$ rpki-client -vvf repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.mft File: 7376922C93BF667FFBBDAF0735AE73D1451B08C2.mft (raw, json) Hash identifier: jdNAjjysi0Gr0wtbV4uhlJ9yETZqP3PCqsdSCOu23+o= Subject key identifier: 00:4B:8C:7F:57:6E:76:5B:AB:08:EF:E2:13:2B:60:01:42:63:F9:D3 Authority key identifier: 73:76:92:2C:93:BF:66:7F:FB:BD:AF:07:35:AE:73:D1:45:1B:08:C2 Certificate issuer: /CN=7376922C93BF667FFBBDAF0735AE73D1451B08C2 Certificate serial: 0FDCE9A4999D71C30CB6D88E8803E3F81737151A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7376922C93BF667FFBBDAF0735AE73D1451B08C2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.mft Manifest number: 04F1 Signing time: Fri 22 Aug 2025 01:10:53 +0000 Manifest this update: Fri 22 Aug 2025 01:05:53 +0000 Manifest next update: Mon 25 Aug 2025 01:59:53 +0000 Files and hashes: 1: 3130332e38392e3136342e302f32342d3234203d3e20313333383030.roa (hash: +2SP7VdADvevew0k00TuxJ1WZ3WZFkGqu4JZIMGxgpw=) 2: 3130332e38392e3136352e302f32342d3234203d3e20313333383030.roa (hash: 0V79HEBuKR1jbK8PkSQwyA4BziEgKvO+/ItR4BkRmQg=) 3: 3130332e372e3137362e302f32342d3234203d3e20313336303830.roa (hash: pULFJZ+nbfV5jOVZtN4jB+N6TsIyKwD9xJ39aFL57ak=) 4: 3130332e38392e3135342e302f32342d3234203d3e20313333383030.roa (hash: 21L4D1hu21+7UR3Mn3cvc8Jhs/U+RaE8nhEhhkQ5YEA=) 5: 7376922C93BF667FFBBDAF0735AE73D1451B08C2.crl (hash: qnCdG05JUHvK8sd7DZKmcLEPzftUrVjU6fnpchCOlBo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.crl rsync://repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7376922C93BF667FFBBDAF0735AE73D1451B08C2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 01:59:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:dc:e9:a4:99:9d:71:c3:0c:b6:d8:8e:88:03:e3:f8:17:37:15:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7376922C93BF667FFBBDAF0735AE73D1451B08C2 Validity Not Before: Aug 22 01:05:53 2025 GMT Not After : Aug 25 01:59:53 2025 GMT Subject: CN=004B8C7F576E765BAB08EFE2132B60014263F9D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:5d:7e:82:c4:cb:31:1f:0e:15:48:37:2a:5f: d5:77:de:08:7f:c6:eb:ff:a7:df:0d:ba:4c:6a:c4: 90:2c:47:2d:51:13:57:74:ff:fb:ed:f8:02:ef:c9: 69:45:70:bb:56:d4:a4:65:aa:ef:32:1b:9d:2e:fc: 4c:a5:37:5b:50:23:29:4e:a4:8a:4a:06:61:75:3c: b0:eb:42:d7:c3:71:48:d3:13:14:df:e2:6d:d4:a9: b4:ae:0d:1e:7c:47:cc:0e:7f:f6:55:c2:4b:99:a9: a1:01:0e:8a:5f:95:98:92:38:96:db:7a:e7:eb:23: 85:f1:5e:53:b4:f0:e5:88:9c:7b:bc:1a:0b:9c:bc: b0:4d:7d:e8:8e:1b:09:a3:cf:6f:f3:b1:8e:81:df: be:f8:0c:42:42:a0:5d:36:c7:69:b5:c3:40:9c:ed: 1d:fc:ec:4d:8e:17:9f:90:e8:e3:d2:06:59:50:d9: 99:32:45:b4:45:2d:c4:ab:67:3a:09:f8:20:6e:92: a1:2d:e0:e3:c6:73:ad:00:ff:93:5f:24:cb:6e:d1: cd:3d:d1:a3:a1:6d:c3:7c:4e:ee:a0:f4:70:e0:32: 47:03:6b:c2:09:9b:21:a6:af:d2:45:75:aa:d3:c2: d6:1b:fa:c3:b4:f1:ae:a8:c6:cd:3f:99:1e:8d:87: ae:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 