$ rpki-client -vvf repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.mft File: 7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.mft (raw, json) Hash identifier: VfL4xRJLZuDzH+OP4DGojZ/OPx/XBCwgJMpewActT1U= Subject key identifier: 89:AA:9B:F0:E2:20:82:A7:5B:3F:21:F4:AB:56:F7:4C:64:D3:C0:C7 Authority key identifier: 7C:4E:AC:B6:A8:C8:C7:27:6D:4C:EB:86:DC:DC:A3:E7:F4:68:A7:93 Certificate issuer: /CN=7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793 Certificate serial: 448F2189606172DC7E9C51215570B21E54D55871 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.mft Manifest number: D2 Signing time: Mon 21 Jul 2025 05:50:46 +0000 Manifest this update: Mon 21 Jul 2025 05:45:46 +0000 Manifest next update: Thu 24 Jul 2025 08:50:46 +0000 Files and hashes: 1: 7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.crl (hash: Yi5fCUbZsLphQY85h5uKa+r/4OwZv+61Wm3fHy7Hgg4=) 2: 3135372e32302e3231322e302f32332d3234203d3e20313532343135.roa (hash: rbjJyAwc8hNNHHozNUZcHui2yrJ3XRP3MxmsmjgubzQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.crl rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 08:50:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:8f:21:89:60:61:72:dc:7e:9c:51:21:55:70:b2:1e:54:d5:58:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793 Validity Not Before: Jul 21 05:45:46 2025 GMT Not After : Jul 24 08:50:46 2025 GMT Subject: CN=89AA9BF0E22082A75B3F21F4AB56F74C64D3C0C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:32:4d:9d:34:8b:20:f5:ff:42:d9:40:07:b6: 6d:92:b8:45:ea:8e:44:34:88:f9:c0:0d:0c:f0:4f: 01:82:e0:b1:f8:7b:64:66:da:95:e3:a4:6a:2d:23: 61:86:ef:69:ae:49:4f:ac:32:e5:70:72:dd:20:4d: 0f:cf:46:9d:6c:d6:c1:45:cc:39:98:e1:96:86:bd: 71:f4:00:5e:f4:07:1c:36:50:81:d4:39:d1:bf:2a: b7:8d:f1:86:72:73:fb:17:74:5e:0d:61:26:b2:b0: 07:ba:00:38:53:45:af:89:2a:73:f7:78:ae:42:9a: c7:14:2d:75:37:87:5c:51:aa:e4:0a:c0:6a:7c:17: 0c:df:a8:92:64:48:9e:aa:bf:54:d2:84:f8:65:f4: 1a:12:30:1c:70:c2:ad:7e:17:41:6b:5d:d4:15:fa: 49:a6:16:cf:06:57:bf:d4:2f:89:7d:24:b7:c2:6d: 54:42:53:32:c2:6c:4b:d4:42:25:2a:e3:70:a7:62: b8:1d:90:18:de:31:b1:e1:2f:10:3f:3b:d8:31:67: 86:54:c2:01:2e:3e:b7:6c:0b:b3:85:93:f3:0b:86: 91:47:2c:6c:8a:98:c1:7f:01:0e:3a:ec:1f:ae:be: 73:de:1c:5f:5e:c6:ba:78:ac:af:e1:14:87:d8:5b: d8:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:AA:9B:F0:E2:20:82:A7:5B:3F:21:F4:AB:56:F7:4C:64:D3:C0:C7 X509v3 Authority Key Identifier: keyid:7C:4E:AC:B6:A8:C8:C7:27:6D:4C:EB:86:DC:DC:A3:E7:F4:68:A7:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:cd:f3:b7:39:65:30:ed:bd:26:76:27:18:77:41:eb:45:aa: 