$ rpki-client -vvf repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.mft File: 7E6A786ACEF684F37758FC4A6D8517CAD165FA77.mft (raw, json) Hash identifier: mXLXDVtJN0l0Ztz3t8S1+ub4cQmdXpfgaN/5dWlO750= Subject key identifier: 76:0E:48:96:F8:8A:2A:57:99:53:24:EE:CA:87:F8:CD:09:25:CF:D7 Authority key identifier: 7E:6A:78:6A:CE:F6:84:F3:77:58:FC:4A:6D:85:17:CA:D1:65:FA:77 Certificate issuer: /CN=7E6A786ACEF684F37758FC4A6D8517CAD165FA77 Certificate serial: 01A21A413B9740205B83069EB71CFF9B3B44CBC5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.cer Subject info access: rsync://repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.mft Manifest number: 01B9 Signing time: Fri 05 Sep 2025 21:31:58 +0000 Manifest this update: Fri 05 Sep 2025 21:26:58 +0000 Manifest next update: Tue 09 Sep 2025 03:23:58 +0000 Files and hashes: 1: 3130332e3231332e3233312e302f32342d3234203d3e20313431313236.roa (hash: P26CLYaAiMviaHDVXlCPRfno/SeqGYyHaQquQlltu00=) 2: 7E6A786ACEF684F37758FC4A6D8517CAD165FA77.crl (hash: ACgQ1r5F4R0P7ouvzu1Uw6DpZKBX8wWNkFnMU6lagWE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.crl rsync://repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 03:23:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:a2:1a:41:3b:97:40:20:5b:83:06:9e:b7:1c:ff:9b:3b:44:cb:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E6A786ACEF684F37758FC4A6D8517CAD165FA77 Validity Not Before: Sep 5 21:26:58 2025 GMT Not After : Sep 9 03:23:58 2025 GMT Subject: CN=760E4896F88A2A57995324EECA87F8CD0925CFD7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:94:c8:61:d7:cc:fc:25:2e:db:ca:59:0a:25: e3:ce:96:ee:77:bc:7c:00:e8:40:48:8b:60:c5:67: 2e:7c:b9:ab:e4:51:a8:58:d8:38:12:ab:3b:67:46: ac:06:93:0e:20:87:ba:66:9b:07:f5:e7:da:cd:33: 53:db:be:42:05:80:49:12:88:28:d0:db:74:3e:20: 1b:d8:79:8c:a7:27:5a:c3:06:56:94:73:9f:3b:5a: f6:70:71:36:f8:eb:3c:d5:5c:33:19:a0:27:0a:c3: 29:82:a9:b5:f7:fe:8e:ed:4a:3b:3a:e6:3a:26:6a: 48:12:0e:e7:dc:f7:c4:e3:4e:85:f2:32:6c:7d:f0: 26:20:f8:b2:da:d3:8f:6f:55:e3:f7:b4:18:56:75: e9:08:9c:5d:bd:27:d8:8f:cd:de:f6:a6:ec:55:a5: 17:b6:6f:ec:cc:bf:c0:42:77:a6:c1:7d:60:f7:b9: 88:5f:ee:dd:93:16:b0:d3:35:d0:6f:98:5d:c1:01: 7a:81:e2:41:9c:3c:b9:90:ab:52:4d:a6:e5:ec:a0: b7:c6:c3:cb:ba:51:a5:58:b5:9f:91:65:fb:db:7f: 91:3d:11:85:3a:9b:ec:16:16:6d:6d:f3:80:3f:24: c1:21:59:16:77:e4:37:f4:4f:ca:c1:7b:50:2f:6c: 98:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:0E:48:96:F8:8A:2A:57:99:53:24:EE:CA:87:F8:CD:09:25:CF:D7 X509v3 Authority Key Identifier: keyid:7E:6A:78:6A:CE:F6:84:F3:77:58:FC:4A:6D:85:17:CA:D1:65:FA:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/52292ba8-ad1a-4139-8c20-5b526da970bd/0/7E6A786ACEF684F37758FC4A6D8517CAD165FA77.