$ rpki-client -vvf repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.mft File: 7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.mft (raw, json) Hash identifier: 3sLsLujO0l4Z7HEEVnqKaVnHkA4PAJl80ADxviJuMXs= Subject key identifier: 2E:0B:48:3B:33:F3:B5:63:88:1D:57:A2:51:A9:7F:97:0F:1B:B6:98 Authority key identifier: 7C:4E:AC:B6:A8:C8:C7:27:6D:4C:EB:86:DC:DC:A3:E7:F4:68:A7:93 Certificate issuer: /CN=7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793 Certificate serial: 2B8DFF583BE99F6FF7A57D3A5CF40B2BF825E95B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.mft Manifest number: E0 Signing time: Fri 22 Aug 2025 01:30:45 +0000 Manifest this update: Fri 22 Aug 2025 01:25:45 +0000 Manifest next update: Mon 25 Aug 2025 05:54:45 +0000 Files and hashes: 1: 7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.crl (hash: LEhHPojnbpzZp6klqD5r+fEYueAjuvfNM42RkDERzrU=) 2: 3135372e32302e3231322e302f32332d3234203d3e20313532343135.roa (hash: rbjJyAwc8hNNHHozNUZcHui2yrJ3XRP3MxmsmjgubzQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.crl rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 05:54:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:8d:ff:58:3b:e9:9f:6f:f7:a5:7d:3a:5c:f4:0b:2b:f8:25:e9:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793 Validity Not Before: Aug 22 01:25:45 2025 GMT Not After : Aug 25 05:54:45 2025 GMT Subject: CN=2E0B483B33F3B563881D57A251A97F970F1BB698 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:bc:eb:de:5d:ef:68:0a:af:17:95:90:e0:bd: 19:49:15:40:2f:af:96:5f:93:3c:96:48:46:54:ed: 27:50:69:12:fc:63:84:e7:2e:56:59:87:72:3d:36: 71:5d:57:d5:6d:e2:f6:f7:4d:80:22:8a:ad:18:37: a6:4d:88:2d:ac:8b:0a:c4:f5:9a:de:18:88:f6:3a: 77:4b:bd:5b:02:40:90:97:c3:11:6b:b0:03:ca:5d: 23:71:85:ee:fe:c5:25:ae:df:05:b3:ae:d6:c9:6c: 40:8d:90:e4:09:62:26:21:2b:dc:32:e1:0f:7b:28: df:63:94:ff:51:af:64:db:2a:96:76:2a:e6:18:aa: 35:b7:2b:41:66:d7:9a:27:ac:2b:fc:a8:d2:55:9a: 8d:8c:32:c9:b9:73:ce:d9:95:92:0c:c4:6e:b4:42: 1e:fe:99:09:a8:32:69:c8:38:29:fd:1f:d5:bd:23: a6:1d:1e:18:30:25:9f:a2:c9:37:de:8e:8f:37:01: c0:8f:7b:7e:0e:29:ef:0f:89:dd:65:9d:b9:36:b9: ed:a5:40:d7:d5:e7:ac:f8:33:33:c4:c8:21:23:5a: e8:03:59:22:f4:aa:50:af:9a:e6:e0:bd:46:6d:e0: ff:eb:19:bc:35:12:c4:77:d3:a3:6d:f3:c0:1c:06: d8:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:0B:48:3B:33:F3:B5:63:88:1D:57:A2:51:A9:7F:97:0F:1B:B6:98 X509v3 Authority Key Identifier: keyid:7C:4E:AC:B6:A8:C8:C7:27:6D:4C:EB:86:DC:DC:A3:E7:F4:68:A7:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2d:aa:84:d1:85:62:18:7f:db:95:c7:37:19:2b:2a:7b:af:fd: e8:1a:fa:e8:42:de:47:63:1d:19:71:4b:c4:c1:b1:81:dc:27: 97:05:b1:ec:f5:0f:54:7c:ba:d7:fe:e6:7a:cc:31:ca:1d:5d: 56:55:ea:49:8c:cc:99:76:19:b9:b1:d1:8b:df:20:ab:cd:5d: a6:69:41:26:c1:c9:45:4a:77:f2:56:75:87:c2:d9:47:f3:8d: af:d0:85:e5:7b:55:a0:5e:4c:8e:5a:f4:c9:c7:2f:2d:30:dd: 9a:c9:32:f2:7d:37:62:a0:a9:6c:44:30:4d:9b:2e:12:03:2e: 1d:89:bb:62:e3:03:0e:37:87:73:c9:95:2e:3d:01:f7:71:a8: 49:67:8d:0c:31:0c:7e:b9:ed:9c:12:08:77:8b:08:b7:c7:f9: 9d:cd:bd:ce:d2:63:b4:5e:c3:89:1b:a9:e1:57:05:12:95:b2: e9:ad:51:6d:71:de:d8:9b:ed:fe:16:1e:b7:54:01:7c:36:1d: 42:9c:57:a7:5f:ea:53:65:39:78:c6:92:c8:bc:b4:a2:83:20: 79:87:90:eb:e2:e0:5d:d6:92:5b:78:30:db:6c:c1:a6:aa:7d: 8a:07:f9:0d:bc:4b:90:38:3b:1c:df:8d:86:9c:02:c7:20:b1: ff:47:fb:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK43/WDvpn2/3pX06XPQLK/gl6VswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M0RUFDQjZBOEM4QzcyNzZENENFQjg2RENEQ0EzRTdG NDY4QTc5MzAeFw0yNTA4MjIwMTI1NDVaFw0yNTA4MjUwNTU0NDVaMDMxMTAvBgNV BAMTKDJFMEI0ODNCMzNGM0I1NjM4ODFENTdBMjUxQTk3Rjk3MEYxQkI2OTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9vOveXe9oCq8XlZDgvRlJFUAv r5ZfkzyWSEZU7SdQaRL8Y4TnLlZZh3I9NnFdV9Vt4vb3TYAiiq0YN6ZNiC2siwrE 9ZreGIj2OndLvVsCQJCXwxFrsAPKXSNxhe7+xSWu3wWzrtbJbECNkOQJYiYhK9wy 4Q97KN9jlP9Rr2TbKpZ2KuYYqjW3K0Fm15onrCv8qNJVmo2MMsm5c87ZlZIMxG60 Qh7+mQmoMmnIOCn9H9W9I6YdHhgwJZ+iyTfejo83AcCPe34OKe8Pid1lnbk2ue2l QNfV56z4MzPEyCEjWugDWSL0qlCvmubgvUZt4P/rGbw1EsR306Nt88AcBtg/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULgtIOzPztWOIHVeiUal/lw8btpgwHwYDVR0j BBgwFoAUfE6stqjIxydtTOuG3Nyj5/Rop5MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2I0N2FiNi1kMWYxLTRkMmUtOWNmYy04MDg0YTRiYWNmMGIvMC83QzRFQUNCNkE4 QzhDNzI3NkQ0Q0VCODZEQ0RDQTNFN0Y0NjhBNzkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0M0RUFDQjZBOEM4QzcyNzZENENFQjg2RENEQ0EzRTdGNDY4 QTc5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNiNDdhYjYtZDFmMS00ZDJlLTlj ZmMtODA4NGE0YmFjZjBiLzAvN0M0RUFDQjZBOEM4QzcyNzZENENFQjg2RENEQ0Ez RTdGNDY4QTc5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC2qhNGFYhh/25XHNxkrKnuv/ega+uhC3kdj HRlxS8TBsYHcJ5cFsez1D1R8utf+5nrMMcodXVZV6kmMzJl2Gbmx0YvfIKvNXaZp QSbByUVKd/JWdYfC2Ufzja/QheV7VaBeTI5a9MnHLy0w3ZrJMvJ9N2KgqWxEME2b LhIDLh2Ju2LjAw43h3PJlS49AfdxqElnjQwxDH657ZwSCHeLCLfH+Z3Nvc7SY7Re w4kbqeFXBRKVsumtUW1x3tib7f4WHrdUAXw2HUKcV6df6lNlOXjGksi8tKKDIHmH kOvi4F3Wklt4MNtswaaqfYoH+Q28S5A4OxzfjYacAscgsf9H+80= -----END CERTIFICATE-----Generated at Sun Aug 24 05:23:23 2025 by rpki-client