$ rpki-client -vvf repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.mft File: 07043FF6B66099F2CBFBBB64672822F3014937E8.mft (raw, json) Hash identifier: ysmE3/jgg1DJ/OYWrU40Cw+tdxG5sBDyNhqtgw8tHSY= Subject key identifier: 04:FA:B6:98:4A:7F:11:1C:C6:25:F2:17:6F:A5:34:35:24:2C:01:30 Authority key identifier: 07:04:3F:F6:B6:60:99:F2:CB:FB:BB:64:67:28:22:F3:01:49:37:E8 Certificate issuer: /CN=07043FF6B66099F2CBFBBB64672822F3014937E8 Certificate serial: 3F12040CC46BC749E954C713585FDB5D67C158F8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07043FF6B66099F2CBFBBB64672822F3014937E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.mft Manifest number: 01C4 Signing time: Sat 14 Jun 2025 14:11:37 +0000 Manifest this update: Sat 14 Jun 2025 14:06:37 +0000 Manifest next update: Wed 18 Jun 2025 00:02:37 +0000 Files and hashes: 1: 3130332e3132352e31332e302f32342d3234203d3e20313335363336.roa (hash: h/JHGAZA+XMm5GRiDBuDE93tuKC3bgB9VcHqmJ9NiB8=) 2: 3130332e3132352e31322e302f32342d3234203d3e20313533333137.roa (hash: 1xo0DjDSXvXZUNtwZdd+vDQQvBq4jlF/Yl9f8y0lmbA=) 3: 3130332e3132352e31342e302f32342d3234203d3e20313335363336.roa (hash: LDE8MHvWr7ClJaD2b6MGzIMO0HFW7Xb1cGyTVwE6YBs=) 4: 07043FF6B66099F2CBFBBB64672822F3014937E8.crl (hash: +tUFx+gAu9dsvT1SUWOBgrhQw46kYKbUQY1GsFarP3E=) 5: 3130332e3132352e31352e302f32342d3234203d3e20313335363336.roa (hash: jfBPikwcOXfyCAw2T4LtcRftqdJoZDQGQR3Ub10AvuI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.crl rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07043FF6B66099F2CBFBBB64672822F3014937E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 00:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:12:04:0c:c4:6b:c7:49:e9:54:c7:13:58:5f:db:5d:67:c1:58:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07043FF6B66099F2CBFBBB64672822F3014937E8 Validity Not Before: Jun 14 14:06:37 2025 GMT Not After : Jun 18 00:02:37 2025 GMT Subject: CN=04FAB6984A7F111CC625F2176FA53435242C0130 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:e4:33:55:82:18:4a:e4:06:07:b2:6c:37:46: 56:d0:f1:c4:04:c6:d9:b5:fc:65:50:1a:38:2e:36: 1f:1c:2a:e0:ce:27:05:dc:04:46:7d:40:fd:38:67: 3a:b6:5b:98:fe:6a:59:71:2a:b4:e7:ac:cd:25:5e: 42:9c:5c:08:50:04:fa:df:c8:99:00:87:30:30:af: fe:99:d1:93:fa:f5:12:f4:0f:f7:73:59:fa:76:12: 2a:94:72:fd:b6:84:fe:e9:e3:92:d9:9b:28:ad:c3: 37:2d:bf:81:b4:9b:38:ae:9c:66:5f:b8:0e:c5:0b: 7c:d2:46:0d:d6:37:ed:6b:e7:c3:28:f1:aa:44:c7: 3b:0e:8b:1f:e5:22:eb:af:13:aa:14:8d:e8:aa:30: 9b:9f:0d:d5:94:37:93:38:d8:82:e8:c0:0b:6a:7d: 1c:93:86:cd:05:c8:d2:91:cb:af:02:dd:1a:3e:40: 4c:f9:ac:2f:1f:66:d0:13:b7:4b:13:bb:12:d0:97: 99:68:b6:ae:ae:c4:48:4e:ef:5f:84:63:10:20:8d: 1e:97:db:4e:00:f5:e4:87:0b:92:a4:ea:19:c5:0f: 4a:7d:1f:79:12:6e:fc:d7:cd:7e:ad:a2:34:a7:43: 87:db:f1:01:a0:bc:bb:96:77:f9:ab:15:8b:1c:d0: a9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 