$ rpki-client -vvf repo-rpki.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.mft File: 007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.mft (raw, json) Hash identifier: tp7Tacn5jvUWuuSWv9+kec2h20aonoBPvq5muQQcfQ4= Subject key identifier: 18:47:20:0F:91:3B:50:85:0F:33:B5:27:43:96:F6:05:8D:8A:13:CF Authority key identifier: 00:7C:91:B0:49:F7:35:F7:1F:2B:E8:CF:92:AE:AA:53:8D:6B:1F:0B Certificate issuer: /CN=007C91B049F735F71F2BE8CF92AEAA538D6B1F0B Certificate serial: 76E02A130E4C96A6CE6EF7C31A1159CA9D80A908 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.mft Manifest number: 0135 Signing time: Thu 04 Sep 2025 08:12:06 +0000 Manifest this update: Thu 04 Sep 2025 08:07:06 +0000 Manifest next update: Sun 07 Sep 2025 11:29:06 +0000 Files and hashes: 1: 007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.crl (hash: 8Fov8MrQtWK2LJliKfLGSJodI7/ijXXufDLUXUu03fI=) 2: 3130332e35382e3130342e302f32322d3234203d3e20313333383334.roa (hash: 50H8I9ev+6h3z0JMqGqieFay02FbZ2ohx0kZUlhDVNI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.crl rsync://repo-rpki.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 11:29:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:e0:2a:13:0e:4c:96:a6:ce:6e:f7:c3:1a:11:59:ca:9d:80:a9:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=007C91B049F735F71F2BE8CF92AEAA538D6B1F0B Validity Not Before: Sep 4 08:07:06 2025 GMT Not After : Sep 7 11:29:06 2025 GMT Subject: CN=1847200F913B50850F33B5274396F6058D8A13CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d0:a8:9b:f5:c4:5c:b6:85:52:d1:d0:84:98: 2e:d8:44:50:47:85:54:b4:63:36:0f:f5:7d:19:a9: 39:18:19:ef:08:99:d0:e2:52:d1:4a:9a:ac:62:84: 56:c0:82:76:06:fe:14:af:e8:6d:20:69:0f:c7:4d: 00:97:72:67:a8:d5:86:1d:b7:fe:18:dd:10:57:6a: 71:23:aa:c9:b3:97:e2:79:86:c7:96:7c:17:ff:0b: e7:e6:c4:66:30:28:50:8a:16:a6:95:f0:a8:76:f3: 3b:c5:17:bb:a1:71:74:ec:b1:59:75:79:04:d0:64: bc:1a:80:e9:28:f2:40:10:ad:3e:26:a4:19:7a:eb: d7:4f:4c:78:45:4e:71:6b:c1:67:e2:d9:00:20:07: c7:44:c6:a6:74:db:24:89:a9:6b:d6:68:cc:62:09: 42:f7:d2:a6:f6:74:9c:85:19:ed:71:cf:c7:14:8d: 82:8c:7b:b5:e4:b1:22:f1:e7:c2:87:78:ef:ae:47: d2:44:18:72:2a:d5:85:99:75:95:35:37:22:31:b4: 71:3a:47:d2:ae:4d:51:11:1d:54:dc:e7:c0:54:45: 87:d2:d4:6a:66:bd:fb:ab:3e:a5:37:c0:f6:54:4c: 95:88:5d:1f:ff:b2:94:95:b1:fa:03:72:c7:e7:b1: b4:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:47:20:0F:91:3B:50:85:0F:33:B5:27:43:96:F6:05:8D:8A:13:CF X509v3 Authority Key Identifier: keyid:00:7C:91:B0:49:F7:35:F7:1F:2B:E8:CF:92:AE:AA:53:8D:6B:1F:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:fa:6f:bf:3f:2f:22:20:b3:cf:42:be:b0:47:06:8d:9f:93: eb:dd:16:a8:bd:b5:c8:92:c3:61:4c:09:a5:24:b8:27:01:c1: 08:f2:e1:34:7d:53:e2:56:53:79:66:43:ad:47:dd:02:3c:2a: 06:88:25:2f:0f:fe:98:83:49:48:13:9a:af:77:5e:dc:96:76: 2a:cf:31:98:ac:9a:bb:64:b0:14:17:33:e4:5f:ae:bf:5a:16: 72:f6:42:da:e9:33:e2:4d:34:1f:4f:39:33:fe:4e:3e:25:a1: dd:45:2e:4d:29:05:a8:7b:e3:34:4c:eb:88:a6:70:5f:d8:37: e2:09:cb:ab:8e:ba:aa:fa:a7:1b:a2:e9:06:c5:16:b5:79:21: 77:86:0d:ec:39:f2:b6:56:96:9b:58:9f:97:66:32:e8:ea:48: b1:42:1c:88:5f:13:c4:f5:96:82:e5:ba:a3:9f:b6:37:b3:fb: f2:ec:54:ce:48:a6:17:64:e5:e2:3a:8c:20:fc:db:fc:9e:ca: ce:3f:4b:87:4d:dd:eb:f0:34:85:d4:53:37:2a:e5:25:7d:2b: e0:9a:3f:e5:60:62:b7:6f:e7:1c:c8:c1:97:48:71:2e:41:91: a1:b2:18:c7:04:7a:37:32:70:9a:cb:ec:5b:0d:41:a7:9e:6f: c1:e7:5e:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUduAqEw5MlqbObvfDGhFZyp2AqQgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDA3QzkxQjA0OUY3MzVGNzFGMkJFOENGOTJBRUFBNTM4 RDZCMUYwQjAeFw0yNTA5MDQwODA3MDZaFw0yNTA5MDcxMTI5MDZaMDMxMTAvBgNV BAMTKDE4NDcyMDBGOTEzQjUwODUwRjMzQjUyNzQzOTZGNjA1OEQ4QTEzQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC0Kib9cRctoVS0dCEmC7YRFBH hVS0YzYP9X0ZqTkYGe8ImdDiUtFKmqxihFbAgnYG/hSv6G0gaQ/HTQCXcmeo1YYd t/4Y3RBXanEjqsmzl+J5hseWfBf/C+fmxGYwKFCKFqaV8Kh28zvFF7uhcXTssVl1 eQTQZLwagOko8kAQrT4mpBl669dPTHhFTnFrwWfi2QAgB8dExqZ02ySJqWvWaMxi CUL30qb2dJyFGe1xz8cUjYKMe7XksSLx58KHeO+uR9JEGHIq1YWZdZU1NyIxtHE6 R9KuTVERHVTc58BURYfS1GpmvfurPqU3wPZUTJWIXR//spSVsfoDcsfnsbTjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGEcgD5E7UIUPM7UnQ5b2BY2KE88wHwYDVR0j BBgwFoAUAHyRsEn3NfcfK+jPkq6qU41rHwswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzFhZGE5ZS1lMmE5LTQwMGUtOGRmZi05YmU0ODFhYmE1ODMvMC8wMDdDOTFCMDQ5 RjczNUY3MUYyQkU4Q0Y5MkFFQUE1MzhENkIxRjBCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDA3QzkxQjA0OUY3MzVGNzFGMkJFOENGOTJBRUFBNTM4RDZC MUYwQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODcxYWRhOWUtZTJhOS00MDBlLThk ZmYtOWJlNDgxYWJhNTgzLzAvMDA3QzkxQjA0OUY3MzVGNzFGMkJFOENGOTJBRUFB NTM4RDZCMUYwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIT6b78/LyIgs89CvrBHBo2fk+vdFqi9tciS w2FMCaUkuCcBwQjy4TR9U+JWU3lmQ61H3QI8KgaIJS8P/piDSUgTmq93XtyWdirP MZismrtksBQXM+Rfrr9aFnL2QtrpM+JNNB9POTP+Tj4lod1FLk0pBah74zRM64im cF/YN+IJy6uOuqr6pxui6QbFFrV5IXeGDew58rZWlptYn5dmMujqSLFCHIhfE8T1 loLluqOftjez+/LsVM5Iphdk5eI6jCD82/yeys4/S4dN3evwNIXUUzcq5SV9K+Ca P+VgYrdv5xzIwZdIcS5BkaGyGMcEejcycJrL7FsNQaeeb8HnXo0= -----END CERTIFICATE-----Generated at Fri Sep 5 10:16:57 2025 by rpki-client