$ rpki-client -vvf repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.mft File: 7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.mft (raw, json) Hash identifier: VJzCgIB0qAwtbzzZaJP0wX0IAIOxytVnuDLkogGZyjc= Subject key identifier: B5:72:21:26:3B:61:58:41:EB:8B:1D:57:32:A6:0E:0D:28:39:10:D8 Authority key identifier: 7C:7A:73:B6:7F:FC:66:64:BC:CD:30:B2:01:3C:54:FC:CE:0B:62:54 Certificate issuer: /CN=7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254 Certificate serial: 321BA05A4654AA1A7049D920666702BECB71B8A0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.cer Subject info access: rsync://repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.mft Manifest number: 0298 Signing time: Mon 16 Jun 2025 13:41:07 +0000 Manifest this update: Mon 16 Jun 2025 13:36:07 +0000 Manifest next update: Thu 19 Jun 2025 19:05:07 +0000 Files and hashes: 1: 3130332e3134382e3139322e302f32332d3233203d3e20313339393935.roa (hash: cIrCUSST0qUoomqGAVAogGxv3R4K/i/4Mu9V4Uwpfh4=) 2: 7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.crl (hash: gPWrrhq6aIsAfr0OOTzC4aSiWhGMBcNyRfs1czEgeOI=) 3: 323030313a6466323a653538303a3a2f34382d3438203d3e20313339393935.roa (hash: MsU4cnUd8hPfz721LDwHCV8jAAANvPwAWJVVyud6fK8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.crl rsync://repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 19:05:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:1b:a0:5a:46:54:aa:1a:70:49:d9:20:66:67:02:be:cb:71:b8:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254 Validity Not Before: Jun 16 13:36:07 2025 GMT Not After : Jun 19 19:05:07 2025 GMT Subject: CN=B57221263B615841EB8B1D5732A60E0D283910D8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:c3:21:c1:f6:c1:ba:1f:6d:a7:33:00:7c:7e: 44:ce:88:91:ab:e1:a3:ea:d5:a7:1a:c2:2e:76:89: 1c:19:af:fd:84:05:a1:c5:90:38:51:9c:70:8c:ce: e3:e6:14:ec:77:ec:79:b7:c6:00:b9:0b:84:a9:6e: f9:15:d2:63:6d:9b:6a:68:0d:86:b7:80:0e:5a:97: 0b:d6:aa:f4:2f:44:5b:1c:19:1e:d1:18:35:b9:d6: 70:33:cd:00:0f:8b:c0:01:f4:5a:b6:af:ff:a6:67: 26:45:fa:6e:51:3c:c5:3c:71:15:dc:39:f1:6b:64: f9:c8:43:ab:0b:ac:5a:b3:27:15:7a:6c:aa:04:4a: d7:d4:96:f7:35:c6:91:72:96:44:e8:85:17:14:b4: c4:9c:b8:31:35:95:c2:35:0c:39:69:1c:b3:95:ab: 97:25:5e:04:c9:ea:2a:4d:66:8e:0c:52:ee:ba:80: 5e:a1:b0:95:41:cc:08:25:73:b2:5c:bf:1a:10:ef: 8f:a0:06:c4:83:da:a0:18:02:d7:2b:63:45:a9:49: ba:70:f6:19:6c:c5:34:9b:4c:b1:98:d3:b7:38:c0: 31:50:84:28:76:a4:0b:dc:41:23:71:c9:d8:6f:71: 02:8d:9e:a2:56:ce:e4:a9:03:16:e5:c2:61:da:16: c9:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:72:21:26:3B:61:58:41:EB:8B:1D:57:32:A6:0E:0D:28:39:10:D8 X509v3 Authority Key Identifier: keyid:7C:7A:73:B6:7F:FC:66:64:BC:CD:30:B2:01:3C:54:FC:CE:0B:62:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/60b590e8-4f89-4785-ae79-2bfffa2c52c9/0/7C7A73B67FFC6664BCCD30B2013C54FCCE0B6254.