$ rpki-client -vvf repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft File: 7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft (raw, json) Hash identifier: MlD75ew5cppzvXU2EirafNzSSnd88FPdQBO7KDNV8m8= Subject key identifier: 26:1D:8B:30:73:E5:C9:A5:AD:A1:9C:37:D9:46:48:0E:5A:91:50:F8 Authority key identifier: 7B:94:59:74:A7:9E:8C:77:CB:02:F9:44:95:BA:9F:87:BA:A0:E0:38 Certificate issuer: /CN=7B945974A79E8C77CB02F94495BA9F87BAA0E038 Certificate serial: 7188C9D709C465374A9479DBF4E86CBB73C70807 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B945974A79E8C77CB02F94495BA9F87BAA0E038.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft Manifest number: 0383 Signing time: Sun 07 Sep 2025 13:22:10 +0000 Manifest this update: Sun 07 Sep 2025 13:17:10 +0000 Manifest next update: Wed 10 Sep 2025 22:27:10 +0000 Files and hashes: 1: 7B945974A79E8C77CB02F94495BA9F87BAA0E038.crl (hash: s0wupeHeX1MPeZaaMtPcqplTIj2ri7GOyB8cCX/yly4=) 2: 3130332e3136372e33302e302f32332d3234203d3e203137393935.roa (hash: jJAIyVbfrGhaQ1dlxzFUdHOYskMs8jKydFWI9VuwVq4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.crl rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B945974A79E8C77CB02F94495BA9F87BAA0E038.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:88:c9:d7:09:c4:65:37:4a:94:79:db:f4:e8:6c:bb:73:c7:08:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B945974A79E8C77CB02F94495BA9F87BAA0E038 Validity Not Before: Sep 7 13:17:10 2025 GMT Not After : Sep 10 22:27:10 2025 GMT Subject: CN=261D8B3073E5C9A5ADA19C37D946480E5A9150F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:e4:f9:3f:a6:d8:aa:e2:85:62:38:a4:b2:8b: a1:47:db:8f:af:ba:f2:2a:53:cf:71:f4:ce:a3:28: 75:ab:b6:67:04:78:6e:c0:08:19:60:72:74:63:9a: 9e:54:97:a8:8c:09:49:66:d7:72:ae:0b:b8:ae:43: 7e:b0:0d:bd:ae:b2:6e:30:17:51:86:3c:90:8d:b8: 0e:d8:15:9c:78:02:0f:c5:03:32:48:e9:eb:cb:40: 43:03:f9:e8:0e:06:3e:8b:30:09:4a:91:94:5f:96: f6:40:39:6b:fb:a4:f5:34:d6:29:c9:ea:9e:cf:63: da:b9:37:7f:ed:a3:0b:75:1a:4b:9b:53:67:c6:32: f4:b9:8c:3e:ad:ff:ae:47:da:b6:fc:90:dc:7f:9e: d7:9e:d3:b0:7c:16:0d:2c:c9:42:24:de:54:73:9e: 9f:5a:ab:78:00:91:8d:a3:21:56:6d:c9:89:cb:62: ae:f7:48:3b:55:c0:ba:6d:e7:a1:fa:0f:e0:09:dc: 49:00:65:ad:3e:ab:50:9e:38:60:5b:b1:0c:a0:cd: 7c:fb:84:53:89:5d:92:bc:21:66:13:74:a7:ba:df: 06:4e:69:f4:d8:73:2f:23:75:ce:27:05:40:ed:15: 1e:51:12:63:49:36:58:25:87:88:cd:91:ab:1e:c4: fc:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:1D:8B:30:73:E5:C9:A5:AD:A1:9C:37:D9:46:48:0E:5A:91:50:F8 X509v3 Authority Key Identifier: keyid:7B:94:59:74:A7:9E:8C:77:CB:02:F9:44:95:BA:9F:87:BA:A0:E0:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B945974A79E8C77CB02F94495BA9F87BAA0E038.