$ rpki-client -vvf repo-rpki.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.mft File: 7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.mft (raw, json) Hash identifier: mjJVizXl2GccvF30bupGdeB36FE+IRs+pLNrdWAb9lw= Subject key identifier: 70:DD:5E:13:0A:10:08:B6:05:71:D7:6A:9C:81:42:63:17:AE:C9:1A Authority key identifier: 7C:E8:AF:BA:81:B9:A4:E0:B1:67:44:9B:4A:9C:A6:9B:88:73:C3:2C Certificate issuer: /CN=7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C Certificate serial: 1203806EC5D2BBFA00D5DC486CBB13C4E2DB8720 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.mft Manifest number: 2E Signing time: Fri 22 Aug 2025 17:32:16 +0000 Manifest this update: Fri 22 Aug 2025 17:27:16 +0000 Manifest next update: Tue 26 Aug 2025 01:06:16 +0000 Files and hashes: 1: 3130332e38332e3130302e302f32332d3234203d3e20313336303633.roa (hash: tP6gwHOQztpWiI7KNt68kDqlO1nwIWP+n+KVb4rQ1p0=) 2: 7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.crl (hash: DnI28WIPs0YvvojZ/ZcqHOaluFUwpUfqiph5kJnW2Vg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.crl rsync://repo-rpki.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 01:06:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:03:80:6e:c5:d2:bb:fa:00:d5:dc:48:6c:bb:13:c4:e2:db:87:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C Validity Not Before: Aug 22 17:27:16 2025 GMT Not After : Aug 26 01:06:16 2025 GMT Subject: CN=70DD5E130A1008B60571D76A9C81426317AEC91A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:98:98:f5:fa:37:fe:3f:f3:11:cb:32:d4:4c: f9:8b:f7:02:7e:a6:b4:24:aa:77:84:b5:f8:42:cd: 3d:e3:0a:b0:b6:98:37:a4:ce:3b:c3:95:d1:33:4c: d8:50:62:da:06:67:a4:12:64:c6:2c:7a:8a:53:e6: d0:f9:34:2d:12:0a:90:ef:5f:e2:a2:8d:74:78:7d: c6:3a:b8:80:4a:bc:96:77:26:c6:24:bd:88:2a:be: 38:57:36:35:07:40:6b:89:18:ad:08:4a:73:a8:7e: 34:e4:68:4c:04:53:28:66:c9:c9:f5:76:ea:d4:73: 90:60:84:6a:43:4b:b8:49:8d:d1:b0:c9:2f:85:eb: 8f:24:56:cf:81:08:d0:09:8c:6e:5b:18:2f:8b:fb: d1:0a:33:7c:31:a7:ab:cb:ef:c9:3c:16:8b:c5:9a: 66:01:83:7b:c7:93:ab:27:13:ab:9d:8c:c5:9a:a9: d8:33:59:d5:72:fe:f8:1b:3a:1b:06:67:2b:82:3e: b1:e6:3c:77:3a:63:ef:cf:33:36:cd:a1:9e:0a:7c: 0c:c9:86:ca:00:99:2c:af:6b:a6:33:e5:9a:06:71: d3:c7:7b:a5:eb:9f:f0:47:ae:ce:8c:ba:d2:92:f5: c4:5f:96:7f:cc:d6:d6:3e:57:7c:47:36:fc:55:c1: 95:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:DD:5E:13:0A:10:08:B6:05:71:D7:6A:9C:81:42:63:17:AE:C9:1A X509v3 Authority Key Identifier: keyid:7C:E8:AF:BA:81:B9:A4:E0:B1:67:44:9B:4A:9C:A6:9B:88:73:C3:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46c06455-15c0-4f3d-813b-c07bef78f025/0/7CE8AFBA81B9A4E0B167449B4A9CA69B8873C32C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:e2:d3:fb:a0:e5:33:1f:56:ff:e2:ea:05:7f:ff:46:8a:b1: d7:87:e3:01:09:c4:e4:44:1e:3c:36:6e:6d:b0:9f:02:05:6c: 1e:d9:77:05:a8:6f:49:89:50:d8:6e:c8:45:f3:53:f3:81:5f: 16:b8:00:0a:84:2b:e2:da:a4:a1:ba:6e:45:74:a7:b6:ec:d0: 98:50:a9:59:25:f7:c3:c0:25:46:a2:d6:4b:2e:53:0a:97:e1: 84:04:d1:7e:75:88:a0:28:26:45:d3:04:4a:2d:b4:03:2a:c2: 33:1c:3f:e5:0d:58:a1:7f:43:b1:cf:b0:74:7a:b3:61:c7:8c: 9f:ab:77:21:26:c5:aa:6e:b3:10:55:5f:da:2c:99:8a:d2:e4: 8f:12:66:92:55:c1:0f:a1:86:43:50:0c:5b:77:34:32:64:a8: ff:fd:1a:79:c6:bd:73:89:89:82:d6:c0:76:36:4d:31:e7:4b: 8f:50:d1:5b:36:98:8a:c8:a9:01:a1:d4:50:92:f3:6f:f0:a8: 28:f2:9b:b1:12:0d:0a:ad:c6:6e:28:f9:4b:c2:20:53:f3:fe: f9:98:3d:1c:a1:41:78:36:f0:a4:b7:ef:dc:c0:28:e2:07:c9: 3f:04:36:eb:43:e6:d5:9e:8b:b1:9b:99:58:72:de:70:31:8c: f1:43:19:e7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEgOAbsXSu/oA1dxIbLsTxOLbhyAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NFOEFGQkE4MUI5QTRFMEIxNjc0NDlCNEE5Q0E2OUI4 ODczQzMyQzAeFw0yNTA4MjIxNzI3MTZaFw0yNTA4MjYwMTA2MTZaMDMxMTAvBgNV BAMTKDcwREQ1RTEzMEExMDA4QjYwNTcxRDc2QTlDODE0MjYzMTdBRUM5MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnmJj1+jf+P/MRyzLUTPmL9wJ+ prQkqneEtfhCzT3jCrC2mDekzjvDldEzTNhQYtoGZ6QSZMYseopT5tD5NC0SCpDv X+KijXR4fcY6uIBKvJZ3JsYkvYgqvjhXNjUHQGuJGK0ISnOofjTkaEwEUyhmycn1 durUc5BghGpDS7hJjdGwyS+F648kVs+BCNAJjG5bGC+L+9EKM3wxp6vL78k8FovF mmYBg3vHk6snE6udjMWaqdgzWdVy/vgbOhsGZyuCPrHmPHc6Y+/PMzbNoZ4KfAzJ hsoAmSyva6Yz5ZoGcdPHe6Xrn/BHrs6MutKS9cRfln/M1tY+V3xHNvxVwZUZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcN1eEwoQCLYFcddqnIFCYxeuyRowHwYDVR0j BBgwFoAUfOivuoG5pOCxZ0SbSpymm4hzwywwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NmMwNjQ1NS0xNWMwLTRmM2QtODEzYi1jMDdiZWY3OGYwMjUvMC83Q0U4QUZCQTgx QjlBNEUwQjE2NzQ0OUI0QTlDQTY5Qjg4NzNDMzJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0NFOEFGQkE4MUI5QTRFMEIxNjc0NDlCNEE5Q0E2OUI4ODcz QzMyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDZjMDY0NTUtMTVjMC00ZjNkLTgx M2ItYzA3YmVmNzhmMDI1LzAvN0NFOEFGQkE4MUI5QTRFMEIxNjc0NDlCNEE5Q0E2 OUI4ODczQzMyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABXi0/ug5TMfVv/i6gV//0aKsdeH4wEJxORE Hjw2bm2wnwIFbB7ZdwWob0mJUNhuyEXzU/OBXxa4AAqEK+LapKG6bkV0p7bs0JhQ qVkl98PAJUai1ksuUwqX4YQE0X51iKAoJkXTBEottAMqwjMcP+UNWKF/Q7HPsHR6 s2HHjJ+rdyEmxapusxBVX9osmYrS5I8SZpJVwQ+hhkNQDFt3NDJkqP/9GnnGvXOJ iYLWwHY2TTHnS49Q0Vs2mIrIqQGh1FCS82/wqCjym7ESDQqtxm4o+UvCIFPz/vmY PRyhQXg28KS379zAKOIHyT8ENutD5tWei7GbmVhy3nAxjPFDGec= -----END CERTIFICATE-----Generated at Sat Aug 23 12:26:26 2025 by rpki-client