$ rpki-client -vvf repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft File: 7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft (raw, json) Hash identifier: 5hD2PgxB/EJrSTD4TG339hmKkOwM+jmawBpT1CSL7Mw= Subject key identifier: 58:FD:6B:88:EE:20:68:B1:F7:B9:DD:41:EB:67:93:57:E4:36:CC:13 Authority key identifier: 7E:8D:E1:54:9E:89:D4:B4:80:B5:56:69:5C:AB:E9:CE:7F:DF:5F:24 Certificate issuer: /CN=7E8DE1549E89D4B480B556695CABE9CE7FDF5F24 Certificate serial: 38CB0F1245E08AF5573CEF7EB06542232FEDC464 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft Manifest number: 75 Signing time: Thu 21 Aug 2025 15:11:00 +0000 Manifest this update: Thu 21 Aug 2025 15:06:00 +0000 Manifest next update: Sun 24 Aug 2025 21:20:00 +0000 Files and hashes: 1: 7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.crl (hash: Z5EnfmBJ1bqO73Y/zBJfuQfkRyo6WtoxVWHgi5cR6/M=) 2: 323030313a6466343a396134303a3a2f34382d3438203d3e20313533313439.roa (hash: TtLF2mCHfSEfxKosRTbgY2pYRo+Ox0NN2gzHDI6VY/0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.crl rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 21:20:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:cb:0f:12:45:e0:8a:f5:57:3c:ef:7e:b0:65:42:23:2f:ed:c4:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E8DE1549E89D4B480B556695CABE9CE7FDF5F24 Validity Not Before: Aug 21 15:06:00 2025 GMT Not After : Aug 24 21:20:00 2025 GMT Subject: CN=58FD6B88EE2068B1F7B9DD41EB679357E436CC13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:a3:ae:1d:f4:e4:fb:dc:48:72:ff:df:4a:08: c9:c9:54:81:48:b7:99:8d:48:6e:0a:f2:26:ff:b9: 12:60:dd:f7:b6:37:82:a8:49:02:18:5d:f8:14:7a: e7:70:fc:ec:f6:55:1d:4e:0a:66:35:d6:32:96:88: ba:45:7a:5d:f3:3a:82:e6:f5:84:4d:f3:29:03:09: 16:ea:56:6a:8c:eb:7e:1b:ce:19:63:da:27:e3:f5: 90:df:6e:d1:10:33:a7:75:f4:7f:61:5e:ac:c6:a6: 13:07:c5:bf:3e:09:e4:62:1d:ec:7e:92:53:f0:ab: bc:81:d6:54:e8:4e:3b:b7:a9:47:a7:bb:aa:32:d6: de:73:1d:ed:41:13:e2:7b:47:c4:90:f5:8d:ce:c0: f9:c8:4b:ce:2b:0a:08:34:80:4c:73:09:1c:87:3c: 0e:0c:31:06:b3:e5:e8:a9:18:73:77:e6:e2:cb:5c: f4:6a:bc:2d:c4:1f:8e:15:5a:30:ba:42:e1:35:75: d6:c9:44:ea:ec:e3:b3:8a:d3:8c:2c:9d:99:8f:d5: eb:a6:e7:fc:2b:97:7a:a6:30:00:54:7c:e6:87:4f: 0f:32:5f:e1:6e:ef:f7:9e:f8:97:6d:91:7c:a6:c9: 53:ea:1d:74:0d:9d:7e:ad:aa:4b:f3:cf:9d:77:d6: f1:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:FD:6B:88:EE:20:68:B1:F7:B9:DD:41:EB:67:93:57:E4:36:CC:13 X509v3 Authority Key Identifier: keyid:7E:8D:E1:54:9E:89:D4:B4:80:B5:56:69:5C:AB:E9:CE:7F:DF:5F:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 