04:FA:B6:98:4A:7F:11:1C:C6:25:F2:17:6F:A5:34:35:24:2C:01:30 X509v3 Authority Key Identifier: keyid:07:04:3F:F6:B6:60:99:F2:CB:FB:BB:64:67:28:22:F3:01:49:37:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07043FF6B66099F2CBFBBB64672822F3014937E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:c4:c5:7f:78:19:43:8f:fa:c5:16:94:54:65:69:d5:7d:ad: 0e:c2:54:d2:3a:76:33:ee:df:bb:b3:03:31:10:66:87:77:fe: 36:2f:24:fd:b0:8c:be:19:4a:0b:d6:dc:ab:18:ea:4b:74:fd: 1a:0d:b2:57:18:91:bd:ef:9b:a4:63:99:1b:8f:b5:f7:ed:23: fa:65:e6:6a:48:d7:5d:5c:62:be:b2:e3:f2:b5:8c:04:13:52: 6b:b3:bf:89:ed:0a:83:8b:df:92:99:c4:ca:df:aa:7c:24:8f: d4:35:f0:4a:c6:8a:25:aa:d3:fa:56:4c:1e:53:ea:0f:36:5e: 59:11:2c:40:f8:a2:48:ef:0d:d1:53:c9:26:d4:08:57:b6:24: d8:b1:96:66:f0:ad:55:cd:38:46:03:9b:eb:66:0f:56:cd:4d: d1:10:c3:e1:ec:85:8d:1a:96:8b:b3:48:a3:5d:3b:59:03:9d: dd:f8:4e:ba:7f:4a:50:75:55:df:06:b3:3a:f8:b9:86:6c:52: a6:2e:32:69:23:09:78:78:67:1b:d7:e9:39:73:d6:1b:3e:8c: 23:00:e6:20:b3:ce:f8:04:52:f9:24:a3:fb:61:19:57:b9:ba: 52:29:cb:94:c6:43:5c:f9:f9:bc:86:81:71:b2:a2:17:41:e7: e7:0e:4c:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPxIEDMRrx0npVMcTWF/bXWfBWPgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDcwNDNGRjZCNjYwOTlGMkNCRkJCQjY0NjcyODIyRjMw MTQ5MzdFODAeFw0yNTA2MTQxNDA2MzdaFw0yNTA2MTgwMDAyMzdaMDMxMTAvBgNV BAMTKDA0RkFCNjk4NEE3RjExMUNDNjI1RjIxNzZGQTUzNDM1MjQyQzAxMzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCj5DNVghhK5AYHsmw3RlbQ8cQE xtm1/GVQGjguNh8cKuDOJwXcBEZ9QP04Zzq2W5j+allxKrTnrM0lXkKcXAhQBPrf yJkAhzAwr/6Z0ZP69RL0D/dzWfp2EiqUcv22hP7p45LZmyitwzctv4G0mziunGZf uA7FC3zSRg3WN+1r58Mo8apExzsOix/lIuuvE6oUjeiqMJufDdWUN5M42ILowAtq fRyThs0FyNKRy68C3Ro+QEz5rC8fZtATt0sTuxLQl5lotq6uxEhO71+EYxAgjR6X 204A9eSHC5Kk6hnFD0p9H3kSbvzXzX6tojSnQ4fb8QGgvLuWd/mrFYsc0KnlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBPq2mEp/ERzGJfIXb6U0NSQsATAwHwYDVR0j BBgwFoAUBwQ/9rZgmfLL+7tkZygi8wFJN+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzU0YmU5YS05YjVkLTRjNjQtYjRlOC02MWM3NGU5ZWNlZGMvMC8wNzA0M0ZGNkI2 NjA5OUYyQ0JGQkJCNjQ2NzI4MjJGMzAxNDkzN0U4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDcwNDNGRjZCNjYwOTlGMkNCRkJCQjY0NjcyODIyRjMwMTQ5 MzdFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGM1NGJlOWEtOWI1ZC00YzY0LWI0 ZTgtNjFjNzRlOWVjZWRjLzAvMDcwNDNGRjZCNjYwOTlGMkNCRkJCQjY0NjcyODIy RjMwMTQ5MzdFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKjExX94GUOP+sUWlFRladV9rQ7CVNI6djPu 37uzAzEQZod3/jYvJP2wjL4ZSgvW3KsY6kt0/RoNslcYkb3vm6RjmRuPtfftI/pl 5mpI111cYr6y4/K1jAQTUmuzv4ntCoOL35KZxMrfqnwkj9Q18ErGiiWq0/pWTB5T 6g82XlkRLED4okjvDdFTySbUCFe2JNixlmbwrVXNOEYDm+tmD1bNTdEQw+HshY0a louzSKNdO1kDnd34Trp/SlB1Vd8Gszr4uYZsUqYuMmkjCXh4ZxvX6Tlz1hs+jCMA 5iCzzvgEUvkko/thGVe5ulIpy5TGQ1z5+byGgXGyohdB5+cOTJo= -----END CERTIFICATE-----Generated at Mon Jun 16 17:40:25 2025 by rpki-client