00:4B:8C:7F:57:6E:76:5B:AB:08:EF:E2:13:2B:60:01:42:63:F9:D3 X509v3 Authority Key Identifier: keyid:73:76:92:2C:93:BF:66:7F:FB:BD:AF:07:35:AE:73:D1:45:1B:08:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7376922C93BF667FFBBDAF0735AE73D1451B08C2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:2e:5f:ad:f0:73:dc:05:76:4c:d0:db:04:4b:af:ba:12:cb: ba:4b:12:f7:14:f8:dc:81:f3:f8:32:45:03:8d:f6:f7:19:c4: 41:35:81:0c:b6:b7:35:e5:19:31:6b:f6:69:23:e9:5d:1d:ed: 7f:d8:53:7c:b1:bb:14:e1:42:bb:55:d9:86:a0:17:6d:1a:be: 58:89:2c:aa:39:36:7d:e1:93:49:14:83:c2:de:ba:27:15:72: 21:94:3e:28:e6:5b:83:8c:11:15:69:f3:29:12:7f:de:81:42: f5:d8:b2:b8:fb:95:60:e8:38:03:7c:70:0c:0b:a3:5e:00:e9: 5e:ac:f6:29:3b:05:49:04:fa:51:22:8f:1a:6f:ba:65:64:ec: 6f:3a:d6:c8:55:5e:a3:5d:a4:9e:31:01:be:0b:90:0e:e7:43: 43:b7:bb:ad:63:f2:25:38:bc:c4:a3:4f:a4:1f:7c:fd:33:44: 6e:70:5c:6c:bd:0c:a6:13:c0:57:e5:75:e2:5a:f4:3d:25:7c: 6b:c5:cd:70:08:92:41:d3:61:37:b9:30:e4:1e:3a:d8:87:b5: ca:4a:f1:42:b1:9a:8a:29:80:ad:ed:ba:e1:b7:51:3e:d4:d2: 4e:d0:b5:ca:8f:51:60:17:78:85:2c:53:38:92:d4:01:0c:a3: 9f:8f:7f:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD9zppJmdccMMttiOiAPj+Bc3FRowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzM3NjkyMkM5M0JGNjY3RkZCQkRBRjA3MzVBRTczRDE0 NTFCMDhDMjAeFw0yNTA4MjIwMTA1NTNaFw0yNTA4MjUwMTU5NTNaMDMxMTAvBgNV BAMTKDAwNEI4QzdGNTc2RTc2NUJBQjA4RUZFMjEzMkI2MDAxNDI2M0Y5RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClXX6CxMsxHw4VSDcqX9V33gh/ xuv/p98NukxqxJAsRy1RE1d0//vt+ALvyWlFcLtW1KRlqu8yG50u/EylN1tQIylO pIpKBmF1PLDrQtfDcUjTExTf4m3UqbSuDR58R8wOf/ZVwkuZqaEBDopflZiSOJbb eufrI4XxXlO08OWInHu8GgucvLBNfeiOGwmjz2/zsY6B3774DEJCoF02x2m1w0Cc 7R387E2OF5+Q6OPSBllQ2ZkyRbRFLcSrZzoJ+CBukqEt4OPGc60A/5NfJMtu0c09 0aOhbcN8Tu6g9HDgMkcDa8IJmyGmr9JFdarTwtYb+sO08a6oxs0/mR6Nh651AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAEuMf1dudlurCO/iEytgAUJj+dMwHwYDVR0j BBgwFoAUc3aSLJO/Zn/7va8HNa5z0UUbCMIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDE3NmRkZC1hOTgwLTQzZDYtOTRhNy05NWVlZGE1Mzk2NjUvMC83Mzc2OTIyQzkz QkY2NjdGRkJCREFGMDczNUFFNzNEMTQ1MUIwOEMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzM3NjkyMkM5M0JGNjY3RkZCQkRBRjA3MzVBRTczRDE0NTFC MDhDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQxNzZkZGQtYTk4MC00M2Q2LTk0 YTctOTVlZWRhNTM5NjY1LzAvNzM3NjkyMkM5M0JGNjY3RkZCQkRBRjA3MzVBRTcz RDE0NTFCMDhDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAkuX63wc9wFdkzQ2wRLr7oSy7pLEvcU+NyB 8/gyRQON9vcZxEE1gQy2tzXlGTFr9mkj6V0d7X/YU3yxuxThQrtV2YagF20avliJ LKo5Nn3hk0kUg8LeuicVciGUPijmW4OMERVp8ykSf96BQvXYsrj7lWDoOAN8cAwL o14A6V6s9ik7BUkE+lEijxpvumVk7G861shVXqNdpJ4xAb4LkA7nQ0O3u61j8iU4 vMSjT6QffP0zRG5wXGy9DKYTwFfldeJa9D0lfGvFzXAIkkHTYTe5MOQeOtiHtcpK 8UKxmoopgK3tuuG3UT7U0k7QtcqPUWAXeIUsUziS1AEMo5+Pfz8= -----END CERTIFICATE-----Generated at Sat Aug 23 10:21:27 2025 by rpki-client