$ rpki-client -vvf repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft File: D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft (raw, json) Hash identifier: nN1o8NjVBq6YTphzLVh0dwaZ/6ZKl3dmqGdigU1AAtM= Subject key identifier: A4:31:AB:CA:A3:C1:25:95:46:5A:54:3E:D3:DB:00:1E:C4:C3:E8:BC Authority key identifier: D7:C7:C6:E5:33:C4:1C:36:D9:23:CD:C5:9F:FC:1B:04:36:C3:9F:AF Certificate issuer: /CN=D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF Certificate serial: 1773EA840C544F0C46BEDD82F5C2D9DAEFB17CA8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft Manifest number: 0259 Signing time: Thu 21 Aug 2025 19:11:47 +0000 Manifest this update: Thu 21 Aug 2025 19:06:47 +0000 Manifest next update: Sun 24 Aug 2025 21:37:47 +0000 Files and hashes: 1: 3130332e3130322e3137372e302f32342d3234203d3e20313335343634.roa (hash: oHkNyUxZ+91xlNVhfeWI9Dc0rmMp8x6qN96DcYOObkU=) 2: D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.crl (hash: fspKH+it7GkvIuch0u9jfBMcTBV7HTr9ImZZuSGl/cI=) 3: 3130332e37302e36382e302f32342d3234203d3e20313335343634.roa (hash: 2CoQGk4NMRfUrYnvT/UZsUPUuE84h2TZeseeJ7TfgPk=) 4: 3130332e3130322e3136372e302f32342d3234203d3e20313335343634.roa (hash: G2Aj1Erzi22dbwXIe5ZKOYeLnX3IptEzXgXL9BU+vU0=) 5: 3130332e3130322e3137362e302f32342d3234203d3e20313335343634.roa (hash: /nnnpT4J0Tuu/cwXNYMkIuOZtyJHbw8wTsT308/p5rw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.crl rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 21:37:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:73:ea:84:0c:54:4f:0c:46:be:dd:82:f5:c2:d9:da:ef:b1:7c:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF Validity Not Before: Aug 21 19:06:47 2025 GMT Not After : Aug 24 21:37:47 2025 GMT Subject: CN=A431ABCAA3C12595465A543ED3DB001EC4C3E8BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:2b:7e:49:a5:49:51:72:5b:5b:a9:d9:c0:94: 2b:87:15:8b:91:6a:c9:b2:59:40:46:75:54:be:fb: b6:0a:13:ea:6b:97:be:79:33:16:5c:5d:8e:ea:ac: 3e:8e:2c:cb:90:9a:11:c9:d6:0a:37:46:78:08:8d: be:3f:be:fe:f1:14:43:57:c1:a8:b2:44:9f:8c:20: 5c:55:ea:fe:d9:a2:d0:11:cd:fd:bf:d0:57:27:51: 5f:a6:41:ff:d7:d6:2e:40:cf:e1:b1:ca:97:c5:57: f2:32:82:b9:d2:f2:74:71:25:7c:8e:c7:be:80:66: 55:1f:07:e8:ee:35:aa:92:12:b7:5c:91:d4:76:27: 0b:0b:99:3d:9c:6a:7b:18:7d:32:26:b0:e4:d9:c7: d9:9a:51:c4:c1:28:b7:3d:06:94:aa:c5:74:3e:81: 8a:9d:f9:8b:58:a0:f5:99:49:49:08:1e:c5:44:53: 51:1b:05:50:1d:01:26:a3:97:d5:14:b2:18:10:68: b6:08:98:e2:5e:66:6e:04:a8:ad:5c:75:76:4d:4f: db:05:30:c5:da:55:38:15:85:05:6e:0a:7f:4e:17: 74:d9:49:95:b4:33:aa:2a:6d:3c:31:68:b1:ae:9b: d3:4d:26:1d:10:bb:14:a1:cd:54:e7:1e:4d:d4:01: b5:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:31:AB:CA:A3:C1:25:95:46:5A:54:3E:D3:DB:00:1E:C4:C3:E8:BC