$ rpki-client -vvf repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft File: 7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft (raw, json) Hash identifier: b3GaeTq76AU8/Vyqq1tMJuJSk6Ja4mMHGl4E60BWm0E= Subject key identifier: B9:ED:DB:9A:15:35:1A:54:AF:DA:D8:33:8C:27:4A:B4:D1:BA:2E:FD Authority key identifier: 7D:6E:DF:DB:21:B8:B7:E6:A7:5A:99:0A:7B:EC:AD:85:E8:BE:B9:53 Certificate issuer: /CN=7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953 Certificate serial: 626BA1E7A783AA9C3547CC6B22713399C722A861 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft Manifest number: 01A9 Signing time: Fri 22 Aug 2025 00:30:05 +0000 Manifest this update: Fri 22 Aug 2025 00:25:05 +0000 Manifest next update: Mon 25 Aug 2025 06:54:05 +0000 Files and hashes: 1: 3130332e34362e352e302f32342d3234203d3e20313530343630.roa (hash: OiXuaCFeHNTNKTkxwDwZ/IJjAlYs+aZs7qWhd3mySzg=) 2: 3130332e34362e342e302f32342d3234203d3e20313530343630.roa (hash: 70RFcRoz1w22nVDdjd8xwvOHx9oaAPRDsiAFJSjZRVk=) 3: 3130332e34362e342e302f32332d3233203d3e20313530343630.roa (hash: NXHMc5cBUZitTQZ4ST9s7lp3tsPIg2LlkZ5yYQ7KPUA=) 4: 7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.crl (hash: POrh+EqurqAHTkA1iLjC1YfWI0ZIONxBLWZCuFiJiyE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.crl rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 06:54:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:6b:a1:e7:a7:83:aa:9c:35:47:cc:6b:22:71:33:99:c7:22:a8:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953 Validity Not Before: Aug 22 00:25:05 2025 GMT Not After : Aug 25 06:54:05 2025 GMT Subject: CN=B9EDDB9A15351A54AFDAD8338C274AB4D1BA2EFD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:80:35:e2:79:27:4d:a9:55:fa:a2:32:c9:f9: 97:dc:59:45:ed:87:6c:a2:6c:89:6a:32:6c:ff:54: be:41:f8:a9:fa:89:a0:a1:6d:3b:2f:71:02:6e:fa: 3f:31:6a:10:00:24:50:b8:59:e5:e9:2b:77:2e:44: 6d:fb:40:86:86:74:2a:4c:91:6b:07:9b:21:c2:a3: 43:4c:93:a7:40:2c:40:51:e7:5f:93:fe:71:ca:00: 7c:51:27:7a:ce:3b:66:2c:ff:3f:fc:f4:4d:5c:28: df:b8:76:75:35:63:5e:d7:ab:db:b8:99:55:08:25: eb:17:79:a9:70:1e:2a:32:f9:19:f9:ad:60:1f:bb: e3:2e:fc:7b:8d:b4:29:04:e0:c8:1d:94:ce:a3:2c: 5d:e3:0b:2d:47:b7:30:11:b5:75:f3:39:a4:5e:0b: 68:f1:9a:6e:25:31:a5:7e:79:40:66:32:7a:33:ed: 6d:4e:77:59:1f:28:57:89:5c:c2:57:e6:cf:cf:97: e6:7d:86:9d:5c:29:c9:cd:4c:40:9a:c6:a6:0a:27: 81:e5:e2:79:23:6d:66:0f:4f:10:79:1a:a1:ea:9a: 4e:18:27:07:10:f8:6e:74:49:59:48:82:ff:86:2d: b5:74:c9:f9:bf:6f:a5:44:6a:46:e0:04:fb:45:8f: 08:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:ED:DB:9A:15:35:1A:54:AF:DA:D8:33:8C:27:4A:B4:D1:BA:2E:FD X509v3 Authority Key Identifier: keyid:7D:6E:DF:DB:21:B8:B7:E6:A7:5A:99:0A:7B:EC:AD:85:E8:BE:B9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:20:5e:80:b7:4a:62:7b:40:fe:37:18:8a:40:99:3e:29:c5: af:a3:43:88:a2:57:58:31:eb:ef:a1:80:6c:f3:51:bb:16:f3: bb:93:34:9d:b6:9f:0b:02:14:78:68:2a:6d:7b:02:73:c1:ca: 1d:71:af:35:74:6b:97:8c:53:c8:76:b9:aa:75:2e:66:ab:ec: 84:e5:31:37:63:bb:ee:32:f7:30:16:a6:ac:5a:fa:65:b0:e7: ca:d7:25:f6:96:09:65:e8:3c:b8:65:72:51:9d:78:69:dd:54: 4b:38:eb:5c:13:81:45:41:c4:55:77:f4:48:8c:0f:9e:3b:fb: 9a:49:26:92:3e:7c:61:8b:87:96:b3:ca:47:cf:fd:f2:ba:46: 28:a2:d2:58:74:ea:77:f2:6c:ac:e1:31:3f:8b:e4:df:a6:9b: ff:23:80:00:cf:e6:27:9a:c1:25:d9:d3:48:05:42:e1:0d:a1: b4:ca:f2:07:3a:0d:96:6e:02:43:d9:d4:51:97:7d:8d:d2:27: d7:c6:4a:87:96:dd:99:53:5e:42:f2:aa:3b:11:73:64:fe:83: f2:52:f5:2b:f6:ac:38:a9:b8:69:0c:f2:28:c3:62:8e:9b:c9: ae:08:88:c6:54:19:36:94:55:75:5c:66:69:31:29:df:06:66: f6:55:39:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYmuh56eDqpw1R8xrInEzmcciqGEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q2RURGREIyMUI4QjdFNkE3NUE5OTBBN0JFQ0FEODVF OEJFQjk1MzAeFw0yNTA4MjIwMDI1MDVaFw0yNTA4MjUwNjU0MDVaMDMxMTAvBgNV BAMTKEI5RUREQjlBMTUzNTFBNTRBRkRBRDgzMzhDMjc0QUI0RDFCQTJFRkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxgDXieSdNqVX6ojLJ+ZfcWUXt h2yibIlqMmz/VL5B+Kn6iaChbTsvcQJu+j8xahAAJFC4WeXpK3cuRG37QIaGdCpM kWsHmyHCo0NMk6dALEBR51+T/nHKAHxRJ3rOO2Ys/z/89E1cKN+4dnU1Y17Xq9u4 mVUIJesXealwHioy+Rn5rWAfu+Mu/HuNtCkE4MgdlM6jLF3jCy1HtzARtXXzOaRe C2jxmm4lMaV+eUBmMnoz7W1Od1kfKFeJXMJX5s/Pl+Z9hp1cKcnNTECaxqYKJ4Hl 4nkjbWYPTxB5GqHqmk4YJwcQ+G50SVlIgv+GLbV0yfm/b6VEakbgBPtFjwiFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUue3bmhU1GlSv2tgzjCdKtNG6Lv0wHwYDVR0j BBgwFoAUfW7f2yG4t+anWpkKe+ythei+uVMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmM4Y2RhNS0zNDgzLTQyYjAtYjM4NS1mYzA3MDcxNmZiY2MvMC83RDZFREZEQjIx QjhCN0U2QTc1QTk5MEE3QkVDQUQ4NUU4QkVCOTUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q2RURGREIyMUI4QjdFNkE3NUE5OTBBN0JFQ0FEODVFOEJF Qjk1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJjOGNkYTUtMzQ4My00MmIwLWIz ODUtZmMwNzA3MTZmYmNjLzAvN0Q2RURGREIyMUI4QjdFNkE3NUE5OTBBN0JFQ0FE ODVFOEJFQjk1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAwgXoC3SmJ7QP43GIpAmT4pxa+jQ4iiV1gx 6++hgGzzUbsW87uTNJ22nwsCFHhoKm17AnPByh1xrzV0a5eMU8h2uap1Lmar7ITl MTdju+4y9zAWpqxa+mWw58rXJfaWCWXoPLhlclGdeGndVEs461wTgUVBxFV39EiM D547+5pJJpI+fGGLh5azykfP/fK6Riii0lh06nfybKzhMT+L5N+mm/8jgADP5iea wSXZ00gFQuENobTK8gc6DZZuAkPZ1FGXfY3SJ9fGSoeW3ZlTXkLyqjsRc2T+g/JS 9Sv2rDipuGkM8ijDYo6bya4IiMZUGTaUVXVcZmkxKd8GZvZVOQ4= -----END CERTIFICATE-----Generated at Sat Aug 23 14:04:07 2025 by rpki-client