$ rpki-client -vvf repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft File: C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft (raw, json) Hash identifier: I8nZtawG/ity37k84d49WtMErIdzNUpzcV14MyNkXg8= Subject key identifier: 09:76:C6:F6:05:44:28:94:0F:36:BD:D1:CD:ED:3C:C1:37:40:E7:3C Authority key identifier: C7:F5:AA:72:DB:87:0E:16:1B:62:AC:A9:25:0A:D9:8A:A1:10:A0:14 Certificate issuer: /CN=C7F5AA72DB870E161B62ACA9250AD98AA110A014 Certificate serial: 684AEE2921A3BFA42DC699F093CEFA070A9EE413 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F5AA72DB870E161B62ACA9250AD98AA110A014.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft Manifest number: 0279 Signing time: Sat 14 Jun 2025 17:01:55 +0000 Manifest this update: Sat 14 Jun 2025 16:56:55 +0000 Manifest next update: Tue 17 Jun 2025 17:43:55 +0000 Files and hashes: 1: C7F5AA72DB870E161B62ACA9250AD98AA110A014.crl (hash: h4HLvNetcDSX5ep6Z/jaEfHUo7ofOQDdy2IkBrv0M3Y=) 2: 3130332e3230372e3233382e302f32342d3234203d3e20313338303936.roa (hash: kqyShD8grMzsW8WAD+q93A9hYlzfgDARjSsqGTZiG54=) 3: 3130332e3230372e3233362e302f32332d3234203d3e20313334363434.roa (hash: FuTP+olekR94POOQRMWB2DM9MZrHgp1r/imUNhheQk0=) 4: 3130332e3230372e3233392e302f32342d3234203d3e20313338303936.roa (hash: bCN0BjFIkGXQoNiGlR2Rw4pyaw/6SRLkI5yDk6Jonrg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.crl rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F5AA72DB870E161B62ACA9250AD98AA110A014.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 17:43:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:4a:ee:29:21:a3:bf:a4:2d:c6:99:f0:93:ce:fa:07:0a:9e:e4:13 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7F5AA72DB870E161B62ACA9250AD98AA110A014 Validity Not Before: Jun 14 16:56:55 2025 GMT Not After : Jun 17 17:43:55 2025 GMT Subject: CN=0976C6F6054428940F36BDD1CDED3CC13740E73C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:89:01:0b:fd:fb:68:0a:94:ff:83:a6:ea:68: 65:5d:16:04:b4:b1:56:35:4d:6b:32:f5:b7:0e:22: f8:36:d1:8d:c9:bb:70:ab:bb:45:c5:41:18:1b:c4: 8c:3c:fc:6d:c9:63:f3:d6:63:b6:78:e0:9c:68:63: 80:d1:3d:30:2a:f9:fd:36:39:35:9f:76:38:81:96: ce:57:32:82:2c:09:4a:90:d8:1e:98:d0:cc:f1:38: 87:d0:e6:4e:e3:3d:0b:7e:25:fd:07:fd:93:c8:30: 2e:f0:5d:6b:c5:87:de:a2:84:e1:2d:07:2b:a8:a6: 42:84:7e:1a:ec:7e:99:55:62:cf:0c:09:d0:17:f6: 2f:fb:60:48:0c:0a:d3:57:6e:4b:61:d8:9f:14:b9: 4b:37:e9:ad:c5:ce:3e:cc:37:8f:b7:c7:ab:70:30: 9e:72:80:04:10:6c:f8:bf:15:8e:92:48:ba:ba:22: 81:f0:2c:07:15:35:d1:88:4b:39:f6:83:6d:29:e0: dd:70:3e:70:91:b6:b4:e9:37:62:8f:55:52:74:a5: 69:ff:44:e7:3a:60:69:37:a4:0b:3c:8f:88:0e:2b: e4:e5:6b:8b:1e:40:e2:67:f4:b1:a7:6d:17:0a:9c: 58:9c:35:59:5f:5c:8e:ca:03:5c:9a:7c:1d:be:6b: 4a:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:76:C6:F6:05:44:28:94:0F:36:BD:D1:CD:ED:3C:C1:37:40:E7:3C X509v3 Authority Key Identifier: keyid:C7:F5:AA:72:DB:87:0E:16:1B:62:AC:A9:25:0A:D9:8A:A1:10:A0:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F5AA72DB870E161B62ACA9250AD98AA110A014.