$ rpki-client -vvf repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft File: 7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft (raw, json) Hash identifier: y2sacztCTF6G8udNSk3KEeM0ti+jcdgjUXRpdoZQKyM= Subject key identifier: F7:F8:8D:BB:17:88:32:13:6D:61:05:3C:2F:31:55:97:A4:FF:D5:FB Authority key identifier: 7C:4D:FD:78:91:4D:C1:F6:61:30:F2:56:AE:69:D9:FA:84:39:48:DC Certificate issuer: /CN=7C4DFD78914DC1F66130F256AE69D9FA843948DC Certificate serial: 42C7039663192EC7F8E36BF2E2FE650037B7108A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4DFD78914DC1F66130F256AE69D9FA843948DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft Manifest number: 86 Signing time: Fri 22 Aug 2025 02:11:13 +0000 Manifest this update: Fri 22 Aug 2025 02:06:13 +0000 Manifest next update: Mon 25 Aug 2025 05:45:13 +0000 Files and hashes: 1: 3136302e3138372e3133372e302f32342d3234203d3e20313533313233.roa (hash: lAtUfGS13GDkvr/Pm9PSGFkJR4Rstob6+L+fcyUN72Q=) 2: 3136302e3138372e3133362e302f32342d3234203d3e20313533313233.roa (hash: HJdK4DRAmRrZWLjILXhoJkILfMyC0BwC4uGRxH8TEAM=) 3: 7C4DFD78914DC1F66130F256AE69D9FA843948DC.crl (hash: rxPE51ffUl7bgeOPfZZlUOOf8lBrApXiqVV4xbh8evA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.crl rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4DFD78914DC1F66130F256AE69D9FA843948DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 05:45:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:c7:03:96:63:19:2e:c7:f8:e3:6b:f2:e2:fe:65:00:37:b7:10:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C4DFD78914DC1F66130F256AE69D9FA843948DC Validity Not Before: Aug 22 02:06:13 2025 GMT Not After : Aug 25 05:45:13 2025 GMT Subject: CN=F7F88DBB178832136D61053C2F315597A4FFD5FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:c7:0d:79:32:41:fd:89:e5:e5:05:b0:27:e3: b6:3a:14:4c:cc:03:89:9b:3c:4b:12:ba:cb:a7:19: 9d:34:59:92:2a:28:93:24:62:37:50:a5:69:01:54: d0:f4:2e:79:07:f2:db:f5:ac:ec:cf:ac:3b:a5:c0: 51:75:ca:2e:e8:7f:40:7c:bf:bc:39:19:68:01:ee: cc:06:b6:a8:fa:d9:2c:fe:0b:bc:2f:29:eb:12:3c: cf:fc:db:7a:ca:0e:b8:63:0f:5c:76:85:58:09:1c: 96:9b:9f:c5:5d:9c:6f:2e:ed:94:33:03:cc:3a:35: 49:b4:56:c5:ce:54:95:13:50:60:60:41:e1:c9:32: c2:06:0d:89:95:7c:73:e1:32:a9:bc:38:00:f0:0a: dd:4d:ed:49:86:09:5e:73:68:39:55:85:67:dd:3f: e9:51:b1:85:47:e4:bb:01:09:f5:a4:df:42:d4:d9: dd:53:50:06:9e:b7:22:57:78:2f:fc:c7:6e:50:d9: 6e:f2:95:67:03:89:4f:80:71:ed:5c:45:bf:88:58: a2:59:a9:1f:7e:20:aa:83:0d:3b:21:6c:58:5e:fa: c5:96:7b:24:6b:73:d5:f2:94:9a:b6:41:c4:36:13: b3:d6:54:96:3b:3c:31:e6:a0:18:29:83:7d:13:e0: cf:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:F8:8D:BB:17:88:32:13:6D:61:05:3C:2F:31:55:97:A4:FF:D5:FB X509v3 Authority Key Identifier: keyid:7C:4D:FD:78:91:4D:C1:F6:61:30:F2:56:AE:69:D9:FA:84:39:48:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4DFD78914DC1F66130F256AE69D9FA843948DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:c6:55:65:a2:26:d5:09:56:b8:7f:e9:32:aa:36:f4:64:ae: 83:cb:2f:a7:7f:6e:a6:04:43:25:f7:45:1b:56:9c:36:7e:c0: 1b:91:de:d4:2f:42:69:a9:e0:1f:d5:c6:8d:ca:59:6a:73:75: e6:68:c5:3e:07:06:d6:f4:18:65:9c:40:65:58:bb:db:22:bf: 08:23:d9:50:75:2d:71:c0:90:24:2a:9e:77:51:cd:55:36:7c: 2c:97:59:bb:53:18:0b:6e:98:15:63:70:6b:59:95:07:45:56: 7f:46:59:01:9e:0d:14:be:d5:b3:31:83:35:95:6b:62:f0:ac: c6:bc:dd:5c:11:86:6d:59:0e:f6:89:65:ff:c1:60:d1:84:90: 49:76:d0:aa:12:10:50:ed:e1:02:c1:bb:a9:5a:c7:f4:88:47: 01:c6:ff:0c:56:66:96:f7:0c:ea:9f:33:6c:d1:33:e3:eb:94: 9b:99:1b:ba:0d:16:5b:5a:1b:34:a2:d2:54:89:6a:af:d3:2a: ce:e3:7a:52:13:92:b1:23:59:44:ef:e2:a2:b1:d4:5e:ab:47: c3:49:ae:b8:3d:25:17:dc:f5:e4:f4:09:47:0a:c2:85:ac:75: b8:a1:01:9c:44:cb:c7:22:7f:19:82:55:dd:49:f4:07:25:de: 7a:34:97:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQscDlmMZLsf442vy4v5lADe3EIowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M0REZENzg5MTREQzFGNjYxMzBGMjU2QUU2OUQ5RkE4 NDM5NDhEQzAeFw0yNTA4MjIwMjA2MTNaFw0yNTA4MjUwNTQ1MTNaMDMxMTAvBgNV BAMTKEY3Rjg4REJCMTc4ODMyMTM2RDYxMDUzQzJGMzE1NTk3QTRGRkQ1RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKxw15MkH9ieXlBbAn47Y6FEzM A4mbPEsSusunGZ00WZIqKJMkYjdQpWkBVND0LnkH8tv1rOzPrDulwFF1yi7of0B8 v7w5GWgB7swGtqj62Sz+C7wvKesSPM/823rKDrhjD1x2hVgJHJabn8VdnG8u7ZQz A8w6NUm0VsXOVJUTUGBgQeHJMsIGDYmVfHPhMqm8OADwCt1N7UmGCV5zaDlVhWfd P+lRsYVH5LsBCfWk30LU2d1TUAaetyJXeC/8x25Q2W7ylWcDiU+Ace1cRb+IWKJZ qR9+IKqDDTshbFhe+sWWeyRrc9XylJq2QcQ2E7PWVJY7PDHmoBgpg30T4M/DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9/iNuxeIMhNtYQU8LzFVl6T/1fswHwYDVR0j BBgwFoAUfE39eJFNwfZhMPJWrmnZ+oQ5SNwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTkyMzM5Ny04Y2Y4LTRjZWYtODg1Ni0wZDI2OGQ3M2VkYjEvMC83QzRERkQ3ODkx NERDMUY2NjEzMEYyNTZBRTY5RDlGQTg0Mzk0OERDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0M0REZENzg5MTREQzFGNjYxMzBGMjU2QUU2OUQ5RkE4NDM5 NDhEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2E5MjMzOTctOGNmOC00Y2VmLTg4 NTYtMGQyNjhkNzNlZGIxLzAvN0M0REZENzg5MTREQzFGNjYxMzBGMjU2QUU2OUQ5 RkE4NDM5NDhEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABzGVWWiJtUJVrh/6TKqNvRkroPLL6d/bqYE QyX3RRtWnDZ+wBuR3tQvQmmp4B/Vxo3KWWpzdeZoxT4HBtb0GGWcQGVYu9sivwgj 2VB1LXHAkCQqnndRzVU2fCyXWbtTGAtumBVjcGtZlQdFVn9GWQGeDRS+1bMxgzWV a2LwrMa83VwRhm1ZDvaJZf/BYNGEkEl20KoSEFDt4QLBu6lax/SIRwHG/wxWZpb3 DOqfM2zRM+PrlJuZG7oNFltaGzSi0lSJaq/TKs7jelITkrEjWUTv4qKx1F6rR8NJ rrg9JRfc9eT0CUcKwoWsdbihAZxEy8cifxmCVd1J9Acl3no0lyQ= -----END CERTIFICATE-----Generated at Sat Aug 23 19:47:13 2025 by rpki-client