$ rpki-client -vvf repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft File: 7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft (raw, json) Hash identifier: Ac92rXU+AbuRXiuom5RWPt33uVnARSkiOcOtu3FCNug= Subject key identifier: 5B:D2:C7:5A:BC:61:5A:85:B9:22:66:FF:28:DF:E6:38:ED:80:16:3C Authority key identifier: 7E:FA:64:C1:15:73:C2:92:E1:92:C2:CD:EA:C4:D5:F8:B8:C2:1D:BD Certificate issuer: /CN=7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD Certificate serial: 61557BC00B716C9FF6A233981955E27A85B37385 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft Manifest number: 04FD Signing time: Sat 23 Aug 2025 08:52:20 +0000 Manifest this update: Sat 23 Aug 2025 08:47:20 +0000 Manifest next update: Tue 26 Aug 2025 11:16:20 +0000 Files and hashes: 1: 3130332e31392e35362e302f32342d3234203d3e20313332363337.roa (hash: 1GyJK6Rqd4FApqF94uFU3YdEq/5dWlAXo/swD/OMmMQ=) 2: 3130332e31392e35382e302f32342d3234203d3e20313332363337.roa (hash: Pfzw8Y0xsuh7UKTJV02Yk1orDZhcKdBrnY+4Hy9M/Ss=) 3: 3130332e31392e35392e302f32342d3234203d3e20313332363337.roa (hash: 9iu7ypE0DOgzIq5HMAnIVo4kGKAs2AlVlOiv5hSXbmQ=) 4: 323430323a333263303a3a2f33322d3332203d3e20313332363337.roa (hash: alekTqBBNWqAI5oX1dPM5eFA94/uemvvhURj4TPNUr4=) 5: 7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.crl (hash: jB1ekffy6wNH74Fyxy0nno2ubh0PJErZx6mWxeK0HOQ=) 6: 3130332e31392e35372e302f32342d3234203d3e20313332363337.roa (hash: 3QyxS0wngZcXbj5VM1EbTD1iHrmW5SRruXkHQg8JcfQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.crl rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 11:16:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:55:7b:c0:0b:71:6c:9f:f6:a2:33:98:19:55:e2:7a:85:b3:73:85 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD Validity Not Before: Aug 23 08:47:20 2025 GMT Not After : Aug 26 11:16:20 2025 GMT Subject: CN=5BD2C75ABC615A85B92266FF28DFE638ED80163C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:b7:e9:07:54:22:22:af:35:6e:1c:fe:7a:29: 67:93:5d:1c:fc:07:50:9b:7f:2f:ef:cf:31:2c:fc: 37:b1:83:da:73:a2:f8:f3:d6:20:42:dc:a1:0e:06: 5d:2b:18:be:a9:a7:96:6a:55:45:98:7c:f1:a3:c6: bc:2f:45:eb:21:d8:fe:fe:b3:6d:da:f5:1e:14:2a: 6e:80:08:60:a0:f4:2b:b2:f4:7f:55:45:78:87:2b: 26:f5:d5:e1:35:a7:f1:37:c1:d1:49:a3:6f:41:87: ab:a9:a2:67:f3:78:ab:3f:58:f8:0c:69:ce:fc:b4: d9:12:e5:58:49:59:60:7c:f2:c8:26:64:40:bc:36: 03:f1:12:7d:ba:56:e3:8f:a7:38:23:93:92:9d:32: 4c:41:dc:52:11:d1:57:e7:0e:4b:af:a7:44:4a:13: ec:d2:cd:b6:e8:46:2b:3f:2e:ed:5b:c7:42:82:ba: 7d:40:a5:a0:d0:db:be:51:dd:6a:06:0f:8c:36:c9: a2:30:f5:c2:0d:fa:b3:4e:a4:8b:eb:24:87:ff:af: 88:7f:5f:a4:ac:29:96:3a:0b:4b:c3:52:3c:f8:4a: 24:9d:36:af:69:bf:e9:6f:d9:92:b5:bd:a4:03:cb: b3:1a:13:20:8f:0a:31:91:58:0c:43:de:ab:08:b1: 