:0d:0f:a9:56:8c:79: b8:6d:04:62:88:8a:6d:c6:cb:d3:65:0a:39:8f:78: e0:8a:5e:60:67:79:ff:df:62:29:ab:5b:77:9c:f6: b4:57:e7:46:29:9b:7c:ad:48:8c:d2:20:9a:e2:a4: 22:7e:ae:f2:e4:7e:63:b8:10:51:ff:68:0d:30:b0: e0:d1:a7:9e:62:22:f3:c9:b1:8e:09:73:3c:9a:a3: da:34:38:96:15:5a:7f:6a:db:69:7e:99:1f:d8:48: 2f:47:28:11:fd:52:4e:f8:23:1e:cf:f2:67:b4:b5: 87:9f:7c:70:73:5e:ba:5a:2a:1d:e5:b4:8e:71:e1: f2:84:ba:71:d7:98:dd:89:3e:0f:98:d8:eb:11:af: 58:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:1F:A1:90:0D:F3:8E:5A:20:8B:44:AD:50:EA:A5:48:ED:4B:A9:EF X509v3 Authority Key Identifier: keyid:7C:D5:24:05:24:67:F2:2D:D8:E5:7E:02:A1:C9:9E:DE:5A:8C:F2:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:ae:6f:38:eb:30:96:23:8a:b0:54:94:7a:5e:0e:e1:dc:72: 13:22:34:d0:2d:89:fd:d4:e6:34:08:56:c6:03:ac:0b:d6:33: 01:31:80:f8:32:11:43:da:71:5b:6b:3f:4d:1e:08:cd:11:2f: 42:64:83:3e:2b:6c:10:e6:9e:2e:39:82:59:37:0a:9f:ab:db: d7:44:23:ec:3e:4c:6f:14:a0:82:73:53:97:da:06:7c:ad:5c: 31:ad:e9:13:78:43:85:49:b0:a4:17:83:af:8a:4d:4e:82:64: f2:60:a4:42:c4:38:f3:07:cf:fa:98:d8:7a:08:ff:22:f8:51: 62:8a:97:df:52:34:cd:13:f4:3c:e1:26:99:c9:e1:d2:68:4a: 51:85:c1:2f:8f:6f:56:37:46:0a:ed:a9:36:89:75:85:c1:cc: 42:12:ab:e9:9b:89:c2:3c:91:31:1d:24:4f:c2:66:5c:5e:79: 02:2f:b5:69:7f:80:13:26:c7:1e:f7:98:68:d0:5d:ad:56:f8: ed:3f:f7:cd:b9:64:68:f3:67:8e:f3:52:11:c3:ce:27:17:69: 18:47:33:67:46:14:47:17:48:b3:53:3e:c7:49:38:fe:1e:82: b8:02:ef:ce:43:2c:08:44:fd:e1:40:a0:a6:5e:8e:ac:8c:25: ba:84:81:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPP0TOHvBcs+ZK6IBLa9mWC/wp4YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NENTI0MDUyNDY3RjIyREQ4RTU3RTAyQTFDOTlFREU1 QThDRjI0OTAeFw0yNTA5MDUwMzI1MzdaFw0yNTA5MDgxMzMzMzdaMDMxMTAvBgNV BAMTKEQ0MUZBMTkwMERGMzhFNUEyMDhCNDRBRDUwRUFBNTQ4RUQ0QkE5RUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL8U/IvlNfY9KN2aVPZpS1INaz y2IyJC5l5sdCBgBllxtkoyqn/Fonrh5BipIEEbGVtFgF+VTy5BXN0BtvIq0272N3 742RDHQ5BpaeXgB1g1XQ/hNx1myZLdyk6Deunmx384Qd8QEmccLKi5t77N+CcA0P qVaMebhtBGKIim3Gy9NlCjmPeOCKXmBnef/fYimrW3ec9rRX50Ypm3ytSIzSIJri pCJ+rvLkfmO4EFH/aA0wsODRp55iIvPJsY4Jczyao9o0OJYVWn9q22l+mR/YSC9H KBH9Uk74Ix7P8me0tYeffHBzXrpaKh3ltI5x4fKEunHXmN2JPg+Y2OsRr1gZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1B+hkA3zjlogi0StUOqlSO1Lqe8wHwYDVR0j BBgwFoAUfNUkBSRn8i3Y5X4Cocme3lqM8kkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NGViNmVkZC1mMTNiLTQ5ZjAtYWQ4Ny02YjhlZTYxNGRjOGYvMC83Q0Q1MjQwNTI0 NjdGMjJERDhFNTdFMDJBMUM5OUVERTVBOENGMjQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0NENTI0MDUyNDY3RjIyREQ4RTU3RTAyQTFDOTlFREU1QThD RjI0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDRlYjZlZGQtZjEzYi00OWYwLWFk ODctNmI4ZWU2MTRkYzhmLzAvN0NENTI0MDUyNDY3RjIyREQ4RTU3RTAyQTFDOTlF REU1QThDRjI0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAGubzjrMJYjirBUlHpeDuHcchMiNNAtif3U 5jQIVsYDrAvWMwExgPgyEUPacVtrP00eCM0RL0Jkgz4rbBDmni45glk3Cp+r29dE I+w+TG8UoIJzU5faBnytXDGt6RN4Q4VJsKQXg6+KTU6CZPJgpELEOPMHz/qY2HoI /yL4UWKKl99SNM0T9DzhJpnJ4dJoSlGFwS+Pb1Y3RgrtqTaJdYXBzEISq+mbicI8 kTEdJE/CZlxeeQIvtWl/gBMmxx73mGjQXa1W+O0/9825ZGjzZ47zUhHDzicXaRhH M2dGFEcXSLNTPsdJOP4egrgC785DLAhE/eFAoKZejqyMJbqEgUY= -----END CERTIFICATE-----Generated at Sun Sep 7 14:00:44 2025 by rpki-client