$ rpki-client -vvf repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.mft File: 7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.mft (raw, json) Hash identifier: ZFAicQ9XTKEeuyy0h6QXnI7MCj90bcsiFQWK3Hri33Q= Subject key identifier: 02:AB:6D:00:A2:3F:A1:6D:C1:42:03:70:8A:EB:1B:A3:93:02:86:ED Authority key identifier: 7C:7A:73:B6:7F:FC:66:64:BC:CD:30:B2:01:3C:54:FC:CE:0B:62:54 Certificate issuer: /CN=7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254 Certificate serial: 107B3153E79E9AD74237D22DB86146DAF0258C21 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.mft Manifest number: 02B7 Signing time: Sat 23 Aug 2025 10:21:17 +0000 Manifest this update: Sat 23 Aug 2025 10:16:17 +0000 Manifest next update: Tue 26 Aug 2025 16:21:17 +0000 Files and hashes: 1: 7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.crl (hash: 3XOqHfRnFIIa7O0ZYVKY1SabyiVixymMdz4a4P3fYJs=) 2: 323030313a6466323a653538303a3a2f34382d3438203d3e20313339393935.roa (hash: co+KBnnYJEQwi8iEhHouifTA/OpTo3Sr/IbcmkaoPho=) 3: 3130332e3134382e3139322e302f32332d3233203d3e20313339393935.roa (hash: 6G5VVeMd9f0T1RPqM5MK5BUBT+YheiE43z/FzXMuOVc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.crl rsync://repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:7b:31:53:e7:9e:9a:d7:42:37:d2:2d:b8:61:46:da:f0:25:8c:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254 Validity Not Before: Aug 23 10:16:17 2025 GMT Not After : Aug 26 16:21:17 2025 GMT Subject: CN=02AB6D00A23FA16DC14203708AEB1BA3930286ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:0b:bb:6a:ab:8c:02:de:5e:20:3d:93:42:dc: 68:90:01:29:f7:fd:5c:96:75:c8:a6:cb:a2:fa:05: 92:49:bc:46:20:3e:b6:e0:49:09:e8:30:c7:47:9a: b2:b2:0c:15:59:b9:45:b7:af:e1:22:2f:49:bc:b3: 95:a9:8c:b6:9c:a3:66:dc:bd:1d:04:5e:77:8f:cf: a9:3b:35:a7:b8:59:c0:f7:b3:15:26:b2:95:bd:a6: af:96:49:e3:81:d7:ea:65:1f:c0:5e:09:d6:e3:a7: 9f:a2:c2:1f:b9:4a:e1:94:b1:28:4a:44:37:33:4d: d5:14:03:d1:c2:2a:bf:6c:fe:22:35:c5:39:60:c0: fe:48:8d:a7:d3:29:d7:b0:5d:6c:fe:b6:7c:28:e3: 4d:07:e0:11:52:4e:1f:fe:fc:76:27:1a:71:ed:3d: 64:e7:7d:63:84:88:75:da:c6:06:77:18:68:5d:b1: 4b:26:27:ff:0c:fd:a5:26:22:00:40:4f:36:04:99: 8d:4b:bf:da:41:76:5f:ef:98:ec:03:39:86:11:93: ce:34:fd:97:76:fe:1c:bf:b5:1c:ef:d2:ac:67:7b: 76:5c:6e:f4:d1:41:29:e8:a0:06:fd:6d:a7:62:54: 42:a0:12:55:02:eb:20:6f:aa:06:52:ff:5e:22:b5: f0:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:AB:6D:00:A2:3F:A1:6D:C1:42:03:70:8A:EB:1B:A3:93:02:86:ED X509v3 Authority Key Identifier: keyid:7C:7A:73:B6:7F:FC:66:64:BC:CD:30:B2:01:3C:54:FC:CE:0B:62:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:21:b6:4a:4f:6e:e7:3c:9d:c5:61:13:d5:ff:2a:bf:2f:b5: 4d:26:bb:1a:56:10:96:1a:e5:3a:02:ad:78:30:e2:d1:8c:e5: a1:3b:f7:e9:92:49:77:14:6e:e3:41:d8:56:20:36:27:23:ba: d0:57:62:93:27:d5:bf:7c:ba:92:41:5c:a0:46:a3:f0:c7:3b: 4a:01:25:67:13:2e:eb:b4:c3:4f:da:a7:dc:cc:da:72:26:46: e9:c5:fb:41:b7:4c:4a:4f:b3:0d:0f:f9:86:03:dc:95:b1:5d: 68:19:95:56:af:c9:b8:8a:a2:ec:f9:4a:84:d8:3f:8a:30:59: a4:e6:d0:76:45:cc:c9:08:17:5d:60:60:6a:a2:1e:17:4a:8d: 4e:23:5b:d1:46:48:9f:9e:bb:9c:8c:c3:fb:26:a4:9a:98:04: 35:52:6c:eb:c1:29:d2:a5:06:0e:6a:70:3b:c6:1d:98:da:97: 6c:fc:fa:25:37:0e:66:5f:20:0f:e6:c2:e7:34:c2:fd:cd:98: 39:99:af:52:50:42:01:2f:94:ea:79:68:b0:3f:04:07:cb:eb: e5:6d:10:c9:c7:41:fc:da:09:2f:8d:01:22:cb:6c:40:5a:53: 20:7c:5e:96:9c:08:ee:35:93:66:d4:79:c2:ed:0a:ca:05:a2: 6b:c8:57:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEHsxU+eemtdCN9ItuGFG2vAljCEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M3QTczQjY3RkZDNjY2NEJDQ0QzMEIyMDEzQzU0RkND RTBCNjI1NDAeFw0yNTA4MjMxMDE2MTdaFw0yNTA4MjYxNjIxMTdaMDMxMTAvBgNV BAMTKDAyQUI2RDAwQTIzRkExNkRDMTQyMDM3MDhBRUIxQkEzOTMwMjg2RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDGC7tqq4wC3l4gPZNC3GiQASn3 /VyWdcimy6L6BZJJvEYgPrbgSQnoMMdHmrKyDBVZuUW3r+EiL0m8s5WpjLaco2bc vR0EXnePz6k7Nae4WcD3sxUmspW9pq+WSeOB1+plH8BeCdbjp5+iwh+5SuGUsShK RDczTdUUA9HCKr9s/iI1xTlgwP5IjafTKdewXWz+tnwo400H4BFSTh/+/HYnGnHt PWTnfWOEiHXaxgZ3GGhdsUsmJ/8M/aUmIgBATzYEmY1Lv9pBdl/vmOwDOYYRk840 /Zd2/hy/tRzv0qxne3ZcbvTRQSnooAb9badiVEKgElUC6yBvqgZS/14itfB1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAqttAKI/oW3BQgNwiusbo5MChu0wHwYDVR0j BBgwFoAUfHpztn/8ZmS8zTCyATxU/M4LYlQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MGI1OTBlOC00Zjg5LTQ3ODUtYWU3OS0yYmZmZmEyYzUyYzkvMC83QzdBNzNCNjdG RkM2NjY0QkNDRDMwQjIwMTNDNTRGQ0NFMEI2MjU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0M3QTczQjY3RkZDNjY2NEJDQ0QzMEIyMDEzQzU0RkNDRTBC NjI1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjBiNTkwZTgtNGY4OS00Nzg1LWFl NzktMmJmZmZhMmM1MmM5LzAvN0M3QTczQjY3RkZDNjY2NEJDQ0QzMEIyMDEzQzU0 RkNDRTBCNjI1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH0htkpPbuc8ncVhE9X/Kr8vtU0muxpWEJYa 5ToCrXgw4tGM5aE79+mSSXcUbuNB2FYgNicjutBXYpMn1b98upJBXKBGo/DHO0oB JWcTLuu0w0/ap9zM2nImRunF+0G3TEpPsw0P+YYD3JWxXWgZlVavybiKouz5SoTY P4owWaTm0HZFzMkIF11gYGqiHhdKjU4jW9FGSJ+eu5yMw/smpJqYBDVSbOvBKdKl Bg5qcDvGHZjal2z8+iU3DmZfIA/mwuc0wv3NmDmZr1JQQgEvlOp5aLA/BAfL6+Vt EMnHQfzaCS+NASLLbEBaUyB8XpacCO41k2bUecLtCsoFomvIV/M= -----END CERTIFICATE-----Generated at Sat Aug 23 12:26:46 2025 by rpki-client