$ rpki-client -vvf repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft File: 7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft (raw, json) Hash identifier: NlvaPNf0UryPO0+WjevOrIHyBn8WyAjDaW2BAI8gPNs= Subject key identifier: D1:00:60:E0:28:61:40:55:02:A1:37:60:35:5D:6A:75:6A:2C:FB:5E Authority key identifier: 7D:5A:E0:85:96:8D:C7:CB:31:10:23:F7:EB:E0:BF:8E:12:67:06:E4 Certificate issuer: /CN=7D5AE085968DC7CB311023F7EBE0BF8E126706E4 Certificate serial: 33C55F662CB642DF16F6C51866EF4183B66A0CCA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft Manifest number: 86 Signing time: Thu 04 Sep 2025 10:02:19 +0000 Manifest this update: Thu 04 Sep 2025 09:57:19 +0000 Manifest next update: Sun 07 Sep 2025 19:57:19 +0000 Files and hashes: 1: 3130332e38372e3139392e302f32342d3234203d3e20313336303837.roa (hash: H2vMbusg9cc7KJr3RTfXCg88poNhf1lCs+Xogw0psfI=) 2: 7D5AE085968DC7CB311023F7EBE0BF8E126706E4.crl (hash: xJ9SqPPIswF2L2WY6aO+FEv45jXTHsKCijtctVXCcdU=) 3: 3130332e38372e3139382e302f32342d3234203d3e20313336303837.roa (hash: V4UBKbCeji0pbV7a6XBtcRsd6l6kzHNKhpG08xb4pYs=) 4: 3130332e38372e3139372e302f32342d3234203d3e20313336303837.roa (hash: QdxrdH7DJeQ01d2yPs/0LNDYNMsAKR57bx9AHeSr82o=) 5: 3130332e38372e3139362e302f32342d3234203d3e20313336303837.roa (hash: PKJay4YTUMIamculUnWc/1iHvOFg1R7DDFoaRZ7eMb0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.crl rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 19:57:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:c5:5f:66:2c:b6:42:df:16:f6:c5:18:66:ef:41:83:b6:6a:0c:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D5AE085968DC7CB311023F7EBE0BF8E126706E4 Validity Not Before: Sep 4 09:57:19 2025 GMT Not After : Sep 7 19:57:19 2025 GMT Subject: CN=D10060E02861405502A13760355D6A756A2CFB5E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:a0:f8:54:f9:22:4a:86:de:f0:2c:dc:6c:59: f9:5c:9a:f4:95:af:79:99:64:4d:6a:60:c3:b1:b7: e6:76:66:4e:90:ff:25:6a:ed:bf:c4:60:cb:6f:6f: d2:f1:cb:d9:01:bc:dd:15:7f:75:64:04:46:e9:fc: 64:1e:17:84:9a:fa:fd:cf:50:d5:67:5a:12:95:27: ce:16:8c:32:cc:ad:26:f0:90:72:e0:03:11:d7:57: c8:d5:8b:55:3f:22:7c:51:5b:6c:a9:55:43:cd:0f: df:1e:2f:78:3c:81:33:b5:33:10:c6:5f:c4:00:1c: c1:e6:dc:f4:90:d6:5a:ba:0b:d4:c3:0d:98:d1:05: c6:89:77:8f:f5:4d:d9:c8:fc:37:cb:da:ab:a5:3c: d4:18:e2:56:4f:8a:e2:da:6f:b1:db:01:2a:03:d4: 43:68:56:07:07:b3:fb:c9:5b:71:3d:e6:8e:37:9d: da:e9:d7:db:56:95:6e:5a:1a:e6:6c:2c:67:bc:17: 3a:63:2e:6f:25:75:d4:49:0a:37:ae:51:1b:7d:6f: ba:37:11:bf:80:69:9a:e2:80:09:e0:c3:be:c5:09: 34:8b:73:18:72:c9:0c:ae:a1:98:78:77:60:8b:2d: 17:6d:f7:9c:23:c0:20:60:3d:67:65:bc:7e:d8:c5: bc:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:00:60:E0:28:61:40:55:02:A1:37:60:35:5D:6A:75:6A:2C:FB:5E