$ rpki-client -vvf repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft File: 407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft (raw, json) Hash identifier: qDDXfdQbuDm/zycXeNT23iDKbGe+XB9eqXdhTaMSMVI= Subject key identifier: DD:34:E3:36:5A:8A:D4:55:D2:3D:7E:9F:F0:79:62:A3:DB:87:A6:FA Authority key identifier: 40:7B:7C:7E:E0:9E:DB:AA:0A:35:25:E2:09:FF:8E:93:E4:86:53:C8 Certificate issuer: /CN=407B7C7EE09EDBAA0A3525E209FF8E93E48653C8 Certificate serial: 6513758A07D33147BA97335A99B853AF269328D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft Manifest number: AE Signing time: Fri 22 Aug 2025 12:52:31 +0000 Manifest this update: Fri 22 Aug 2025 12:47:31 +0000 Manifest next update: Mon 25 Aug 2025 19:58:31 +0000 Files and hashes: 1: 3130332e3136302e3230322e302f32332d3233203d3e20313431363036.roa (hash: Gj+dL3k6BLOV8ougeJn8Z24XkFylft6ZOL9dKAW0YtU=) 2: 3130332e3136302e3230332e302f32342d3234203d3e20313431363036.roa (hash: gOnGfuRTcZIR+30ZYAMikHYwYT1lMfTYagdIRfIVS+c=) 3: 3130332e3136302e3230322e302f32342d3234203d3e20313431363036.roa (hash: NqmMORtYspcubuoIhO/lJNy3KlFyaaaNEdp/IXvq0Ng=) 4: 407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.crl (hash: u8/Ufwlux04D5G7coPaRVxsn/cA5km32qxD0wbAmK70=) 5: 323030313a6466313a366263303a3a2f34382d3438203d3e20313431363036.roa (hash: LnoUiVTC+YkZ5Y/4/Q1S1mXaeabC5U6lsaInD923/gY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.crl rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 19:58:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:13:75:8a:07:d3:31:47:ba:97:33:5a:99:b8:53:af:26:93:28:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=407B7C7EE09EDBAA0A3525E209FF8E93E48653C8 Validity Not Before: Aug 22 12:47:31 2025 GMT Not After : Aug 25 19:58:31 2025 GMT Subject: CN=DD34E3365A8AD455D23D7E9FF07962A3DB87A6FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:5c:ca:01:cb:bc:80:ef:14:de:53:e9:b8:c8: 21:b4:01:a9:14:70:b8:36:67:4e:2d:20:f1:e8:48: bf:f4:32:9e:d0:35:5f:d8:0e:0b:76:5f:aa:3d:b4: a6:4c:9f:f9:88:d9:8f:66:c3:65:d0:b1:d1:14:9f: 6c:c3:0a:95:76:dc:fa:cf:32:3e:4c:dc:3b:23:95: cc:77:8c:61:54:a4:54:f5:00:71:3a:36:15:1f:43: 6a:b9:cb:2b:76:2b:71:a7:e3:2b:51:85:fc:fd:d3: 85:c9:1a:96:60:a3:de:02:4c:69:65:ca:59:ee:0a: ec:99:85:0d:58:20:8c:21:22:fa:1c:ad:66:7e:53: c1:73:19:5f:c8:4f:4e:e9:0b:88:da:13:72:a6:18: f2:10:d8:c7:f3:6e:b0:b4:ac:05:61:0d:68:ef:1f: f8:a0:ff:ec:9c:3f:de:89:dc:2e:0c:b5:70:aa:58: 16:f2:49:d3:2d:c9:c1:68:13:e2:8e:f1:3b:9d:69: 8c:4b:2a:3b:37:b0:1d:38:7f:1f:e2:70:c3:d2:7d: 60:51:21:03:f8:30:b1:59:65:1b:97:4c:01:9d:d7: 94:16:f0:69:9f:68:50:a0:50:9f:f7:47:41:84:02: 1b:e6:77:da:76:cd:ad:15:e4:69:d4:70:f0:62:bb: c3:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:34:E3:36:5A:8A:D4:55:D2:3D:7E:9F:F0:79:62:A3:DB:87:A6:FA