X509v3 Authority Key Identifier: keyid:D7:C7:C6:E5:33:C4:1C:36:D9:23:CD:C5:9F:FC:1B:04:36:C3:9F:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b7:32:b6:c5:5f:e4:56:26:eb:a7:34:7b:b5:2b:1a:c5:bb:4e: 95:6c:f2:7d:e8:b5:7d:9b:66:89:2f:9f:55:1a:42:c9:89:61: 6f:dd:bd:87:95:72:d5:3a:ea:c5:11:57:ef:51:18:44:ef:f1: 0f:04:8d:0c:14:21:69:1e:67:ba:7b:cb:d7:de:18:88:ed:8d: 50:ea:d2:39:02:de:9a:45:a8:e9:b6:64:4b:f8:ea:7b:1d:c0: 20:90:e4:cf:7d:a3:9c:d7:f5:6c:a2:ec:2a:5d:59:e6:b8:3a: 93:0a:da:a8:ac:9c:d2:3d:70:51:75:e4:61:71:18:da:0c:df: 2f:ff:e2:18:e2:b4:e7:89:55:85:fb:ed:bd:c4:b5:1b:ae:9a: ae:73:00:5d:68:a6:c1:da:34:51:3e:97:5e:3a:3e:33:df:d3: 9b:84:97:7b:19:f5:18:c5:07:a7:d2:47:c6:5d:5a:50:0d:73: 44:d9:b2:01:d3:74:bd:de:3a:ac:79:14:4b:66:32:fc:e1:cc: ec:a9:98:01:e5:79:1c:69:34:59:de:a7:c6:3f:25:46:78:df: c6:4d:ae:72:86:ee:11:bf:c5:52:10:19:a0:ef:33:82:ef:62: f2:a5:f3:a2:bd:68:31:9b:b5:35:6b:aa:b6:7c:02:73:2d:18: be:2d:50:33 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF3PqhAxUTwxGvt2C9cLZ2u+xfKgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdDN0M2RTUzM0M0MUMzNkQ5MjNDREM1OUZGQzFCMDQz NkMzOUZBRjAeFw0yNTA4MjExOTA2NDdaFw0yNTA4MjQyMTM3NDdaMDMxMTAvBgNV BAMTKEE0MzFBQkNBQTNDMTI1OTU0NjVBNTQzRUQzREIwMDFFQzRDM0U4QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpK35JpUlRcltbqdnAlCuHFYuR asmyWUBGdVS++7YKE+prl755MxZcXY7qrD6OLMuQmhHJ1go3RngIjb4/vv7xFENX waiyRJ+MIFxV6v7ZotARzf2/0FcnUV+mQf/X1i5Az+GxypfFV/IygrnS8nRxJXyO x76AZlUfB+juNaqSErdckdR2JwsLmT2cansYfTImsOTZx9maUcTBKLc9BpSqxXQ+ gYqd+YtYoPWZSUkIHsVEU1EbBVAdASajl9UUshgQaLYImOJeZm4EqK1cdXZNT9sF MMXaVTgVhQVuCn9OF3TZSZW0M6oqbTwxaLGum9NNJh0QuxShzVTnHk3UAbXHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpDGryqPBJZVGWlQ+09sAHsTD6LwwHwYDVR0j BBgwFoAU18fG5TPEHDbZI83Fn/wbBDbDn68wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTlhODUzOC1kYTQzLTQxNTgtYWJjMi04ZTYzYThlNDA4OTkvMC9EN0M3QzZFNTMz QzQxQzM2RDkyM0NEQzU5RkZDMUIwNDM2QzM5RkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDdDN0M2RTUzM0M0MUMzNkQ5MjNDREM1OUZGQzFCMDQzNkMz OUZBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTE5YTg1MzgtZGE0My00MTU4LWFi YzItOGU2M2E4ZTQwODk5LzAvRDdDN0M2RTUzM0M0MUMzNkQ5MjNDREM1OUZGQzFC MDQzNkMzOUZBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALcytsVf5FYm66c0e7UrGsW7TpVs8n3otX2b Zokvn1UaQsmJYW/dvYeVctU66sURV+9RGETv8Q8EjQwUIWkeZ7p7y9feGIjtjVDq 0jkC3ppFqOm2ZEv46nsdwCCQ5M99o5zX9Wyi7CpdWea4OpMK2qisnNI9cFF15GFx GNoM3y//4hjitOeJVYX77b3EtRuumq5zAF1opsHaNFE+l146PjPf05uEl3sZ9RjF B6fSR8ZdWlANc0TZsgHTdL3eOqx5FEtmMvzhzOypmAHleRxpNFnep8Y/JUZ438ZN rnKG7hG/xVIQGaDvM4LvYvKl86K9aDGbtTVrqrZ8AnMtGL4tUDM= -----END CERTIFICATE-----Generated at Sat Aug 23 12:34:26 2025 by rpki-client