X509v3 Authority Key Identifier: keyid:7D:5A:E0:85:96:8D:C7:CB:31:10:23:F7:EB:E0:BF:8E:12:67:06:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:ec:f8:4d:28:c4:fb:7f:3b:8a:93:69:2e:c1:38:38:52:66: 0f:1d:26:44:24:1f:5e:99:69:89:91:db:ea:53:ce:01:86:7f: 1b:6e:f1:b0:c5:f1:3b:c9:26:56:5c:68:f1:bf:ea:7a:ec:4d: 12:a2:68:6a:62:a3:0f:a1:ab:9b:1c:86:ae:97:fc:55:03:3b: d0:1f:d9:d5:79:b1:c1:f0:0e:7c:9c:3f:f4:52:bc:c3:5f:a5: 4d:c0:14:1b:a7:bd:65:c9:89:02:72:9c:64:a4:85:b2:c6:88: d9:fc:48:1b:7d:fe:45:e7:be:71:ce:17:e0:2d:2a:eb:0e:d7: 1a:80:65:1c:39:d0:19:6b:19:17:f5:90:06:94:4e:55:fc:ea: 55:0f:d9:1a:91:78:49:30:ae:99:dd:f8:a7:fd:13:4e:de:c8: 7d:d0:19:67:88:03:3f:c5:36:c8:a3:f9:3c:31:ac:2d:93:a4: f9:6b:a6:c6:d7:93:21:ef:d8:3b:d6:67:b4:d1:e0:d7:6d:1e: 79:d7:c5:bb:61:02:8f:63:1a:e8:ed:a0:92:f3:90:50:5b:d0: f1:10:34:f6:ab:d4:2f:9a:f7:b0:7a:0d:98:a5:fc:b6:d3:23: 26:96:c3:fe:d1:fc:4b:f2:87:7e:65:e2:9a:3b:b5:ce:8a:0b: f8:63:72:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM8VfZiy2Qt8W9sUYZu9Bg7ZqDMowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q1QUUwODU5NjhEQzdDQjMxMTAyM0Y3RUJFMEJGOEUx MjY3MDZFNDAeFw0yNTA5MDQwOTU3MTlaFw0yNTA5MDcxOTU3MTlaMDMxMTAvBgNV BAMTKEQxMDA2MEUwMjg2MTQwNTUwMkExMzc2MDM1NUQ2QTc1NkEyQ0ZCNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0oPhU+SJKht7wLNxsWflcmvSV r3mZZE1qYMOxt+Z2Zk6Q/yVq7b/EYMtvb9Lxy9kBvN0Vf3VkBEbp/GQeF4Sa+v3P UNVnWhKVJ84WjDLMrSbwkHLgAxHXV8jVi1U/InxRW2ypVUPND98eL3g8gTO1MxDG X8QAHMHm3PSQ1lq6C9TDDZjRBcaJd4/1TdnI/DfL2qulPNQY4lZPiuLab7HbASoD 1ENoVgcHs/vJW3E95o43ndrp19tWlW5aGuZsLGe8FzpjLm8lddRJCjeuURt9b7o3 Eb+AaZrigAngw77FCTSLcxhyyQyuoZh4d2CLLRdt95wjwCBgPWdlvH7YxbzZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0QBg4ChhQFUCoTdgNV1qdWos+14wHwYDVR0j BBgwFoAUfVrghZaNx8sxECP36+C/jhJnBuQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NmU2M2NkMi1mYjNjLTQxYjItYjk2Yi1hYjIzNDQyMGEyMTEvMC83RDVBRTA4NTk2 OERDN0NCMzExMDIzRjdFQkUwQkY4RTEyNjcwNkU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q1QUUwODU5NjhEQzdDQjMxMTAyM0Y3RUJFMEJGOEUxMjY3 MDZFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTZlNjNjZDItZmIzYy00MWIyLWI5 NmItYWIyMzQ0MjBhMjExLzAvN0Q1QUUwODU5NjhEQzdDQjMxMTAyM0Y3RUJFMEJG OEUxMjY3MDZFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFfs+E0oxPt/O4qTaS7BODhSZg8dJkQkH16Z aYmR2+pTzgGGfxtu8bDF8TvJJlZcaPG/6nrsTRKiaGpiow+hq5schq6X/FUDO9Af 2dV5scHwDnycP/RSvMNfpU3AFBunvWXJiQJynGSkhbLGiNn8SBt9/kXnvnHOF+At KusO1xqAZRw50BlrGRf1kAaUTlX86lUP2RqReEkwrpnd+Kf9E07eyH3QGWeIAz/F Nsij+TwxrC2TpPlrpsbXkyHv2DvWZ7TR4NdtHnnXxbthAo9jGujtoJLzkFBb0PEQ NPar1C+a97B6DZil/LbTIyaWw/7R/Evyh35l4po7tc6KC/hjcks= -----END CERTIFICATE-----Generated at Fri Sep 5 10:34:19 2025 by rpki-client