$ rpki-client -vvf repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft File: 7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft (raw, json) Hash identifier: Owd1C3w+rKpJ+pgGp3upOHWO/F7gpizhnh3iaiCwRxg= Subject key identifier: 03:91:4D:09:48:3F:44:5D:71:2A:2E:9B:42:C7:D3:47:5D:FE:67:F7 Authority key identifier: 7F:EF:6B:F5:3F:A3:12:2A:0F:09:CE:F4:B4:08:E1:37:92:A1:45:45 Certificate issuer: /CN=7FEF6BF53FA3122A0F09CEF4B408E13792A14545 Certificate serial: 638A9D846411C080B2669F7FE60144CE0D85069C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.cer Subject info access: rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft Manifest number: 01E4 Signing time: Thu 19 Jun 2025 17:01:33 +0000 Manifest this update: Thu 19 Jun 2025 16:56:33 +0000 Manifest next update: Sun 22 Jun 2025 22:37:33 +0000 Files and hashes: 1: 7FEF6BF53FA3122A0F09CEF4B408E13792A14545.crl (hash: jUm3A/pajrBKMcS3dBYwf/kDcduR1ZfwWPBFJ1e1ZqE=) 2: 3130332e3136372e3130352e302f32342d3234203d3e203338333230.roa (hash: t5DmPirQU+jLx9aHjmb/pgwv+a8S0p8w/q4YuXRMJQI=) 3: 3130332e3136372e3130342e302f32342d3234203d3e20313339343130.roa (hash: cilQSsMRfqwA9LOmx5CPo41uuLBHWQ7Qq5S49MHRn2E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.crl rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 22 Jun 2025 13:31:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:8a:9d:84:64:11:c0:80:b2:66:9f:7f:e6:01:44:ce:0d:85:06:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7FEF6BF53FA3122A0F09CEF4B408E13792A14545 Validity Not Before: Jun 19 16:56:33 2025 GMT Not After : Jun 22 22:37:33 2025 GMT Subject: CN=03914D09483F445D712A2E9B42C7D3475DFE67F7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:62:92:46:af:d1:60:42:9a:1a:1b:a2:88:84: ab:d0:a4:31:d1:af:1d:ca:a0:c6:4c:4d:e5:3b:d4: e2:fb:6f:f6:36:0a:07:6d:90:00:b5:6d:01:65:61: 18:59:59:be:56:7f:37:e5:c3:3a:a6:7d:8b:84:10: bb:7f:fc:fe:91:b0:0c:98:8b:b1:65:f7:45:81:3b: 3a:47:ce:22:58:62:1e:c3:e2:1d:ae:28:3d:a8:0d: b9:a7:bb:74:98:bf:4a:da:5d:34:34:4e:a6:97:90: 6a:aa:48:02:39:23:d2:59:6b:33:17:95:6c:78:48: 46:72:c1:cd:03:ee:a4:e6:46:f8:7c:6d:40:f6:40: eb:5e:e1:30:6d:5d:7a:c2:34:1a:e9:0e:c6:a5:a8: ac:ac:a9:33:d8:b6:ce:5b:33:41:e6:79:a3:9c:e8: 06:f1:a4:d5:21:08:c0:84:ff:2d:82:04:bd:1e:07: ca:76:5f:be:46:6d:7c:b3:3b:06:31:e3:37:b8:3d: 88:6f:47:68:da:92:f1:ac:66:3d:b4:5f:1b:d4:4e: 46:13:4e:2f:df:73:b2:7e:1f:1e:a4:74:8d:e6:92: 16:f8:80:b6:0a:69:96:a4:02:29:8d:3d:15:71:39: 81:c5:e4:fd:44:6d:38:26:66:4f:3d:17:96:f6:9f: 38:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:91:4D:09:48:3F:44:5D:71:2A:2E:9B:42:C7:D3:47:5D:FE:67:F7 X509v3 Authority Key Identifier: keyid:7F:EF:6B:F5:3F:A3:12:2A:0F:09:CE:F4:B4:08:E1:37:92:A1:45:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:35:01:ea:3a:0c:ff:c4:12:1f:66:7a:26:8d:21:fc:f2:e1: 48:ad:71:f6:b9:f2:97:54:ee:23:2c:b7:82:2a:10:ea:be:45: 19:91:a3:43:3c:8d:d2:15:81:6d:99:b6:58:6e:33:71:4a:3c: 1f:fc:9f:62:f7:e2:b8:98:a8:28:16:5e:97:36:6c:46:6d:92: af:a7:18:5b:97:12:4f:78:59:39:b4:66:9b:1d:02:07:7d:5d: 57:f2:82:e1:0c:ee:a8:60:64:e7:bb:9e:50:8f:e2:1b:8f:75: 41:d4:fe:b7:6c:38:52:43:a2:64:95:cb:f7:33:a6:27:00:13: d0:23:1b:af:28:a4:8d:9d:8f:d2:46:87:7e:e6:7a:93:8d:fa: fc:18:6e:2c:b6:7a:d9:da:c0:a0:26:44:60:49:b5:05:d1:44: 8b:36:66:8e:58:86:09:2e:0c:d7:60:6d:6c:f0:99:24:61:fd: 53:78:a4:1e:12:ad:9d:b7:57:bf:48:6f:3f:33:96:03:1e:cb: b3:7d:20:25:5f:65:9e:df:28:e9:60:c2:d6:51:d7:5f:86:d2: 7b:02:e8:d0:cd:24:45:2f:df:48:b0:b2:5f:4b:fc:35:7f:9a: ff:9c:95:59:b1:45:b2:8f:60:df:e6:ae:d6:7e:df:7e:bb:0f: 39:82:5f:55 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY4qdhGQRwICyZp9/5gFEzg2FBpwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ZFRjZCRjUzRkEzMTIyQTBGMDlDRUY0QjQwOEUxMzc5 MkExNDU0NTAeFw0yNTA2MTkxNjU2MzNaFw0yNTA2MjIyMjM3MzNaMDMxMTAvBgNV BAMTKDAzOTE0RDA5NDgzRjQ0NUQ3MTJBMkU5QjQyQzdEMzQ3NURGRTY3RjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6YpJGr9FgQpoaG6KIhKvQpDHR rx3KoMZMTeU71OL7b/Y2CgdtkAC1bQFlYRhZWb5WfzflwzqmfYuEELt//P6RsAyY i7Fl90WBOzpHziJYYh7D4h2uKD2oDbmnu3SYv0raXTQ0TqaXkGqqSAI5I9JZazMX lWx4SEZywc0D7qTmRvh8bUD2QOte4TBtXXrCNBrpDsalqKysqTPYts5bM0HmeaOc 6AbxpNUhCMCE/y2CBL0eB8p2X75GbXyzOwYx4ze4PYhvR2jakvGsZj20XxvUTkYT Ti/fc7J+Hx6kdI3mkhb4gLYKaZakAimNPRVxOYHF5P1EbTgmZk89F5b2nzi7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA5FNCUg/RF1xKi6bQsfTR13+Z/cwHwYDVR0j BBgwFoAUf+9r9T+jEioPCc70tAjhN5KhRUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MDNlYmFiYi05OTlmLTRmM2UtODRjMS1iZjI3OWJmZTE3ODcvMC83RkVGNkJGNTNG QTMxMjJBMEYwOUNFRjRCNDA4RTEzNzkyQTE0NTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0ZFRjZCRjUzRkEzMTIyQTBGMDlDRUY0QjQwOEUxMzc5MkEx NDU0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzAzZWJhYmItOTk5Zi00ZjNlLTg0 YzEtYmYyNzliZmUxNzg3LzAvN0ZFRjZCRjUzRkEzMTIyQTBGMDlDRUY0QjQwOEUx Mzc5MkExNDU0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD01Aeo6DP/EEh9meiaNIfzy4Uitcfa58pdU 7iMst4IqEOq+RRmRo0M8jdIVgW2ZtlhuM3FKPB/8n2L34riYqCgWXpc2bEZtkq+n GFuXEk94WTm0ZpsdAgd9XVfyguEM7qhgZOe7nlCP4huPdUHU/rdsOFJDomSVy/cz picAE9AjG68opI2dj9JGh37mepON+vwYbiy2etnawKAmRGBJtQXRRIs2Zo5Yhgku DNdgbWzwmSRh/VN4pB4SrZ23V79Ibz8zlgMey7N9ICVfZZ7fKOlgwtZR11+G0nsC 6NDNJEUv30iwsl9L/DV/mv+clVmxRbKPYN/mrtZ+3367DzmCX1U= -----END CERTIFICATE-----Generated at Thu Jun 19 21:30:22 2025 by rpki-client