$ rpki-client -vvf repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft File: 7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft (raw, json) Hash identifier: uhKg5OtDDVKt62Ix8SZe/4RFpHQ1kwfitdHB8yD+wOQ= Subject key identifier: B4:1D:EE:33:24:F7:06:69:8D:A7:05:1B:49:9A:8B:38:18:73:4F:B8 Authority key identifier: 7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67 Certificate issuer: /CN=7D64B8F4CFB687141137D10F9E73FFD0BAB93F67 Certificate serial: 4770FEB5096142B716F63FF9014F54C5431BBA87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer Subject info access: rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft Manifest number: 02C3 Signing time: Thu 04 Sep 2025 19:02:17 +0000 Manifest this update: Thu 04 Sep 2025 18:57:17 +0000 Manifest next update: Mon 08 Sep 2025 01:09:17 +0000 Files and hashes: 1: 7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl (hash: boLWnHDETKwzoG23THtWDCQVAXRwHjltdmupuLorZeI=) 2: 323430313a383434303a33313a3a2f34382d3438203d3e20313336313331.roa (hash: imoDv7fNxiS0ABFe1mnjo4w6QxU9zgowGM6VjXLrifM=) 3: 3130332e39372e37362e302f32342d3234203d3e20313336313331.roa (hash: b5FyLXJvwHGEGWwekDTqeQDenx7rZLagZD5M467u+1w=) 4: 3130332e39372e37382e302f32342d3234203d3e20313336313331.roa (hash: gTWqsHLXGzmwOn5oUbLdKwsFxUOTG6JntDETCN1uoJg=) 5: 323430313a383434303a3331313a3a2f34382d3438203d3e20313336313331.roa (hash: uNKV4J4iyB42iT7YiJbc/obq8TacFQRWwVPHqjYHdt4=) 6: 323430313a383434303a3233313a3a2f34382d3438203d3e20313336313331.roa (hash: 9q0QjNfZ8ZidXQKSI35eyNIOpPTa4MZHY+H9XcdTGqQ=) 7: 3130332e39372e37392e302f32342d3234203d3e20313336313331.roa (hash: eRLttmDRe4S/HXjiFUVifbleZv0UdgB6j9QBQFrEFVw=) 8: 323430313a383434303a3133313a3a2f34382d3438203d3e20313336313331.roa (hash: 7XF+7tNQBQV2Wy0AsX8lBCySJ+ATYXgli7NY4z4VmfM=) 9: 3130332e39372e37372e302f32342d3234203d3e20313336313331.roa (hash: audNLou8WkSNI41O6Bj42zTe5yNLL3IkDF/evFV7jOs=) 10: 323430313a383434303a3a2f33322d3332203d3e20313336313331.roa (hash: J/TKA4DxZMeIQk5lGShBOGO9FvcMo90L9nK349bvEzs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 01:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:70:fe:b5:09:61:42:b7:16:f6:3f:f9:01:4f:54:c5:43:1b:ba:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D64B8F4CFB687141137D10F9E73FFD0BAB93F67 Validity Not Before: Sep 4 18:57:17 2025 GMT Not After : Sep 8 01:09:17 2025 GMT Subject: CN=B41DEE3324F706698DA7051B499A8B3818734FB8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2b:d4:4c:14:91:14:b8:1f:5c:5f:4b:db:db: 79:91:7d:5c:11:c9:77:d7:e3:59:e9:8e:6f:52:ee: 47:12:c1:b1:59:a5:8a:ec:03:0e:d9:7a:db:d1:ac: 72:07:7c:71:1d:ff:9c:a4:c7:c1:fa:81:39:41:e7: ce:ee:ff:69:ac:91:63:81:93:5a:b3:6e:45:8e:33: f4:6a:8f:f1:3b:9c:1f:c1:b8:0a:b3:4c:45:57:d0: c2:3b:a6:93:01:64:93:b0:85:ec:43:57:b6:04:90: fd:d8:d0:44:f8:54:72:7a:27:6f:ce:7a:89:44:f4: a9:da:39:15:80:bf:e4:59:00:dc:a3:61:cd:8b:7b: dd:6e:f5:6c:7d:98:9b:89:21:07:2b:f1:07:4d:3f: c6:37:2d:3a:c6:f8:37:ad:24:50:b4:41:85:f3:4e: 