$ rpki-client -vvf repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft File: 7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft (raw, json) Hash identifier: 2HVUEL9Tl6gV8c8oYBky3qZwng4r73OsHD25fC/TwO4= Subject key identifier: 98:A9:33:6C:A6:38:87:15:4F:60:13:8A:75:EF:A1:22:8F:B7:3E:9A Authority key identifier: 7E:F8:9B:45:69:2D:93:E9:CA:15:DA:4C:F9:D4:39:30:06:32:EF:D4 Certificate issuer: /CN=7EF89B45692D93E9CA15DA4CF9D439300632EFD4 Certificate serial: 224082B5F5409BC67CF776340B393E5137D56859 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft Manifest number: 0222 Signing time: Sat 23 Aug 2025 02:30:03 +0000 Manifest this update: Sat 23 Aug 2025 02:25:03 +0000 Manifest next update: Tue 26 Aug 2025 11:51:03 +0000 Files and hashes: 1: 3130332e3138302e35382e302f32342d3234203d3e2039333431.roa (hash: FdloWvzwT5E7bV0h2MrBbwdyadkn1oI1JIyg7UwS1zQ=) 2: 7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl (hash: N6aZWFxPRXOV9689VHo+S7Q8jU2zhYr17zwx0nfU5HU=) 3: 3130332e3138302e35392e302f32342d3234203d3e2039333431.roa (hash: i2rSOVglupsSuL0ZoSXVd/tHmiF7pW8+dps3wslED5c=) 4: 3130332e3138302e35382e302f32332d3233203d3e2039333431.roa (hash: lr7nUWH/7raRlFDZhAD65ANTChYQYYLQIg/z8dK94J4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:40:82:b5:f5:40:9b:c6:7c:f7:76:34:0b:39:3e:51:37:d5:68:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EF89B45692D93E9CA15DA4CF9D439300632EFD4 Validity Not Before: Aug 23 02:25:03 2025 GMT Not After : Aug 26 11:51:03 2025 GMT Subject: CN=98A9336CA63887154F60138A75EFA1228FB73E9A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:a0:49:32:ec:28:54:e5:2c:4f:bc:18:d9:dc: 9e:99:fb:44:11:ab:61:08:fb:3c:1f:c9:08:5f:f9: b7:f6:d0:0c:36:13:d1:1f:ae:f1:fe:fe:0a:48:f8: 31:05:73:8e:97:52:8f:8e:6a:69:d6:c7:2e:74:40: 91:53:7e:91:f0:6f:b8:d0:22:5b:dd:c5:52:a5:cf: fa:ba:75:ee:3b:61:7a:0f:a4:03:dc:56:27:02:1b: 00:81:6d:bf:fa:05:e1:b0:5d:51:8b:12:95:c7:02: fa:8b:4c:0e:3f:5a:4a:3f:89:fd:d0:77:e9:a4:5e: c7:68:d6:b3:fc:23:c1:de:74:c4:c1:6f:7f:0e:39: 12:40:38:23:b9:10:c7:ec:94:e9:1b:43:f0:de:30: 93:56:cc:96:51:f2:3f:37:5e:11:10:e1:18:cb:ff: 73:62:e0:42:a8:c7:79:a7:3e:e6:1d:e1:b9:af:8f: 2e:8b:ff:da:00:64:56:9d:5c:1b:7c:3a:6a:f9:2a: 82:64:25:f5:0d:e4:69:33:f3:65:bb:1b:f6:8b:50: 33:90:4c:a7:33:45:65:18:e5:67:84:3c:a5:16:b3: 5b:76:14:b5:a8:53:24:10:33:54:64:df:c6:8d:e3: 56:9a:e2:7d:03:ad:87:28:5d:18:a5:05:34:93:60: b1:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:A9:33:6C:A6:38:87:15:4F:60:13:8A:75:EF:A1:22:8F:B7:3E:9A X509v3 Authority Key Identifier: keyid:7E:F8:9B:45:69:2D:93:E9:CA:15:DA:4C:F9:D4:39:30:06:32:EF:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:b1:78:98:d0:d5:9c:dc:6b:7e:d6:d6:47:fe:56:ba:66:f2: 6f:6b:05:97:19:0e:31:bf:e1:08:74:5d:13:25:55:62:2f:41: e4:6e:b7:07:b0:03:2c:72:1c:9d:63:cc:27:be:6e:31:60:42: 89:ab:2a:70:68:a7:38:84:3e:1d:f5:89:fc:3f:b4:2c:ed:01: 7f:a0:b0:32:a2:13:5a:7b:27:d6:f6:6e:20:67:ca:84:d0:cd: e1:09:05:93:54:f3:0a:c3:7c:69:1e:61:bb:66:de:1c:b9:1a: 47:66:ff:82:cf:53:d3:35:09:38:46:0b:82:41:7f:79:ec:59: dd:ac:2d:bd:8e:a0:2f:89:7c:d5:cb:db:77:98:3b:32:db:c8: b9:36:78:42:c4:9e:f1:82:00:1b:3b:0d:52:1f:a1:bf:2c:52: 61:b7:43:3a:c4:83:8b:34:5a:76:bc:d7:fc:6c:ba:39:de:59: ed:05:af:2d:de:93:e1:d8:a9:93:e2:43:fe:3d:18:13:43:82: 03:38:53:98:e7:87:77:14:c2:bb:e2:4c:48:bd:bb:b5:98:24: 04:29:ad:92:8e:cc:37:00:64:0a:c9:a0:26:5e:dd:9d:b1:5e: 32:cb:8c:c1:bd:b0:39:2e:5f:fd:ae:5b:eb:d9:1c:60:f0:53: 14:b4:77:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIkCCtfVAm8Z893Y0Czk+UTfVaFkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VGODlCNDU2OTJEOTNFOUNBMTVEQTRDRjlENDM5MzAw NjMyRUZENDAeFw0yNTA4MjMwMjI1MDNaFw0yNTA4MjYxMTUxMDNaMDMxMTAvBgNV BAMTKDk4QTkzMzZDQTYzODg3MTU0RjYwMTM4QTc1RUZBMTIyOEZCNzNFOUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGoEky7ChU5SxPvBjZ3J6Z+0QR q2EI+zwfyQhf+bf20Aw2E9EfrvH+/gpI+DEFc46XUo+OamnWxy50QJFTfpHwb7jQ IlvdxVKlz/q6de47YXoPpAPcVicCGwCBbb/6BeGwXVGLEpXHAvqLTA4/Wko/if3Q d+mkXsdo1rP8I8HedMTBb38OORJAOCO5EMfslOkbQ/DeMJNWzJZR8j83XhEQ4RjL /3Ni4EKox3mnPuYd4bmvjy6L/9oAZFadXBt8Omr5KoJkJfUN5Gkz82W7G/aLUDOQ TKczRWUY5WeEPKUWs1t2FLWoUyQQM1Rk38aN41aa4n0DrYcoXRilBTSTYLEBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmKkzbKY4hxVPYBOKde+hIo+3PpowHwYDVR0j BBgwFoAUfvibRWktk+nKFdpM+dQ5MAYy79QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NzFhODQ3ZC0yNTMxLTRkN2YtOTI0MS05Nzc3ODUwNjA1ZDYvMC83RUY4OUI0NTY5 MkQ5M0U5Q0ExNURBNENGOUQ0MzkzMDA2MzJFRkQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0VGODlCNDU2OTJEOTNFOUNBMTVEQTRDRjlENDM5MzAwNjMy RUZENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTcxYTg0N2QtMjUzMS00ZDdmLTky NDEtOTc3Nzg1MDYwNWQ2LzAvN0VGODlCNDU2OTJEOTNFOUNBMTVEQTRDRjlENDM5 MzAwNjMyRUZENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGWxeJjQ1Zzca37W1kf+Vrpm8m9rBZcZDjG/ 4Qh0XRMlVWIvQeRutwewAyxyHJ1jzCe+bjFgQomrKnBopziEPh31ifw/tCztAX+g sDKiE1p7J9b2biBnyoTQzeEJBZNU8wrDfGkeYbtm3hy5Gkdm/4LPU9M1CThGC4JB f3nsWd2sLb2OoC+JfNXL23eYOzLbyLk2eELEnvGCABs7DVIfob8sUmG3QzrEg4s0 Wna81/xsujneWe0Fry3ek+HYqZPiQ/49GBNDggM4U5jnh3cUwrviTEi9u7WYJAQp rZKOzDcAZArJoCZe3Z2xXjLLjMG9sDkuX/2uW+vZHGDwUxS0d28= -----END CERTIFICATE-----Generated at Sat Aug 23 12:25:52 2025 by rpki-client