$ rpki-client -vvf repo-rpki.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.mft File: 7767CF49D7661AFAB45870341D88D2F3D9A86CE4.mft (raw, json) Hash identifier: DS7/vD8iQgcxWnLR00uQrpa2r3fMqcS1MZlSj/8AptI= Subject key identifier: B8:2A:A2:24:3D:A0:94:4E:72:AD:00:FB:14:73:3A:70:81:5C:AA:6A Authority key identifier: 77:67:CF:49:D7:66:1A:FA:B4:58:70:34:1D:88:D2:F3:D9:A8:6C:E4 Certificate issuer: /CN=7767CF49D7661AFAB45870341D88D2F3D9A86CE4 Certificate serial: 1B3FB42173DCC6579177AD19B54AB33018AD791F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.mft Manifest number: 020E Signing time: Fri 27 Jun 2025 21:51:39 +0000 Manifest this update: Fri 27 Jun 2025 21:46:39 +0000 Manifest next update: Tue 01 Jul 2025 05:41:39 +0000 Files and hashes: 1: 3130332e3137342e3137342e302f32342d3234203d3e20313437313031.roa (hash: mg4/qvSGbk0zDsf0Rx7OQC6CJE6sN8kDzPsI7vMCT4w=) 2: 7767CF49D7661AFAB45870341D88D2F3D9A86CE4.crl (hash: ADHL9G5zzagV+l8GDL8TWMZ7SSIeEzR8IyH/uWlNrR8=) 3: 3130332e3137342e3137352e302f32342d3234203d3e20313437313031.roa (hash: hiVWfFJS+ICMc15b4VDK2HR8eWbWj/hyT+N05K9QMHE=) 4: 3130332e3137342e3137342e302f32332d3233203d3e20313437313031.roa (hash: qjco1QI2sNnouAlC+BzAGiX63kc+i+LJElEHwxqlyT4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.crl rsync://repo-rpki.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 05:41:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:3f:b4:21:73:dc:c6:57:91:77:ad:19:b5:4a:b3:30:18:ad:79:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7767CF49D7661AFAB45870341D88D2F3D9A86CE4 Validity Not Before: Jun 27 21:46:39 2025 GMT Not After : Jul 1 05:41:39 2025 GMT Subject: CN=B82AA2243DA0944E72AD00FB14733A70815CAA6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e0:1d:e4:2e:50:7c:de:bd:20:50:a3:3c:20: da:f6:ed:e0:d6:af:ea:06:51:09:16:5f:5f:c5:c6: ad:57:60:76:d5:8b:25:54:24:22:d7:38:44:e7:5f: 6c:7e:d1:f7:47:48:5c:15:33:aa:5c:a2:8c:34:f4: a5:8e:db:bd:7b:78:75:5c:3a:12:23:59:b0:d1:19: 46:95:fb:6f:98:e5:c7:87:55:40:80:45:45:e9:63: 59:99:76:3f:7c:a0:39:9f:99:e1:80:f8:d7:08:bf: 41:5b:25:84:06:c6:0f:4b:6c:8c:7b:2e:7b:03:40: ea:0d:f4:ff:9f:3c:b1:b6:22:55:e8:94:3f:7c:f3: 9f:62:fc:0b:ba:49:74:ec:75:bd:49:15:ff:2b:d5: 5f:31:1e:60:e7:f7:9d:24:23:39:b4:fd:5d:b7:f5: 4a:bd:d9:87:2b:24:e0:15:d4:34:43:8a:a0:06:93: 94:d1:ed:0b:f1:27:4c:89:ea:66:71:ff:ce:c7:1c: 1a:c6:06:fa:2b:d5:eb:d5:9a:0c:7d:8a:13:26:45: 90:84:32:77:84:12:22:54:01:9a:35:5a:d1:a5:61: a9:43:c3:af:c4:14:3e:92:88:00:f1:66:ab:78:25: c2:26:c5:ee:98:55:04:c5:b4:b5:39:03:f5:72:40: 96:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:2A:A2:24:3D:A0:94:4E:72:AD:00:FB:14:73:3A:70:81:5C:AA:6A X509v3 Authority