$ rpki-client -vvf repo-rpki.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.mft File: 7767CF49D7661AFAB45870341D88D2F3D9A86CE4.mft (raw, json) Hash identifier: SeZuDNp8K73wfGCdNu91my4HcqJHD9Rnbq84spNhPzM= Subject key identifier: 71:63:F1:C0:C6:47:53:DE:0A:1B:4F:B9:A7:21:34:05:45:19:7C:AD Authority key identifier: 77:67:CF:49:D7:66:1A:FA:B4:58:70:34:1D:88:D2:F3:D9:A8:6C:E4 Certificate issuer: /CN=7767CF49D7661AFAB45870341D88D2F3D9A86CE4 Certificate serial: 5E9A76FB5C59F39BE70ECC98D9811A71341A60A3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.mft Manifest number: 022D Signing time: Sat 06 Sep 2025 16:21:42 +0000 Manifest this update: Sat 06 Sep 2025 16:16:42 +0000 Manifest next update: Wed 10 Sep 2025 03:37:42 +0000 Files and hashes: 1: 7767CF49D7661AFAB45870341D88D2F3D9A86CE4.crl (hash: q0uPNgaDSAazTjXQfj67g+hYLSJhDZffz4K0PHCZbmM=) 2: 3130332e3137342e3137342e302f32342d3234203d3e20313437313031.roa (hash: mg4/qvSGbk0zDsf0Rx7OQC6CJE6sN8kDzPsI7vMCT4w=) 3: 3130332e3137342e3137342e302f32332d3233203d3e20313437313031.roa (hash: qjco1QI2sNnouAlC+BzAGiX63kc+i+LJElEHwxqlyT4=) 4: 3130332e3137342e3137352e302f32342d3234203d3e20313437313031.roa (hash: hiVWfFJS+ICMc15b4VDK2HR8eWbWj/hyT+N05K9QMHE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.crl rsync://repo-rpki.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 03:37:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:9a:76:fb:5c:59:f3:9b:e7:0e:cc:98:d9:81:1a:71:34:1a:60:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7767CF49D7661AFAB45870341D88D2F3D9A86CE4 Validity Not Before: Sep 6 16:16:42 2025 GMT Not After : Sep 10 03:37:42 2025 GMT Subject: CN=7163F1C0C64753DE0A1B4FB9A721340545197CAD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:22:b6:75:4c:12:85:e2:d6:2f:e8:2f:72:36: e6:bb:7a:fc:69:13:37:84:2b:60:37:8b:03:bb:8b: 7d:69:81:93:9c:eb:65:b0:cc:3f:91:8b:59:d6:69: ba:cf:58:f0:2b:e4:2d:9f:7a:35:8d:70:8b:4d:4e: e9:e4:28:4f:1e:a0:8d:e0:0f:6f:a8:f9:45:58:c8: bf:fd:b9:f7:9a:5c:5a:95:d5:5b:90:c9:26:92:4f: ef:f9:03:c8:90:25:58:0d:f1:92:4d:52:b2:fc:b3: ce:75:ac:1e:69:9e:1e:48:f1:21:c6:d9:4e:20:19: 41:26:d7:18:eb:b0:12:e9:04:28:43:a6:d6:06:2d: b9:ca:7f:0c:a8:f9:7e:6c:cb:84:b5:57:86:2c:c2: a0:ba:f5:6d:a3:3a:fb:5c:4a:47:3c:7e:f4:6e:42: 15:bd:df:bd:23:93:2a:d4:c3:3a:57:c9:03:c8:0b: 7a:57:a8:a3:35:51:b5:ea:8d:26:54:09:db:47:11: db:d4:a0:14:56:a7:77:58:6f:6c:ed:8d:bb:dc:28: 5c:ac:8c:93:3d:7f:c7:fd:4a:91:17:25:eb:17:c0: 7a:e9:07:2b:23:7d:0b:37:39:69:d9:8d:3a:99:51: 9a:87:b4:d6:b8:39:bc:25:85:a9:09:3c:e1:85:98: 2f:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 71:63:F1:C0:C6:47:53:DE:0A:1B:4F:B9:A7:21:34:05:45:19:7C:AD X509v3 