$ rpki-client -vvf repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft File: 7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft (raw, json) Hash identifier: oeDcUz4XJfhIVr9BJCiqkV+Gw6wBFSGXEImx+bm6epw= Subject key identifier: A1:97:23:9A:E9:81:DA:9F:5A:0D:05:9C:07:AE:A9:EF:8C:28:31:DE Authority key identifier: 7B:94:59:74:A7:9E:8C:77:CB:02:F9:44:95:BA:9F:87:BA:A0:E0:38 Certificate issuer: /CN=7B945974A79E8C77CB02F94495BA9F87BAA0E038 Certificate serial: 7A7602E3F247F7506ECF504AC1213705F50DF8AF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B945974A79E8C77CB02F94495BA9F87BAA0E038.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft Manifest number: 037C Signing time: Sat 23 Aug 2025 00:12:02 +0000 Manifest this update: Sat 23 Aug 2025 00:07:02 +0000 Manifest next update: Tue 26 Aug 2025 09:00:02 +0000 Files and hashes: 1: 3130332e3136372e33302e302f32332d3234203d3e203137393935.roa (hash: jJAIyVbfrGhaQ1dlxzFUdHOYskMs8jKydFWI9VuwVq4=) 2: 7B945974A79E8C77CB02F94495BA9F87BAA0E038.crl (hash: YtRVdNXFYDs60MAKjxNZmFANhr62jSvvq8d0aWwQqpw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.crl rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B945974A79E8C77CB02F94495BA9F87BAA0E038.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 09:00:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:76:02:e3:f2:47:f7:50:6e:cf:50:4a:c1:21:37:05:f5:0d:f8:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B945974A79E8C77CB02F94495BA9F87BAA0E038 Validity Not Before: Aug 23 00:07:02 2025 GMT Not After : Aug 26 09:00:02 2025 GMT Subject: CN=A197239AE981DA9F5A0D059C07AEA9EF8C2831DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:0e:ee:73:59:8b:56:f2:5b:fa:58:93:ae:ba: b1:5a:30:4c:0e:7b:21:f4:eb:1c:fd:9d:a1:30:9e: e4:d3:eb:19:a5:6d:a9:47:1a:58:69:97:83:83:8e: e0:8f:79:56:0b:c7:4c:e7:ac:20:a5:bb:05:7c:b0: d9:ec:ea:8e:32:0c:08:a5:01:e8:41:b9:e9:da:3a: 87:e3:04:92:6c:37:d7:a6:28:e8:6d:bd:0c:24:26: f3:99:d7:8b:6b:d4:60:a7:15:83:2c:7e:12:20:93: 33:63:c6:d3:bf:a6:fe:0d:f9:da:ba:ee:ac:47:77: 5f:d3:3a:cb:28:24:50:ee:14:7c:ad:cd:09:13:b4: a6:09:1c:53:d2:f6:76:4e:3c:39:23:cc:6c:2f:e4: 14:90:67:21:13:9d:fd:98:ce:f9:e3:46:a2:b4:93: b1:91:9d:fa:ba:41:69:44:95:42:5c:99:1e:8d:8d: b6:cd:ef:c3:fb:8b:19:a8:a6:32:b6:28:ea:14:bd: 59:d3:fb:70:c5:0c:02:a7:86:6a:b6:0d:05:c7:80: a5:8c:f6:1a:f0:89:ad:ce:9a:a5:ce:55:d1:3d:1e: f8:84:36:37:7f:ee:2d:04:dd:78:ee:32:f9:53:46: ad:6e:77:20:d2:9e:66:36:8b:53:97:ab:19:17:2d: 3e:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:97:23:9A:E9:81:DA:9F:5A:0D:05:9C:07:AE:A9:EF:8C:28:31:DE X509v3 Authority Key Identifier: keyid:7B:94:59:74:A7:9E:8C:77:CB:02:F9:44:95:BA:9F:87:BA:A0:E0:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B945974A79E8C77CB02F94495BA9F87BAA0E038.