65:a3:82:1b:c2:27:e5:c9:5e:43:5a:45:78:a7:f1:37:52:98: 32:73:f6:be:b1:4e:d1:61:a4:2f:a6:cd:00:54:27:02:81:e8: 3f:40:37:bc:21:27:9e:04:d0:5e:0b:2d:7e:79:e0:81:81:1d: e7:51:ed:0f:71:db:72:1b:99:8e:56:fd:ec:00:52:ac:fb:e3: 62:29:f4:b1:06:aa:11:68:f2:f5:68:f3:20:39:28:1c:38:97: 32:7b:56:a9:cf:3b:2c:5f:b1:17:18:cf:e2:1f:53:66:3f:1c: b3:1b:1a:a6:88:51:53:be:4a:9a:51:0c:a2:a1:5d:fe:9e:8c: 6e:9d:5a:12:d1:6f:33:6c:3d:0a:87:cc:99:7e:37:54:cc:21: 99:05:d0:1b:9f:04:fd:26:22:30:ba:22:1a:f4:e9:24:7a:e0: 0a:69:65:ab:bb:6d:3a:37:4b:23:1e:be:73:05:f9:b8:67:ce: e7:bb:fa:8d:38:12:4f:a5:9a:84:1c:f9:e5:60:ca:e2:0a:5c: 48:b1:8b:19:29:39:48:b4:a0:31:bd:54:68:c1:a0:f5:99:87: 92:ae:f0:33:72:3a:b2:59:37:1f:1b:b7:bc:63:ab:2e:da:66: 12:7d:da:9d:4a:72:7e:41:d9:44:26:20:0a:d9:b5:b1:72:3c: 30:bd:2c:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOMsPEkXgivVXPO9+sGVCIy/txGQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U4REUxNTQ5RTg5RDRCNDgwQjU1NjY5NUNBQkU5Q0U3 RkRGNUYyNDAeFw0yNTA4MjExNTA2MDBaFw0yNTA4MjQyMTIwMDBaMDMxMTAvBgNV BAMTKDU4RkQ2Qjg4RUUyMDY4QjFGN0I5REQ0MUVCNjc5MzU3RTQzNkNDMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuo64d9OT73Ehy/99KCMnJVIFI t5mNSG4K8ib/uRJg3fe2N4KoSQIYXfgUeudw/Oz2VR1OCmY11jKWiLpFel3zOoLm 9YRN8ykDCRbqVmqM634bzhlj2ifj9ZDfbtEQM6d19H9hXqzGphMHxb8+CeRiHex+ klPwq7yB1lToTju3qUenu6oy1t5zHe1BE+J7R8SQ9Y3OwPnIS84rCgg0gExzCRyH PA4MMQaz5eipGHN35uLLXPRqvC3EH44VWjC6QuE1ddbJROrs47OK04wsnZmP1eum 5/wrl3qmMABUfOaHTw8yX+Fu7/ee+JdtkXymyVPqHXQNnX6tqkvzz5131vFZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWP1riO4gaLH3ud1B62eTV+Q2zBMwHwYDVR0j BBgwFoAUfo3hVJ6J1LSAtVZpXKvpzn/fXyQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2RjMDM0Zi0zODIzLTQ4YWYtOTUzZC1hYWE4NzNiMGZiNmEvMS83RThERTE1NDlF ODlENEI0ODBCNTU2Njk1Q0FCRTlDRTdGREY1RjI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0U4REUxNTQ5RTg5RDRCNDgwQjU1NjY5NUNBQkU5Q0U3RkRG NUYyNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNkYzAzNGYtMzgyMy00OGFmLTk1 M2QtYWFhODczYjBmYjZhLzEvN0U4REUxNTQ5RTg5RDRCNDgwQjU1NjY5NUNBQkU5 Q0U3RkRGNUYyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGWjghvCJ+XJXkNaRXin8TdSmDJz9r6xTtFh pC+mzQBUJwKB6D9AN7whJ54E0F4LLX554IGBHedR7Q9x23IbmY5W/ewAUqz742Ip 9LEGqhFo8vVo8yA5KBw4lzJ7VqnPOyxfsRcYz+IfU2Y/HLMbGqaIUVO+SppRDKKh Xf6ejG6dWhLRbzNsPQqHzJl+N1TMIZkF0BufBP0mIjC6Ihr06SR64AppZau7bTo3 SyMevnMF+bhnzue7+o04Ek+lmoQc+eVgyuIKXEixixkpOUi0oDG9VGjBoPWZh5Ku 8DNyOrJZNx8bt7xjqy7aZhJ92p1Kcn5B2UQmIArZtbFyPDC9LOw= -----END CERTIFICATE-----Generated at Sat Aug 23 14:13:04 2025 by rpki-client