$ rpki-client -vvf repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft File: 7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft (raw, json) Hash identifier: Y6CWPOyEtrTkxoXczTpzifHB3++HuzG6PaUEqj5UnSU= Subject key identifier: CB:1F:F8:CE:0B:AA:E7:78:C4:08:4F:E4:C9:06:00:03:21:5B:6B:C2 Authority key identifier: 7C:D5:24:05:24:67:F2:2D:D8:E5:7E:02:A1:C9:9E:DE:5A:8C:F2:49 Certificate issuer: /CN=7CD524052467F22DD8E57E02A1C99EDE5A8CF249 Certificate serial: 21BFDB42B1AF462C21941494A2DB408B45FC1925 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.cer Subject info access: rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft Manifest number: 04CE Signing time: Mon 16 Jun 2025 18:20:37 +0000 Manifest this update: Mon 16 Jun 2025 18:15:37 +0000 Manifest next update: Thu 19 Jun 2025 20:48:37 +0000 Files and hashes: 1: 3130332e3135302e34342e302f32332d3234203d3e20313430333838.roa (hash: 9wWnuvCPEe0C8U6UVGeFeb9Dd9afvhSHPrMKavtgge8=) 2: 7CD524052467F22DD8E57E02A1C99EDE5A8CF249.crl (hash: OBvex6ngruq0NW03Mmg6/B8d2AoRlh8W5BoJKeTPBbY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.crl rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 20:48:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:bf:db:42:b1:af:46:2c:21:94:14:94:a2:db:40:8b:45:fc:19:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CD524052467F22DD8E57E02A1C99EDE5A8CF249 Validity Not Before: Jun 16 18:15:37 2025 GMT Not After : Jun 19 20:48:37 2025 GMT Subject: CN=CB1FF8CE0BAAE778C4084FE4C9060003215B6BC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:e5:72:79:26:ce:74:98:d4:18:85:60:3b:b2: 2a:47:d0:8f:e4:bb:bd:42:ae:01:9f:e5:60:e0:59: 9e:b9:e7:30:f9:b2:85:c1:bd:92:a9:3b:d1:fd:14: 18:76:f5:2a:2f:2a:ec:d3:b5:80:69:cd:9c:49:01: 45:61:51:dc:6b:5a:fa:7b:aa:44:88:5c:fa:cc:48: 99:17:3b:97:83:fa:75:f3:18:53:ad:d8:6c:82:9c: a5:b9:9e:bc:a3:d8:b5:09:ce:b1:bf:43:3c:2e:5c: 52:e7:a3:07:a3:6b:26:3a:ef:62:cc:0c:3f:19:a0: b4:99:8d:02:3b:7d:05:45:75:4d:dd:b5:24:60:f4: 51:fb:06:21:a5:78:6e:93:18:28:cf:3e:dd:9e:a4: 35:43:22:01:f2:86:89:77:e1:0b:5b:9a:7a:94:69: e0:a6:95:ef:1d:47:0b:bc:02:69:6c:ac:51:d5:f2: 7b:b3:0f:eb:5b:35:5c:7b:22:52:53:35:41:49:d9: 72:6b:3d:5d:f9:6e:07:21:33:9a:3a:47:7d:39:4d: 7a:4b:fb:ce:83:4f:82:f5:a4:d6:e5:e1:8d:b2:aa: c9:42:49:fe:5f:52:e6:50:c8:ad:3f:d8:04:e9:bc: f3:da:f4:0a:05:a0:db:54:c6:3a:32:68:73:2b:44: b4:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:1F:F8:CE:0B:AA:E7:78:C4:08:4F:E4:C9:06:00:03:21:5B:6B:C2 X509v3 Authority Key Identifier: keyid:7C:D5:24:05:24:67:F2:2D:D8:E5:7E:02:A1:C9:9E:DE:5A:8C:F2:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:98:e9:4b:57:29:ce:f6:65:e7:ea:a5:86:a2:4e:50:43:e3: 93:81:28:df:6c:01:46:9b:2c:19:7f:6a:e2:01:a9:a3:51:ae: 88:b8:74:ba:0d:78:36:e5:29:71:d8:b8:33:b8:c9:1a:5f:7c: f0:5a:9f:0f:4b:8d:c5:54:70:56:65:3a:69:05:ed:00:ee:f4: 11:37:41:83:14:80:dc:93:68:e0:ca:a1:9e:58:4b:0b:6f:d5: 44:b1:3f:9c:07:61:de:cc:67:93:9a:f1:7b:ba:32:4e:cf:c1: 85:dd:ad:1c:a6:da:d1:ef:dd:fd:8b:2b:0b:51:c2:da:e3:e8: 9c:b3:96:54:8a:0a:d2:ad:9a:dc:09:28:75:a4:d0:6d:ba:98: f1:24:8e:3e:3e:3d:c1:51:5e:69:5b:a0:ed:44:5f:95:be:71: 2c:95:64:69:68:48:d9:47:0e:c6:d4:40:b6:37:4a:4e:03:5b: 01:78:92:1d:f3:a3:f6:45:b5:7a:95:7e:49:a3:2f:00:49:bd: d6:5e:41:b2:54:ff:65:7e:2c:4f:5a:dd:9f:24:9d:a8:24:3f: 6c:98:97:c6:ab:8f:06:65:34:93:4a:96:8f:b6:5d:e8:30:de: 1c:10:ab:ef:d6:05:a4:32:75:0f:e0:e7:d1:99:49:dd:4a:da: 6a:99:c9:18 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIb/bQrGvRiwhlBSUottAi0X8GSUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NENTI0MDUyNDY3RjIyREQ4RTU3RTAyQTFDOTlFREU1 QThDRjI0OTAeFw0yNTA2MTYxODE1MzdaFw0yNTA2MTkyMDQ4MzdaMDMxMTAvBgNV BAMTKENCMUZGOENFMEJBQUU3NzhDNDA4NEZFNEM5MDYwMDAzMjE1QjZCQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv5XJ5Js50mNQYhWA7sipH0I/k u71CrgGf5WDgWZ655zD5soXBvZKpO9H9FBh29SovKuzTtYBpzZxJAUVhUdxrWvp7 qkSIXPrMSJkXO5eD+nXzGFOt2GyCnKW5nryj2LUJzrG/QzwuXFLnowejayY672LM DD8ZoLSZjQI7fQVFdU3dtSRg9FH7BiGleG6TGCjPPt2epDVDIgHyhol34QtbmnqU aeCmle8dRwu8AmlsrFHV8nuzD+tbNVx7IlJTNUFJ2XJrPV35bgchM5o6R305TXpL +86DT4L1pNbl4Y2yqslCSf5fUuZQyK0/2ATpvPPa9AoFoNtUxjoyaHMrRLSrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyx/4zguq53jECE/kyQYAAyFba8IwHwYDVR0j BBgwFoAUfNUkBSRn8i3Y5X4Cocme3lqM8kkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NGViNmVkZC1mMTNiLTQ5ZjAtYWQ4Ny02YjhlZTYxNGRjOGYvMC83Q0Q1MjQwNTI0 NjdGMjJERDhFNTdFMDJBMUM5OUVERTVBOENGMjQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0NENTI0MDUyNDY3RjIyREQ4RTU3RTAyQTFDOTlFREU1QThD RjI0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDRlYjZlZGQtZjEzYi00OWYwLWFk ODctNmI4ZWU2MTRkYzhmLzAvN0NENTI0MDUyNDY3RjIyREQ4RTU3RTAyQTFDOTlF REU1QThDRjI0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEiY6UtXKc72ZefqpYaiTlBD45OBKN9sAUab LBl/auIBqaNRroi4dLoNeDblKXHYuDO4yRpffPBanw9LjcVUcFZlOmkF7QDu9BE3 QYMUgNyTaODKoZ5YSwtv1USxP5wHYd7MZ5Oa8Xu6Mk7PwYXdrRym2tHv3f2LKwtR wtrj6JyzllSKCtKtmtwJKHWk0G26mPEkjj4+PcFRXmlboO1EX5W+cSyVZGloSNlH DsbUQLY3Sk4DWwF4kh3zo/ZFtXqVfkmjLwBJvdZeQbJU/2V+LE9a3Z8knagkP2yY l8arjwZlNJNKlo+2Xegw3hwQq+/WBaQydQ/g59GZSd1K2mqZyRg= -----END CERTIFICATE-----Generated at Tue Jun 17 09:45:38 2025 by rpki-client