$ rpki-client -vvf repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft File: 7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft (raw, json) Hash identifier: NMePTe9qilvJUgotFEYrMSm4TFneUxdhHdUV7OJBdjA= Subject key identifier: 4B:18:CB:21:51:BF:12:EE:94:5A:82:D3:31:8B:A2:39:5D:00:3F:DF Authority key identifier: 7D:6E:DF:DB:21:B8:B7:E6:A7:5A:99:0A:7B:EC:AD:85:E8:BE:B9:53 Certificate issuer: /CN=7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953 Certificate serial: 181C535BBE7479756EAB046245EA64F9218195FB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft Manifest number: 01B0 Signing time: Sun 07 Sep 2025 09:40:05 +0000 Manifest this update: Sun 07 Sep 2025 09:35:05 +0000 Manifest next update: Wed 10 Sep 2025 10:32:05 +0000 Files and hashes: 1: 3130332e34362e342e302f32342d3234203d3e20313530343630.roa (hash: 70RFcRoz1w22nVDdjd8xwvOHx9oaAPRDsiAFJSjZRVk=) 2: 3130332e34362e342e302f32332d3233203d3e20313530343630.roa (hash: NXHMc5cBUZitTQZ4ST9s7lp3tsPIg2LlkZ5yYQ7KPUA=) 3: 3130332e34362e352e302f32342d3234203d3e20313530343630.roa (hash: OiXuaCFeHNTNKTkxwDwZ/IJjAlYs+aZs7qWhd3mySzg=) 4: 7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.crl (hash: bEKwzbhxZ7e7Gmx329xdu4k4J9UZPQvjuvevqXHCASY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.crl rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:1c:53:5b:be:74:79:75:6e:ab:04:62:45:ea:64:f9:21:81:95:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953 Validity Not Before: Sep 7 09:35:05 2025 GMT Not After : Sep 10 10:32:05 2025 GMT Subject: CN=4B18CB2151BF12EE945A82D3318BA2395D003FDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:98:c5:98:bf:8a:d3:f4:94:75:90:50:30:a8: d6:b0:0b:1c:c0:6d:68:cd:ad:38:5f:fa:49:46:21: 02:78:f0:c7:e1:e9:38:d3:16:2f:30:b8:4a:18:b7: a9:e8:64:e7:ad:f6:6d:60:a9:c8:b7:bb:c7:39:e1: 8f:65:d4:1f:ac:76:61:98:38:c3:a1:14:0c:6b:c9: b9:a6:0a:92:27:77:b5:ca:28:97:c1:ac:f6:47:7f: a0:31:34:84:33:c1:d1:1c:8f:c7:4f:f5:94:58:1c: 5d:58:f5:69:ab:34:9f:bb:69:99:38:35:ab:0f:e6: 53:fa:24:8c:23:79:41:c2:c2:97:8c:61:cd:6e:52: 7e:77:5e:0f:c4:d6:8b:3a:91:ed:c8:2a:e7:6a:d4: 8e:29:5a:db:4d:0f:9f:31:08:ef:51:f6:64:37:f8: 1b:01:22:ec:5b:35:08:d3:cb:4a:cf:31:ff:eb:e9: 5b:5c:48:5a:80:2c:06:25:86:bd:df:9c:20:98:6d: ae:36:03:18:b2:11:18:82:c9:38:37:dc:25:37:a2: 01:43:2d:49:18:05:5c:5f:6f:3e:d5:16:0b:61:69: 8c:c1:ae:de:26:58:d5:2a:d1:7f:be:6d:a0:61:35: b0:9e:18:ea:b6:c5:a9:49:be:52:70:7c:6c:7a:e2: a5:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:18:CB:21:51:BF:12:EE:94:5A:82:D3:31:8B:A2:39:5D:00:3F:DF X509v3 Authority Key Identifier: keyid:7D:6E:DF:DB:21:B8:B7:E6:A7:5A:99:0A:7B:EC:AD:85:E8:BE:B9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:1f:30:d6:e4:c0:c7:72:76:92:98:b6:3c:cf:cc:e6:32:31: bf:29:a1:f2:d1:03:9e:37:5a:31:cd:be:ab:9b:c1:b0:c5:96: 9d:63:ab:7a:85:35:2a:34:bb:0c:d9:38:1c:56:cb:ed:44:6d: 96:4d:61:5d:02:23:56:10:39:0c:42:46:91:37:14:30:c5:f9: 21:a4:eb:dd:16:f0:21:c0:e7:8e:91:53:a6:8f:fd:e6:e7:f5: 0f:c1:94:b4:5f:86:1b:7b:cd:ed:39:19:a8:0e:4c:5d:e5:7a: 61:53:c9:c0:c7:e6:d1:26:58:15:5a:23:4a:7b:c5:fd:db:fa: 96:0e:00:07:4f:4f:d1:2c:ad:ca:ea:bf:e6:c2:e5:c6:39:e1: 3c:be:e8:cd:d7:76:60:5d:d1:dd:29:13:c2:30:ba:ff:92:cb: b4:3c:b3:2d:9e:88:23:51:ed:1f:39:18:8c:82:bb:2d:61:1a: 2e:e4:23:ca:72:e2:6d:c8:98:36:27:ad:dc:d2:6d:33:88:f1: 58:9e:bf:6f:46:94:28:98:64:40:ff:3f:fb:f1:a5:75:a9:dd: 6d:d9:f0:5a:24:8b:86:fb:05:64:cd:2b:f5:22:4e:b9:96:6e: bb:a6:c8:ea:36:72:51:93:8c:b4:c0:f7:6a:5f:2b:ea:94:ed: d9:12:71:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGBxTW750eXVuqwRiRepk+SGBlfswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q2RURGREIyMUI4QjdFNkE3NUE5OTBBN0JFQ0FEODVF OEJFQjk1MzAeFw0yNTA5MDcwOTM1MDVaFw0yNTA5MTAxMDMyMDVaMDMxMTAvBgNV BAMTKDRCMThDQjIxNTFCRjEyRUU5NDVBODJEMzMxOEJBMjM5NUQwMDNGREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDimMWYv4rT9JR1kFAwqNawCxzA bWjNrThf+klGIQJ48Mfh6TjTFi8wuEoYt6noZOet9m1gqci3u8c54Y9l1B+sdmGY OMOhFAxrybmmCpInd7XKKJfBrPZHf6AxNIQzwdEcj8dP9ZRYHF1Y9WmrNJ+7aZk4 NasP5lP6JIwjeUHCwpeMYc1uUn53Xg/E1os6ke3IKudq1I4pWttND58xCO9R9mQ3 +BsBIuxbNQjTy0rPMf/r6VtcSFqALAYlhr3fnCCYba42AxiyERiCyTg33CU3ogFD LUkYBVxfbz7VFgthaYzBrt4mWNUq0X++baBhNbCeGOq2xalJvlJwfGx64qWNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSxjLIVG/Eu6UWoLTMYuiOV0AP98wHwYDVR0j BBgwFoAUfW7f2yG4t+anWpkKe+ythei+uVMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmM4Y2RhNS0zNDgzLTQyYjAtYjM4NS1mYzA3MDcxNmZiY2MvMC83RDZFREZEQjIx QjhCN0U2QTc1QTk5MEE3QkVDQUQ4NUU4QkVCOTUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q2RURGREIyMUI4QjdFNkE3NUE5OTBBN0JFQ0FEODVFOEJF Qjk1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJjOGNkYTUtMzQ4My00MmIwLWIz ODUtZmMwNzA3MTZmYmNjLzAvN0Q2RURGREIyMUI4QjdFNkE3NUE5OTBBN0JFQ0FE ODVFOEJFQjk1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIIfMNbkwMdydpKYtjzPzOYyMb8pofLRA543 WjHNvqubwbDFlp1jq3qFNSo0uwzZOBxWy+1EbZZNYV0CI1YQOQxCRpE3FDDF+SGk 690W8CHA546RU6aP/ebn9Q/BlLRfhht7ze05GagOTF3lemFTycDH5tEmWBVaI0p7 xf3b+pYOAAdPT9Esrcrqv+bC5cY54Ty+6M3XdmBd0d0pE8Iwuv+Sy7Q8sy2eiCNR 7R85GIyCuy1hGi7kI8py4m3ImDYnrdzSbTOI8Viev29GlCiYZED/P/vxpXWp3W3Z 8Foki4b7BWTNK/UiTrmWbrumyOo2clGTjLTA92pfK+qU7dkScY4= -----END CERTIFICATE-----Generated at Sun Sep 7 14:00:43 2025 by rpki-client