5d:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:D2:C7:5A:BC:61:5A:85:B9:22:66:FF:28:DF:E6:38:ED:80:16:3C X509v3 Authority Key Identifier: keyid:7E:FA:64:C1:15:73:C2:92:E1:92:C2:CD:EA:C4:D5:F8:B8:C2:1D:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:68:3c:dc:67:5b:32:61:40:42:cc:1a:29:0e:8d:77:2c:52: 2a:14:04:e8:12:ca:76:2c:8f:19:b1:45:44:4f:68:b0:03:60: 62:1e:f6:99:b5:92:ed:cc:4d:d1:14:82:de:e0:b5:f5:9f:a9: 65:9b:d3:70:aa:41:0f:dc:48:77:e1:ef:34:7a:eb:4a:80:0d: af:7f:e8:4e:4d:d9:73:a7:66:98:fe:ba:59:64:16:93:c7:0f: a7:72:70:4e:9b:eb:1e:0a:34:25:7a:67:43:f7:2a:5c:40:d9: fb:df:59:17:00:b7:a4:e1:53:cf:66:cf:dc:d7:7c:76:6c:77: 4f:2a:80:01:5e:66:dc:9a:56:7e:e5:46:7c:2e:dc:cb:9a:2d: 4a:92:9e:b6:49:9c:ad:c2:a0:f8:1e:5b:a4:87:8b:b6:09:8c: 2f:08:13:b5:76:4a:f5:35:c5:e4:94:44:73:e1:ce:db:77:9b: a4:ce:83:b2:f8:45:06:52:1c:9c:25:18:cb:1e:2d:a6:21:8c: 0e:1a:96:7f:6d:d6:ec:70:df:e1:28:03:52:2c:95:2f:e1:4f: 75:57:fb:10:8e:ab:e3:2f:cc:fe:a5:27:da:e7:fc:24:3f:34: a7:a9:46:ab:c3:ba:5d:af:e6:9c:0b:93:a0:28:12:1a:ad:6a: e9:d5:8b:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYVV7wAtxbJ/2ojOYGVXieoWzc4UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VGQTY0QzExNTczQzI5MkUxOTJDMkNERUFDNEQ1RjhC OEMyMURCRDAeFw0yNTA4MjMwODQ3MjBaFw0yNTA4MjYxMTE2MjBaMDMxMTAvBgNV BAMTKDVCRDJDNzVBQkM2MTVBODVCOTIyNjZGRjI4REZFNjM4RUQ4MDE2M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYt+kHVCIirzVuHP56KWeTXRz8 B1Cbfy/vzzEs/Dexg9pzovjz1iBC3KEOBl0rGL6pp5ZqVUWYfPGjxrwvResh2P7+ s23a9R4UKm6ACGCg9Cuy9H9VRXiHKyb11eE1p/E3wdFJo29Bh6upomfzeKs/WPgM ac78tNkS5VhJWWB88sgmZEC8NgPxEn26VuOPpzgjk5KdMkxB3FIR0VfnDkuvp0RK E+zSzbboRis/Lu1bx0KCun1ApaDQ275R3WoGD4w2yaIw9cIN+rNOpIvrJIf/r4h/ X6SsKZY6C0vDUjz4SiSdNq9pv+lv2ZK1vaQDy7MaEyCPCjGRWAxD3qsIsV0fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW9LHWrxhWoW5Imb/KN/mOO2AFjwwHwYDVR0j BBgwFoAUfvpkwRVzwpLhksLN6sTV+LjCHb0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDA5MjdlNi04YTBhLTRmYTctODk2OS05ZmI5ZDY5NDM5N2MvMC83RUZBNjRDMTE1 NzNDMjkyRTE5MkMyQ0RFQUM0RDVGOEI4QzIxREJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0VGQTY0QzExNTczQzI5MkUxOTJDMkNERUFDNEQ1RjhCOEMy MURCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQwOTI3ZTYtOGEwYS00ZmE3LTg5 NjktOWZiOWQ2OTQzOTdjLzAvN0VGQTY0QzExNTczQzI5MkUxOTJDMkNERUFDNEQ1 RjhCOEMyMURCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIBoPNxnWzJhQELMGikOjXcsUioUBOgSynYs jxmxRURPaLADYGIe9pm1ku3MTdEUgt7gtfWfqWWb03CqQQ/cSHfh7zR660qADa9/ 6E5N2XOnZpj+ullkFpPHD6dycE6b6x4KNCV6Z0P3KlxA2fvfWRcAt6ThU89mz9zX fHZsd08qgAFeZtyaVn7lRnwu3MuaLUqSnrZJnK3CoPgeW6SHi7YJjC8IE7V2SvU1 xeSURHPhztt3m6TOg7L4RQZSHJwlGMseLaYhjA4aln9t1uxw3+EoA1IslS/hT3VX +xCOq+MvzP6lJ9rn/CQ/NKepRqvDul2v5pwLk6AoEhqtaunVi2A= -----END CERTIFICATE-----Generated at Sat Aug 23 20:05:46 2025 by rpki-client