$ rpki-client -vvf repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft File: C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft (raw, json) Hash identifier: 1TN4d/eEoY4qNYnWbkneRU4EB+vCc0iPlM0DdLjPFt4= Subject key identifier: 4D:B8:28:EB:2F:11:F9:8F:1F:CD:74:EE:FB:F2:5D:DA:0B:E4:54:03 Authority key identifier: C7:F5:AA:72:DB:87:0E:16:1B:62:AC:A9:25:0A:D9:8A:A1:10:A0:14 Certificate issuer: /CN=C7F5AA72DB870E161B62ACA9250AD98AA110A014 Certificate serial: 2B72F43E40B04E2E02E6831168D73600A37ECCAD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F5AA72DB870E161B62ACA9250AD98AA110A014.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft Manifest number: 029F Signing time: Sun 07 Sep 2025 06:42:00 +0000 Manifest this update: Sun 07 Sep 2025 06:37:00 +0000 Manifest next update: Wed 10 Sep 2025 15:47:00 +0000 Files and hashes: 1: 3130332e3230372e3233382e302f32342d3234203d3e20313338303936.roa (hash: kqyShD8grMzsW8WAD+q93A9hYlzfgDARjSsqGTZiG54=) 2: 3130332e3230372e3233362e302f32332d3234203d3e20313334363434.roa (hash: FuTP+olekR94POOQRMWB2DM9MZrHgp1r/imUNhheQk0=) 3: 3130332e3230372e3233392e302f32342d3234203d3e20313338303936.roa (hash: bCN0BjFIkGXQoNiGlR2Rw4pyaw/6SRLkI5yDk6Jonrg=) 4: C7F5AA72DB870E161B62ACA9250AD98AA110A014.crl (hash: Ri4DExRqU0FwBHm6UWyp4yEzmNYLB04+S5nY5FTAxsY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.crl rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F5AA72DB870E161B62ACA9250AD98AA110A014.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:72:f4:3e:40:b0:4e:2e:02:e6:83:11:68:d7:36:00:a3:7e:cc:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7F5AA72DB870E161B62ACA9250AD98AA110A014 Validity Not Before: Sep 7 06:37:00 2025 GMT Not After : Sep 10 15:47:00 2025 GMT Subject: CN=4DB828EB2F11F98F1FCD74EEFBF25DDA0BE45403 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:f6:3f:dc:1f:33:3c:99:b7:90:b3:cf:eb:ac: 18:b6:aa:33:86:e3:fe:89:55:34:3d:ae:d0:e0:c0: 0d:77:b1:c9:af:2f:82:3d:08:11:33:0b:ba:52:35: 5c:dc:19:f1:e7:9a:2f:18:64:8b:0d:ad:ae:63:85: 23:08:fa:f0:48:b6:58:2a:4d:ed:a6:f1:1f:ba:97: e8:ce:e9:df:58:4b:73:fc:f7:a0:09:a0:df:3e:b3: 07:8b:93:14:78:95:f0:53:38:38:43:8d:27:34:73: 3d:9e:1e:8d:86:ba:0a:1b:60:5b:99:e1:86:fc:59: 3c:be:09:ad:1d:ae:4e:51:2a:55:67:5e:49:4f:27: 24:cd:61:f3:9f:27:03:73:84:c9:49:43:2e:30:46: 8b:d5:d5:3d:f2:eb:6f:77:5b:47:56:d2:ea:1d:9c: a9:73:36:4f:96:ff:8b:e2:c2:2d:3b:5d:4d:f1:12: 1a:8d:d2:0f:34:b9:33:49:09:21:ae:42:5b:73:1d: 8a:4b:74:f0:50:05:ed:54:d1:34:a4:4c:5f:94:29: 38:49:1b:aa:c7:bf:c0:40:e1:a0:90:d5:32:40:88: 74:61:33:2d:ec:af:a8:f1:9c:cd:e1:ba:69:1d:20: 58:ce:6a:f1:5d:7c:ad:23:b4:17:f5:cb:ee:b3:32: e8:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:B8:28:EB:2F:11:F9:8F:1F:CD:74:EE:FB:F2:5D:DA:0B:E4:54:03 X509v3 Authority Key Identifier: keyid:C7:F5:AA:72:DB:87:0E:16:1B:62:AC:A9:25:0A:D9:8A:A1:10:A0:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F5AA72DB870E161B62ACA9250AD98AA110A014.