$ rpki-client -vvf repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft File: 7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft (raw, json) Hash identifier: IDqRo4+DeLbnM5LsO6RkcfBoVWNY/L2kel9LygubPAc= Subject key identifier: 46:9B:40:2E:7E:58:A4:52:35:C1:3A:20:65:2B:9E:6C:BF:2E:EA:E9 Authority key identifier: 7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67 Certificate issuer: /CN=7D64B8F4CFB687141137D10F9E73FFD0BAB93F67 Certificate serial: 2F863E0BA374131AB86862E6C74E31B60050055E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer Subject info access: rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft Manifest number: 02BD Signing time: Thu 21 Aug 2025 10:00:40 +0000 Manifest this update: Thu 21 Aug 2025 09:55:40 +0000 Manifest next update: Sun 24 Aug 2025 21:30:40 +0000 Files and hashes: 1: 3130332e39372e37372e302f32342d3234203d3e20313336313331.roa (hash: audNLou8WkSNI41O6Bj42zTe5yNLL3IkDF/evFV7jOs=) 2: 323430313a383434303a3133313a3a2f34382d3438203d3e20313336313331.roa (hash: 7XF+7tNQBQV2Wy0AsX8lBCySJ+ATYXgli7NY4z4VmfM=) 3: 323430313a383434303a3a2f33322d3332203d3e20313336313331.roa (hash: J/TKA4DxZMeIQk5lGShBOGO9FvcMo90L9nK349bvEzs=) 4: 323430313a383434303a33313a3a2f34382d3438203d3e20313336313331.roa (hash: imoDv7fNxiS0ABFe1mnjo4w6QxU9zgowGM6VjXLrifM=) 5: 3130332e39372e37392e302f32342d3234203d3e20313336313331.roa (hash: eRLttmDRe4S/HXjiFUVifbleZv0UdgB6j9QBQFrEFVw=) 6: 3130332e39372e37382e302f32342d3234203d3e20313336313331.roa (hash: gTWqsHLXGzmwOn5oUbLdKwsFxUOTG6JntDETCN1uoJg=) 7: 7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl (hash: fIV8cnZeAGFxmIInndFMNCq44BkP/axQzZ/Crof6vIc=) 8: 323430313a383434303a3233313a3a2f34382d3438203d3e20313336313331.roa (hash: 9q0QjNfZ8ZidXQKSI35eyNIOpPTa4MZHY+H9XcdTGqQ=) 9: 3130332e39372e37362e302f32342d3234203d3e20313336313331.roa (hash: b5FyLXJvwHGEGWwekDTqeQDenx7rZLagZD5M467u+1w=) 10: 323430313a383434303a3331313a3a2f34382d3438203d3e20313336313331.roa (hash: uNKV4J4iyB42iT7YiJbc/obq8TacFQRWwVPHqjYHdt4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 21:30:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:86:3e:0b:a3:74:13:1a:b8:68:62:e6:c7:4e:31:b6:00:50:05:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D64B8F4CFB687141137D10F9E73FFD0BAB93F67 Validity Not Before: Aug 21 09:55:40 2025 GMT Not After : Aug 24 21:30:40 2025 GMT Subject: CN=469B402E7E58A45235C13A20652B9E6CBF2EEAE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:10:db:bb:7f:21:0b:cb:ac:98:2b:5d:94:67: 26:bb:31:1a:a3:0d:16:89:5b:42:fe:af:2d:93:5e: 7b:a3:83:a6:3d:4f:c9:26:21:11:1d:b9:99:67:3c: 85:fe:c2:3b:d3:d2:65:f3:ce:1b:2d:79:08:19:0d: 30:fd:7f:d2:71:20:6e:53:5a:41:ec:71:bf:e3:9e: c1:ee:30:f7:95:58:3d:3f:4c:e0:76:a3:00:db:e1: 05:8f:67:f1:a5:5b:ca:ff:ff:f6:fe:36:66:a2:c5: 20:e1:dc:7a:7e:1b:a3:24:a0:cd:2e:29:8c:76:c7: 18:51:5a:56:a4:94:a7:f0:f2:ff:91:a7:0d:07:41: 8c:e8:a9:6c:d1:8e:16:91:46:2a:2a:df:78:13:e0: f9:12:a5:a9:9c:5d:12:16:03:43:14:d6:46:43:f4: a5:35:73:28:b1:cd:71:57:88:60:f4:ae:d0:af:ed: fc:35:17:f6:db:9e:22:22:62:38:ab:ea:91:d9:4c: 29:be:0e:3d:83:59:ae:c6:26:e6:83:12:86:5d:4f: ca:0f:30:49:e9:06:1a:e6:0e:1e:c9:46:eb:3e:92: 8f:7b:1c:f0:f9:d3:56:cf:98:05:9d:39:b6:9d:cd: d0:b3:41:61:9b:e9:68:fd:32:b1:9a:9d:3f:8a:94: 31:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:9B:40:2E:7E:58:A4:52:35:C1:3A:20:65:2B:9E:6C:BF:2E:EA:E9 X509v3 Authority Key Identifier: keyid:7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:fe:2d:bf:af:cd:b0:bf:54:8a:3c:d4:4c:6c:42:80:07:7d: 54:af:6a:fe:fe:9a:c5:16:92:27:e4:0f:b0:74:ae:be:35:e3: e2:cb:0b:88:e8:00:e3:1e:a3:69:93:c3:5a:9c:c4:28:f1:74: 35:b8:04:2f:28:a9:49:23:8c:59:0d:34:48:53:81:8c:9d:c9: 72:40:4a:7c:15:18:6b:3d:ce:ad:a1:86:5d:bf:5a:09:b3:9d: b5:00:d8:1e:52:eb:14:4c:ac:0b:2e:1b:8c:5f:cb:e8:48:0c: 5f:3e:ba:0e:1d:f4:4c:8b:ed:77:0c:83:8b:12:0e:74:99:a0: 0c:6f:92:c0:68:8a:73:c6:47:06:2b:c3:ec:48:cd:b4:1c:ac: 19:ac:ed:24:8e:9e:e5:a1:36:03:76:b8:de:73:3c:e0:ce:97: 78:96:a2:f6:e7:29:cf:19:78:4c:c1:79:cc:89:50:d8:0d:8f: 87:5d:c1:64:d4:af:e3:60:c3:25:65:ab:ca:2e:41:13:b1:79: 1f:b4:85:da:e2:e5:9e:6c:ab:34:0b:21:7c:10:fd:c1:8e:03: 44:1f:9b:ea:cf:24:ba:88:19:a4:03:b3:e2:4f:d9:e7:89:07: 7b:44:8f:c7:b8:08:74:34:56:eb:f5:f5:f3:0d:44:12:ca:92: bf:f6:f8:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL4Y+C6N0Exq4aGLmx04xtgBQBV4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZGRDBC QUI5M0Y2NzAeFw0yNTA4MjEwOTU1NDBaFw0yNTA4MjQyMTMwNDBaMDMxMTAvBgNV BAMTKDQ2OUI0MDJFN0U1OEE0NTIzNUMxM0EyMDY1MkI5RTZDQkYyRUVBRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRENu7fyELy6yYK12UZya7MRqj DRaJW0L+ry2TXnujg6Y9T8kmIREduZlnPIX+wjvT0mXzzhsteQgZDTD9f9JxIG5T WkHscb/jnsHuMPeVWD0/TOB2owDb4QWPZ/GlW8r///b+NmaixSDh3Hp+G6MkoM0u KYx2xxhRWlaklKfw8v+Rpw0HQYzoqWzRjhaRRioq33gT4PkSpamcXRIWA0MU1kZD 9KU1cyixzXFXiGD0rtCv7fw1F/bbniIiYjir6pHZTCm+Dj2DWa7GJuaDEoZdT8oP MEnpBhrmDh7JRus+ko97HPD501bPmAWdObadzdCzQWGb6Wj9MrGanT+KlDHfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURptALn5YpFI1wTogZSuebL8u6ukwHwYDVR0j BBgwFoAUfWS49M+2hxQRN9EPnnP/0Lq5P2cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTdiMGQ3ZS1lYWRlLTQzMTgtYWIyMC04YzdmMmQ1YmU2OWYvMC83RDY0QjhGNENG QjY4NzE0MTEzN0QxMEY5RTczRkZEMEJBQjkzRjY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZGRDBCQUI5 M0Y2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTU3YjBkN2UtZWFkZS00MzE4LWFi MjAtOGM3ZjJkNWJlNjlmLzAvN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZG RDBCQUI5M0Y2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKn+Lb+vzbC/VIo81ExsQoAHfVSvav7+msUW kifkD7B0rr414+LLC4joAOMeo2mTw1qcxCjxdDW4BC8oqUkjjFkNNEhTgYydyXJA SnwVGGs9zq2hhl2/WgmznbUA2B5S6xRMrAsuG4xfy+hIDF8+ug4d9EyL7XcMg4sS DnSZoAxvksBoinPGRwYrw+xIzbQcrBms7SSOnuWhNgN2uN5zPODOl3iWovbnKc8Z eEzBecyJUNgNj4ddwWTUr+NgwyVlq8ouQROxeR+0hdri5Z5sqzQLIXwQ/cGOA0Qf m+rPJLqIGaQDs+JP2eeJB3tEj8e4CHQ0Vuv19fMNRBLKkr/2+OE= -----END CERTIFICATE-----Generated at Sat Aug 23 19:47:51 2025 by rpki-client