$ rpki-client -vvf repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.mft File: 7F8FE9F94ED4A8F169D2C8A37966D06216684756.mft (raw, json) Hash identifier: WnB0hy/b0yTLtKPTem4i2iNJyeYgxEWJH4vi673avDo= Subject key identifier: 9F:B1:38:A8:7D:67:59:A9:3D:80:73:2E:65:A7:F7:90:0F:03:CB:81 Authority key identifier: 7F:8F:E9:F9:4E:D4:A8:F1:69:D2:C8:A3:79:66:D0:62:16:68:47:56 Certificate issuer: /CN=7F8FE9F94ED4A8F169D2C8A37966D06216684756 Certificate serial: 5F39335BEE98CDD99BD464A5A1B68CD8C34B914F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F8FE9F94ED4A8F169D2C8A37966D06216684756.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.mft Manifest number: 90 Signing time: Wed 02 Jul 2025 02:40:00 +0000 Manifest this update: Wed 02 Jul 2025 02:35:00 +0000 Manifest next update: Sat 05 Jul 2025 13:53:00 +0000 Files and hashes: 1: 33362e35302e3135342e302f32332d3234203d3e20313532303738.roa (hash: qwTtWBYi7rJ9MiRmHT0aPuVn4Q/HdC0kRQGNXWYVUNE=) 2: 7F8FE9F94ED4A8F169D2C8A37966D06216684756.crl (hash: LgHTq8q7OKSiL8ZeZGonu8Jyxas1vP9VkQ+z1JCErwc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.crl rsync://repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F8FE9F94ED4A8F169D2C8A37966D06216684756.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 13:53:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:39:33:5b:ee:98:cd:d9:9b:d4:64:a5:a1:b6:8c:d8:c3:4b:91:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7F8FE9F94ED4A8F169D2C8A37966D06216684756 Validity Not Before: Jul 2 02:35:00 2025 GMT Not After : Jul 5 13:53:00 2025 GMT Subject: CN=9FB138A87D6759A93D80732E65A7F7900F03CB81 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:ab:6c:cb:3b:75:ad:27:34:a7:70:66:c4:59: ec:5a:34:fe:5d:8f:48:2d:45:a2:f0:ce:89:5b:c4: d7:3e:9e:81:f3:d9:e6:5e:24:da:a3:e1:6d:8c:4e: 7c:ca:29:4e:5c:a1:da:a0:f9:97:c4:2d:dc:be:ea: 5e:1a:34:d7:02:6b:ca:9f:ec:fc:b2:50:16:be:9c: 6b:71:ed:4b:69:23:a0:7c:00:e4:7d:0c:99:68:d8: 2e:e9:e6:4e:c8:7e:28:af:f3:e5:f8:3f:16:0b:af: ce:d9:1e:40:36:a1:8f:3c:0c:23:e0:27:20:70:f4: 2a:9a:d2:b9:8c:bd:1d:3b:e8:1f:29:76:87:45:6f: 5a:ff:a4:7e:9d:03:f5:73:60:c8:8b:3c:0b:83:bc: 68:45:b7:11:7f:2c:cf:cd:7a:bb:c6:2a:ab:09:ca: 8e:0e:3f:93:56:da:0e:a2:4c:c6:40:0b:d0:85:08: 58:1d:04:33:27:89:7d:71:46:bf:30:60:e8:47:b6: 31:2d:02:69:da:1f:53:0c:7a:08:79:fc:5d:5d:7b: d6:33:a6:dc:5f:01:72:8d:7f:23:06:cf:6a:92:f9: c2:e1:19:fa:6b:33:c7:e3:54:b6:c0:28:4c:0d:99: 97:c9:59:d4:fc:9f:42:2e:7c:0b:bc:94:96:ad:70: fe:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:B1:38:A8:7D:67:59:A9:3D:80:73:2E:65:A7:F7:90:0F:03:CB:81 X509v3 Authority Key Identifier: keyid:7F:8F:E9:F9:4E:D4:A8:F1:69:D2:C8:A3:79:66:D0:62:16:68:47:56 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7F8FE9F94ED4A8F169D2C8A37966D06216684756.