$ rpki-client -vvf repo-rpki.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.mft File: 7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.mft (raw, json) Hash identifier: uU2f1OegQ00ZfSZILb6iFXzTn6YntuhceFk1E4MxwXU= Subject key identifier: 5B:C2:C6:21:2C:C0:4D:2B:43:EE:D6:D9:E5:7E:B2:A0:C8:B3:4B:64 Authority key identifier: 7B:9F:50:72:2E:E5:D5:DB:8D:F5:52:ED:32:CB:87:64:B6:4F:A9:02 Certificate issuer: /CN=7B9F50722EE5D5DB8DF552ED32CB8764B64FA902 Certificate serial: 7E1898C638CB3478F0D52D76896EAC62D875272B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.mft Manifest number: 0124 Signing time: Sat 06 Sep 2025 20:21:22 +0000 Manifest this update: Sat 06 Sep 2025 20:16:22 +0000 Manifest next update: Wed 10 Sep 2025 01:46:22 +0000 Files and hashes: 1: 7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.crl (hash: iEP36NLARLzEx7mdIXLalUmcIyPXeqCTot/GROoC4f4=) 2: 3130332e3138332e3130302e302f32332d3234203d3e20313439363730.roa (hash: yiCed47rij8JKBeE3LnFg4bu0GswlQuJzHtNLOvn0lo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.crl rsync://repo-rpki.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 01:46:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:18:98:c6:38:cb:34:78:f0:d5:2d:76:89:6e:ac:62:d8:75:27:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B9F50722EE5D5DB8DF552ED32CB8764B64FA902 Validity Not Before: Sep 6 20:16:22 2025 GMT Not After : Sep 10 01:46:22 2025 GMT Subject: CN=5BC2C6212CC04D2B43EED6D9E57EB2A0C8B34B64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:d8:9a:46:ea:c4:5b:e2:1d:b9:ee:6c:c3:ba: ee:5d:73:03:0c:ed:d9:88:96:31:fd:d1:12:7a:83: 66:71:75:96:04:f2:a2:8e:89:9d:2e:37:65:85:39: 47:6e:4d:38:e6:de:50:c2:79:6f:b5:20:56:c8:f2: 7a:4a:4d:87:b5:6e:c0:5d:1f:49:28:80:c2:e9:5a: 3b:10:58:03:c1:42:07:d4:28:8a:00:37:bf:33:d0: c4:8b:d4:5a:4a:8f:cd:e8:3a:c0:1e:7b:6f:a0:c4: 60:27:24:a3:63:e5:f0:85:7e:80:3c:dc:e0:0e:04: fe:c3:f3:9f:ac:a7:ed:16:de:13:08:3b:88:ab:c1: b5:5d:14:46:46:ab:c5:74:b2:b1:e0:4a:82:88:5e: d1:e1:40:fe:96:96:29:27:63:26:ca:06:0e:08:30: 44:de:8a:44:31:35:f8:9d:9c:6a:fb:f7:b4:9e:2a: 43:c7:26:47:93:d7:1c:f9:97:c6:70:e2:87:9b:27: 1f:61:28:c1:88:b2:e3:21:18:b5:91:b1:ae:a1:07: a4:be:63:c1:96:ca:be:5f:3e:de:f4:42:45:9d:83: 5d:9c:c5:0a:63:a5:b1:c4:20:3a:cd:f5:49:13:66: a9:87:e4:74:23:84:50:52:14:33:44:4e:9d:98:d1: 15:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:C2:C6:21:2C:C0:4D:2B:43:EE:D6:D9:E5:7E:B2:A0:C8:B3:4B:64 X509v3 Authority Key Identifier: keyid:7B:9F:50:72:2E:E5:D5:DB:8D:F5:52:ED:32:CB:87:64:B6:4F:A9:02 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce3d8c03-17bb-4cab-8526-118f587dcc09/0/7B9F50722EE5D5DB8DF552ED32CB8764B64FA902.