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:1a:c1:1a:3c:86:d2:7a:09:8d:07:23:dd:db:14:7a:a0:03: 26:37:10:ba:e6:a8:21:8b:f0:8c:9a:e9:b6:73:aa:d7:e8:be: 21:79:26:fa:32:7a:28:ca:26:3a:84:ae:33:e2:51:d5:95:df: a6:d3:45:f8:38:83:e0:e5:31:f8:6a:99:e6:ac:19:ae:b0:17: a4:d0:38:1e:7a:8b:a1:de:f1:99:ae:4c:fd:d6:4f:05:11:a4: 56:32:bd:65:9b:97:83:c9:61:43:cf:e1:d9:9a:63:cf:04:32: 6d:c4:69:fe:08:e8:6f:cd:16:03:06:58:a0:8c:c1:7a:e9:a1: 5e:c5:24:26:08:c5:ac:b5:51:a2:2a:e5:0a:92:f8:89:d9:c0: 4a:b3:41:71:4b:85:bd:5c:58:ce:d0:47:c5:d6:0c:4f:1a:c3: 0f:c3:7a:5b:a1:68:17:b1:93:f0:d4:cd:d5:84:d7:6b:32:13: e3:12:21:f1:18:55:91:52:f9:77:21:c5:65:bc:11:a6:83:65: 14:45:5e:ff:55:95:42:be:84:95:50:81:f7:0f:bc:d0:c4:65: 34:0d:8b:df:f1:64:1e:f7:fb:64:34:8c:74:13:a4:9d:30:9c: 73:6b:f5:cc:60:f2:e8:e1:82:14:2a:4a:94:cc:21:6f:c7:93: cf:0d:15:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUenYC4/JH91Buz1BKwSE3BfUN+K8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0I5NDU5NzRBNzlFOEM3N0NCMDJGOTQ0OTVCQTlGODdC QUEwRTAzODAeFw0yNTA4MjMwMDA3MDJaFw0yNTA4MjYwOTAwMDJaMDMxMTAvBgNV BAMTKEExOTcyMzlBRTk4MURBOUY1QTBEMDU5QzA3QUVBOUVGOEMyODMxREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDADu5zWYtW8lv6WJOuurFaMEwO eyH06xz9naEwnuTT6xmlbalHGlhpl4ODjuCPeVYLx0znrCCluwV8sNns6o4yDAil AehBuenaOofjBJJsN9emKOhtvQwkJvOZ14tr1GCnFYMsfhIgkzNjxtO/pv4N+dq6 7qxHd1/TOssoJFDuFHytzQkTtKYJHFPS9nZOPDkjzGwv5BSQZyETnf2YzvnjRqK0 k7GRnfq6QWlElUJcmR6NjbbN78P7ixmopjK2KOoUvVnT+3DFDAKnhmq2DQXHgKWM 9hrwia3OmqXOVdE9HviENjd/7i0E3XjuMvlTRq1udyDSnmY2i1OXqxkXLT4JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoZcjmumB2p9aDQWcB66p74woMd4wHwYDVR0j BBgwFoAUe5RZdKeejHfLAvlElbqfh7qg4DgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzYzNWNlOS0wZWE1LTQ3ZDgtOWZjYy1jYWQxYzlmMDZmYmUvMC83Qjk0NTk3NEE3 OUU4Qzc3Q0IwMkY5NDQ5NUJBOUY4N0JBQTBFMDM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0I5NDU5NzRBNzlFOEM3N0NCMDJGOTQ0OTVCQTlGODdCQUEw RTAzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2M2MzVjZTktMGVhNS00N2Q4LTlm Y2MtY2FkMWM5ZjA2ZmJlLzAvN0I5NDU5NzRBNzlFOEM3N0NCMDJGOTQ0OTVCQTlG ODdCQUEwRTAzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFUawRo8htJ6CY0HI93bFHqgAyY3ELrmqCGL 8Iya6bZzqtfoviF5JvoyeijKJjqErjPiUdWV36bTRfg4g+DlMfhqmeasGa6wF6TQ OB56i6He8ZmuTP3WTwURpFYyvWWbl4PJYUPP4dmaY88EMm3Eaf4I6G/NFgMGWKCM wXrpoV7FJCYIxay1UaIq5QqS+InZwEqzQXFLhb1cWM7QR8XWDE8aww/DeluhaBex k/DUzdWE12syE+MSIfEYVZFS+XchxWW8EaaDZRRFXv9VlUK+hJVQgfcPvNDEZTQN i9/xZB73+2Q0jHQTpJ0wnHNr9cxg8ujhghQqSpTMIW/Hk88NFao= -----END CERTIFICATE-----Generated at Sat Aug 23 18:30:44 2025 by rpki-client