$ rpki-client -vvf repo-rpki.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/7FD3F92F13241B80062CC31B0EC8A3D129871D90.mft File: 7FD3F92F13241B80062CC31B0EC8A3D129871D90.mft (raw, json) Hash identifier: w9PKcL8EaYCg4yNLmu9+6mt3K31JuNWnjFvzzhE5z68= Subject key identifier: E1:0A:FB:46:DD:5E:BB:64:9B:54:CF:36:E4:FD:83:B6:4E:99:37:82 Authority key identifier: 7F:D3:F9:2F:13:24:1B:80:06:2C:C3:1B:0E:C8:A3:D1:29:87:1D:90 Certificate issuer: /CN=7FD3F92F13241B80062CC31B0EC8A3D129871D90 Certificate serial: 5CBB3F3F0A01A3233B2E5CD82118D6E6B036199C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FD3F92F13241B80062CC31B0EC8A3D129871D90.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/7FD3F92F13241B80062CC31B0EC8A3D129871D90.mft Manifest number: 037E Signing time: Sat 23 Aug 2025 05:41:22 +0000 Manifest this update: Sat 23 Aug 2025 05:36:22 +0000 Manifest next update: Tue 26 Aug 2025 12:21:22 +0000 Files and hashes: 1: 7FD3F92F13241B80062CC31B0EC8A3D129871D90.crl (hash: EX2qD5N6C0mf7Y6oC4Nqp+xeO7AvUWvN9RkNenSv4Js=) 2: 3130332e3136342e3133362e302f32332d3234203d3e203137393935.roa (hash: pfyWIoLnfhreu/uz7HLcqt4VfjgUWRecSpJkmtZIEHI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/7FD3F92F13241B80062CC31B0EC8A3D129871D90.crl rsync://repo-rpki.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/7FD3F92F13241B80062CC31B0EC8A3D129871D90.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FD3F92F13241B80062CC31B0EC8A3D129871D90.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 12:21:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:bb:3f:3f:0a:01:a3:23:3b:2e:5c:d8:21:18:d6:e6:b0:36:19:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7FD3F92F13241B80062CC31B0EC8A3D129871D90 Validity Not Before: Aug 23 05:36:22 2025 GMT Not After : Aug 26 12:21:22 2025 GMT Subject: CN=E10AFB46DD5EBB649B54CF36E4FD83B64E993782 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:6c:3b:1b:86:e9:e0:94:d3:54:6a:1c:78:bf: 3f:1e:bb:93:9d:26:fe:ea:91:1d:73:96:02:aa:5d: 0d:2c:9d:53:d7:14:d1:24:97:9d:76:88:81:56:25: 46:ce:80:48:82:cc:4d:e7:a4:96:42:b6:56:64:c4: d2:33:b5:e2:ad:36:cd:8b:c5:c6:02:3c:7e:b8:6d: 3d:2b:8b:79:93:87:66:23:d0:41:92:9c:a1:78:90: 96:45:3d:70:a8:7e:d2:cd:22:ef:3f:5a:7e:ac:69: af:87:aa:d0:21:c8:4c:7d:ed:81:86:5a:1d:02:93: b0:1f:e0:83:a4:94:9a:21:72:7a:17:92:90:9a:40: da:69:e4:3c:eb:17:9c:a1:c9:87:c8:2e:c9:c1:7a: 7d:65:22:06:80:4f:99:cb:6b:0f:fd:09:ec:88:0d: 56:01:ae:42:63:96:e7:3f:d5:f1:0a:d4:a2:73:45: e8:66:cc:1c:fe:10:45:26:c6:08:be:9f:63:65:57: ee:c4:6c:87:00:fb:99:08:12:da:ef:15:67:9b:79: ed:07:c8:3e:f7:b4:f2:c2:07:04:24:96:55:13:7e: a8:95:ae:8b:40:6f:2f:45:b4:2c:40:28:cc:c4:6b: 48:91:fd:44:be:8d:be:ba:e4:31:62:cc:6c:af:d5: fe:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:0A:FB:46:DD:5E:BB:64:9B:54:CF:36:E4:FD:83:B6:4E:99:37:82 X509v3 Authority Key Identifier: keyid:7F:D3:F9:2F:13:24:1B:80:06:2C:C3:1B:0E:C8:A3:D1:29:87:1D:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/7FD3F92F13241B80062CC31B0EC8A3D129871D90.