Authority Key Identifier: keyid:77:67:CF:49:D7:66:1A:FA:B4:58:70:34:1D:88:D2:F3:D9:A8:6C:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:c7:3b:ea:d7:38:63:45:dc:31:2f:62:53:9c:eb:07:dc:6b: f8:ce:6f:2d:42:5a:44:08:34:35:6a:5e:cf:09:32:4f:5d:62: 22:2c:2b:93:5b:49:07:db:17:35:65:30:3e:05:dc:4e:cc:a7: 58:6c:93:27:39:28:60:6b:5f:15:a2:67:b7:1b:50:e3:af:80: 4c:ac:86:21:67:39:30:0c:fa:e2:db:fc:35:24:c7:ea:b8:94: 40:6e:22:cb:cf:24:04:c8:a6:c4:95:24:38:76:0d:0d:a9:3d: 62:24:23:94:5e:1c:45:98:99:3a:fc:14:c0:e1:cc:90:6e:50: cb:e6:52:3a:e9:8a:57:d9:46:56:4e:ba:3b:28:aa:66:9c:da: 71:e7:20:47:60:05:fb:c8:d3:b1:2b:e6:e3:4b:4a:32:50:1f: ad:e6:74:09:1a:a4:65:89:db:41:84:23:77:08:7c:bb:5b:db: ac:21:e0:1d:b7:33:3a:8d:83:f9:4c:b9:77:39:d1:6d:5a:72: 3a:9e:c8:6d:eb:d6:af:71:7e:5b:06:98:7e:d3:79:9e:7e:2b: 33:8d:34:e0:ed:d6:d8:15:e1:76:3e:8b:2e:2d:eb:3b:e2:22: ae:5b:23:a9:fc:8f:9d:b6:5a:0c:4d:e2:50:0a:34:ff:6b:5e: 3a:5c:68:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXpp2+1xZ85vnDsyY2YEacTQaYKMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzc2N0NGNDlENzY2MUFGQUI0NTg3MDM0MUQ4OEQyRjNE OUE4NkNFNDAeFw0yNTA5MDYxNjE2NDJaFw0yNTA5MTAwMzM3NDJaMDMxMTAvBgNV BAMTKDcxNjNGMUMwQzY0NzUzREUwQTFCNEZCOUE3MjEzNDA1NDUxOTdDQUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5IrZ1TBKF4tYv6C9yNua7evxp EzeEK2A3iwO7i31pgZOc62WwzD+Ri1nWabrPWPAr5C2fejWNcItNTunkKE8eoI3g D2+o+UVYyL/9ufeaXFqV1VuQySaST+/5A8iQJVgN8ZJNUrL8s851rB5pnh5I8SHG 2U4gGUEm1xjrsBLpBChDptYGLbnKfwyo+X5sy4S1V4YswqC69W2jOvtcSkc8fvRu QhW9370jkyrUwzpXyQPIC3pXqKM1UbXqjSZUCdtHEdvUoBRWp3dYb2ztjbvcKFys jJM9f8f9SpEXJesXwHrpBysjfQs3OWnZjTqZUZqHtNa4ObwlhakJPOGFmC93AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcWPxwMZHU94KG0+5pyE0BUUZfK0wHwYDVR0j BBgwFoAUd2fPSddmGvq0WHA0HYjS89mobOQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTcwZDQ0ZS0wZjcwLTQ1YTMtYWYwNC04MWY0MjlkYjNhNWQvMC83NzY3Q0Y0OUQ3 NjYxQUZBQjQ1ODcwMzQxRDg4RDJGM0Q5QTg2Q0U0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzc2N0NGNDlENzY2MUFGQUI0NTg3MDM0MUQ4OEQyRjNEOUE4 NkNFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2E3MGQ0NGUtMGY3MC00NWEzLWFm MDQtODFmNDI5ZGIzYTVkLzAvNzc2N0NGNDlENzY2MUFGQUI0NTg3MDM0MUQ4OEQy RjNEOUE4NkNFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH3HO+rXOGNF3DEvYlOc6wfca/jOby1CWkQI NDVqXs8JMk9dYiIsK5NbSQfbFzVlMD4F3E7Mp1hskyc5KGBrXxWiZ7cbUOOvgEys hiFnOTAM+uLb/DUkx+q4lEBuIsvPJATIpsSVJDh2DQ2pPWIkI5ReHEWYmTr8FMDh zJBuUMvmUjrpilfZRlZOujsoqmac2nHnIEdgBfvI07Er5uNLSjJQH63mdAkapGWJ 20GEI3cIfLtb26wh4B23MzqNg/lMuXc50W1acjqeyG3r1q9xflsGmH7TeZ5+KzON NODt1tgV4XY+iy4t6zviIq5bI6n8j522WgxN4lAKNP9rXjpcaIc= -----END CERTIFICATE-----Generated at Sun Sep 7 15:13:30 2025 by rpki-client