$ rpki-client -vvf repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft File: 7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft (raw, json) Hash identifier: bYMAP+xujX63/DiAytqjA8fexybrNc7NIBLS8mRcOrg= Subject key identifier: 3C:5A:01:4A:73:83:9D:3E:BA:DC:F3:41:6A:D5:E2:CB:FE:66:F4:12 Authority key identifier: 7D:4F:0D:00:7B:60:13:49:96:AC:31:98:B9:E5:B7:1E:AF:70:E7:33 Certificate issuer: /CN=7D4F0D007B60134996AC3198B9E5B71EAF70E733 Certificate serial: 6701E440EA24B05AACEAFF7E66C92E784AF49497 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft Manifest number: 0517 Signing time: Fri 22 Aug 2025 02:52:11 +0000 Manifest this update: Fri 22 Aug 2025 02:47:11 +0000 Manifest next update: Mon 25 Aug 2025 12:38:11 +0000 Files and hashes: 1: 7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl (hash: thcmXnH777WjiC3pJ4Wv6EcToeaCKozE7MOHeQw3e0I=) 2: 3130332e3132342e3133382e302f32342d3234203d3e20313338303839.roa (hash: J/jPlTXp+kWKv5LyWjv+I0N1cAy55yAD17Rj2NwYkPM=) 3: 3130332e3132342e3133362e302f32342d3234203d3e20313338303839.roa (hash: BQTtvc745IuKZaE72oqsQIokxS6D/NEUcrmFIac+agM=) 4: 3130332e3132342e3133392e302f32342d3234203d3e20313338303839.roa (hash: qQ/OJJBLuknzR6dOBM+bTowxaxIwEUGdeh8g4k+xMHc=) 5: 323430333a653063303a3a2f34382d3438203d3e20313338303839.roa (hash: 56yoy1pZXhES0/QXKkOUvjrn9k9A+/MhvPggVyF266U=) 6: 3130332e3132342e3133362e302f32322d3234203d3e20313338303839.roa (hash: 0fYEP8T/Nnelfp7GTy05C/LwRW0usrD9PvaWq6iCxUk=) 7: 323430333a653063303a313a3a2f34382d3438203d3e20313338303839.roa (hash: H7BZrybLTpX0NJFsDuTjqzH8VF1huH+0BD/mvn2lSto=) 8: 323430333a653063303a3a2f33322d3332203d3e20313338303839.roa (hash: N0fiZGpp7G4AcyGQiECW3/6Q5p0a7A1fAhfbX9FH1ms=) 9: 323430333a653063303a31333a3a2f34382d3438203d3e20313338303839.roa (hash: NEhivRqvBCnBURZf09iLRn6F9NwBbv/MNUQSDs4qTsQ=) 10: 323430333a653063303a3a2f33322d3438203d3e20313338303839.roa (hash: IDS7wT53F/9d+GGxnBDomzis7H+va5MBv/3bGTQques=) 11: 323430333a653063303a323a3a2f34382d3438203d3e20313338303839.roa (hash: 7qX9WcxP/RC8tMcJg/P60OwjJ/UboqeJrbX2Ange7f0=) 12: 3130332e3132342e3133382e302f32332d3234203d3e20313338303839.roa (hash: UkRWHYHFSXJQvTnbIud8PmlndW+kHrowErEkvw8GIIU=) 13: 3130332e3132342e3133362e302f32332d3234203d3e20313338303839.roa (hash: KTTSzhJyEe2+3+LNGtWkObwsWEdVtFCSQXuEdew12yU=) 14: 3130332e3132342e3133372e302f32342d3234203d3e20313338303839.roa (hash: vPo4xg80UOtB6VJUwA4UWFKXU9vTxzV/7Yqjm3eG2dU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 12:38:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:01:e4:40:ea:24:b0:5a:ac:ea:ff:7e:66:c9:2e:78:4a:f4:94:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D4F0D007B60134996AC3198B9E5B71EAF70E733 Validity Not Before: Aug 22 02:47:11 2025 GMT Not After : Aug 25 12:38:11 2025 GMT Subject: CN=3C5A014A73839D3EBADCF3416AD5E2CBFE66F412 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:c3:9d:b3:c4:48:3d:a2:8e:f3:72:23:69:e6: 4f:a2:0b:35:8d:ec:bb:fa:86:80:33:15:a2:ad:d9: 9b:e4:df:18:f1:3b:4e:96:9d:53:0d:a8:5c:90:11: 7b:1f:ab:a4:e7:c2:1f:ce:88:58:fe:28:b9:3c:f5: 91:e9:22:3e:89:ae:ee:73:d9:a1:69:37:be:70:63: f3:76:95:f2:71:db:9c:e0:66:3f:90:3c:f6:ef:b4: 9d:a3:7e:d2:a0:71:91:89:bf:a8:8b:c8:a3:42:24: e5:35:0a:de:c2:d7:57:ef:c5:14:0d:9d:b8:ff:b5: