$ rpki-client -vvf repo-rpki.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/7B04CE58A1370241E93EF01F597DD18A039D613D.mft File: 7B04CE58A1370241E93EF01F597DD18A039D613D.mft (raw, json) Hash identifier: GC+C+PnLGwmRa97BTTwnxNle4SwkvI0qH55dnxIkRi4= Subject key identifier: 38:32:DE:6E:C8:D8:99:B0:54:25:B7:CE:B2:0A:9D:1E:5C:6D:44:9D Authority key identifier: 7B:04:CE:58:A1:37:02:41:E9:3E:F0:1F:59:7D:D1:8A:03:9D:61:3D Certificate issuer: /CN=7B04CE58A1370241E93EF01F597DD18A039D613D Certificate serial: 296CEA2EEDEA1EC38186F90012F76614A84F19FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B04CE58A1370241E93EF01F597DD18A039D613D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/7B04CE58A1370241E93EF01F597DD18A039D613D.mft Manifest number: 018D Signing time: Sat 23 Aug 2025 08:20:39 +0000 Manifest this update: Sat 23 Aug 2025 08:15:39 +0000 Manifest next update: Tue 26 Aug 2025 10:22:39 +0000 Files and hashes: 1: 3130332e39372e3139392e302f32342d3234203d3e20313530393135.roa (hash: KpZGTHHITDkYOGDokkGhFBTqUppZ/cNFbsmbPmwF8Cg=) 2: 7B04CE58A1370241E93EF01F597DD18A039D613D.crl (hash: Wh4C795S1seGxTLidI6XAptDTPl8m++wVvHj/JK5Ht8=) 3: 3130332e39372e3139382e302f32342d3234203d3e20313530393135.roa (hash: hDAK8K+txMTHkfsrGfxUD2weXFc9WyKaz34yDS1pZNU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/7B04CE58A1370241E93EF01F597DD18A039D613D.crl rsync://repo-rpki.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/7B04CE58A1370241E93EF01F597DD18A039D613D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B04CE58A1370241E93EF01F597DD18A039D613D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:6c:ea:2e:ed:ea:1e:c3:81:86:f9:00:12:f7:66:14:a8:4f:19:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B04CE58A1370241E93EF01F597DD18A039D613D Validity Not Before: Aug 23 08:15:39 2025 GMT Not After : Aug 26 10:22:39 2025 GMT Subject: CN=3832DE6EC8D899B05425B7CEB20A9D1E5C6D449D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:51:a5:e0:11:7c:34:6f:fd:6a:3b:6e:12:3b: 66:92:04:02:52:5b:97:f2:8d:1c:80:8d:c8:da:ba: 50:d1:fd:79:17:df:f2:e1:ae:28:a2:d7:f9:1e:fe: cb:52:85:87:16:75:2e:ce:69:d7:24:31:61:59:b3: ea:da:74:27:13:51:76:2d:60:67:a7:7b:02:ce:b4: f5:0f:a8:31:c5:df:fc:c2:17:d3:b7:0c:bb:be:52: e5:74:1b:17:1f:68:3c:c8:68:e0:65:2f:7b:e1:f2: 92:8b:a7:c1:ea:f6:ec:8b:ee:83:59:ac:61:55:a0: 98:58:f3:ea:ac:4b:63:84:77:30:a1:67:b6:96:a3: 9b:13:1f:31:4f:66:a4:46:ba:3f:69:3a:26:0e:31: ee:54:e1:d2:1a:a9:5d:eb:9f:1b:8c:f7:df:dc:b8: b5:76:5f:8b:d9:60:95:24:ed:99:1a:ec:14:42:70: a3:80:6b:1c:7e:17:57:94:9d:ff:58:33:01:63:d9: 78:e5:cd:da:ff:42:e7:2f:21:8e:fc:c2:8a:63:3e: 62:04:e4:5e:ff:e5:72:81:15:a2:24:fe:83:d4:c7: 0d:39:15:5f:dc:0a:2b:58:1c:62:cd:91:e4:5e:55: a8:b7:e1:f0:36:24:b1:9d:f8:fe:65:71:e1:1c:49: a5:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:32:DE:6E:C8:D8:99:B0:54:25:B7:CE:B2:0A:9D:1E:5C:6D:44:9D X509v3 Authority Key Identifier: keyid:7B:04:CE:58:A1:37:02:41:E9:3E:F0:1F:59:7D:D1:8A:03:9D:61:3D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/7B04CE58A1370241E93EF01F597DD18A039D613D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B04CE58A1370241E93EF01F597DD18A039D613D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d8463ad5-1745-443e-b165-d194eed89e6b/0/7B04CE58A1370241E93EF01F597DD18A039D613D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:84:6c:0a:02:bf:d7:67:14:44:34:1d:61:5c:af:c1:b5:41: f2:e4:fb:ba:89:00:cb:1d:2c:a1:d5:27:8c:db:02:33:d5:fc: 36:e8:2f:70:3b:b6:96:dd:86:9e:89:80:c4:93:9d:5d:3c:0a: 98:df:c9:46:14:d7:ae:58:4c:09:e1:58:a7:92:64:d8:12:3c: a1:40:b8:86:c9:63:e5:71:e1:64:a5:e7:11:d8:d5:b1:45:1c: 5c:bb:05:43:ef:22:2a:37:df:3c:d3:fe:92:97:3e:e8:96:27: 56:67:67:b1:a0:72:f5:68:05:c4:4c:af:51:2a:54:bb:70:76: 38:d0:1d:0b:fe:80:28:18:cb:a7:f2:d4:36:f8:d5:50:22:10: 3b:fc:8b:f9:68:73:b6:86:72:54:7c:6a:fb:42:a8:a3:59:3e: c2:ba:0e:c6:ef:bc:d0:db:27:27:4a:7d:06:3f:da:9e:3c:b4: 25:07:1e:1e:d6:b1:d5:21:a6:ac:f2:ab:39:2d:79:32:98:81: b1:88:9d:32:c3:fa:f4:c7:bb:65:79:4a:d3:b7:d8:5d:d9:d1: 25:20:b5:2d:3f:03:4d:af:3c:d6:08:54:1c:3e:6c:44:95:29: 73:53:be:e8:af:30:ca:13:0b:4b:ee:cd:5a:45:27:68:5a:65: 0d:e6:81:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKWzqLu3qHsOBhvkAEvdmFKhPGf0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0IwNENFNThBMTM3MDI0MUU5M0VGMDFGNTk3REQxOEEw MzlENjEzRDAeFw0yNTA4MjMwODE1MzlaFw0yNTA4MjYxMDIyMzlaMDMxMTAvBgNV BAMTKDM4MzJERTZFQzhEODk5QjA1NDI1QjdDRUIyMEE5RDFFNUM2RDQ0OUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXUaXgEXw0b/1qO24SO2aSBAJS W5fyjRyAjcjaulDR/XkX3/Lhriii1/ke/stShYcWdS7OadckMWFZs+radCcTUXYt YGenewLOtPUPqDHF3/zCF9O3DLu+UuV0GxcfaDzIaOBlL3vh8pKLp8Hq9uyL7oNZ rGFVoJhY8+qsS2OEdzChZ7aWo5sTHzFPZqRGuj9pOiYOMe5U4dIaqV3rnxuM99/c uLV2X4vZYJUk7Zka7BRCcKOAaxx+F1eUnf9YMwFj2Xjlzdr/QucvIY78wopjPmIE 5F7/5XKBFaIk/oPUxw05FV/cCitYHGLNkeReVai34fA2JLGd+P5lceEcSaVpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUODLebsjYmbBUJbfOsgqdHlxtRJ0wHwYDVR0j BBgwFoAUewTOWKE3AkHpPvAfWX3RigOdYT0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k ODQ2M2FkNS0xNzQ1LTQ0M2UtYjE2NS1kMTk0ZWVkODllNmIvMC83QjA0Q0U1OEEx MzcwMjQxRTkzRUYwMUY1OTdERDE4QTAzOUQ2MTNELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0IwNENFNThBMTM3MDI0MUU5M0VGMDFGNTk3REQxOEEwMzlE NjEzRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDg0NjNhZDUtMTc0NS00NDNlLWIx NjUtZDE5NGVlZDg5ZTZiLzAvN0IwNENFNThBMTM3MDI0MUU5M0VGMDFGNTk3REQx OEEwMzlENjEzRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALqEbAoCv9dnFEQ0HWFcr8G1QfLk+7qJAMsd LKHVJ4zbAjPV/DboL3A7tpbdhp6JgMSTnV08CpjfyUYU165YTAnhWKeSZNgSPKFA uIbJY+Vx4WSl5xHY1bFFHFy7BUPvIio33zzT/pKXPuiWJ1ZnZ7GgcvVoBcRMr1Eq VLtwdjjQHQv+gCgYy6fy1Db41VAiEDv8i/loc7aGclR8avtCqKNZPsK6DsbvvNDb JydKfQY/2p48tCUHHh7WsdUhpqzyqzkteTKYgbGInTLD+vTHu2V5StO32F3Z0SUg tS0/A02vPNYIVBw+bESVKXNTvuivMMoTC0vuzVpFJ2haZQ3mgdE= -----END CERTIFICATE-----Generated at Sat Aug 23 13:10:21 2025 by rpki-client