7a:74:2e:5f:61:3a:81:d8:20:6e:43:51:42:75:d2:7c:59:5c: 06:bc:a9:6d:eb:19:04:7d:c3:de:9e:18:a3:59:02:6f:29:f8: f5:7d:51:43:63:9d:50:bf:56:9a:1e:4b:c1:42:f6:9c:76:60: 58:79:cd:35:c2:df:78:3a:e8:89:6b:13:8e:5f:95:38:7a:8f: 87:27:76:cc:65:b2:d4:2e:86:93:20:da:f6:c3:6d:6c:56:6a: 70:4c:4f:e6:b2:0f:1a:10:7c:c5:dc:8d:d2:53:bf:98:8f:32: 4c:56:64:af:ce:49:61:68:65:23:7b:1d:6e:1e:1b:28:44:bd: f4:39:d4:f7:76:3c:d6:32:21:9a:11:41:2e:22:98:a1:c8:aa: 89:0c:b1:2a:d1:c5:35:1e:c8:88:d4:ca:71:6d:ee:cd:b0:df: 2c:f6:c1:12:d9:be:fd:12:ef:81:01:42:2f:49:a2:6a:8c:a6: 9c:a5:fa:06:86:97:95:34:11:5d:4a:11:f8:41:a5:3c:0e:cf: 55:c7:6a:2c:41:5a:d0:e0:88:9a:0d:16:50:eb:8b:82:46:55: 88:3f:ad:31:9a:9b:48:f1:22:ae:57:23:59:7e:65:9c:5b:ae: bf:d8:86:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURI8hiWBhctx+nFEhVXCyHlTVWHEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M0RUFDQjZBOEM4QzcyNzZENENFQjg2RENEQ0EzRTdG NDY4QTc5MzAeFw0yNTA3MjEwNTQ1NDZaFw0yNTA3MjQwODUwNDZaMDMxMTAvBgNV BAMTKDg5QUE5QkYwRTIyMDgyQTc1QjNGMjFGNEFCNTZGNzRDNjREM0MwQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOMk2dNIsg9f9C2UAHtm2SuEXq jkQ0iPnADQzwTwGC4LH4e2Rm2pXjpGotI2GG72muSU+sMuVwct0gTQ/PRp1s1sFF zDmY4ZaGvXH0AF70Bxw2UIHUOdG/KreN8YZyc/sXdF4NYSaysAe6ADhTRa+JKnP3 eK5CmscULXU3h1xRquQKwGp8FwzfqJJkSJ6qv1TShPhl9BoSMBxwwq1+F0FrXdQV +kmmFs8GV7/UL4l9JLfCbVRCUzLCbEvUQiUq43CnYrgdkBjeMbHhLxA/O9gxZ4ZU wgEuPrdsC7OFk/MLhpFHLGyKmMF/AQ467B+uvnPeHF9exrp4rK/hFIfYW9ijAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiaqb8OIggqdbPyH0q1b3TGTTwMcwHwYDVR0j BBgwFoAUfE6stqjIxydtTOuG3Nyj5/Rop5MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2I0N2FiNi1kMWYxLTRkMmUtOWNmYy04MDg0YTRiYWNmMGIvMC83QzRFQUNCNkE4 QzhDNzI3NkQ0Q0VCODZEQ0RDQTNFN0Y0NjhBNzkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0M0RUFDQjZBOEM4QzcyNzZENENFQjg2RENEQ0EzRTdGNDY4 QTc5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNiNDdhYjYtZDFmMS00ZDJlLTlj ZmMtODA4NGE0YmFjZjBiLzAvN0M0RUFDQjZBOEM4QzcyNzZENENFQjg2RENEQ0Ez RTdGNDY4QTc5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIvN87c5ZTDtvSZ2Jxh3QetFqnp0Ll9hOoHY IG5DUUJ10nxZXAa8qW3rGQR9w96eGKNZAm8p+PV9UUNjnVC/VpoeS8FC9px2YFh5 zTXC33g66IlrE45flTh6j4cndsxlstQuhpMg2vbDbWxWanBMT+ayDxoQfMXcjdJT v5iPMkxWZK/OSWFoZSN7HW4eGyhEvfQ51Pd2PNYyIZoRQS4imKHIqokMsSrRxTUe yIjUynFt7s2w3yz2wRLZvv0S74EBQi9JomqMppyl+gaGl5U0EV1KEfhBpTwOz1XH aixBWtDgiJoNFlDri4JGVYg/rTGam0jxIq5XI1l+ZZxbrr/Yhmc= -----END CERTIFICATE-----Generated at Wed Jul 23 05:59:52 2025 by rpki-client