$ rpki-client -vvf repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft File: C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft (raw, json) Hash identifier: wIm7B3dg2FcEUBgJkfyHnLJkfDHOBYjb4mGitbjb+vg= Subject key identifier: 2A:9A:9F:5D:30:E7:3C:9A:F9:78:BD:06:16:8D:6B:02:0E:3D:F4:5E Authority key identifier: C0:7F:5A:E2:D9:DC:99:D0:AF:28:B6:B1:54:21:0C:91:1E:FB:1D:8A Certificate issuer: /CN=C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A Certificate serial: 64BE054063C02C73971B7FFF936E002C7DD79579 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft Manifest number: B2 Signing time: Thu 21 Aug 2025 16:21:58 +0000 Manifest this update: Thu 21 Aug 2025 16:16:58 +0000 Manifest next update: Sun 24 Aug 2025 19:21:58 +0000 Files and hashes: 1: C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.crl (hash: m8bhS2lm1NpGGEHhKyfWl5vwSMtS68/CzAmc19AW+O8=) 2: 323030313a6466343a6363303a3a2f34382d3438203d3e20313532383431.roa (hash: 67keM1hQfIucwuWQhvzKk8YthRoib+6jHGmIeaRFOqs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.crl rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 19:21:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:be:05:40:63:c0:2c:73:97:1b:7f:ff:93:6e:00:2c:7d:d7:95:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A Validity Not Before: Aug 21 16:16:58 2025 GMT Not After : Aug 24 19:21:58 2025 GMT Subject: CN=2A9A9F5D30E73C9AF978BD06168D6B020E3DF45E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:8b:1d:e5:d5:59:61:55:0b:47:35:d4:ff:58: 84:ad:57:ac:90:4f:64:98:70:6a:8d:c8:08:dd:fc: c6:4e:68:d7:62:c8:d5:9f:90:fe:00:30:7b:42:28: 82:ef:fa:b7:7c:6f:f0:5e:4c:2e:ad:be:c1:b6:d8: d9:20:ab:02:53:ad:8f:7d:a7:39:f7:ec:8c:ae:e7: f2:10:50:e6:cc:8c:1f:9d:a5:d1:aa:af:f7:e0:d8: 76:38:30:11:cd:3c:82:61:35:26:cd:15:b1:30:ae: 4f:3e:73:55:37:2b:a0:bd:fb:8f:70:0b:07:38:96: 40:46:87:df:6c:9d:08:b8:f1:03:2d:e8:8c:4e:32: c5:1e:e8:0e:cd:00:c5:ee:a6:10:c0:b4:84:5c:07: 24:cf:43:79:fd:40:80:11:f8:9b:43:9e:8b:6d:6c: d8:21:e5:34:70:b5:5a:e2:2a:fd:47:b8:ad:3b:40: d3:78:d8:c9:3f:39:18:2c:66:d4:78:39:33:70:4e: f1:0c:59:f9:a6:04:9c:98:21:a3:df:89:7e:5f:42: 66:e2:18:1c:49:97:ae:24:e7:51:be:e3:02:08:c6: 71:f1:96:51:f5:19:78:8e:05:0e:fc:e2:09:48:0f: 18:8b:72:c5:da:27:8d:d3:92:f1:ec:2d:32:3b:8b: c1:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:9A:9F:5D:30:E7:3C:9A:F9:78:BD:06:16:8D:6B:02:0E:3D:F4:5E X509v3 Authority Key Identifier: keyid:C0:7F:5A:E2:D9:DC:99:D0:AF:28:B6:B1:54:21:0C:91:1E:FB:1D:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:e1:69:0d:86:f3:5f:e1:e2:65:c7:5b:71:86:a2:8b:dc:43: cb:9f:af:21:91:78:e0:2c:7a:fe:a2:50:c8:10:19:83:8e:c5: d6:29:b2:95:41:b8:24:1c:b2:11:3e:89:45:8a:af:1b:65:ef: d0:1c:83:27:c9:5a:85:16:c3:20:95:23:06:2c:d3:a5:d4:16: a7:8c:34:75:88:b3:d1:c3:b8:24:ee:3f:f3:02:52:3d:59:aa: a3:fd:d8:6e:03:42:e8:02:f0:b1:15:47:c0:30:b6:0e:25:62: e6:cc:23:71:72:d1:6d:93:3d:96:23:b6:c4:e4:c7:88:88:5b: 72:26:1a:df:2a:ca:aa:35:62:db:49:eb:f7:d0:6a:f9:5a:76: 8d:f6:23:39:aa:e7:7f:09:29:fe:df:d7:69:c1:e7:fb:92:7b: b0:a4:a0:12:53:00:ba:87:fd:aa:8c:6f:ea:e5:ce:71:e3:75: 93:40:e1:d9:77:fa:f0:a4:cd:ca:b4:46:68:23:9b:2a:6b:83: 2d:20:e5:6d:eb:33:18:16:78:94:5b:91:28:73:62:98:ce:f2: 2f:ee:a6:86:cc:ae:68:b0:3f:01:6b:31:31:9d:48:c3:98:52: 8f:bd:ae:0c:f5:47:c5:5d:22:d3:db:a1:3d:7f:30:ab:14:c7: 92:0c:34:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZL4FQGPALHOXG3//k24ALH3XlXkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA3RjVBRTJEOURDOTlEMEFGMjhCNkIxNTQyMTBDOTEx RUZCMUQ4QTAeFw0yNTA4MjExNjE2NThaFw0yNTA4MjQxOTIxNThaMDMxMTAvBgNV BAMTKDJBOUE5RjVEMzBFNzNDOUFGOTc4QkQwNjE2OEQ2QjAyMEUzREY0NUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5ix3l1VlhVQtHNdT/WIStV6yQ T2SYcGqNyAjd/MZOaNdiyNWfkP4AMHtCKILv+rd8b/BeTC6tvsG22NkgqwJTrY99 pzn37Iyu5/IQUObMjB+dpdGqr/fg2HY4MBHNPIJhNSbNFbEwrk8+c1U3K6C9+49w Cwc4lkBGh99snQi48QMt6IxOMsUe6A7NAMXuphDAtIRcByTPQ3n9QIAR+JtDnott bNgh5TRwtVriKv1HuK07QNN42Mk/ORgsZtR4OTNwTvEMWfmmBJyYIaPfiX5fQmbi GBxJl64k51G+4wIIxnHxllH1GXiOBQ784glIDxiLcsXaJ43TkvHsLTI7i8FDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKpqfXTDnPJr5eL0GFo1rAg499F4wHwYDVR0j BBgwFoAUwH9a4tncmdCvKLaxVCEMkR77HYowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZTdkNzM4ZS0yY2M3LTRiZDItYmIyOC05MTQyZTFiYWEwYmEvMS9DMDdGNUFFMkQ5 REM5OUQwQUYyOEI2QjE1NDIxMEM5MTFFRkIxRDhBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzA3RjVBRTJEOURDOTlEMEFGMjhCNkIxNTQyMTBDOTExRUZC MUQ4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2U3ZDczOGUtMmNjNy00YmQyLWJi MjgtOTE0MmUxYmFhMGJhLzEvQzA3RjVBRTJEOURDOTlEMEFGMjhCNkIxNTQyMTBD OTExRUZCMUQ4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH7haQ2G81/h4mXHW3GGoovcQ8ufryGReOAs ev6iUMgQGYOOxdYpspVBuCQcshE+iUWKrxtl79AcgyfJWoUWwyCVIwYs06XUFqeM NHWIs9HDuCTuP/MCUj1ZqqP92G4DQugC8LEVR8Awtg4lYubMI3Fy0W2TPZYjtsTk x4iIW3ImGt8qyqo1YttJ6/fQavlado32Izmq538JKf7f12nB5/uSe7CkoBJTALqH /aqMb+rlznHjdZNA4dl3+vCkzcq0Rmgjmyprgy0g5W3rMxgWeJRbkShzYpjO8i/u pobMrmiwPwFrMTGdSMOYUo+9rgz1R8VdItPboT1/MKsUx5IMNGE= -----END CERTIFICATE-----Generated at Sat Aug 23 10:11:07 2025 by rpki-client