$ rpki-client -vvf repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.mft File: 7DA5F7B42931EE3A414B9A5B7996703DF70BD897.mft (raw, json) Hash identifier: e9tzn05g7W5LdcmWy8NRwxKr1HvxywUpYqsn8DXKy3w= Subject key identifier: D8:A5:24:45:24:CE:DF:5A:45:06:3A:49:29:94:55:6B:90:2C:F3:31 Authority key identifier: 7D:A5:F7:B4:29:31:EE:3A:41:4B:9A:5B:79:96:70:3D:F7:0B:D8:97 Certificate issuer: /CN=7DA5F7B42931EE3A414B9A5B7996703DF70BD897 Certificate serial: 3FBE7949CA1A9ECBB39CC28FA1DEEBFA1DB5F951 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.mft Manifest number: 01AC Signing time: Mon 30 Jun 2025 08:50:48 +0000 Manifest this update: Mon 30 Jun 2025 08:45:48 +0000 Manifest next update: Thu 03 Jul 2025 10:33:48 +0000 Files and hashes: 1: 3130332e32372e3139322e302f32342d3234203d3e20313530323632.roa (hash: +MyXIra1tEzUh3Bqp100pCTB+NpiC7GT2NfbRpY5B8s=) 2: 7DA5F7B42931EE3A414B9A5B7996703DF70BD897.crl (hash: HjVtMk7c0Dm9kZ3ok8K2FH8uqhFkXNTPDgruoGnKL3g=) 3: 3130332e32372e3139332e302f32342d3234203d3e20313530323632.roa (hash: DIKWNEryKaLoYGYF33QjHgw88mY9IHI7dTm6jY/RF2g=) 4: 3130332e32372e3139322e302f32332d3233203d3e20313530323632.roa (hash: BnJZN8kM3S7TwdBig6pEraKaEILe1NjioWa2vU9OOYk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.crl rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 10:33:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:be:79:49:ca:1a:9e:cb:b3:9c:c2:8f:a1:de:eb:fa:1d:b5:f9:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7DA5F7B42931EE3A414B9A5B7996703DF70BD897 Validity Not Before: Jun 30 08:45:48 2025 GMT Not After : Jul 3 10:33:48 2025 GMT Subject: CN=D8A5244524CEDF5A45063A492994556B902CF331 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:85:1a:0b:37:06:b7:86:6b:71:19:9c:d9:27: 30:e2:f3:f4:3b:c3:ab:1e:43:ce:bc:53:c9:7c:b9: a1:97:f2:50:f3:54:a5:84:7f:9f:f7:32:b5:e1:d9: 58:40:0e:42:f4:4a:66:6f:2c:49:f6:07:09:22:4b: 47:07:eb:70:0e:24:b1:10:6d:8f:d4:db:e9:ee:cc: 31:e8:71:fd:be:09:99:8e:e8:cd:cb:0c:a0:03:07: 6f:bb:1b:ba:4d:9a:fb:8f:5e:67:32:fc:00:6b:0e: e9:d0:68:ce:c7:6a:cb:df:04:89:5a:6f:ea:fb:14: a3:15:83:72:77:8e:df:ef:63:1a:79:60:ac:e7:c1: f5:24:44:f4:24:86:1f:93:0a:16:96:52:b2:e8:78: 04:1c:c9:2a:c6:02:d3:7c:ab:ed:64:b2:ed:54:d6: be:71:8f:71:e9:c5:f0:ea:fa:ce:de:eb:fa:f0:e5: 2d:b8:15:f3:9a:07:47:25:eb:b9:6f:1b:1f:35:3f: d6:cc:3b:9e:60:5d:1b:f0:fd:19:e6:2c:6a:06:ee: c4:79:c3:48:32:81:d2:1b:70:4d:8e:92:87:f1:a3: 56:56:17:8f:c8:e6:09:d7:c1:a6:26:2f:04:6d:fe: 8c:6e:5c:13:d8:4a:ec:da:db:9e:41:3a:1d:07:36: ff:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:A5:24:45:24:CE:DF:5A:45:06:3A:49:29:94:55:6B:90:2C:F3:31 X509v3 Authority Key