$ rpki-client -vvf repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft File: 7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft (raw, json) Hash identifier: vfRkF+SxIZVabG2usyWjgRDyT68taOjcHTJimuFL9So= Subject key identifier: C6:67:34:F9:9E:06:96:27:8B:E4:66:59:1E:C3:A6:D8:37:52:59:47 Authority key identifier: 7A:6E:7F:E3:91:52:D1:CC:17:4F:69:22:14:3F:AA:EB:DC:95:FA:F5 Certificate issuer: /CN=7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5 Certificate serial: 3E7E79C0AC039B0DD234B67026679790BFCE11C3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft Manifest number: 0326 Signing time: Fri 05 Sep 2025 19:40:50 +0000 Manifest this update: Fri 05 Sep 2025 19:35:50 +0000 Manifest next update: Mon 08 Sep 2025 21:04:50 +0000 Files and hashes: 1: 7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.crl (hash: QDH9+npkv0RtN1tIO7ZYehRsDm5qrIBFvduGT5QN6+o=) 2: 3130332e3137322e3234312e302f32342d3234203d3e20313432343031.roa (hash: yN3b6aLARK75R5KMvUSuceVNjELLLGOMFIhCi2LU/yI=) 3: 3130332e3137322e3234302e302f32332d3233203d3e20313432343031.roa (hash: dQbf3sVA4jaVic2L+O9XI1H3j7ymjWLOW6r+meQnacg=) 4: 3130332e3137322e3234302e302f32342d3234203d3e20313432343031.roa (hash: 18AbUsVhIGEQ6HCFJXdnQ22A4WQNqI+V6DxuOgi205k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.crl rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 21:04:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:7e:79:c0:ac:03:9b:0d:d2:34:b6:70:26:67:97:90:bf:ce:11:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5 Validity Not Before: Sep 5 19:35:50 2025 GMT Not After : Sep 8 21:04:50 2025 GMT Subject: CN=C66734F99E0696278BE466591EC3A6D837525947 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:99:f3:e2:18:11:88:44:12:99:6f:5d:a8:37: b5:1e:45:75:be:11:2e:51:7e:58:6d:7c:55:ac:77: f1:36:7c:44:33:08:bf:59:fb:ee:f3:4a:59:04:dd: 05:3f:fe:db:b8:b3:93:7e:c1:59:89:13:44:64:d0: 78:03:44:94:77:84:8c:16:57:8e:cc:9e:da:a6:7b: f1:fb:cd:9b:d7:7f:42:80:ce:e6:80:c2:b5:ed:40: 5d:5d:4e:1d:3a:66:32:de:5f:f9:ab:62:04:01:24: 5f:10:49:a3:a6:b3:60:3e:b5:6a:7b:ae:cb:e3:04: 77:84:6d:75:9e:5b:d4:be:06:7c:88:a6:14:f6:03: cb:4b:1b:59:11:8d:a2:9f:ae:91:55:e4:62:d6:7b: 75:85:9a:a9:49:88:d4:24:70:c6:51:b0:9d:29:2e: 79:e0:e7:f3:ab:8c:c2:0a:58:70:c4:2f:17:a9:ca: 13:d2:7a:1b:e7:b9:ea:13:89:2b:d9:33:07:52:55: b2:b2:3e:eb:c1:c2:17:62:c2:e6:72:71:59:e8:b6: f7:e8:a6:a1:81:75:94:5e:39:07:c0:ae:f7:51:b1: 57:4c:93:e5:78:fd:66:23:6a:da:6c:e3:70:bb:06: dc:84:51:fc:2f:e4:40:0e:82:83:0a:91:6c:27:ca: 0c:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:67:34:F9:9E:06:96:27:8B:E4:66:59:1E:C3:A6:D8:37:52:59:47 X509v3 Authority Key Identifier: keyid:7A:6E:7F:E3:91:52:D1:CC:17:4F:69:22:14:3F:AA:EB:DC:95:FA:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/612c138c-2e24-49f5-8ada-0027cba7f178/0/7A6E7FE39152D1CC174F6922143FAAEBDC95FAF5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:d6:43:15:29:26:5c:06:73:7d:00:33:df:bd:ed:cb:2b:c1: a8:5f:18:38:48:a5:cf:62:92:1c:a8:2a:dd:0c:48:25:25:9b: 08:35:b1:78:07:c1:83:5d:c6:1e:e9:0d:8d:8e:7b:5e:92:e3: e4:03:d8:0e:87:ef:3d:7d:18:d4:fa:8a:a8:85:62:bd:24:b7: 8d:f4:d2:30:2a:8d:45:a7:35:02:e5:17:56:cd:e0:86:83:24: 5b:a7:62:fc:03:18:3d:42:d2:dd:80:15:c5:e1:8a:90:b0:d5: 76:a7:b1:a9:a4:d1:ce:03:d7:52:8f:cb:89:e2:5c:0a:ee:30: b6:62:7a:23:92:3d:70:3e:41:85:cd:7b:ff:94:e2:a4:8b:52: 10:94:13:3a:2a:a4:08:a7:4b:67:af:1d:89:75:18:87:58:11: 9a:df:8a:62:7b:dd:0a:5f:fd:9b:99:00:be:d8:c5:c1:0a:03: 78:84:f0:d2:5a:b3:0a:ef:19:4a:18:65:70:40:eb:92:bf:1d: 0e:e7:e8:2b:2c:12:1f:f8:52:d5:06:fd:81:a7:a8:0e:99:1a: d5:24:e9:99:e1:cc:33:be:fc:f8:d4:91:f3:94:06:27:8d:64: 50:de:19:69:a4:d9:89:4d:ec:8f:c6:da:f4:b9:eb:9e:05:66: 93:62:e6:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPn55wKwDmw3SNLZwJmeXkL/OEcMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0E2RTdGRTM5MTUyRDFDQzE3NEY2OTIyMTQzRkFBRUJE Qzk1RkFGNTAeFw0yNTA5MDUxOTM1NTBaFw0yNTA5MDgyMTA0NTBaMDMxMTAvBgNV BAMTKEM2NjczNEY5OUUwNjk2Mjc4QkU0NjY1OTFFQzNBNkQ4Mzc1MjU5NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQmfPiGBGIRBKZb12oN7UeRXW+ ES5RflhtfFWsd/E2fEQzCL9Z++7zSlkE3QU//tu4s5N+wVmJE0Rk0HgDRJR3hIwW V47Mntqme/H7zZvXf0KAzuaAwrXtQF1dTh06ZjLeX/mrYgQBJF8QSaOms2A+tWp7 rsvjBHeEbXWeW9S+BnyIphT2A8tLG1kRjaKfrpFV5GLWe3WFmqlJiNQkcMZRsJ0p Lnng5/OrjMIKWHDELxepyhPSehvnueoTiSvZMwdSVbKyPuvBwhdiwuZycVnotvfo pqGBdZReOQfArvdRsVdMk+V4/WYjatps43C7BtyEUfwv5EAOgoMKkWwnygxxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxmc0+Z4GlieL5GZZHsOm2DdSWUcwHwYDVR0j BBgwFoAUem5/45FS0cwXT2kiFD+q69yV+vUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MTJjMTM4Yy0yZTI0LTQ5ZjUtOGFkYS0wMDI3Y2JhN2YxNzgvMC83QTZFN0ZFMzkx NTJEMUNDMTc0RjY5MjIxNDNGQUFFQkRDOTVGQUY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0E2RTdGRTM5MTUyRDFDQzE3NEY2OTIyMTQzRkFBRUJEQzk1 RkFGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjEyYzEzOGMtMmUyNC00OWY1LThh ZGEtMDAyN2NiYTdmMTc4LzAvN0E2RTdGRTM5MTUyRDFDQzE3NEY2OTIyMTQzRkFB RUJEQzk1RkFGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADTWQxUpJlwGc30AM9+97csrwahfGDhIpc9i khyoKt0MSCUlmwg1sXgHwYNdxh7pDY2Oe16S4+QD2A6H7z19GNT6iqiFYr0kt430 0jAqjUWnNQLlF1bN4IaDJFunYvwDGD1C0t2AFcXhipCw1Xansamk0c4D11KPy4ni XAruMLZieiOSPXA+QYXNe/+U4qSLUhCUEzoqpAinS2evHYl1GIdYEZrfimJ73Qpf /ZuZAL7YxcEKA3iE8NJaswrvGUoYZXBA65K/HQ7n6CssEh/4UtUG/YGnqA6ZGtUk 6ZnhzDO+/PjUkfOUBieNZFDeGWmk2YlN7I/G2vS5654FZpNi5u0= -----END CERTIFICATE-----Generated at Sun Sep 7 15:28:40 2025 by rpki-client