48:27:d7:12:b5:78:7b:85:30:5e:da:1f:b0:e1:76: ff:89:0f:f8:32:5e:88:63:40:05:d7:26:90:ea:ad: 24:0e:c9:47:f7:7b:53:fb:ca:42:d1:79:77:b9:76: a7:28:70:22:a8:94:86:ee:9e:55:05:8d:af:2d:63: 16:73:4f:63:13:e9:b2:0b:a9:c8:06:b5:b8:2a:8b: c9:52:8b:6c:81:6a:44:d6:90:a2:06:4f:13:49:92: 6b:31 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B4:1D:EE:33:24:F7:06:69:8D:A7:05:1B:49:9A:8B:38:18:73:4F:B8 X509v3 Authority Key Identifier: keyid:7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:d3:6c:cc:dc:3d:f9:2d:42:5f:b6:f4:47:13:2d:7c:02:c2: da:2c:21:f0:1f:7d:9f:bc:7e:54:76:37:1e:64:a8:b4:07:f7: 3e:ee:2a:11:9d:92:5c:7b:70:ac:37:03:4a:dc:be:ca:b0:81: cd:c5:2b:1e:a7:21:bb:71:f0:d5:07:e6:9a:5f:3b:06:51:ce: a8:2e:df:db:45:df:81:d7:53:cc:e0:e9:37:29:ae:30:cb:b8: f9:69:52:1a:8c:df:c8:55:b8:39:26:2d:b3:39:54:c6:34:e4: f1:f0:90:92:aa:b5:11:c9:ff:2a:cb:05:a0:8c:46:23:bb:91: 73:3b:db:2d:f9:9a:e4:9c:58:ad:2b:4a:14:8c:75:8f:39:70: 0b:d1:82:ed:de:a9:cf:62:ec:fb:01:c6:2e:7a:e3:c2:d0:fb: 9c:51:8d:58:9d:38:4f:7c:da:21:2a:0c:07:c8:d8:24:c8:97: 3e:d5:77:a7:8b:09:d4:5f:ad:b8:f0:b2:e0:6e:9b:9d:51:30: 03:53:95:b8:f1:e8:e8:63:6b:4f:2b:05:ac:3f:6b:4f:a6:f9: ce:76:68:32:a8:cc:0b:fc:e3:2a:e5:e8:f6:b1:18:69:53:2d: 3a:c4:0c:48:8e:a5:3f:72:7a:e8:a4:0f:60:db:b7:c6:68:79: b8:97:bc:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR3D+tQlhQrcW9j/5AU9UxUMbuocwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZGRDBC QUI5M0Y2NzAeFw0yNTA5MDQxODU3MTdaFw0yNTA5MDgwMTA5MTdaMDMxMTAvBgNV BAMTKEI0MURFRTMzMjRGNzA2Njk4REE3MDUxQjQ5OUE4QjM4MTg3MzRGQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+K9RMFJEUuB9cX0vb23mRfVwR yXfX41npjm9S7kcSwbFZpYrsAw7ZetvRrHIHfHEd/5ykx8H6gTlB587u/2mskWOB k1qzbkWOM/Rqj/E7nB/BuAqzTEVX0MI7ppMBZJOwhexDV7YEkP3Y0ET4VHJ6J2/O eolE9KnaORWAv+RZANyjYc2Le91u9Wx9mJuJIQcr8QdNP8Y3LTrG+DetJFC0QYXz Tkgn1xK1eHuFMF7aH7Dhdv+JD/gyXohjQAXXJpDqrSQOyUf3e1P7ykLReXe5dqco cCKolIbunlUFja8tYxZzT2MT6bILqcgGtbgqi8lSi2yBakTWkKIGTxNJkmsxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtB3uMyT3BmmNpwUbSZqLOBhzT7gwHwYDVR0j BBgwFoAUfWS49M+2hxQRN9EPnnP/0Lq5P2cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTdiMGQ3ZS1lYWRlLTQzMTgtYWIyMC04YzdmMmQ1YmU2OWYvMC83RDY0QjhGNENG QjY4NzE0MTEzN0QxMEY5RTczRkZEMEJBQjkzRjY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZGRDBCQUI5 M0Y2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTU3YjBkN2UtZWFkZS00MzE4LWFi MjAtOGM3ZjJkNWJlNjlmLzAvN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZG RDBCQUI5M0Y2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJzTbMzcPfktQl+29EcTLXwCwtosIfAffZ+8 flR2Nx5kqLQH9z7uKhGdklx7cKw3A0rcvsqwgc3FKx6nIbtx8NUH5ppfOwZRzqgu 39tF34HXU8zg6TcprjDLuPlpUhqM38hVuDkmLbM5VMY05PHwkJKqtRHJ/yrLBaCM RiO7kXM72y35muScWK0rShSMdY85cAvRgu3eqc9i7PsBxi5648LQ+5xRjVidOE98 2iEqDAfI2CTIlz7Vd6eLCdRfrbjwsuBum51RMANTlbjx6Ohja08rBaw/a0+m+c52 aDKozAv84yrl6PaxGGlTLTrEDEiOpT9yeuikD2Dbt8ZoebiXvPs= -----END CERTIFICATE-----Generated at Fri Sep 5 12:47:01 2025 by rpki-client