$ rpki-client -vvf repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft File: 7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft (raw, json) Hash identifier: zZ1Ne4twoaRq83izwmSOfbmwmUhRnVCMnpt59pYPfc4= Subject key identifier: EE:D1:22:D4:F1:76:98:FB:6C:A9:CB:73:BB:0E:F6:E4:96:87:FC:E3 Authority key identifier: 7F:EF:6B:F5:3F:A3:12:2A:0F:09:CE:F4:B4:08:E1:37:92:A1:45:45 Certificate issuer: /CN=7FEF6BF53FA3122A0F09CEF4B408E13792A14545 Certificate serial: 768372D0E233A61F45E660AD232573B9FD7DE127 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.cer Subject info access: rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft Manifest number: 01FA Signing time: Fri 08 Aug 2025 00:11:34 +0000 Manifest this update: Fri 08 Aug 2025 00:06:34 +0000 Manifest next update: Mon 11 Aug 2025 08:49:34 +0000 Files and hashes: 1: 3130332e3136372e3130342e302f32342d3234203d3e20313339343130.roa (hash: cilQSsMRfqwA9LOmx5CPo41uuLBHWQ7Qq5S49MHRn2E=) 2: 3130332e3136372e3130352e302f32342d3234203d3e203338333230.roa (hash: t5DmPirQU+jLx9aHjmb/pgwv+a8S0p8w/q4YuXRMJQI=) 3: 7FEF6BF53FA3122A0F09CEF4B408E13792A14545.crl (hash: 5FRUlA817NJoET84DUk0vr5waB4WQsrlWQYLjDQD1YM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.crl rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 11 Aug 2025 08:49:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:83:72:d0:e2:33:a6:1f:45:e6:60:ad:23:25:73:b9:fd:7d:e1:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7FEF6BF53FA3122A0F09CEF4B408E13792A14545 Validity Not Before: Aug 8 00:06:34 2025 GMT Not After : Aug 11 08:49:34 2025 GMT Subject: CN=EED122D4F17698FB6CA9CB73BB0EF6E49687FCE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:cc:aa:2b:a5:21:0d:70:f5:dc:a7:b4:b2:4d: de:52:cf:08:e4:a2:1a:99:8c:b6:1c:05:76:33:df: 72:48:4a:3b:bd:99:0a:41:82:83:6b:03:e6:2f:f3: 97:1e:ed:75:17:b6:99:5d:0f:62:57:6d:28:24:17: 90:b4:91:41:30:5a:f8:65:e6:75:ba:fb:62:06:67: 2a:dc:f1:75:01:bb:57:5f:a2:bc:ea:04:59:3e:e7: d4:14:ad:a5:fb:0e:26:3c:94:a6:db:f0:35:5a:25: 13:01:ce:0e:00:dc:b6:f7:39:fd:ed:56:16:00:6c: 86:d1:74:4f:2f:ff:6d:e3:c1:3e:8b:9d:a9:d8:00: 54:d1:ef:f1:e7:ea:79:85:9f:da:d0:52:b6:27:ff: 57:00:bc:7d:6a:0d:52:88:b2:e4:e6:ea:a0:d9:88: de:08:71:39:fe:bf:8d:6a:3e:a7:15:74:16:b5:1d: ae:e8:ff:60:b6:b4:9a:8b:fd:0f:4e:9d:76:62:65: a9:da:1d:e1:cc:0d:7d:0a:2a:82:7c:24:5b:32:0c: 71:03:ad:55:86:dc:be:5c:f7:22:62:28:c4:df:9c: b5:68:ba:2d:a3:4a:ec:2c:40:f6:cf:f3:54:c3:1b: 10:78:58:0d:75:1f:8f:67:b6:71:9f:60:f1:0b:90: dd:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:D1:22:D4:F1:76:98:FB:6C:A9:CB:73:BB:0E:F6:E4:96:87:FC:E3 X509v3 Authority Key Identifier: keyid:7F:EF:6B:F5:3F:A3:12:2A:0F:09:CE:F4:B4:08:E1:37:92:A1:45:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:8c:f5:fb:de:29:4c:6e:f9:aa:16:1e:11:ae:ff:c1:db:4b: 92:73:fe:3a:b7:32:72:f3:a8:79:c5:63:e4:63:4c:ba:79:39: 7d:76:1b:b4:d7:d9:2b:46:d0:0f:57:15:dd:c4:95:db:29:61: 49:c9:3a:00:44:1a:ee:ce:8a:d7:5d:78:cc:e1:d4:c4:e9:58: 01:ec:59:96:60:8e:e3:d2:b0:b5:ce:d7:56:4d:cb:3f:e5:10: 9a:d6:c6:a5:19:7c:4f:52:4e:c7:75:04:41:32:2f:81:fb:8a: 5c:91:2b:16:e1:09:d3:0e:bc:e0:bb:c1:a7:12:a5:b4:82:71: 35:41:fd:d1:60:7f:57:cd:13:d4:26:65:1e:5a:d7:a2:10:f8: 66:24:bc:b0:d9:fd:50:3e:68:61:ca:f8:b6:22:57:71:86:af: 16:1d:e1:bc:b8:f6:7b:7c:6e:35:b3:27:c1:12:57:99:87:c3: a3:47:5a:8c:70:4e:b9:f5:89:84:0c:43:6c:4b:d2:7c:3b:99: 3d:7e:b6:de:6b:50:92:8f:1e:4c:5a:d3:ff:df:4c:21:b3:63: d8:11:f8:48:49:76:b3:0b:0a:11:b4:1c:5b:19:f1:3a:4d:8c: 70:f4:36:d5:be:cb:10:f6:07:fa:40:08:4a:9b:49:aa:10:ab: d7:b1:72:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdoNy0OIzph9F5mCtIyVzuf194ScwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ZFRjZCRjUzRkEzMTIyQTBGMDlDRUY0QjQwOEUxMzc5 MkExNDU0NTAeFw0yNTA4MDgwMDA2MzRaFw0yNTA4MTEwODQ5MzRaMDMxMTAvBgNV BAMTKEVFRDEyMkQ0RjE3Njk4RkI2Q0E5Q0I3M0JCMEVGNkU0OTY4N0ZDRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKzKorpSENcPXcp7SyTd5Szwjk ohqZjLYcBXYz33JISju9mQpBgoNrA+Yv85ce7XUXtpldD2JXbSgkF5C0kUEwWvhl 5nW6+2IGZyrc8XUBu1dforzqBFk+59QUraX7DiY8lKbb8DVaJRMBzg4A3Lb3Of3t VhYAbIbRdE8v/23jwT6LnanYAFTR7/Hn6nmFn9rQUrYn/1cAvH1qDVKIsuTm6qDZ iN4IcTn+v41qPqcVdBa1Ha7o/2C2tJqL/Q9OnXZiZanaHeHMDX0KKoJ8JFsyDHED rVWG3L5c9yJiKMTfnLVoui2jSuwsQPbP81TDGxB4WA11H49ntnGfYPELkN37AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7tEi1PF2mPtsqctzuw725JaH/OMwHwYDVR0j BBgwFoAUf+9r9T+jEioPCc70tAjhN5KhRUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MDNlYmFiYi05OTlmLTRmM2UtODRjMS1iZjI3OWJmZTE3ODcvMC83RkVGNkJGNTNG QTMxMjJBMEYwOUNFRjRCNDA4RTEzNzkyQTE0NTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0ZFRjZCRjUzRkEzMTIyQTBGMDlDRUY0QjQwOEUxMzc5MkEx NDU0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzAzZWJhYmItOTk5Zi00ZjNlLTg0 YzEtYmYyNzliZmUxNzg3LzAvN0ZFRjZCRjUzRkEzMTIyQTBGMDlDRUY0QjQwOEUx Mzc5MkExNDU0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALqM9fveKUxu+aoWHhGu/8HbS5Jz/jq3MnLz qHnFY+RjTLp5OX12G7TX2StG0A9XFd3EldspYUnJOgBEGu7OitddeMzh1MTpWAHs WZZgjuPSsLXO11ZNyz/lEJrWxqUZfE9STsd1BEEyL4H7ilyRKxbhCdMOvOC7wacS pbSCcTVB/dFgf1fNE9QmZR5a16IQ+GYkvLDZ/VA+aGHK+LYiV3GGrxYd4by49nt8 bjWzJ8ESV5mHw6NHWoxwTrn1iYQMQ2xL0nw7mT1+tt5rUJKPHkxa0//fTCGzY9gR +EhJdrMLChG0HFsZ8TpNjHD0NtW+yxD2B/pACEqbSaoQq9excto= -----END CERTIFICATE-----Generated at Sun Aug 10 03:56:58 2025 by rpki-client