$ rpki-client -vvf repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft File: C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft (raw, json) Hash identifier: eeTIUdJDAx5zp2vq/A+vfv3j2MgfJ9DvHWS+/Qh2VqA= Subject key identifier: 38:23:3E:FC:37:17:87:18:C1:37:EE:CA:A6:03:C1:74:BB:CC:15:3D Authority key identifier: C7:F3:F7:AC:64:8C:60:73:C7:FE:73:62:71:A1:A8:E7:27:79:62:B7 Certificate issuer: /CN=C7F3F7AC648C6073C7FE736271A1A8E7277962B7 Certificate serial: 2E02F37409633DA7304090886C8818003DDEF6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft Manifest number: 0123 Signing time: Thu 21 Aug 2025 11:01:28 +0000 Manifest this update: Thu 21 Aug 2025 10:56:28 +0000 Manifest next update: Sun 24 Aug 2025 17:17:28 +0000 Files and hashes: 1: 3130332e3134342e3132392e302f32342d3234203d3e20313339343333.roa (hash: RIPwkwrtUM/4ffKNW9yUN28LgPyDGB1P3EsXYFO7WUY=) 2: 3130332e3134342e3132382e302f32342d3234203d3e20313339343333.roa (hash: n0wSfYokNi/npNPzftcDmS3sdBSeLLSMYOoHz/p9hrE=) 3: 3130332e3134342e3132382e302f32332d3233203d3e20313339343333.roa (hash: fPtFW64rMVWWTfe0idTINB3BUS2Ju2ivrfcwXSv84rI=) 4: C7F3F7AC648C6073C7FE736271A1A8E7277962B7.crl (hash: 0S/nU7FzjkQRLfS3rEvtQGeFNtA6CC1fF1YSZBJhQfo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.crl rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 17:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:02:f3:74:09:63:3d:a7:30:40:90:88:6c:88:18:00:3d:de:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7F3F7AC648C6073C7FE736271A1A8E7277962B7 Validity Not Before: Aug 21 10:56:28 2025 GMT Not After : Aug 24 17:17:28 2025 GMT Subject: CN=38233EFC37178718C137EECAA603C174BBCC153D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:54:38:ff:33:f7:f8:bb:05:65:61:2c:52:0c: 8d:f8:50:3f:53:ba:5e:24:27:7b:de:0c:16:01:37: c6:57:45:82:63:c9:35:c6:b2:c7:2a:0e:3f:ce:66: 46:41:9f:11:fb:00:81:bd:4f:e4:f7:af:06:62:22: d7:67:23:45:d3:26:b2:e0:06:fc:f4:b1:ea:7b:46: 47:7b:fb:8e:ef:3e:40:fe:d9:8a:0b:61:ae:2a:76: d5:7a:21:08:b1:7a:72:f4:49:07:1b:ac:e5:f7:a6: 56:31:57:e2:e6:74:96:04:08:48:3f:ad:28:d2:ff: 67:cf:15:6a:1a:9f:a1:44:5d:7d:ef:16:71:cc:41: 87:bd:71:2b:a4:9f:c5:f1:4e:96:6e:a0:68:2f:13: 7f:aa:fa:c0:7c:81:aa:c4:f8:19:47:e4:14:3d:66: b6:79:59:1e:55:2d:85:8c:08:78:ef:83:cc:83:e1: fb:06:c6:2b:17:70:fe:bd:09:ef:59:78:b1:a3:33: 0d:1c:5a:99:77:1f:6a:5f:a5:70:61:45:3e:bf:2f: 0b:22:2a:68:47:8c:3d:9b:e0:5e:4d:21:52:b3:5d: 9e:f1:19:e6:bd:b2:64:98:e9:d9:e3:09:28:f0:5d: 85:a0:2f:20:98:0e:06:36:04:91:53:91:e6:d7:96: 17:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:23:3E:FC:37:17:87:18:C1:37:EE:CA:A6:03:C1:74:BB:CC:15:3D X509v3 Authority Key Identifier: keyid:C7:F3:F7:AC:64:8C:60:73:C7:FE:73:62:71:A1:A8:E7:27:79:62:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cb:b7:c5:d4:61:08:16:de:57:e6:14:9d:1b:58:e7:c3:56:8d: 26:98:5c:7b:75:a2:66:e3:bb:8d:59:c9:89:51:89:1d:02:fc: f7:12:f4:4f:af:dd:07:71:6a:f5:1c:e8:67:3c:99:ab:bb:3f: 83:3e:b7:b9:3a:f1:07:9c:d3:15:44:63:20:59:01:f9:ce:5b: 8e:ae:d8:1b:30:41:07:62:0f:73:73:cb:2b:1f:b0:41:47:aa: 35:a3:5b:99:9c:45:06:da:74:47:9e:2d:9f:7b:ec:41:6e:a8: 76:e3:cf:7d:85:be:e6:fa:2e:a8:eb:45:30:fc:44:e3:ee:6e: 1e:89:07:e5:b2:47:b1:13:3e:0d:dc:7b:be:80:e4:ec:3c:d1: d8:71:fd:5b:a7:17:bb:79:bf:a3:c1:5e:f8:1f:73:2e:e1:24: 35:e2:14:8f:e1:e2:c3:5c:40:d7:a2:2f:96:7f:07:4a:a5:06: 2f:a2:a0:95:91:d5:23:b8:6f:71:76:8f:fa:58:0d:7d:2c:88: 5e:66:a2:dd:3d:54:fd:50:3e:4f:3b:2d:b2:5a:05:72:35:f2: 73:a9:ef:cd:65:16:55:6b:d9:c0:5f:4e:fe:11:6f:d6:8d:65: 03:f5:44:b5:b3:d2:77:6b:b7:8c:1c:f3:90:7f:8a:3b:5a:ad: 58:03:45:fc -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITLgLzdAljPacwQJCIbIgYAD3e9jANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhDN0YzRjdBQzY0OEM2MDczQzdGRTczNjI3MUExQThFNzI3 Nzk2MkI3MB4XDTI1MDgyMTEwNTYyOFoXDTI1MDgyNDE3MTcyOFowMzExMC8GA1UE AxMoMzgyMzNFRkMzNzE3ODcxOEMxMzdFRUNBQTYwM0MxNzRCQkNDMTUzRDCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMlUOP8z9/i7BWVhLFIMjfhQP1O6 XiQne94MFgE3xldFgmPJNcayxyoOP85mRkGfEfsAgb1P5PevBmIi12cjRdMmsuAG /PSx6ntGR3v7ju8+QP7Zigthrip21XohCLF6cvRJBxus5femVjFX4uZ0lgQISD+t KNL/Z88VahqfoURdfe8WccxBh71xK6SfxfFOlm6gaC8Tf6r6wHyBqsT4GUfkFD1m tnlZHlUthYwIeO+DzIPh+wbGKxdw/r0J71l4saMzDRxamXcfal+lcGFFPr8vCyIq aEeMPZvgXk0hUrNdnvEZ5r2yZJjp2eMJKPBdhaAvIJgOBjYEkVOR5teWF7sCAwEA AaOCAjwwggI4MB0GA1UdDgQWBBQ4Iz78NxeHGME37sqmA8F0u8wVPTAfBgNVHSME GDAWgBTH8/esZIxgc8f+c2JxoajnJ3litzAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U5 ZjU3NWRiLWM3MzgtNGI4ZS1iMzZhLTZiMDIwYzY2ODQ5ZC8wL0M3RjNGN0FDNjQ4 QzYwNzNDN0ZFNzM2MjcxQTFBOEU3Mjc3OTYyQjcuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi9DN0YzRjdBQzY0OEM2MDczQzdGRTczNjI3MUExQThFNzI3Nzk2 MkI3LmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9lOWY1NzVkYi1jNzM4LTRiOGUtYjM2 YS02YjAyMGM2Njg0OWQvMC9DN0YzRjdBQzY0OEM2MDczQzdGRTczNjI3MUExQThF NzI3Nzk2MkI3Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAy7fF1GEIFt5X5hSdG1jnw1aNJphce3WiZuO7 jVnJiVGJHQL89xL0T6/dB3Fq9RzoZzyZq7s/gz63uTrxB5zTFURjIFkB+c5bjq7Y GzBBB2IPc3PLKx+wQUeqNaNbmZxFBtp0R54tn3vsQW6oduPPfYW+5vouqOtFMPxE 4+5uHokH5bJHsRM+Ddx7voDk7DzR2HH9W6cXu3m/o8Fe+B9zLuEkNeIUj+Hiw1xA 16Ivln8HSqUGL6KglZHVI7hvcXaP+lgNfSyIXmai3T1U/VA+TzstsloFcjXyc6nv zWUWVWvZwF9O/hFv1o1lA/VEtbPSd2u3jBzzkH+KO1qtWANF/A== -----END CERTIFICATE-----Generated at Sat Aug 23 11:55:24 2025 by rpki-client