$ rpki-client -vvf repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft File: 7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft (raw, json) Hash identifier: 87KEdErlp/W4GxseXBUUdhwIYyO19NPQv73HS9ZKoVs= Subject key identifier: F8:1B:7C:3F:A8:6B:54:25:80:1B:FF:0C:D8:5B:8D:E6:D7:68:20:36 Authority key identifier: 7F:DB:76:1B:09:E7:A9:A8:0C:D2:8C:84:A5:FF:DB:12:F5:C9:BB:D0 Certificate issuer: /CN=7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0 Certificate serial: 108250A14B1C0C7FFE3FD6C82F6CB7AEB20A4F82 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft Manifest number: 01FB Signing time: Thu 21 Aug 2025 17:41:00 +0000 Manifest this update: Thu 21 Aug 2025 17:36:00 +0000 Manifest next update: Mon 25 Aug 2025 02:05:00 +0000 Files and hashes: 1: 3130332e3138362e38392e302f32342d3234203d3e20313439373137.roa (hash: d85h85v2ptQz3vrVN5qkUm0+GStqZnlOAr5LKlkna3k=) 2: 3130332e3138362e38382e302f32342d3234203d3e20313439373137.roa (hash: qKtIrqocYRtH9mFT0B1bJLwWXs7q8vOuLUP4J+rTPCk=) 3: 7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.crl (hash: b0ZBvQcBOltezsgOlUT8oNZeajHmO2qiBU0LiPi7pKo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.crl rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 02:05:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:82:50:a1:4b:1c:0c:7f:fe:3f:d6:c8:2f:6c:b7:ae:b2:0a:4f:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0 Validity Not Before: Aug 21 17:36:00 2025 GMT Not After : Aug 25 02:05:00 2025 GMT Subject: CN=F81B7C3FA86B5425801BFF0CD85B8DE6D7682036 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:a1:d8:5f:e6:9e:8d:2b:24:e2:6d:dd:83:66: f2:d5:6b:b4:c8:ce:2c:ef:22:53:58:8c:b1:51:0d: b8:b8:5e:52:42:f4:61:df:0b:c5:27:d4:83:69:28: 47:c4:5f:28:fe:7b:30:87:7c:5a:e6:ce:2e:e7:8a: d7:97:db:a6:72:35:2c:d2:ba:65:dd:ef:65:c5:a8: c9:57:86:bb:82:4e:b6:4d:bc:00:eb:5c:a1:54:c7: 46:38:55:0e:26:3c:10:25:46:f5:19:71:97:28:45: f9:22:f2:ce:1a:82:e1:8a:dc:25:27:2f:a4:56:c1: f3:0b:2a:9a:91:c0:0a:5b:52:1a:30:42:c8:be:58: 26:47:ca:75:ca:51:cc:c2:87:93:7b:8a:a0:b3:70: ec:8e:fd:fd:3a:ee:e8:b3:23:53:c8:e6:b4:bc:76: a3:68:c5:cb:72:d5:1f:12:54:50:ab:c3:73:60:ce: 64:59:27:c7:82:fe:1c:ba:0a:8d:8f:9d:9e:23:3b: d4:97:43:d3:1b:be:b8:15:69:12:69:3a:d2:1c:7b: e6:ba:b5:d6:4f:0b:e3:1f:fe:2e:32:e4:ea:03:91: fa:98:eb:f5:44:06:de:c1:63:e2:8f:48:14:0a:71: 0f:a6:b6:7c:6f:1a:ea:b1:17:1c:82:cd:a4:10:1a: 00:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:1B:7C:3F:A8:6B:54:25:80:1B:FF:0C:D8:5B:8D:E6:D7:68:20:36 X509v3 Authority Key Identifier: keyid:7F:DB:76:1B:09:E7:A9:A8:0C:D2:8C:84:A5:FF:DB:12:F5:C9:BB:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:f1:9e:00:97:c0:48:7a:b9:85:f9:04:c4:94:2a:7a:8d:80: 3d:09:f5:fb:46:cb:3f:16:11:44:40:f6:2d:3b:fa:93:7c:a8: e8:38:69:8d:97:93:07:9e:7b:b8:11:53:cc:f0:43:65:85:0e: c2:44:0f:3c:de:06:cb:72:19:70:69:60:68:b1:1b:e7:46:10: 0b:a8:4a:dc:5e:05:3d:e9:c1:df:65:94:2c:33:80:c5:b4:6c: 0b:e0:60:c2:00:85:8d:07:91:71:7b:3b:5f:7c:c0:e5:8e:3a: 5f:eb:5e:8b:47:7b:34:20:8d:87:ae:6a:17:4b:9f:3c:48:2a: 00:bc:4e:67:05:d2:3a:06:9b:c9:9b:35:b4:ea:41:61:2a:43: 99:cd:82:6a:fb:fe:bf:88:a1:f4:b2:62:ad:12:16:ee:31:7e: cb:8e:6e:8f:15:ce:20:9e:90:fa:85:02:93:f9:e0:47:d7:32: 61:f4:33:7e:2c:e3:c9:03:55:5d:66:63:bc:38:9a:3f:24:26: 84:8b:9d:4a:e8:25:8e:bd:8c:fe:35:a6:b3:33:a0:72:bb:38: 74:48:29:78:69:6e:64:a7:85:91:e8:e0:0b:6c:63:6f:20:bb: 38:a0:92:e8:03:47:ac:8f:25:cb:5b:3b:2b:32:a0:d5:22:f4: 18:8a:29:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEIJQoUscDH/+P9bIL2y3rrIKT4IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ZEQjc2MUIwOUU3QTlBODBDRDI4Qzg0QTVGRkRCMTJG NUM5QkJEMDAeFw0yNTA4MjExNzM2MDBaFw0yNTA4MjUwMjA1MDBaMDMxMTAvBgNV BAMTKEY4MUI3QzNGQTg2QjU0MjU4MDFCRkYwQ0Q4NUI4REU2RDc2ODIwMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTodhf5p6NKyTibd2DZvLVa7TI zizvIlNYjLFRDbi4XlJC9GHfC8Un1INpKEfEXyj+ezCHfFrmzi7niteX26ZyNSzS umXd72XFqMlXhruCTrZNvADrXKFUx0Y4VQ4mPBAlRvUZcZcoRfki8s4aguGK3CUn L6RWwfMLKpqRwApbUhowQsi+WCZHynXKUczCh5N7iqCzcOyO/f067uizI1PI5rS8 dqNoxcty1R8SVFCrw3NgzmRZJ8eC/hy6Co2PnZ4jO9SXQ9MbvrgVaRJpOtIce+a6 tdZPC+Mf/i4y5OoDkfqY6/VEBt7BY+KPSBQKcQ+mtnxvGuqxFxyCzaQQGgBrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+Bt8P6hrVCWAG/8M2FuN5tdoIDYwHwYDVR0j BBgwFoAUf9t2GwnnqagM0oyEpf/bEvXJu9AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzI5NWRlNi0yMDU4LTQ2YTctOTM2Yi0wNTJjZjJmYTkyMGQvMC83RkRCNzYxQjA5 RTdBOUE4MENEMjhDODRBNUZGREIxMkY1QzlCQkQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0ZEQjc2MUIwOUU3QTlBODBDRDI4Qzg0QTVGRkRCMTJGNUM5 QkJEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTMyOTVkZTYtMjA1OC00NmE3LTkz NmItMDUyY2YyZmE5MjBkLzAvN0ZEQjc2MUIwOUU3QTlBODBDRDI4Qzg0QTVGRkRC MTJGNUM5QkJEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJvxngCXwEh6uYX5BMSUKnqNgD0J9ftGyz8W EURA9i07+pN8qOg4aY2Xkweee7gRU8zwQ2WFDsJEDzzeBstyGXBpYGixG+dGEAuo StxeBT3pwd9llCwzgMW0bAvgYMIAhY0HkXF7O198wOWOOl/rXotHezQgjYeuahdL nzxIKgC8TmcF0joGm8mbNbTqQWEqQ5nNgmr7/r+IofSyYq0SFu4xfsuObo8VziCe kPqFApP54EfXMmH0M34s48kDVV1mY7w4mj8kJoSLnUroJY69jP41prMzoHK7OHRI KXhpbmSnhZHo4AtsY28guzigkugDR6yPJctbOysyoNUi9BiKKQ0= -----END CERTIFICATE-----Generated at Sat Aug 23 10:24:48 2025 by rpki-client