X509v3 Authority Key Identifier: keyid:40:7B:7C:7E:E0:9E:DB:AA:0A:35:25:E2:09:FF:8E:93:E4:86:53:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:84:f2:a9:38:c4:42:77:47:4c:57:67:7b:06:1d:0c:90:e3: bf:e7:bd:e3:60:c7:45:1f:1e:11:b3:6b:5d:53:84:b8:73:d4: 85:fc:01:99:d3:59:40:e3:91:f5:f9:6e:37:be:67:46:c5:8e: 39:8e:90:2c:2d:aa:22:7d:77:bb:32:c0:9a:6a:6f:cc:96:ff: 54:fa:cc:62:03:4c:e2:b0:49:e8:d4:92:f1:2d:ac:9a:d5:d8: 4e:53:29:b4:ad:71:ea:3e:de:86:cc:92:0e:f7:62:cf:f0:a3: 4f:5d:9e:be:db:53:51:60:90:66:4b:c7:e4:5a:24:e7:e9:9f: 00:f4:d2:77:fb:a0:1b:fc:56:c1:33:b2:47:f6:f3:5d:dd:96: 85:bf:aa:bd:55:aa:4f:71:5f:e1:59:df:2e:0c:33:5b:2e:10: 4e:b8:97:d5:59:0e:40:9b:c2:ef:53:58:60:17:06:6c:e9:c8: 7a:21:46:67:f7:a8:e5:14:8d:18:76:dd:57:41:94:16:fb:c8: 6b:6b:d1:1e:77:82:03:d5:90:5b:1e:a4:db:54:5e:9b:1f:79: 09:27:07:7a:2a:77:1b:15:d8:c2:c9:6d:ac:eb:aa:44:fe:af: e1:a2:ad:05:e6:c6:4a:38:39:3a:06:86:a7:33:dc:ac:c7:e8: bd:e6:ac:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZRN1igfTMUe6lzNambhTryaTKNIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA3QjdDN0VFMDlFREJBQTBBMzUyNUUyMDlGRjhFOTNF NDg2NTNDODAeFw0yNTA4MjIxMjQ3MzFaFw0yNTA4MjUxOTU4MzFaMDMxMTAvBgNV BAMTKEREMzRFMzM2NUE4QUQ0NTVEMjNEN0U5RkYwNzk2MkEzREI4N0E2RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnXMoBy7yA7xTeU+m4yCG0AakU cLg2Z04tIPHoSL/0Mp7QNV/YDgt2X6o9tKZMn/mI2Y9mw2XQsdEUn2zDCpV23PrP Mj5M3Dsjlcx3jGFUpFT1AHE6NhUfQ2q5yyt2K3Gn4ytRhfz904XJGpZgo94CTGll ylnuCuyZhQ1YIIwhIvocrWZ+U8FzGV/IT07pC4jaE3KmGPIQ2MfzbrC0rAVhDWjv H/ig/+ycP96J3C4MtXCqWBbySdMtycFoE+KO8TudaYxLKjs3sB04fx/icMPSfWBR IQP4MLFZZRuXTAGd15QW8GmfaFCgUJ/3R0GEAhvmd9p2za0V5GnUcPBiu8MnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3TTjNlqK1FXSPX6f8Hlio9uHpvowHwYDVR0j BBgwFoAUQHt8fuCe26oKNSXiCf+Ok+SGU8gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDY0YmY2YS00MzAyLTQ2MGYtOTY2OS0wOWE1MGE3M2FmMWEvMC80MDdCN0M3RUUw OUVEQkFBMEEzNTI1RTIwOUZGOEU5M0U0ODY1M0M4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA3QjdDN0VFMDlFREJBQTBBMzUyNUUyMDlGRjhFOTNFNDg2 NTNDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ2NGJmNmEtNDMwMi00NjBmLTk2 NjktMDlhNTBhNzNhZjFhLzAvNDA3QjdDN0VFMDlFREJBQTBBMzUyNUUyMDlGRjhF OTNFNDg2NTNDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIeE8qk4xEJ3R0xXZ3sGHQyQ47/nveNgx0Uf HhGza11ThLhz1IX8AZnTWUDjkfX5bje+Z0bFjjmOkCwtqiJ9d7sywJpqb8yW/1T6 zGIDTOKwSejUkvEtrJrV2E5TKbStceo+3obMkg73Ys/wo09dnr7bU1FgkGZLx+Ra JOfpnwD00nf7oBv8VsEzskf2813dloW/qr1Vqk9xX+FZ3y4MM1suEE64l9VZDkCb wu9TWGAXBmzpyHohRmf3qOUUjRh23VdBlBb7yGtr0R53ggPVkFsepNtUXpsfeQkn B3oqdxsV2MLJbazrqkT+r+GirQXmxko4OToGhqcz3KzH6L3mrCY= -----END CERTIFICATE-----Generated at Sat Aug 23 14:05:42 2025 by rpki-client