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:d5:57:19:dc:52:24:da:41:6f:7a:c6:09:42:a1:91:84:2f: 3f:37:23:54:4c:90:95:92:e1:3f:1c:be:d7:ee:ce:19:82:95: f6:ad:d3:06:56:11:b1:d5:5f:57:86:17:12:bf:43:ab:45:57: 0c:33:df:b8:85:0b:8a:50:8d:3a:7f:78:51:86:38:d4:6e:87: c0:4d:a1:d9:64:da:1a:9b:a9:82:86:b2:bc:64:72:a1:85:2d: e7:f4:ca:ee:9f:e5:c8:b8:44:ab:59:96:ee:05:3f:03:59:98: 47:88:ca:bf:6c:32:6a:ad:ab:52:d5:a9:78:0f:60:7d:ae:28: 62:b6:14:d8:9e:17:e1:0e:d6:99:79:25:a5:c3:69:6f:0a:6e: 7c:96:6b:eb:f6:ec:5d:9c:81:29:e0:87:e4:98:ad:aa:62:ba: be:d9:b0:72:36:1b:c1:49:21:9d:f2:cc:7b:72:f1:67:35:3f: 53:c8:83:bb:ca:4b:ae:e1:df:45:1a:b5:f2:65:fc:2a:b1:00: 33:a9:5a:53:9e:cd:76:cf:d5:e6:04:13:90:79:48:76:98:7c: 7b:04:22:a2:94:b7:8f:23:b1:fc:7d:f2:e3:d3:fc:8e:b4:cc: f3:9d:70:0b:c0:48:7d:3e:d9:01:10:48:eb:21:f6:5f:2d:9d: 21:a3:41:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfhiYxjjLNHjw1S12iW6sYth1JyswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0I5RjUwNzIyRUU1RDVEQjhERjU1MkVEMzJDQjg3NjRC NjRGQTkwMjAeFw0yNTA5MDYyMDE2MjJaFw0yNTA5MTAwMTQ2MjJaMDMxMTAvBgNV BAMTKDVCQzJDNjIxMkNDMDREMkI0M0VFRDZEOUU1N0VCMkEwQzhCMzRCNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCm2JpG6sRb4h257mzDuu5dcwMM 7dmIljH90RJ6g2ZxdZYE8qKOiZ0uN2WFOUduTTjm3lDCeW+1IFbI8npKTYe1bsBd H0kogMLpWjsQWAPBQgfUKIoAN78z0MSL1FpKj83oOsAee2+gxGAnJKNj5fCFfoA8 3OAOBP7D85+sp+0W3hMIO4irwbVdFEZGq8V0srHgSoKIXtHhQP6WliknYybKBg4I METeikQxNfidnGr797SeKkPHJkeT1xz5l8Zw4oebJx9hKMGIsuMhGLWRsa6hB6S+ Y8GWyr5fPt70QkWdg12cxQpjpbHEIDrN9UkTZqmH5HQjhFBSFDNETp2Y0RVnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW8LGISzATStD7tbZ5X6yoMizS2QwHwYDVR0j BBgwFoAUe59Qci7l1duN9VLtMsuHZLZPqQIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZTNkOGMwMy0xN2JiLTRjYWItODUyNi0xMThmNTg3ZGNjMDkvMC83QjlGNTA3MjJF RTVENURCOERGNTUyRUQzMkNCODc2NEI2NEZBOTAyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0I5RjUwNzIyRUU1RDVEQjhERjU1MkVEMzJDQjg3NjRCNjRG QTkwMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2UzZDhjMDMtMTdiYi00Y2FiLTg1 MjYtMTE4ZjU4N2RjYzA5LzAvN0I5RjUwNzIyRUU1RDVEQjhERjU1MkVEMzJDQjg3 NjRCNjRGQTkwMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF7VVxncUiTaQW96xglCoZGELz83I1RMkJWS 4T8cvtfuzhmClfat0wZWEbHVX1eGFxK/Q6tFVwwz37iFC4pQjTp/eFGGONRuh8BN odlk2hqbqYKGsrxkcqGFLef0yu6f5ci4RKtZlu4FPwNZmEeIyr9sMmqtq1LVqXgP YH2uKGK2FNieF+EO1pl5JaXDaW8KbnyWa+v27F2cgSngh+SYrapiur7ZsHI2G8FJ IZ3yzHty8Wc1P1PIg7vKS67h30UatfJl/CqxADOpWlOezXbP1eYEE5B5SHaYfHsE IqKUt48jsfx98uPT/I60zPOdcAvASH0+2QEQSOsh9l8tnSGjQdA= -----END CERTIFICATE-----Generated at Sun Sep 7 13:45:13 2025 by rpki-client