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:79:db:bd:27:55:55:55:84:9e:81:93:ef:e0:6c:0c:7a:33: 39:4c:b5:bb:0c:d6:dd:fd:92:09:bc:c0:50:4f:c8:16:b1:aa: 6c:e9:c7:73:5b:dd:8b:a4:b9:75:15:e1:60:cd:02:3d:90:c0: 4b:5e:80:79:31:18:32:0c:2e:5f:7a:03:0e:44:db:4b:16:d4: 50:89:de:07:76:22:5b:a3:2e:20:49:13:ea:e5:80:31:50:c6: ad:a3:df:2d:7e:16:3c:d0:58:2a:e5:70:7a:d5:6d:fd:1c:3e: 60:42:6b:19:3f:c1:82:2c:14:39:5f:b9:7f:96:c7:ea:7c:44: c8:ba:76:d2:81:a1:49:df:af:3d:46:b4:70:b2:08:e3:54:bf: 6a:0c:6f:8f:c7:13:19:73:8a:60:d4:85:d5:10:df:b0:bd:b7: 62:cc:63:5f:6e:5b:82:d2:a9:d9:c6:af:13:8d:4a:97:35:78: 34:01:df:b9:55:c3:87:e2:97:bc:68:3e:4b:00:1a:61:46:d8: 5c:a5:6c:c0:d7:07:b4:c3:3d:07:52:0c:04:f1:3d:58:64:64: bf:4b:ce:94:2c:33:0d:77:66:0e:dc:2c:23:df:e2:0c:a8:a7: 87:d6:f0:7b:ab:8e:6c:91:22:c4:46:1f:75:ec:90:4e:b8:8d: fa:24:78:c8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcYjJ1wnEZTdKlHnb9Ohsu3PHCAcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0I5NDU5NzRBNzlFOEM3N0NCMDJGOTQ0OTVCQTlGODdC QUEwRTAzODAeFw0yNTA5MDcxMzE3MTBaFw0yNTA5MTAyMjI3MTBaMDMxMTAvBgNV BAMTKDI2MUQ4QjMwNzNFNUM5QTVBREExOUMzN0Q5NDY0ODBFNUE5MTUwRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDN5Pk/ptiq4oViOKSyi6FH24+v uvIqU89x9M6jKHWrtmcEeG7ACBlgcnRjmp5Ul6iMCUlm13KuC7iuQ36wDb2usm4w F1GGPJCNuA7YFZx4Ag/FAzJI6evLQEMD+egOBj6LMAlKkZRflvZAOWv7pPU01inJ 6p7PY9q5N3/towt1GkubU2fGMvS5jD6t/65H2rb8kNx/ntee07B8Fg0syUIk3lRz np9aq3gAkY2jIVZtyYnLYq73SDtVwLpt56H6D+AJ3EkAZa0+q1CeOGBbsQygzXz7 hFOJXZK8IWYTdKe63wZOafTYcy8jdc4nBUDtFR5REmNJNlglh4jNkasexPx/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJh2LMHPlyaWtoZw32UZIDlqRUPgwHwYDVR0j BBgwFoAUe5RZdKeejHfLAvlElbqfh7qg4DgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzYzNWNlOS0wZWE1LTQ3ZDgtOWZjYy1jYWQxYzlmMDZmYmUvMC83Qjk0NTk3NEE3 OUU4Qzc3Q0IwMkY5NDQ5NUJBOUY4N0JBQTBFMDM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0I5NDU5NzRBNzlFOEM3N0NCMDJGOTQ0OTVCQTlGODdCQUEw RTAzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2M2MzVjZTktMGVhNS00N2Q4LTlm Y2MtY2FkMWM5ZjA2ZmJlLzAvN0I5NDU5NzRBNzlFOEM3N0NCMDJGOTQ0OTVCQTlG ODdCQUEwRTAzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIx5270nVVVVhJ6Bk+/gbAx6MzlMtbsM1t39 kgm8wFBPyBaxqmzpx3Nb3YukuXUV4WDNAj2QwEtegHkxGDIMLl96Aw5E20sW1FCJ 3gd2IlujLiBJE+rlgDFQxq2j3y1+FjzQWCrlcHrVbf0cPmBCaxk/wYIsFDlfuX+W x+p8RMi6dtKBoUnfrz1GtHCyCONUv2oMb4/HExlzimDUhdUQ37C9t2LMY19uW4LS qdnGrxONSpc1eDQB37lVw4fil7xoPksAGmFG2FylbMDXB7TDPQdSDATxPVhkZL9L zpQsMw13Zg7cLCPf4gyop4fW8HurjmyRIsRGH3XskE64jfokeMg= -----END CERTIFICATE-----Generated at Sun Sep 7 14:05:29 2025 by rpki-client