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:f8:fa:6d:a2:83:83:8b:89:41:33:05:a0:29:cf:ea:d6:9d: 24:e2:0c:c1:a1:f4:53:d8:58:d0:ba:20:c2:8d:db:17:e0:17: d2:c8:0d:33:c9:10:53:e3:7a:f4:c2:b1:e2:26:e5:16:0c:3b: 90:73:73:bb:46:6b:51:bc:32:31:db:af:49:34:8b:e3:7f:9d: 86:6f:83:83:a6:3e:ee:f9:0a:ea:bd:77:07:e3:e7:94:63:6f: 13:a9:b1:ce:a2:15:32:0d:38:5a:5b:2a:a8:d0:4e:a5:3d:29: 14:bd:94:db:f8:f5:7c:a9:c4:6e:dc:77:7e:71:74:85:33:d1: d7:a4:cd:fe:3e:39:00:42:7e:98:60:50:c1:8b:f2:d5:0e:a2: 94:30:ee:a5:07:e8:78:a8:00:09:44:31:60:d6:2a:2e:ce:36: 77:64:2a:22:3f:fa:3a:6a:25:a7:be:0c:dd:f6:2a:ea:77:57: 65:ed:d0:05:72:7e:fc:8c:9d:e3:aa:64:df:7e:c2:a7:33:43: 0b:d6:89:e3:fd:70:2f:e7:9f:d0:d1:1c:20:a7:34:c3:bc:c3: 3b:dd:33:d8:11:c5:56:0c:c1:ec:e7:07:1e:08:3f:95:18:74: 55:07:44:2f:4f:ab:ab:7d:da:00:dd:7b:6f:bf:e6:b0:19:0b: 61:8f:7f:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAaIaQTuXQCBbgwaetxz/mztEy8UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U2QTc4NkFDRUY2ODRGMzc3NThGQzRBNkQ4NTE3Q0FE MTY1RkE3NzAeFw0yNTA5MDUyMTI2NThaFw0yNTA5MDkwMzIzNThaMDMxMTAvBgNV BAMTKDc2MEU0ODk2Rjg4QTJBNTc5OTUzMjRFRUNBODdGOENEMDkyNUNGRDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTlMhh18z8JS7bylkKJePOlu53 vHwA6EBIi2DFZy58uavkUahY2DgSqztnRqwGkw4gh7pmmwf159rNM1PbvkIFgEkS iCjQ23Q+IBvYeYynJ1rDBlaUc587WvZwcTb46zzVXDMZoCcKwymCqbX3/o7tSjs6 5jomakgSDufc98TjToXyMmx98CYg+LLa049vVeP3tBhWdekInF29J9iPzd72puxV pRe2b+zMv8BCd6bBfWD3uYhf7t2TFrDTNdBvmF3BAXqB4kGcPLmQq1JNpuXsoLfG w8u6UaVYtZ+RZfvbf5E9EYU6m+wWFm1t84A/JMEhWRZ35Df0T8rBe1AvbJhZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdg5IlviKKleZUyTuyof4zQklz9cwHwYDVR0j BBgwFoAUfmp4as72hPN3WPxKbYUXytFl+ncwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MjI5MmJhOC1hZDFhLTQxMzktOGMyMC01YjUyNmRhOTcwYmQvMC83RTZBNzg2QUNF RjY4NEYzNzc1OEZDNEE2RDg1MTdDQUQxNjVGQTc3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0U2QTc4NkFDRUY2ODRGMzc3NThGQzRBNkQ4NTE3Q0FEMTY1 RkE3Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTIyOTJiYTgtYWQxYS00MTM5LThj MjAtNWI1MjZkYTk3MGJkLzAvN0U2QTc4NkFDRUY2ODRGMzc3NThGQzRBNkQ4NTE3 Q0FEMTY1RkE3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIH4+m2ig4OLiUEzBaApz+rWnSTiDMGh9FPY WNC6IMKN2xfgF9LIDTPJEFPjevTCseIm5RYMO5Bzc7tGa1G8MjHbr0k0i+N/nYZv g4OmPu75Cuq9dwfj55RjbxOpsc6iFTINOFpbKqjQTqU9KRS9lNv49XypxG7cd35x dIUz0dekzf4+OQBCfphgUMGL8tUOopQw7qUH6HioAAlEMWDWKi7ONndkKiI/+jpq Jae+DN32Kup3V2Xt0AVyfvyMneOqZN9+wqczQwvWieP9cC/nn9DRHCCnNMO8wzvd M9gRxVYMweznBx4IP5UYdFUHRC9Pq6t92gDde2+/5rAZC2GPf6o= -----END CERTIFICATE-----Generated at Sun Sep 7 15:25:49 2025 by rpki-client