Key Identifier: keyid:77:67:CF:49:D7:66:1A:FA:B4:58:70:34:1D:88:D2:F3:D9:A8:6C:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8a:56:96:2b:7b:31:bd:1f:52:ae:af:b1:73:60:f4:ed:07:46: df:67:fa:73:ed:c4:29:ba:5d:97:61:1d:74:6f:ae:bc:e7:2f: 7a:f2:bb:50:41:8e:be:ea:c0:97:c1:74:e0:61:7a:83:c4:a3: df:39:4a:d8:5d:c1:fa:78:31:cc:6c:95:51:a7:44:4d:f5:a1: 3b:fd:c4:99:8b:c3:a1:c6:02:f7:96:61:25:a3:ac:08:c8:21: 68:3f:2c:18:0e:0a:d0:86:65:bf:c6:2b:2b:f7:80:95:97:a0: c8:f3:75:c9:2e:1e:80:47:38:ef:a4:1a:25:3d:20:41:38:31: 8d:08:b3:ab:6f:40:fe:a0:d3:c7:c1:65:f5:75:d6:70:7c:f2: cd:c3:34:95:a6:bd:9d:68:6a:0b:14:09:00:51:b4:14:b7:c7: c2:81:ea:12:10:c8:99:12:2a:3b:d2:30:7a:92:a0:91:bd:14: 4f:59:24:d4:89:2c:a1:97:6f:16:f7:f5:a9:a6:8c:0d:f2:fd: 04:d7:aa:ad:e9:13:05:83:44:6a:5e:b9:92:26:ad:27:e8:93: 13:4e:4b:89:e3:4e:a2:93:65:75:c4:92:20:90:d5:9c:12:43: a2:20:8b:87:47:d2:2b:aa:24:31:0a:06:34:a0:68:d5:b7:6e: 7c:81:c2:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGz+0IXPcxleRd60ZtUqzMBiteR8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzc2N0NGNDlENzY2MUFGQUI0NTg3MDM0MUQ4OEQyRjNE OUE4NkNFNDAeFw0yNTA2MjcyMTQ2MzlaFw0yNTA3MDEwNTQxMzlaMDMxMTAvBgNV BAMTKEI4MkFBMjI0M0RBMDk0NEU3MkFEMDBGQjE0NzMzQTcwODE1Q0FBNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF4B3kLlB83r0gUKM8INr27eDW r+oGUQkWX1/Fxq1XYHbViyVUJCLXOETnX2x+0fdHSFwVM6pcoow09KWO2717eHVc OhIjWbDRGUaV+2+Y5ceHVUCARUXpY1mZdj98oDmfmeGA+NcIv0FbJYQGxg9LbIx7 LnsDQOoN9P+fPLG2IlXolD98859i/Au6SXTsdb1JFf8r1V8xHmDn950kIzm0/V23 9Uq92YcrJOAV1DRDiqAGk5TR7QvxJ0yJ6mZx/87HHBrGBvor1evVmgx9ihMmRZCE MneEEiJUAZo1WtGlYalDw6/EFD6SiADxZqt4JcImxe6YVQTFtLU5A/VyQJYfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuCqiJD2glE5yrQD7FHM6cIFcqmowHwYDVR0j BBgwFoAUd2fPSddmGvq0WHA0HYjS89mobOQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTcwZDQ0ZS0wZjcwLTQ1YTMtYWYwNC04MWY0MjlkYjNhNWQvMC83NzY3Q0Y0OUQ3 NjYxQUZBQjQ1ODcwMzQxRDg4RDJGM0Q5QTg2Q0U0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzc2N0NGNDlENzY2MUFGQUI0NTg3MDM0MUQ4OEQyRjNEOUE4 NkNFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2E3MGQ0NGUtMGY3MC00NWEzLWFm MDQtODFmNDI5ZGIzYTVkLzAvNzc2N0NGNDlENzY2MUFGQUI0NTg3MDM0MUQ4OEQy RjNEOUE4NkNFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIpWlit7Mb0fUq6vsXNg9O0HRt9n+nPtxCm6 XZdhHXRvrrznL3ryu1BBjr7qwJfBdOBheoPEo985Sthdwfp4McxslVGnRE31oTv9 xJmLw6HGAveWYSWjrAjIIWg/LBgOCtCGZb/GKyv3gJWXoMjzdckuHoBHOO+kGiU9 IEE4MY0Is6tvQP6g08fBZfV11nB88s3DNJWmvZ1oagsUCQBRtBS3x8KB6hIQyJkS KjvSMHqSoJG9FE9ZJNSJLKGXbxb39ammjA3y/QTXqq3pEwWDRGpeuZImrSfokxNO S4njTqKTZXXEkiCQ1ZwSQ6Igi4dH0iuqJDEKBjSgaNW3bnyBwnU= -----END CERTIFICATE-----Generated at Sun Jun 29 18:09:11 2025 by rpki-client