$ rpki-client -vvf repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft File: 7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft (raw, json) Hash identifier: kWyZTPMQHhpWybZFqxUPbSrdWvZEAPKCXElQQpnygj4= Subject key identifier: A9:2C:83:56:80:77:B7:EE:5B:D9:1F:A8:94:13:E3:97:C3:B6:73:BE Authority key identifier: 7D:9E:0E:E5:BE:72:73:60:81:01:D9:3C:5F:7F:B6:1C:BC:04:04:C7 Certificate issuer: /CN=7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7 Certificate serial: 7ED1D42334F2B3D2AB744AC9E6FA78C61AA7571C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft Manifest number: A9 Signing time: Thu 21 Aug 2025 10:10:00 +0000 Manifest this update: Thu 21 Aug 2025 10:05:00 +0000 Manifest next update: Sun 24 Aug 2025 12:52:00 +0000 Files and hashes: 1: 3130332e3136392e3134332e302f32342d3234203d3e20313531353831.roa (hash: 4oT7xZVHG5/E0DX/QQMWoNUATmrhrxxUsrgCZ3ThGY4=) 2: 7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.crl (hash: MXJkOTTYTOBhIhzbSRthnxlvfIuQYTKiuDCNcnqZ+k8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.crl rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 12:52:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:d1:d4:23:34:f2:b3:d2:ab:74:4a:c9:e6:fa:78:c6:1a:a7:57:1c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7 Validity Not Before: Aug 21 10:05:00 2025 GMT Not After : Aug 24 12:52:00 2025 GMT Subject: CN=A92C83568077B7EE5BD91FA89413E397C3B673BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:69:2e:76:db:70:50:fe:a4:20:0c:21:81:2f: 68:7c:5d:5f:9e:a5:c2:b1:ff:56:f2:b7:1f:64:4d: 98:6b:2d:af:29:21:33:62:e2:50:9e:00:c8:34:7b: 19:77:6b:22:eb:a4:8a:b6:ca:78:52:a3:b0:db:e1: de:85:b8:a7:9a:17:7b:4e:a3:ad:95:f1:97:c1:66: c2:4a:5e:41:5d:8d:14:5d:ee:96:0a:03:dd:df:fe: 75:77:31:d0:56:7a:67:a0:96:0d:ac:fd:02:65:13: 2f:78:a1:d4:64:c1:a4:c3:75:13:3d:96:d4:66:bf: 6a:ac:6a:2f:df:94:87:f7:b7:fb:f9:c4:7c:a3:bd: 6f:c1:3f:e2:e0:4c:23:6b:d5:c2:f2:ec:ef:ff:f5: a7:6b:dd:f7:15:dc:3b:a1:af:2e:ba:cc:67:ca:26: d0:de:b8:41:1e:65:12:5c:c3:09:91:8b:93:d6:c0: 3f:0d:63:96:f9:a9:f6:25:71:79:b7:74:5f:d3:d6: 9e:63:f5:58:23:c8:d3:d8:b7:de:78:72:8a:11:3d: cd:95:dd:af:90:4e:13:92:9c:33:9e:7a:06:5a:77: 95:e4:b9:00:7b:15:21:f0:39:c2:a3:7b:03:47:d4: bc:6f:96:2e:d3:14:f0:e4:58:c9:eb:cc:37:79:08: d1:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:2C:83:56:80:77:B7:EE:5B:D9:1F:A8:94:13:E3:97:C3:B6:73:BE X509v3 Authority Key Identifier: keyid:7D:9E:0E:E5:BE:72:73:60:81:01:D9:3C:5F:7F:B6:1C:BC:04:04:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:52:40:ba:42:82:11:90:d6:ae:ad:54:0c:a8:ed:6c:64:63: ce:2d:3b:6b:ce:93:2a:52:5a:81:ef:af:25:7b:09:57:ac:db: ab:b4:92:74:bc:f4:73:8f:a0:9e:9c:d5:a9:0f:45:ec:7c:02: 33:1c:f6:a7:be:62:cd:ad:99:8a:83:0f:83:60:56:03:1b:05: 62:43:b0:4e:1e:c3:d4:8e:d8:a0:25:b9:b9:ac:ca:50:e8:c7: ed:37:ac:5e:4e:d3:3c:35:49:7a:5a:9f:d0:06:76:6b:92:94: 74:87:16:f9:40:4d:20:df:0f:93:b6:b7:c5:72:7c:a0:f6:ab: f9:82:d3:8d:a0:91:4d:fb:62:fb:01:64:48:b9:24:89:89:52: a2:08:2d:28:9e:14:88:09:40:76:5b:df:9d:2b:a9:d3:ea:d9: 8a:e9:af:f9:cf:89:99:c1:bb:59:d9:bf:1f:18:0d:f1:36:92: 34:6e:0e:10:28:bd:32:7d:d3:6d:2a:af:05:c3:ee:15:09:c5: 2d:1b:d3:62:4e:e9:d3:21:7e:f6:94:2d:7e:2f:6b:c4:89:a6: c0:79:05:c6:cd:86:d2:63:c6:df:f2:1c:33:e9:e3:00:08:47: 8a:f6:2e:da:06:3f:07:59:83:b5:83:31:d5:3d:f4:d7:d9:f6: 5d:fd:bd:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUftHUIzTys9KrdErJ5vp4xhqnVxwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q5RTBFRTVCRTcyNzM2MDgxMDFEOTNDNUY3RkI2MUNC QzA0MDRDNzAeFw0yNTA4MjExMDA1MDBaFw0yNTA4MjQxMjUyMDBaMDMxMTAvBgNV BAMTKEE5MkM4MzU2ODA3N0I3RUU1QkQ5MUZBODk0MTNFMzk3QzNCNjczQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDaS5223BQ/qQgDCGBL2h8XV+e pcKx/1bytx9kTZhrLa8pITNi4lCeAMg0exl3ayLrpIq2ynhSo7Db4d6FuKeaF3tO o62V8ZfBZsJKXkFdjRRd7pYKA93f/nV3MdBWemeglg2s/QJlEy94odRkwaTDdRM9 ltRmv2qsai/flIf3t/v5xHyjvW/BP+LgTCNr1cLy7O//9adr3fcV3Duhry66zGfK JtDeuEEeZRJcwwmRi5PWwD8NY5b5qfYlcXm3dF/T1p5j9VgjyNPYt954cooRPc2V 3a+QThOSnDOeegZad5XkuQB7FSHwOcKjewNH1Lxvli7TFPDkWMnrzDd5CNE7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqSyDVoB3t+5b2R+olBPjl8O2c74wHwYDVR0j BBgwFoAUfZ4O5b5yc2CBAdk8X3+2HLwEBMcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmRlMWE4ZS1jMmI4LTQ5OTYtOTQ5Mi02ZjkyYzJkZmVjN2EvMC83RDlFMEVFNUJF NzI3MzYwODEwMUQ5M0M1RjdGQjYxQ0JDMDQwNEM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q5RTBFRTVCRTcyNzM2MDgxMDFEOTNDNUY3RkI2MUNCQzA0 MDRDNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZkZTFhOGUtYzJiOC00OTk2LTk0 OTItNmY5MmMyZGZlYzdhLzAvN0Q5RTBFRTVCRTcyNzM2MDgxMDFEOTNDNUY3RkI2 MUNCQzA0MDRDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAElSQLpCghGQ1q6tVAyo7WxkY84tO2vOkypS WoHvryV7CVes26u0knS89HOPoJ6c1akPRex8AjMc9qe+Ys2tmYqDD4NgVgMbBWJD sE4ew9SO2KAlubmsylDox+03rF5O0zw1SXpan9AGdmuSlHSHFvlATSDfD5O2t8Vy fKD2q/mC042gkU37YvsBZEi5JImJUqIILSieFIgJQHZb350rqdPq2Yrpr/nPiZnB u1nZvx8YDfE2kjRuDhAovTJ9020qrwXD7hUJxS0b02JO6dMhfvaULX4va8SJpsB5 BcbNhtJjxt/yHDPp4wAIR4r2LtoGPwdZg7WDMdU99NfZ9l39vTQ= -----END CERTIFICATE-----Generated at Sat Aug 23 12:13:58 2025 by rpki-client