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:34:f0:36:7e:66:cf:83:e3:86:d3:03:b8:34:46:93:8d:1e: 45:90:f5:67:3d:97:18:14:a3:db:63:5d:15:9c:fd:84:a4:1d: a2:d9:ea:e3:4a:d5:33:73:66:0f:71:ef:06:ed:2e:ab:b7:f0: a5:d6:d9:48:33:e2:0b:19:22:ce:fb:16:01:44:1f:37:8a:46: 94:df:ed:a2:d8:0c:69:a5:1f:8d:ab:9c:bd:0b:2f:bd:c6:f0: 04:6c:bd:ce:7d:ad:3e:6a:5a:5e:0d:3c:f2:9d:70:ce:f5:92: 20:58:dc:cb:a2:c9:a3:49:dc:94:7c:1c:5e:92:0a:b3:24:13: 9e:fd:a6:4e:4e:ca:18:34:ce:f0:6f:4f:2b:02:a5:72:29:c2: 8f:2a:92:3b:de:01:0b:df:bc:c7:92:10:2d:29:6b:24:8d:eb: 7a:4f:1c:dd:1b:76:15:82:f7:06:46:79:5f:ad:a2:aa:9c:bb: ac:23:18:5d:35:89:9c:c6:46:91:bd:d4:5f:e0:15:aa:39:f8: b5:24:fb:7b:c6:1a:02:73:13:34:01:ae:c9:05:8c:33:84:92: 25:0f:20:2f:15:e7:da:a7:37:f1:3f:a2:9d:0e:78:41:f1:45: 80:96:05:1c:3a:6c:70:f6:c4:60:8b:c1:ee:aa:1d:73:c6:a9: 12:09:a6:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaEruKSGjv6Qtxpnwk876Bwqe5BMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdGNUFBNzJEQjg3MEUxNjFCNjJBQ0E5MjUwQUQ5OEFB MTEwQTAxNDAeFw0yNTA2MTQxNjU2NTVaFw0yNTA2MTcxNzQzNTVaMDMxMTAvBgNV BAMTKDA5NzZDNkY2MDU0NDI4OTQwRjM2QkREMUNERUQzQ0MxMzc0MEU3M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLiQEL/ftoCpT/g6bqaGVdFgS0 sVY1TWsy9bcOIvg20Y3Ju3Cru0XFQRgbxIw8/G3JY/PWY7Z44JxoY4DRPTAq+f02 OTWfdjiBls5XMoIsCUqQ2B6Y0MzxOIfQ5k7jPQt+Jf0H/ZPIMC7wXWvFh96ihOEt ByuopkKEfhrsfplVYs8MCdAX9i/7YEgMCtNXbkth2J8UuUs36a3Fzj7MN4+3x6tw MJ5ygAQQbPi/FY6SSLq6IoHwLAcVNdGISzn2g20p4N1wPnCRtrTpN2KPVVJ0pWn/ ROc6YGk3pAs8j4gOK+Tla4seQOJn9LGnbRcKnFicNVlfXI7KA1yafB2+a0rxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCXbG9gVEKJQPNr3Rze08wTdA5zwwHwYDVR0j BBgwFoAUx/WqctuHDhYbYqypJQrZiqEQoBQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YjBlN2Y4ZS1jMjlmLTRlNmItYWQwYS05OTU3ZmJkNTY5NTMvMC9DN0Y1QUE3MkRC ODcwRTE2MUI2MkFDQTkyNTBBRDk4QUExMTBBMDE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzdGNUFBNzJEQjg3MEUxNjFCNjJBQ0E5MjUwQUQ5OEFBMTEw QTAxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGIwZTdmOGUtYzI5Zi00ZTZiLWFk MGEtOTk1N2ZiZDU2OTUzLzAvQzdGNUFBNzJEQjg3MEUxNjFCNjJBQ0E5MjUwQUQ5 OEFBMTEwQTAxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGs08DZ+Zs+D44bTA7g0RpONHkWQ9Wc9lxgU o9tjXRWc/YSkHaLZ6uNK1TNzZg9x7wbtLqu38KXW2Ugz4gsZIs77FgFEHzeKRpTf 7aLYDGmlH42rnL0LL73G8ARsvc59rT5qWl4NPPKdcM71kiBY3MuiyaNJ3JR8HF6S CrMkE579pk5Oyhg0zvBvTysCpXIpwo8qkjveAQvfvMeSEC0paySN63pPHN0bdhWC 9wZGeV+toqqcu6wjGF01iZzGRpG91F/gFao5+LUk+3vGGgJzEzQBrskFjDOEkiUP IC8V59qnN/E/op0OeEHxRYCWBRw6bHD2xGCLwe6qHXPGqRIJphI= -----END CERTIFICATE-----Generated at Mon Jun 16 00:04:58 2025 by rpki-client