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f700292f-2868-47b3-ac21-600a467a7237/0/7F8FE9F94ED4A8F169D2C8A37966D06216684756.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:cd:d3:d3:0d:85:f4:b6:85:70:4d:34:34:b5:cb:51:fa:da: 84:51:78:52:e3:d8:6e:6b:0e:ab:6e:d0:aa:93:e1:cf:23:df: 17:22:39:48:79:b7:13:3f:ab:7d:80:ff:f1:8c:95:e9:a2:ec: 04:d3:57:af:e1:e0:98:13:c0:55:df:a5:4c:4b:8c:4b:2c:e8: 00:e1:c5:a1:b4:83:45:7d:07:cd:5f:24:4d:89:0e:a5:c5:60: 73:16:a8:4c:b3:4c:ac:cb:19:3e:99:9d:cf:18:bd:98:d7:9a: 93:49:0d:6c:e4:0c:91:88:18:ba:33:65:81:46:9f:74:09:1a: 2e:c8:e2:fb:9d:19:b4:7d:81:f2:97:8d:b3:67:27:cd:01:34: 01:58:0a:5f:2f:dd:26:84:92:66:0c:4f:a6:48:1e:88:34:9f: 02:8c:1e:02:af:09:27:92:c4:cc:2b:db:90:59:71:2d:79:30: eb:b4:3b:c6:0b:45:3e:37:8c:49:ee:49:31:3a:e6:f1:c3:e0: a7:b5:98:66:85:9d:20:ec:2d:df:c9:b2:18:ad:c3:dc:96:3c: 76:ee:e2:96:bf:9f:5b:11:70:98:ff:f6:5d:58:32:45:c4:f7: 28:dc:5b:ee:f5:a8:70:2c:5d:95:88:9a:ac:03:33:6c:79:21: 5c:9f:97:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXzkzW+6Yzdmb1GSlobaM2MNLkU8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Y4RkU5Rjk0RUQ0QThGMTY5RDJDOEEzNzk2NkQwNjIx NjY4NDc1NjAeFw0yNTA3MDIwMjM1MDBaFw0yNTA3MDUxMzUzMDBaMDMxMTAvBgNV BAMTKDlGQjEzOEE4N0Q2NzU5QTkzRDgwNzMyRTY1QTdGNzkwMEYwM0NCODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnq2zLO3WtJzSncGbEWexaNP5d j0gtRaLwzolbxNc+noHz2eZeJNqj4W2MTnzKKU5codqg+ZfELdy+6l4aNNcCa8qf 7PyyUBa+nGtx7UtpI6B8AOR9DJlo2C7p5k7Ifiiv8+X4PxYLr87ZHkA2oY88DCPg JyBw9Cqa0rmMvR076B8pdodFb1r/pH6dA/VzYMiLPAuDvGhFtxF/LM/NervGKqsJ yo4OP5NW2g6iTMZAC9CFCFgdBDMniX1xRr8wYOhHtjEtAmnaH1MMegh5/F1de9Yz ptxfAXKNfyMGz2qS+cLhGfprM8fjVLbAKEwNmZfJWdT8n0IufAu8lJatcP7JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn7E4qH1nWak9gHMuZaf3kA8Dy4EwHwYDVR0j BBgwFoAUf4/p+U7UqPFp0sijeWbQYhZoR1YwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NzAwMjkyZi0yODY4LTQ3YjMtYWMyMS02MDBhNDY3YTcyMzcvMC83RjhGRTlGOTRF RDRBOEYxNjlEMkM4QTM3OTY2RDA2MjE2Njg0NzU2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Y4RkU5Rjk0RUQ0QThGMTY5RDJDOEEzNzk2NkQwNjIxNjY4 NDc1Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjcwMDI5MmYtMjg2OC00N2IzLWFj MjEtNjAwYTQ2N2E3MjM3LzAvN0Y4RkU5Rjk0RUQ0QThGMTY5RDJDOEEzNzk2NkQw NjIxNjY4NDc1Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEHN09MNhfS2hXBNNDS1y1H62oRReFLj2G5r Dqtu0KqT4c8j3xciOUh5txM/q32A//GMlemi7ATTV6/h4JgTwFXfpUxLjEss6ADh xaG0g0V9B81fJE2JDqXFYHMWqEyzTKzLGT6Znc8YvZjXmpNJDWzkDJGIGLozZYFG n3QJGi7I4vudGbR9gfKXjbNnJ80BNAFYCl8v3SaEkmYMT6ZIHog0nwKMHgKvCSeS xMwr25BZcS15MOu0O8YLRT43jEnuSTE65vHD4Ke1mGaFnSDsLd/Jshitw9yWPHbu 4pa/n1sRcJj/9l1YMkXE9yjcW+71qHAsXZWImqwDM2x5IVyfl+g= -----END CERTIFICATE-----Generated at Wed Jul 2 06:30:11 2025 by rpki-client