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:e7:3e:c6:05:34:81:2f:29:5b:a2:37:09:06:87:bd:6d:23: 13:c0:f0:29:e3:cb:cf:84:a7:5b:51:13:2e:96:be:78:4d:04: b4:14:ca:c9:16:66:6e:c4:72:97:2d:12:d4:d5:a7:f0:69:9a: 19:53:64:ca:ab:f9:b7:f6:6d:16:5d:3a:56:68:78:a5:81:1a: c1:51:14:25:07:12:54:8b:fb:6b:96:3f:8a:28:1b:fb:2a:ff: 64:70:0f:9d:2c:07:d0:7c:1a:92:ca:b3:86:4e:83:47:49:29: e0:e1:fd:b4:8e:b1:9a:40:57:69:9b:42:d7:38:cb:ff:e9:fc: 23:87:ea:5a:41:19:5a:44:8a:38:7e:74:3d:7c:d4:91:09:b1: dc:b0:18:47:22:0d:04:51:b9:bb:9c:28:1f:d9:25:43:66:88: 13:48:d0:1e:86:d4:d4:7b:c6:b6:a3:4f:d0:f7:3b:84:a9:cd: aa:b9:c9:d3:ed:d3:d3:96:0e:52:33:b0:f3:46:7f:48:91:af: ef:b7:19:87:12:41:c2:ba:a0:fc:ba:47:af:73:0f:ed:a8:2d: 7a:0c:8d:c8:d4:30:75:da:2a:4c:18:30:c2:77:0d:bc:2c:6c: 86:f5:c0:3b:6c:22:15:ed:88:72:03:eb:a7:06:74:59:61:e2: ca:c6:d3:d0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMhugWkZUqhpwSdkgZmcCvstxuKAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M3QTczQjY3RkZDNjY2NEJDQ0QzMEIyMDEzQzU0RkND RTBCNjI1NDAeFw0yNTA2MTYxMzM2MDdaFw0yNTA2MTkxOTA1MDdaMDMxMTAvBgNV BAMTKEI1NzIyMTI2M0I2MTU4NDFFQjhCMUQ1NzMyQTYwRTBEMjgzOTEwRDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtwyHB9sG6H22nMwB8fkTOiJGr 4aPq1acawi52iRwZr/2EBaHFkDhRnHCMzuPmFOx37Hm3xgC5C4SpbvkV0mNtm2po DYa3gA5alwvWqvQvRFscGR7RGDW51nAzzQAPi8AB9Fq2r/+mZyZF+m5RPMU8cRXc OfFrZPnIQ6sLrFqzJxV6bKoEStfUlvc1xpFylkTohRcUtMScuDE1lcI1DDlpHLOV q5clXgTJ6ipNZo4MUu66gF6hsJVBzAglc7JcvxoQ74+gBsSD2qAYAtcrY0WpSbpw 9hlsxTSbTLGY07c4wDFQhCh2pAvcQSNxydhvcQKNnqJWzuSpAxblwmHaFsnrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtXIhJjthWEHrix1XMqYODSg5ENgwHwYDVR0j BBgwFoAUfHpztn/8ZmS8zTCyATxU/M4LYlQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 MGI1OTBlOC00Zjg5LTQ3ODUtYWU3OS0yYmZmZmEyYzUyYzkvMC83QzdBNzNCNjdG RkM2NjY0QkNDRDMwQjIwMTNDNTRGQ0NFMEI2MjU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0M3QTczQjY3RkZDNjY2NEJDQ0QzMEIyMDEzQzU0RkNDRTBC NjI1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjBiNTkwZTgtNGY4OS00Nzg1LWFl NzktMmJmZmZhMmM1MmM5LzAvN0M3QTczQjY3RkZDNjY2NEJDQ0QzMEIyMDEzQzU0 RkNDRTBCNjI1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAITnPsYFNIEvKVuiNwkGh71tIxPA8Cnjy8+E p1tREy6WvnhNBLQUyskWZm7EcpctEtTVp/BpmhlTZMqr+bf2bRZdOlZoeKWBGsFR FCUHElSL+2uWP4ooG/sq/2RwD50sB9B8GpLKs4ZOg0dJKeDh/bSOsZpAV2mbQtc4 y//p/COH6lpBGVpEijh+dD181JEJsdywGEciDQRRubucKB/ZJUNmiBNI0B6G1NR7 xrajT9D3O4Spzaq5ydPt09OWDlIzsPNGf0iRr++3GYcSQcK6oPy6R69zD+2oLXoM jcjUMHXaKkwYMMJ3DbwsbIb1wDtsIhXtiHID66cGdFlh4srG09A= -----END CERTIFICATE-----Generated at Wed Jun 18 12:34:56 2025 by rpki-client