Identifier: keyid:7D:A5:F7:B4:29:31:EE:3A:41:4B:9A:5B:79:96:70:3D:F7:0B:D8:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:39:bc:6b:78:b3:30:1f:91:35:40:2d:99:59:4d:6f:e5:2f: 9c:44:4e:da:57:c8:e1:36:e4:f7:61:ee:1a:fc:28:4b:71:f2: 1d:67:88:63:26:d1:31:c4:a3:72:32:51:3f:a3:ca:96:b9:83: ec:d3:8a:f0:0e:94:57:5e:39:6d:87:d2:41:c0:fd:0e:d5:fd: b2:90:f9:bb:e4:f7:5a:dd:66:dd:46:b3:9c:32:4e:7a:e2:8a: 1a:89:41:ce:a4:16:41:67:32:e8:2a:f5:c7:9c:47:cb:8b:45: fe:18:91:ef:aa:f9:5f:93:4a:cb:8d:89:3b:f3:67:16:ce:d4: c4:e1:b1:9a:b8:82:c7:04:17:70:7c:fe:71:f6:d9:b9:22:09: 51:b3:cd:f9:b2:56:22:9a:6a:6a:df:85:90:0f:b8:1b:d3:0c: dd:cd:00:f6:41:d4:a6:86:bc:00:3d:8e:e4:ea:1b:d7:19:2b: f5:cd:5f:1b:70:12:9b:a7:67:b3:7f:00:9a:b0:ef:14:db:b7: 5b:e3:15:71:37:57:bb:f8:b4:cc:55:0a:95:c7:6d:26:81:8b: b0:3e:c1:f6:34:2e:87:38:23:82:0b:e4:52:97:77:c8:b8:0a: 57:7d:95:44:11:46:d1:d5:cf:d5:81:6c:f5:65:42:36:12:a3: 89:6a:9f:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP755ScoansuznMKPod7r+h21+VEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0RBNUY3QjQyOTMxRUUzQTQxNEI5QTVCNzk5NjcwM0RG NzBCRDg5NzAeFw0yNTA2MzAwODQ1NDhaFw0yNTA3MDMxMDMzNDhaMDMxMTAvBgNV BAMTKEQ4QTUyNDQ1MjRDRURGNUE0NTA2M0E0OTI5OTQ1NTZCOTAyQ0YzMzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDChRoLNwa3hmtxGZzZJzDi8/Q7 w6seQ868U8l8uaGX8lDzVKWEf5/3MrXh2VhADkL0SmZvLEn2BwkiS0cH63AOJLEQ bY/U2+nuzDHocf2+CZmO6M3LDKADB2+7G7pNmvuPXmcy/ABrDunQaM7HasvfBIla b+r7FKMVg3J3jt/vYxp5YKznwfUkRPQkhh+TChaWUrLoeAQcySrGAtN8q+1ksu1U 1r5xj3HpxfDq+s7e6/rw5S24FfOaB0cl67lvGx81P9bMO55gXRvw/RnmLGoG7sR5 w0gygdIbcE2Okofxo1ZWF4/I5gnXwaYmLwRt/oxuXBPYSuza255BOh0HNv8XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2KUkRSTO31pFBjpJKZRVa5As8zEwHwYDVR0j BBgwFoAUfaX3tCkx7jpBS5pbeZZwPfcL2JcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjI3YjE3Ni00YzE3LTQyNDQtYmFkZi1mNDk2YmNiMTVlMjAvMC83REE1RjdCNDI5 MzFFRTNBNDE0QjlBNUI3OTk2NzAzREY3MEJEODk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0RBNUY3QjQyOTMxRUUzQTQxNEI5QTVCNzk5NjcwM0RGNzBC RDg5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDIyN2IxNzYtNGMxNy00MjQ0LWJh ZGYtZjQ5NmJjYjE1ZTIwLzAvN0RBNUY3QjQyOTMxRUUzQTQxNEI5QTVCNzk5Njcw M0RGNzBCRDg5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACU5vGt4szAfkTVALZlZTW/lL5xETtpXyOE2 5Pdh7hr8KEtx8h1niGMm0THEo3IyUT+jypa5g+zTivAOlFdeOW2H0kHA/Q7V/bKQ +bvk91rdZt1Gs5wyTnriihqJQc6kFkFnMugq9cecR8uLRf4Yke+q+V+TSsuNiTvz ZxbO1MThsZq4gscEF3B8/nH22bkiCVGzzfmyViKaamrfhZAPuBvTDN3NAPZB1KaG vAA9juTqG9cZK/XNXxtwEpunZ7N/AJqw7xTbt1vjFXE3V7v4tMxVCpXHbSaBi7A+ wfY0Loc4I4IL5FKXd8i4Cld9lUQRRtHVz9WBbPVlQjYSo4lqn5g= -----END CERTIFICATE-----Generated at Mon Jun 30 13:06:57 2025 by rpki-client