$ rpki-client -vvf repo-rpki.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/7ED240749DF73AB541823D94017C578425D757A6.mft File: 7ED240749DF73AB541823D94017C578425D757A6.mft (raw, json) Hash identifier: SUWRl1ClFKfwTvRvLHzTrxTwn6UGaOtmRhN9c/r6X3o= Subject key identifier: 60:2F:CF:BB:A4:E0:D9:82:F6:5E:17:57:81:5F:58:B8:4A:2C:A2:87 Authority key identifier: 7E:D2:40:74:9D:F7:3A:B5:41:82:3D:94:01:7C:57:84:25:D7:57:A6 Certificate issuer: /CN=7ED240749DF73AB541823D94017C578425D757A6 Certificate serial: 33AB4AB32D83858E91705DC5536F0C322DF92365 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7ED240749DF73AB541823D94017C578425D757A6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/7ED240749DF73AB541823D94017C578425D757A6.mft Manifest number: 04B0 Signing time: Wed 03 Sep 2025 19:11:04 +0000 Manifest this update: Wed 03 Sep 2025 19:06:04 +0000 Manifest next update: Sun 07 Sep 2025 06:26:04 +0000 Files and hashes: 1: 3130332e3133372e33322e302f32332d3234203d3e20313338383131.roa (hash: yGNy/2jPC7cv3chzLah5sv/C4LaKirTYr+d6U9mSoAc=) 2: 7ED240749DF73AB541823D94017C578425D757A6.crl (hash: F2Hsh4oOgZc0oM7ssy2EL+3AOc0GHDedFmTdrkUdWYg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/7ED240749DF73AB541823D94017C578425D757A6.crl rsync://repo-rpki.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/7ED240749DF73AB541823D94017C578425D757A6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7ED240749DF73AB541823D94017C578425D757A6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 06:26:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:ab:4a:b3:2d:83:85:8e:91:70:5d:c5:53:6f:0c:32:2d:f9:23:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ED240749DF73AB541823D94017C578425D757A6 Validity Not Before: Sep 3 19:06:04 2025 GMT Not After : Sep 7 06:26:04 2025 GMT Subject: CN=602FCFBBA4E0D982F65E1757815F58B84A2CA287 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4b:66:ee:e1:74:66:0b:3b:1f:31:73:10:fd: 41:f0:ae:85:61:3f:19:68:b4:2c:b6:59:05:6d:ee: 2a:2d:88:68:26:08:cb:3a:19:ff:6f:8c:7f:47:a7: 66:b6:30:12:fa:02:8d:a1:c8:0f:1c:17:8a:5b:67: c9:be:4b:b8:b0:8c:9d:3f:d2:ae:14:5e:53:11:f4: 37:03:45:08:6b:72:27:cd:64:4c:09:46:e0:65:30: c2:df:88:17:fb:53:4d:18:f4:99:d4:c7:2e:f6:f0: 5e:9b:88:5f:fc:5e:01:99:ff:55:fc:56:9c:5a:62: 30:e0:b8:ea:24:07:b5:b8:20:43:95:e2:24:d4:99: 11:e1:0c:75:62:9a:f3:03:f6:97:89:32:68:54:c8: 1c:89:1b:06:9c:90:04:ed:a5:66:7d:f8:93:95:08: 1c:38:55:3d:01:a7:3e:47:dc:97:d1:29:ef:9b:41: 8b:b2:40:58:8c:22:af:bc:91:4d:39:7d:04:c8:d3: 27:85:68:9e:ad:51:91:2a:01:9e:aa:0b:22:46:4f: 1d:0d:33:08:d0:75:bd:9b:95:e9:b9:2d:f7:77:76: e3:78:56:99:35:41:37:62:57:f4:a1:4f:a0:d7:2f: 08:84:b2:35:19:21:30:c6:28:8a:c8:4b:1f:5e:66: 36:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:2F:CF:BB:A4:E0:D9:82:F6:5E:17:57:81:5F:58:B8:4A:2C:A2:87 X509v3 Authority Key Identifier: keyid:7E:D2:40:74:9D:F7:3A:B5:41:82:3D:94:01:7C:57:84:25:D7:57:A6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/7ED240749DF73AB541823D94017C578425D757A6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7ED240749DF73AB541823D94017C578425D757A6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d4aa7ef-6d95-4eba-a354-fd41858c1ba7/0/7ED240749DF73AB541823D94017C578425D757A6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:6b:f4:c0:8b:10:0b:89:c7:c3:f3:df:96:0f:bf:b9:8c:4d: d5:ec:24:ab:be:1d:b7:17:3e:3b:b3:32:15:98:b8:15:39:7b: 86:4f:3b:5c:41:44:c7:e4:44:91:f2:97:b0:b3:f3:54:53:c8: ea:9a:2c:72:02:db:7a:20:3f:53:58:3e:63:d3:38:67:96:55: 76:a5:6d:e1:5d:f4:b3:a8:6d:c3:3e:98:cd:d2:85:b0:cd:0e: ff:f6:36:60:1c:a7:dc:98:46:de:11:72:ec:70:cd:5b:87:9b: 4c:9d:3f:6e:d5:98:c5:79:ac:bb:99:2e:32:17:34:85:90:b1: 4c:87:12:e2:84:c8:ec:e8:0f:41:d8:95:7a:c6:67:44:ab:db: f3:17:86:5c:bd:93:9d:36:ec:2b:11:02:a4:a3:aa:d6:c6:dd: af:cb:6e:78:65:71:f6:28:42:4e:18:b8:7f:2a:aa:2d:ad:64: da:eb:98:fa:f2:3c:60:7e:02:c7:23:58:83:44:76:d4:0f:5c: 48:d8:c0:05:b2:da:1d:43:ed:c9:89:1b:15:1c:cd:e3:58:a3: 36:6c:71:19:b1:54:92:4d:27:57:e6:ae:e2:e3:da:b8:1b:92: 24:08:fc:35:26:3a:ff:1c:19:71:cb:ef:ac:4c:b9:0d:af:b0: d3:19:fb:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUM6tKsy2DhY6RcF3FU28MMi35I2UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VEMjQwNzQ5REY3M0FCNTQxODIzRDk0MDE3QzU3ODQy NUQ3NTdBNjAeFw0yNTA5MDMxOTA2MDRaFw0yNTA5MDcwNjI2MDRaMDMxMTAvBgNV BAMTKDYwMkZDRkJCQTRFMEQ5ODJGNjVFMTc1NzgxNUY1OEI4NEEyQ0EyODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGS2bu4XRmCzsfMXMQ/UHwroVh PxlotCy2WQVt7iotiGgmCMs6Gf9vjH9Hp2a2MBL6Ao2hyA8cF4pbZ8m+S7iwjJ0/ 0q4UXlMR9DcDRQhrcifNZEwJRuBlMMLfiBf7U00Y9JnUxy728F6biF/8XgGZ/1X8 VpxaYjDguOokB7W4IEOV4iTUmRHhDHVimvMD9peJMmhUyByJGwackATtpWZ9+JOV CBw4VT0Bpz5H3JfRKe+bQYuyQFiMIq+8kU05fQTI0yeFaJ6tUZEqAZ6qCyJGTx0N MwjQdb2blem5Lfd3duN4Vpk1QTdiV/ShT6DXLwiEsjUZITDGKIrISx9eZjZHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYC/Pu6Tg2YL2XhdXgV9YuEosoocwHwYDVR0j BBgwFoAUftJAdJ33OrVBgj2UAXxXhCXXV6YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDRhYTdlZi02ZDk1LTRlYmEtYTM1NC1mZDQxODU4YzFiYTcvMC83RUQyNDA3NDlE RjczQUI1NDE4MjNEOTQwMTdDNTc4NDI1RDc1N0E2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0VEMjQwNzQ5REY3M0FCNTQxODIzRDk0MDE3QzU3ODQyNUQ3 NTdBNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ0YWE3ZWYtNmQ5NS00ZWJhLWEz NTQtZmQ0MTg1OGMxYmE3LzAvN0VEMjQwNzQ5REY3M0FCNTQxODIzRDk0MDE3QzU3 ODQyNUQ3NTdBNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHNr9MCLEAuJx8Pz35YPv7mMTdXsJKu+HbcX PjuzMhWYuBU5e4ZPO1xBRMfkRJHyl7Cz81RTyOqaLHIC23ogP1NYPmPTOGeWVXal beFd9LOobcM+mM3ShbDNDv/2NmAcp9yYRt4RcuxwzVuHm0ydP27VmMV5rLuZLjIX NIWQsUyHEuKEyOzoD0HYlXrGZ0Sr2/MXhly9k5027CsRAqSjqtbG3a/LbnhlcfYo Qk4YuH8qqi2tZNrrmPryPGB+AscjWINEdtQPXEjYwAWy2h1D7cmJGxUczeNYozZs cRmxVJJNJ1fmruLj2rgbkiQI/DUmOv8cGXHL76xMuQ2vsNMZ+9A= -----END CERTIFICATE-----Generated at Fri Sep 5 10:18:38 2025 by rpki-client