d4:fd:c2:a9:a3:19:19:73:19:dd:2c:9d:01:65:4f: 7d:a3:9b:1d:37:37:f0:ea:ba:ce:81:72:02:f5:7e: 1f:a5:65:f6:37:28:12:db:a4:02:a6:16:97:b0:34: ef:6d:fe:6b:74:f4:d0:ff:f8:23:1e:40:8d:64:81: 1c:73:45:8c:17:89:e5:96:13:ce:23:0f:ad:a2:03: 0e:ab:71:06:2d:ac:58:df:e9:34:10:6f:57:6c:24: f6:23:74:96:79:ab:32:e8:92:48:58:81:d5:56:0c: 7b:65:40:a6:91:f1:e2:11:09:08:c9:f7:1f:8c:ad: 3d:7e:2f:4e:4d:48:ea:5e:fc:9c:c5:82:09:99:d5: 56:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:5A:01:4A:73:83:9D:3E:BA:DC:F3:41:6A:D5:E2:CB:FE:66:F4:12 X509v3 Authority Key Identifier: keyid:7D:4F:0D:00:7B:60:13:49:96:AC:31:98:B9:E5:B7:1E:AF:70:E7:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:c8:8e:f2:01:ab:04:d8:83:f3:2b:49:e1:da:0d:c0:8a:3d: 64:22:90:43:eb:cc:17:a1:38:9e:b0:53:5d:bc:01:96:a6:18: ea:0f:46:5f:4f:6c:f3:e2:92:74:2d:2e:b8:67:42:db:20:14: 09:e5:2b:0b:85:11:d1:ac:d7:ac:5a:36:8f:d9:ab:af:6c:82: e0:17:a3:f5:d1:62:aa:00:04:22:17:e0:ba:76:17:ec:b7:ec: 82:1b:ae:43:d9:11:2b:53:6c:46:55:b0:c5:df:b2:05:6e:71: 91:d9:80:4e:8f:0c:fb:14:67:cf:25:0f:17:48:90:91:33:48: 41:af:1f:96:6b:c1:b2:d5:2e:a0:fe:67:8d:37:f0:3d:92:e5: 42:7c:db:b6:09:50:40:62:95:44:58:c6:d6:0c:00:05:8e:0d: 9c:47:81:ff:0d:6b:6d:a9:32:bb:88:82:6f:da:74:9b:d1:38: 8a:57:1f:df:bb:b8:a7:4c:62:bc:3c:33:2a:54:a0:5f:04:56: 84:62:e1:db:69:d4:5f:af:0d:94:69:17:04:87:ad:c4:67:d3: 57:68:df:17:ff:a9:64:25:b4:40:5c:48:f9:11:06:ec:28:35: 54:1b:d0:c5:83:20:ab:bc:cc:23:a2:49:96:98:3c:7c:70:c0: 5c:48:82:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZwHkQOoksFqs6v9+ZskueEr0lJcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q0RjBEMDA3QjYwMTM0OTk2QUMzMTk4QjlFNUI3MUVB RjcwRTczMzAeFw0yNTA4MjIwMjQ3MTFaFw0yNTA4MjUxMjM4MTFaMDMxMTAvBgNV BAMTKDNDNUEwMTRBNzM4MzlEM0VCQURDRjM0MTZBRDVFMkNCRkU2NkY0MTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNw52zxEg9oo7zciNp5k+iCzWN 7Lv6hoAzFaKt2Zvk3xjxO06WnVMNqFyQEXsfq6Tnwh/OiFj+KLk89ZHpIj6Jru5z 2aFpN75wY/N2lfJx25zgZj+QPPbvtJ2jftKgcZGJv6iLyKNCJOU1Ct7C11fvxRQN nbj/tdT9wqmjGRlzGd0snQFlT32jmx03N/Dqus6BcgL1fh+lZfY3KBLbpAKmFpew NO9t/mt09ND/+CMeQI1kgRxzRYwXieWWE84jD62iAw6rcQYtrFjf6TQQb1dsJPYj dJZ5qzLokkhYgdVWDHtlQKaR8eIRCQjJ9x+MrT1+L05NSOpe/JzFggmZ1Va1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPFoBSnODnT663PNBatXiy/5m9BIwHwYDVR0j BBgwFoAUfU8NAHtgE0mWrDGYueW3Hq9w5zMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YWJhNGU1OS1mYjMxLTQxYjUtODhlNy0wYjJjZWQxZjIwMWMvMC83RDRGMEQwMDdC NjAxMzQ5OTZBQzMxOThCOUU1QjcxRUFGNzBFNzMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q0RjBEMDA3QjYwMTM0OTk2QUMzMTk4QjlFNUI3MUVBRjcw RTczMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWFiYTRlNTktZmIzMS00MWI1LTg4 ZTctMGIyY2VkMWYyMDFjLzAvN0Q0RjBEMDA3QjYwMTM0OTk2QUMzMTk4QjlFNUI3 MUVBRjcwRTczMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJjIjvIBqwTYg/MrSeHaDcCKPWQikEPrzBeh OJ6wU128AZamGOoPRl9PbPPiknQtLrhnQtsgFAnlKwuFEdGs16xaNo/Zq69sguAX o/XRYqoABCIX4Lp2F+y37IIbrkPZEStTbEZVsMXfsgVucZHZgE6PDPsUZ88lDxdI kJEzSEGvH5ZrwbLVLqD+Z4038D2S5UJ827YJUEBilURYxtYMAAWODZxHgf8Na22p MruIgm/adJvROIpXH9+7uKdMYrw8MypUoF8EVoRi4dtp1F+vDZRpFwSHrcRn01do 3xf/qWQltEBcSPkRBuwoNVQb0MWDIKu8zCOiSZaYPHxwwFxIgog= -----END CERTIFICATE-----Generated at Sat Aug 23 12:10:31 2025 by rpki-client