$ rpki-client -vvf repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/7FAD2077691F807236683910594F23BA68280CD9.mft File: 7FAD2077691F807236683910594F23BA68280CD9.mft (raw, json) Hash identifier: MzSQ1B9u6SeX0pujJBu5ArZE6kO6jHpDA3ymEl8zo1I= Subject key identifier: 80:29:6E:26:98:EC:E3:B0:44:F8:C1:09:CB:1B:5B:47:3E:99:87:E9 Authority key identifier: 7F:AD:20:77:69:1F:80:72:36:68:39:10:59:4F:23:BA:68:28:0C:D9 Certificate issuer: /CN=7FAD2077691F807236683910594F23BA68280CD9 Certificate serial: 2AC748E95A257C264B26758B455D9DCF858D16BC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FAD2077691F807236683910594F23BA68280CD9.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/7FAD2077691F807236683910594F23BA68280CD9.mft Manifest number: 04F0 Signing time: Wed 23 Jul 2025 08:21:50 +0000 Manifest this update: Wed 23 Jul 2025 08:16:50 +0000 Manifest next update: Sat 26 Jul 2025 10:46:50 +0000 Files and hashes: 1: 3130332e3134372e33302e302f32342d3234203d3e20313333383033.roa (hash: inn5/pTXe326JcI/eQLFFh0GJuSiHNACA3LyQlZzv0k=) 2: 323030313a6466323a376638303a3a2f34382d3438203d3e20313333383033.roa (hash: tl64BNKIeWPiWplSwphcJa2kjFiO8+8RBPcNGp3Fo5U=) 3: 3130332e34342e3134392e302f32342d3234203d3e20313333383033.roa (hash: +izo906qJR0//zszVUjaR0jf7ZrrEtZEmo5pUlJJNLQ=) 4: 7FAD2077691F807236683910594F23BA68280CD9.crl (hash: 42T2u2FHEER8/ZRkEofrqgUhbUyYT8vhcnfwKS+c5D8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/7FAD2077691F807236683910594F23BA68280CD9.crl rsync://repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/7FAD2077691F807236683910594F23BA68280CD9.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FAD2077691F807236683910594F23BA68280CD9.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 26 Jul 2025 10:46:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:c7:48:e9:5a:25:7c:26:4b:26:75:8b:45:5d:9d:cf:85:8d:16:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7FAD2077691F807236683910594F23BA68280CD9 Validity Not Before: Jul 23 08:16:50 2025 GMT Not After : Jul 26 10:46:50 2025 GMT Subject: CN=80296E2698ECE3B044F8C109CB1B5B473E9987E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:e0:da:ee:3d:65:e9:ec:e9:9f:57:3a:1f:b6: 38:cc:95:03:8e:ab:f7:9e:77:34:92:a9:da:92:ff: 29:16:26:92:40:c5:1d:42:ce:a4:a8:a3:e1:1d:67: ca:07:4b:a1:64:db:43:2f:82:f5:ff:a4:db:4e:ef: 52:3f:a6:e3:b3:0d:ef:23:59:41:25:96:e5:31:61: 44:cb:b0:73:49:1e:db:0b:68:ef:48:d7:5b:78:45: 91:df:51:2a:86:2e:d3:9c:19:94:ff:ce:76:d7:88: 51:85:3a:f4:b5:2a:04:a8:00:76:06:56:e7:4c:0d: 89:b2:a3:56:d2:cb:80:60:fe:9a:0a:13:61:70:cc: 32:5c:07:eb:e3:8f:5c:9b:10:54:8a:e1:74:f7:d4: d5:b7:6b:31:89:bb:92:c8:1f:bf:4e:74:c7:66:8e: 1d:c7:98:95:37:38:1e:93:79:24:9b:ac:c4:04:84: ff:74:90:21:c7:38:f7:7f:b1:87:66:3b:df:17:e0: 0a:63:fb:a6:3e:5d:45:d4:bb:de:1e:dc:0b:e1:e5: a3:c6:10:3f:ef:1a:47:0e:cd:a0:d1:f1:40:4a:85: 10:24:ca:c1:4b:4f:11:7c:bb:e9:ef:85:6c:93:8c: c3:e1:f9:20:7d:d1:fe:e2:91:65:96:bf:d3:b3:8d: 64:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:29:6E:26:98:EC:E3:B0:44:F8:C1:09:CB:1B:5B:47:3E:99:87:E9 X509v3 Authority Key Identifier: keyid:7F:AD:20:77:69:1F:80:72:36:68:39:10:59:4F:23:BA:68:28:0C:D9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/7FAD2077691F807236683910594F23BA68280CD9.