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FD3F92F13241B80062CC31B0EC8A3D129871D90.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/7FD3F92F13241B80062CC31B0EC8A3D129871D90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:45:e6:08:d8:71:c7:ce:45:61:c2:b4:64:07:31:d5:1a:94: 14:06:ae:68:44:34:1d:23:09:1a:cf:f3:f1:70:85:4e:71:47: 5c:bd:34:b6:de:98:0c:d6:39:74:4f:ab:98:82:90:98:5b:22: 7c:f8:19:27:b0:95:6b:d4:57:fa:45:85:c7:9c:10:1f:80:ba: 79:3c:54:29:1b:08:44:24:bc:73:7d:28:20:3e:ce:5a:4d:7e: 94:4e:4e:ba:1f:98:7c:2f:9f:d8:38:f4:99:ab:b7:e1:d3:52: 94:d3:b0:df:2b:c6:cd:03:2b:a2:0b:c0:a2:6d:46:7f:9a:03: 3c:f0:63:03:dc:c7:58:ba:c8:65:ec:35:b6:f4:0f:1a:5e:cd: 20:8f:35:f0:34:f7:a8:f6:8d:58:33:ce:db:07:5c:f0:9a:2e: 5e:94:a7:64:13:5e:74:45:b3:47:bc:18:3a:69:42:27:4b:42: a5:66:b4:f9:0a:d9:83:e1:f8:fc:ea:60:33:1e:55:df:a2:8c: c2:0d:f1:f5:70:89:7c:51:3d:01:49:5b:0a:db:06:b1:49:f9: 7d:68:30:c7:b9:7c:fa:37:d0:7b:95:e7:23:c9:fe:c3:c8:5f: a3:10:61:b2:79:78:a6:01:09:72:ac:eb:59:6f:2d:4a:17:4c: cc:a2:5b:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXLs/PwoBoyM7LlzYIRjW5rA2GZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ZEM0Y5MkYxMzI0MUI4MDA2MkNDMzFCMEVDOEEzRDEy OTg3MUQ5MDAeFw0yNTA4MjMwNTM2MjJaFw0yNTA4MjYxMjIxMjJaMDMxMTAvBgNV BAMTKEUxMEFGQjQ2REQ1RUJCNjQ5QjU0Q0YzNkU0RkQ4M0I2NEU5OTM3ODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLbDsbhunglNNUahx4vz8eu5Od Jv7qkR1zlgKqXQ0snVPXFNEkl512iIFWJUbOgEiCzE3npJZCtlZkxNIzteKtNs2L xcYCPH64bT0ri3mTh2Yj0EGSnKF4kJZFPXCoftLNIu8/Wn6saa+HqtAhyEx97YGG Wh0Ck7Af4IOklJohcnoXkpCaQNpp5DzrF5yhyYfILsnBen1lIgaAT5nLaw/9CeyI DVYBrkJjluc/1fEK1KJzRehmzBz+EEUmxgi+n2NlV+7EbIcA+5kIEtrvFWebee0H yD73tPLCBwQkllUTfqiVrotAby9FtCxAKMzEa0iR/US+jb665DFizGyv1f7xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4Qr7Rt1eu2SbVM825P2Dtk6ZN4IwHwYDVR0j BBgwFoAUf9P5LxMkG4AGLMMbDsij0SmHHZAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDRkNjQyNy0zZjAzLTRkMjEtYjhjYy1iYmZkMmEzZjhjMzMvMC83RkQzRjkyRjEz MjQxQjgwMDYyQ0MzMUIwRUM4QTNEMTI5ODcxRDkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0ZEM0Y5MkYxMzI0MUI4MDA2MkNDMzFCMEVDOEEzRDEyOTg3 MUQ5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA0ZDY0MjctM2YwMy00ZDIxLWI4 Y2MtYmJmZDJhM2Y4YzMzLzAvN0ZEM0Y5MkYxMzI0MUI4MDA2MkNDMzFCMEVDOEEz RDEyOTg3MUQ5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE1F5gjYccfORWHCtGQHMdUalBQGrmhENB0j CRrP8/FwhU5xR1y9NLbemAzWOXRPq5iCkJhbInz4GSewlWvUV/pFhcecEB+Aunk8 VCkbCEQkvHN9KCA+zlpNfpROTrofmHwvn9g49Jmrt+HTUpTTsN8rxs0DK6ILwKJt Rn+aAzzwYwPcx1i6yGXsNbb0DxpezSCPNfA096j2jVgzztsHXPCaLl6Up2QTXnRF s0e8GDppQidLQqVmtPkK2YPh+PzqYDMeVd+ijMIN8fVwiXxRPQFJWwrbBrFJ+X1o MMe5fPo30HuV5yPJ/sPIX6MQYbJ5eKYBCXKs61lvLUoXTMyiW1U= -----END CERTIFICATE-----Generated at Sat Aug 23 15:23:52 2025 by rpki-client