$ rpki-client -vvf repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.mft File: 7376922C93BF667FFBBDAF0735AE73D1451B08C2.mft (raw, json) Hash identifier: 8itOMAWzTVA8rpZwALjn+SrXwHzrbBgPI6QhNOSg8XA= Subject key identifier: 60:C2:25:F8:3B:E4:64:CE:27:AD:37:DA:91:A8:A6:C1:70:5F:93:1E Authority key identifier: 73:76:92:2C:93:BF:66:7F:FB:BD:AF:07:35:AE:73:D1:45:1B:08:C2 Certificate issuer: /CN=7376922C93BF667FFBBDAF0735AE73D1451B08C2 Certificate serial: 5E12E607620DFB8024EE3A5645228FC268C80885 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7376922C93BF667FFBBDAF0735AE73D1451B08C2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.mft Manifest number: 04F8 Signing time: Sat 06 Sep 2025 09:30:53 +0000 Manifest this update: Sat 06 Sep 2025 09:25:53 +0000 Manifest next update: Tue 09 Sep 2025 20:01:53 +0000 Files and hashes: 1: 3130332e38392e3135342e302f32342d3234203d3e20313333383030.roa (hash: 21L4D1hu21+7UR3Mn3cvc8Jhs/U+RaE8nhEhhkQ5YEA=) 2: 7376922C93BF667FFBBDAF0735AE73D1451B08C2.crl (hash: DDWIticsMv2i749/Qod7Hsf35YOcgX06stM6uE+ZNU0=) 3: 3130332e372e3137362e302f32342d3234203d3e20313336303830.roa (hash: pULFJZ+nbfV5jOVZtN4jB+N6TsIyKwD9xJ39aFL57ak=) 4: 3130332e38392e3136342e302f32342d3234203d3e20313333383030.roa (hash: +2SP7VdADvevew0k00TuxJ1WZ3WZFkGqu4JZIMGxgpw=) 5: 3130332e38392e3136352e302f32342d3234203d3e20313333383030.roa (hash: 0V79HEBuKR1jbK8PkSQwyA4BziEgKvO+/ItR4BkRmQg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.crl rsync://repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7376922C93BF667FFBBDAF0735AE73D1451B08C2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 20:01:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:12:e6:07:62:0d:fb:80:24:ee:3a:56:45:22:8f:c2:68:c8:08:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7376922C93BF667FFBBDAF0735AE73D1451B08C2 Validity Not Before: Sep 6 09:25:53 2025 GMT Not After : Sep 9 20:01:53 2025 GMT Subject: CN=60C225F83BE464CE27AD37DA91A8A6C1705F931E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:42:76:0f:32:21:18:27:fa:ee:41:1a:a2:bc: d2:fe:a8:49:be:13:f4:ee:c3:34:01:41:c8:a2:f8: 03:00:47:71:4f:ad:ed:d1:f1:98:e9:7e:b4:eb:5a: 39:8b:6d:32:32:e4:79:7c:d8:ff:db:5d:29:e9:19: 83:41:9b:c7:99:0e:49:df:11:be:41:6b:37:d4:23: dc:96:fc:ba:5d:13:2a:86:9a:e3:43:ac:08:05:09: 4b:b1:7c:29:7d:07:ca:23:b8:22:3e:0c:b8:be:90: a2:9f:ff:37:9d:7d:82:f6:94:0e:10:a7:ce:8b:dc: 8a:6b:ed:0e:a9:8e:80:2b:2b:b1:78:f4:92:24:28: 59:f1:c3:27:54:7c:0c:e3:53:d0:cd:81:d3:34:83: 5d:f1:95:c9:b7:ac:75:2b:ab:c9:8d:f0:f6:09:63: 38:43:d2:14:36:b3:93:27:ff:40:81:eb:fa:86:c5: 36:86:01:2e:21:be:1c:44:cd:99:e5:81:9c:61:59: 55:e0:74:21:c4:7c:5c:66:c5:64:93:68:0f:16:af: 44:76:36:15:f0:b4:c5:f3:74:c8:5b:86:ec:06:52: 07:32:5d:b0:91:02:e1:0a:ab:bc:80:de:bb:ad:4b: 66:49:a9:4d:74:e0:6f:94:1d:22:81:26:bf:b1:01: d1:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:C2:25:F8:3B:E4:64:CE:27:AD:37:DA:91:A8:A6:C1:70:5F:93:1E X509v3 Authority Key Identifier: keyid:73:76:92:2C:93:BF:66:7F:FB:BD:AF:07:35:AE:73:D1:45:1B:08:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7376922C93BF667FFBBDAF0735AE73D1451B08C2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:d8:a5:a1:8a:9a:6d:23:61:b3:ba:2f:3a:f5:58:2c:15:f5: f7:73:84:1a:1c:d7:bc:32:4d:53:cb:86:8b:f9:88:63:2e:7b: 6e:af:d4:64:01:02:58:8f:93:10:b5:91:17:1c:62:79:10:18: 8b:d1:0d:f4:6b:74:21:b8:4a:5e:79:2e:5a:70:38:94:47:0b: fc:68:1f:12:09:36:5b:35:e6:b8:5d:b5:39:65:8d:3b:78:48: 2d:27:d0:70:d3:ed:7d:3b:a9:b8:0d:06:1a:23:73:a0:52:45: c7:48:8a:a9:03:fc:18:6b:52:21:93:56:d0:eb:d3:f6:5b:2c: dc:35:2f:82:0e:30:52:81:fe:b3:45:07:56:8e:10:79:25:dc: ff:d2:39:11:fd:1a:da:87:06:de:2f:30:7c:63:85:59:86:3d: fa:91:e2:f1:42:6a:e6:5b:df:52:65:80:31:d5:23:13:64:e1: 33:77:3e:6b:6b:9e:e1:3e:04:68:13:bf:93:b8:ce:0a:8f:5f: 3b:e3:c0:cd:5c:61:a5:e3:f5:c5:d6:4e:3b:58:04:20:c8:3e: 5f:d9:6c:07:89:80:3f:a6:de:9a:33:48:2a:d7:1a:5d:5a:52: ee:c4:82:66:8f:c7:07:e6:7f:30:8c:06:8e:94:7a:17:18:8d: 7b:70:c9:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXhLmB2IN+4Ak7jpWRSKPwmjICIUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzM3NjkyMkM5M0JGNjY3RkZCQkRBRjA3MzVBRTczRDE0 NTFCMDhDMjAeFw0yNTA5MDYwOTI1NTNaFw0yNTA5MDkyMDAxNTNaMDMxMTAvBgNV BAMTKDYwQzIyNUY4M0JFNDY0Q0UyN0FEMzdEQTkxQThBNkMxNzA1RjkzMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHQnYPMiEYJ/ruQRqivNL+qEm+ E/TuwzQBQcii+AMAR3FPre3R8ZjpfrTrWjmLbTIy5Hl82P/bXSnpGYNBm8eZDknf Eb5BazfUI9yW/LpdEyqGmuNDrAgFCUuxfCl9B8ojuCI+DLi+kKKf/zedfYL2lA4Q p86L3Ipr7Q6pjoArK7F49JIkKFnxwydUfAzjU9DNgdM0g13xlcm3rHUrq8mN8PYJ YzhD0hQ2s5Mn/0CB6/qGxTaGAS4hvhxEzZnlgZxhWVXgdCHEfFxmxWSTaA8Wr0R2 NhXwtMXzdMhbhuwGUgcyXbCRAuEKq7yA3rutS2ZJqU104G+UHSKBJr+xAdE5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYMIl+DvkZM4nrTfakaimwXBfkx4wHwYDVR0j BBgwFoAUc3aSLJO/Zn/7va8HNa5z0UUbCMIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDE3NmRkZC1hOTgwLTQzZDYtOTRhNy05NWVlZGE1Mzk2NjUvMC83Mzc2OTIyQzkz QkY2NjdGRkJCREFGMDczNUFFNzNEMTQ1MUIwOEMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzM3NjkyMkM5M0JGNjY3RkZCQkRBRjA3MzVBRTczRDE0NTFC MDhDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQxNzZkZGQtYTk4MC00M2Q2LTk0 YTctOTVlZWRhNTM5NjY1LzAvNzM3NjkyMkM5M0JGNjY3RkZCQkRBRjA3MzVBRTcz RDE0NTFCMDhDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGPYpaGKmm0jYbO6Lzr1WCwV9fdzhBoc17wy TVPLhov5iGMue26v1GQBAliPkxC1kRccYnkQGIvRDfRrdCG4Sl55LlpwOJRHC/xo HxIJNls15rhdtTlljTt4SC0n0HDT7X07qbgNBhojc6BSRcdIiqkD/BhrUiGTVtDr 0/ZbLNw1L4IOMFKB/rNFB1aOEHkl3P/SORH9GtqHBt4vMHxjhVmGPfqR4vFCauZb 31JlgDHVIxNk4TN3PmtrnuE+BGgTv5O4zgqPXzvjwM1cYaXj9cXWTjtYBCDIPl/Z bAeJgD+m3pozSCrXGl1aUu7EgmaPxwfmfzCMBo6UehcYjXtwyWg= -----END CERTIFICATE-----Generated at Sun Sep 7 13:54:24 2025 by rpki-client