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FAD2077691F807236683910594F23BA68280CD9.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ca75b741-846a-4330-9659-05ffe82698ee/0/7FAD2077691F807236683910594F23BA68280CD9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:db:4c:28:c1:31:1d:85:71:81:c3:77:00:da:8c:ef:50:47: 2a:df:da:b7:c7:4d:7c:9f:6c:44:c0:4f:71:87:5c:2f:e1:fe: c5:45:d0:51:77:7d:4e:72:59:8b:d8:4d:91:2c:92:0a:11:21: ad:7a:7b:74:79:bb:05:ea:77:54:7e:55:59:1d:d7:a1:c0:98: e0:b8:56:c0:9e:eb:99:5a:71:e3:9e:3c:c1:b5:77:b5:d0:d8: df:64:a8:2a:d6:50:de:96:bc:5d:28:63:01:8a:50:66:b7:78: c2:73:a0:a2:e0:4e:31:ae:d9:58:7f:a4:1b:5f:f6:6f:65:e4: 7b:2d:44:fb:87:c3:c9:d3:5d:4a:13:10:06:3e:4a:96:54:f7: 11:3b:0f:c4:11:75:6c:f6:26:7d:a5:4c:19:52:a1:e1:66:cb: 90:09:67:f0:c9:62:4a:2f:34:fc:73:a7:7a:49:a3:6a:0e:c7: d3:26:51:19:13:89:66:4a:7f:f1:40:91:26:23:74:81:6d:f8: fe:9a:0f:18:2d:21:30:d4:a6:88:01:4c:e1:b4:44:f0:53:12: 19:cb:34:de:a6:9c:33:68:79:ac:92:27:fa:85:88:95:5c:35: 11:64:ed:47:1d:f7:9a:b0:51:8e:ef:04:0d:28:51:02:50:ca: 58:69:e2:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKsdI6VolfCZLJnWLRV2dz4WNFrwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ZBRDIwNzc2OTFGODA3MjM2NjgzOTEwNTk0RjIzQkE2 ODI4MENEOTAeFw0yNTA3MjMwODE2NTBaFw0yNTA3MjYxMDQ2NTBaMDMxMTAvBgNV BAMTKDgwMjk2RTI2OThFQ0UzQjA0NEY4QzEwOUNCMUI1QjQ3M0U5OTg3RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB4NruPWXp7OmfVzoftjjMlQOO q/eedzSSqdqS/ykWJpJAxR1CzqSoo+EdZ8oHS6Fk20MvgvX/pNtO71I/puOzDe8j WUElluUxYUTLsHNJHtsLaO9I11t4RZHfUSqGLtOcGZT/znbXiFGFOvS1KgSoAHYG VudMDYmyo1bSy4Bg/poKE2FwzDJcB+vjj1ybEFSK4XT31NW3azGJu5LIH79OdMdm jh3HmJU3OB6TeSSbrMQEhP90kCHHOPd/sYdmO98X4Apj+6Y+XUXUu94e3Avh5aPG ED/vGkcOzaDR8UBKhRAkysFLTxF8u+nvhWyTjMPh+SB90f7ikWWWv9OzjWTvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgCluJpjs47BE+MEJyxtbRz6Zh+kwHwYDVR0j BBgwFoAUf60gd2kfgHI2aDkQWU8jumgoDNkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j YTc1Yjc0MS04NDZhLTQzMzAtOTY1OS0wNWZmZTgyNjk4ZWUvMC83RkFEMjA3NzY5 MUY4MDcyMzY2ODM5MTA1OTRGMjNCQTY4MjgwQ0Q5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0ZBRDIwNzc2OTFGODA3MjM2NjgzOTEwNTk0RjIzQkE2ODI4 MENEOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2E3NWI3NDEtODQ2YS00MzMwLTk2 NTktMDVmZmU4MjY5OGVlLzAvN0ZBRDIwNzc2OTFGODA3MjM2NjgzOTEwNTk0RjIz QkE2ODI4MENEOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJvbTCjBMR2FcYHDdwDajO9QRyrf2rfHTXyf bETAT3GHXC/h/sVF0FF3fU5yWYvYTZEskgoRIa16e3R5uwXqd1R+VVkd16HAmOC4 VsCe65laceOePMG1d7XQ2N9kqCrWUN6WvF0oYwGKUGa3eMJzoKLgTjGu2Vh/pBtf 9m9l5HstRPuHw8nTXUoTEAY+SpZU9xE7D8QRdWz2Jn2lTBlSoeFmy5AJZ/DJYkov NPxzp3pJo2oOx9MmURkTiWZKf/FAkSYjdIFt+P6aDxgtITDUpogBTOG0RPBTEhnL NN6mnDNoeaySJ/qFiJVcNRFk7Ucd95qwUY7vBA0oUQJQylhp4uU= -----END CERTIFICATE-----Generated at Fri Jul 25 06:46:26 2025 by rpki-client