$ rpki-client -vvf repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft File: 7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft (raw, json) Hash identifier: U2+sQcSDQyqpp1hch0Ei9os4LNpseYv8Vx/3Z3iV+4U= Subject key identifier: 82:0A:11:BD:F1:88:29:51:B7:E7:EB:F6:22:6E:D4:83:CF:2C:DF:3D Authority key identifier: 7C:4D:FD:78:91:4D:C1:F6:61:30:F2:56:AE:69:D9:FA:84:39:48:DC Certificate issuer: /CN=7C4DFD78914DC1F66130F256AE69D9FA843948DC Certificate serial: 119C0D70C4DFBA683DCDF8827B072B664F4F28AD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4DFD78914DC1F66130F256AE69D9FA843948DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft Manifest number: 68 Signing time: Sun 15 Jun 2025 17:21:12 +0000 Manifest this update: Sun 15 Jun 2025 17:16:12 +0000 Manifest next update: Thu 19 Jun 2025 00:32:12 +0000 Files and hashes: 1: 7C4DFD78914DC1F66130F256AE69D9FA843948DC.crl (hash: rzujvSMwGHf7hyf2LTQhuP4/vS+H6WVRbpFw54p3jC8=) 2: 3136302e3138372e3133372e302f32342d3234203d3e20313533313233.roa (hash: lAtUfGS13GDkvr/Pm9PSGFkJR4Rstob6+L+fcyUN72Q=) 3: 3136302e3138372e3133362e302f32342d3234203d3e20313533313233.roa (hash: HJdK4DRAmRrZWLjILXhoJkILfMyC0BwC4uGRxH8TEAM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.crl rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4DFD78914DC1F66130F256AE69D9FA843948DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 00:32:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:9c:0d:70:c4:df:ba:68:3d:cd:f8:82:7b:07:2b:66:4f:4f:28:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C4DFD78914DC1F66130F256AE69D9FA843948DC Validity Not Before: Jun 15 17:16:12 2025 GMT Not After : Jun 19 00:32:12 2025 GMT Subject: CN=820A11BDF1882951B7E7EBF6226ED483CF2CDF3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:97:48:61:81:88:87:98:bf:30:47:33:db:5f: 01:8f:41:25:5e:91:9f:16:09:27:89:06:b5:1c:01: 08:81:45:0e:9b:25:43:f6:90:a0:bc:0d:5b:bf:2f: 2c:9a:0f:a5:40:0b:40:bd:ec:3c:b1:fe:aa:15:19: 9d:0b:91:93:14:9f:2d:59:d0:73:17:6b:15:fe:15: 89:b5:06:a6:79:2c:af:41:32:a5:77:be:09:c6:f4: ff:81:86:80:31:f8:60:57:9c:4e:e7:82:0c:a0:e6: c9:d9:c8:1c:10:3c:26:3b:50:7b:3b:cc:7b:68:4b: 3b:70:59:b4:9d:c2:89:e8:29:68:9c:c8:2d:13:52: b4:c4:62:80:44:22:f5:1e:02:37:87:b8:c3:b4:05: 9e:dd:8d:a6:f8:af:37:45:9a:83:04:69:1f:dd:ca: 9b:c9:f0:46:37:ac:88:bf:50:01:1f:6e:71:41:54: 98:76:e0:23:50:be:93:f7:42:41:f7:b9:ad:be:c6: f1:ad:15:b2:00:72:45:13:7b:25:58:7d:38:2f:e3: 93:c4:5b:5c:2a:4f:55:59:a6:7e:ba:d6:08:74:28: a1:eb:b5:52:b0:d9:84:02:95:2d:c6:6f:8b:f2:7e: f7:46:b8:a5:9f:d2:75:1a:cb:23:eb:c5:29:1f:c1: 2e:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:0A:11:BD:F1:88:29:51:B7:E7:EB:F6:22:6E:D4:83:CF:2C:DF:3D X509v3 Authority Key Identifier: keyid:7C:4D:FD:78:91:4D:C1:F6:61:30:F2:56:AE:69:D9:FA:84:39:48:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4DFD78914DC1F66130F256AE69D9FA843948DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bb:99:da:09:93:89:af:61:b6:22:90:62:04:61:02:b6:ed:5c: 5d:43:a5:31:1b:b1:0f:8e:f2:b7:f5:39:e9:eb:fc:2c:41:a4: ea:d8:cc:60:8d:0e:ab:bf:6b:54:0f:f7:71:af:8f:fd:86:8f: 52:57:0e:dd:9d:f3:62:99:e0:44:98:27:ad:ef:57:5c:e0:6f: 31:b8:59:e9:01:bf:f1:83:a5:a1:74:77:ca:e5:81:9a:e0:e6: 9b:f7:42:a9:c9:45:f2:ff:75:ad:64:56:67:64:09:8e:f2:3a: a0:84:78:5b:8f:88:3c:a6:ce:a5:3c:c2:f6:86:7b:a8:86:a7: 03:1b:64:87:f1:a0:76:b4:9c:dd:bc:bc:07:cb:54:44:fc:88: f1:e3:2f:fc:49:b8:9e:ac:52:3a:6c:57:76:1e:5d:7d:9a:5b: ee:c1:8c:1c:f1:9f:28:90:5b:7d:e7:0b:f3:43:16:36:2c:34: 62:37:a9:f0:95:f1:94:fd:d5:fa:de:b6:a4:51:15:97:d1:ef: 3b:f3:cb:55:b7:1a:1e:06:29:03:b9:29:98:05:f3:13:25:ee: d5:55:26:8b:8a:12:eb:13:2d:ef:22:61:3e:58:6a:6f:43:51: c5:75:13:2e:b8:82:c0:0a:b6:86:b4:74:e9:43:23:c7:4d:48: 3a:1c:e3:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEZwNcMTfumg9zfiCewcrZk9PKK0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M0REZENzg5MTREQzFGNjYxMzBGMjU2QUU2OUQ5RkE4 NDM5NDhEQzAeFw0yNTA2MTUxNzE2MTJaFw0yNTA2MTkwMDMyMTJaMDMxMTAvBgNV BAMTKDgyMEExMUJERjE4ODI5NTFCN0U3RUJGNjIyNkVENDgzQ0YyQ0RGM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOl0hhgYiHmL8wRzPbXwGPQSVe kZ8WCSeJBrUcAQiBRQ6bJUP2kKC8DVu/LyyaD6VAC0C97Dyx/qoVGZ0LkZMUny1Z 0HMXaxX+FYm1BqZ5LK9BMqV3vgnG9P+BhoAx+GBXnE7nggyg5snZyBwQPCY7UHs7 zHtoSztwWbSdwonoKWicyC0TUrTEYoBEIvUeAjeHuMO0BZ7djab4rzdFmoMEaR/d ypvJ8EY3rIi/UAEfbnFBVJh24CNQvpP3QkH3ua2+xvGtFbIAckUTeyVYfTgv45PE W1wqT1VZpn661gh0KKHrtVKw2YQClS3Gb4vyfvdGuKWf0nUayyPrxSkfwS5DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUggoRvfGIKVG35+v2Im7Ug88s3z0wHwYDVR0j BBgwFoAUfE39eJFNwfZhMPJWrmnZ+oQ5SNwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTkyMzM5Ny04Y2Y4LTRjZWYtODg1Ni0wZDI2OGQ3M2VkYjEvMC83QzRERkQ3ODkx NERDMUY2NjEzMEYyNTZBRTY5RDlGQTg0Mzk0OERDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0M0REZENzg5MTREQzFGNjYxMzBGMjU2QUU2OUQ5RkE4NDM5 NDhEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2E5MjMzOTctOGNmOC00Y2VmLTg4 NTYtMGQyNjhkNzNlZGIxLzAvN0M0REZENzg5MTREQzFGNjYxMzBGMjU2QUU2OUQ5 RkE4NDM5NDhEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALuZ2gmTia9htiKQYgRhArbtXF1DpTEbsQ+O 8rf1Oenr/CxBpOrYzGCNDqu/a1QP93Gvj/2Gj1JXDt2d82KZ4ESYJ63vV1zgbzG4 WekBv/GDpaF0d8rlgZrg5pv3QqnJRfL/da1kVmdkCY7yOqCEeFuPiDymzqU8wvaG e6iGpwMbZIfxoHa0nN28vAfLVET8iPHjL/xJuJ6sUjpsV3YeXX2aW+7BjBzxnyiQ W33nC/NDFjYsNGI3qfCV8ZT91fretqRRFZfR7zvzy1W3Gh4GKQO5KZgF8xMl7tVV JouKEusTLe8iYT5Yam9DUcV1Ey64gsAKtoa0dOlDI8dNSDoc4/U= -----END CERTIFICATE-----Generated at Tue Jun 17 22:27:24 2025 by rpki-client