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:d2:1a:24:07:90:a9:60:38:88:48:9d:e6:4b:4f:7f:0e:1e: 20:aa:50:74:e9:2c:08:1b:b2:aa:4d:42:25:17:f4:8e:58:03: 2d:00:8d:3f:80:e7:79:35:04:ff:f5:7d:44:bd:e7:37:9e:fc: 09:c0:05:73:57:da:76:26:08:d9:8b:cd:62:c4:8d:8d:46:56: 5c:1a:c3:51:ff:14:b3:77:98:53:0f:b4:f4:29:3b:b8:c8:9b: 71:7e:c3:52:7e:f8:6a:38:36:99:e0:cb:5f:48:2b:dc:0e:df: 42:52:70:e1:e4:86:a5:f5:cc:2c:27:d5:ca:59:ec:d1:00:a5: 45:a8:74:e4:c1:e8:f8:01:ef:ac:68:51:cc:51:fd:46:7a:7e: f7:5f:30:0b:57:c0:4a:8d:ef:52:91:41:69:89:8c:43:ff:eb: 4c:63:8f:e1:24:f8:2c:39:e3:af:a5:b6:b0:21:a4:c4:f5:b7: 36:a5:00:e7:66:cc:cf:7e:47:c6:d4:5c:30:07:48:5c:b1:b8: 84:85:d8:2e:4c:31:07:7b:53:a5:b3:1b:46:da:46:3c:17:17: a2:b7:7f:f2:ec:97:59:19:b1:c0:93:ab:56:15:3b:e1:a9:65: 98:32:ec:74:8c:19:fc:ad:93:ac:45:41:52:b8:73:46:e0:ea: 07:f2:36:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK3L0PkCwTi4C5oMRaNc2AKN+zK0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdGNUFBNzJEQjg3MEUxNjFCNjJBQ0E5MjUwQUQ5OEFB MTEwQTAxNDAeFw0yNTA5MDcwNjM3MDBaFw0yNTA5MTAxNTQ3MDBaMDMxMTAvBgNV BAMTKDREQjgyOEVCMkYxMUY5OEYxRkNENzRFRUZCRjI1RERBMEJFNDU0MDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq9j/cHzM8mbeQs8/rrBi2qjOG 4/6JVTQ9rtDgwA13scmvL4I9CBEzC7pSNVzcGfHnmi8YZIsNra5jhSMI+vBItlgq Te2m8R+6l+jO6d9YS3P896AJoN8+sweLkxR4lfBTODhDjSc0cz2eHo2GugobYFuZ 4Yb8WTy+Ca0drk5RKlVnXklPJyTNYfOfJwNzhMlJQy4wRovV1T3y6293W0dW0uod nKlzNk+W/4viwi07XU3xEhqN0g80uTNJCSGuQltzHYpLdPBQBe1U0TSkTF+UKThJ G6rHv8BA4aCQ1TJAiHRhMy3sr6jxnM3humkdIFjOavFdfK0jtBf1y+6zMuh/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTbgo6y8R+Y8fzXTu+/Jd2gvkVAMwHwYDVR0j BBgwFoAUx/WqctuHDhYbYqypJQrZiqEQoBQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YjBlN2Y4ZS1jMjlmLTRlNmItYWQwYS05OTU3ZmJkNTY5NTMvMC9DN0Y1QUE3MkRC ODcwRTE2MUI2MkFDQTkyNTBBRDk4QUExMTBBMDE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzdGNUFBNzJEQjg3MEUxNjFCNjJBQ0E5MjUwQUQ5OEFBMTEw QTAxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGIwZTdmOGUtYzI5Zi00ZTZiLWFk MGEtOTk1N2ZiZDU2OTUzLzAvQzdGNUFBNzJEQjg3MEUxNjFCNjJBQ0E5MjUwQUQ5 OEFBMTEwQTAxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI7SGiQHkKlgOIhIneZLT38OHiCqUHTpLAgb sqpNQiUX9I5YAy0AjT+A53k1BP/1fUS95zee/AnABXNX2nYmCNmLzWLEjY1GVlwa w1H/FLN3mFMPtPQpO7jIm3F+w1J++Go4Npngy19IK9wO30JScOHkhqX1zCwn1cpZ 7NEApUWodOTB6PgB76xoUcxR/UZ6fvdfMAtXwEqN71KRQWmJjEP/60xjj+Ek+Cw5 46+ltrAhpMT1tzalAOdmzM9+R8bUXDAHSFyxuISF2C5MMQd7U6WzG0baRjwXF6K3 f/Lsl1kZscCTq1YVO+GpZZgy7HSMGfytk6xFQVK4c0bg6gfyNnA= -----END CERTIFICATE-----Generated at Sun Sep 7 13:56:39 2025 by rpki-client