$ rpki-client -vvf repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.mft File: 604C441ACDF554F380D7FED8F68B2EC7FB780413.mft (raw, json) Hash identifier: muM49T7aKJKt1om3nqkoDZud2ftTSPM0UgjT8OA44+w= Subject key identifier: B8:B3:77:88:45:60:AE:00:8A:9C:27:0F:F1:84:67:5B:C5:46:80:CB Authority key identifier: 60:4C:44:1A:CD:F5:54:F3:80:D7:FE:D8:F6:8B:2E:C7:FB:78:04:13 Certificate issuer: /CN=604C441ACDF554F380D7FED8F68B2EC7FB780413 Certificate serial: 7A27E755AE086D08E4560415C62589E2823DF451 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/604C441ACDF554F380D7FED8F68B2EC7FB780413.cer Subject info access: rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.mft Manifest number: 01A7 Signing time: Sat 14 Jun 2025 06:21:02 +0000 Manifest this update: Sat 14 Jun 2025 06:16:02 +0000 Manifest next update: Tue 17 Jun 2025 11:42:02 +0000 Files and hashes: 1: 604C441ACDF554F380D7FED8F68B2EC7FB780413.crl (hash: 8ZCwpQbb95hxKjQPa7uL6Wa9O+Tk413SnRCdZZAxaJk=) 2: 3130332e3139312e3139362e302f32342d3234203d3e20313439393334.roa (hash: M890dag6EE1qtsFlPkd3PB/fu3TZaGNSDr48ih7+xpg=) 3: 3130332e3139312e3139372e302f32342d3234203d3e20313439393334.roa (hash: 9VCyBS9IIeec/M2Dmo8IoJQFogFZ4Fro1YlaePTTG58=) 4: 3130332e3139312e3139362e302f32332d3234203d3e20313439393334.roa (hash: 0P8RiV2EV8KtV2wVPDkhbbfmwCyYhPd1bfzDVq451ls=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.crl rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/604C441ACDF554F380D7FED8F68B2EC7FB780413.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 11:42:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:27:e7:55:ae:08:6d:08:e4:56:04:15:c6:25:89:e2:82:3d:f4:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=604C441ACDF554F380D7FED8F68B2EC7FB780413 Validity Not Before: Jun 14 06:16:02 2025 GMT Not After : Jun 17 11:42:02 2025 GMT Subject: CN=B8B377884560AE008A9C270FF184675BC54680CB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:54:e9:ea:68:1f:77:47:61:60:04:56:a4:29: c5:52:ec:3d:b4:02:9c:ac:fb:6b:cb:f5:4b:26:8a: 30:76:57:87:80:40:73:8c:62:c5:ac:18:2e:bc:3a: 19:04:41:08:fe:9a:6d:fe:2d:4d:c8:1e:46:c8:c7: 45:fc:d8:c7:30:c5:53:2a:76:2c:23:15:c2:84:fe: 73:82:42:58:84:6f:01:33:8f:3b:9e:35:7e:ce:1a: 5c:63:d7:31:7e:3f:c3:85:df:8e:37:f4:e9:64:a5: 61:65:91:33:71:e4:fa:a0:4d:96:99:73:c7:16:90: 96:dd:c4:01:67:9a:63:ec:c5:c4:a2:e5:24:1d:8b: 1f:d3:fc:9c:aa:96:93:f6:73:a6:9c:84:91:55:71: 1f:54:9f:64:b0:19:0e:9b:dc:74:dc:14:20:d3:b4: a9:4b:ea:9e:24:56:8f:17:74:57:8c:bb:02:c5:05: 4b:f9:9a:b0:b0:76:ee:7b:fb:f1:9a:67:3d:bc:d9: 5f:c9:e0:6c:cb:2f:97:5d:9a:fc:5d:51:49:a9:10: b7:2f:9f:46:87:d4:03:27:96:93:06:a3:5d:53:47: 4a:2b:81:65:fd:6b:7b:22:83:3e:c1:9a:e6:bb:82: 1e:3a:7d:8d:70:cc:f4:0c:3d:d7:ff:83:1c:be:b9: 59:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:B3:77:88:45:60:AE:00:8A:9C:27:0F:F1:84:67:5B:C5:46:80:CB X509v3 Authority Key Identifier: keyid:60:4C:44:1A:CD:F5:54:F3:80:D7:FE:D8:F6:8B:2E:C7:FB:78:04:13 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/604C441ACDF554F380D7FED8F68B2EC7FB780413.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/75d6efff-85b2-4af4-89ab-6d98c9527da4/0/604C441ACDF554F380D7FED8F68B2EC7FB780413.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:01:83:e1:79:e7:29:4a:42:5c:2f:7d:9f:70:82:18:b7:2f: 33:91:c1:9a:2b:b4:1f:1b:1c:f0:86:6f:e0:b4:7e:34:a4:74: 30:58:03:ba:01:c6:68:25:e1:f2:d3:9b:fd:19:c1:ee:90:ef: a0:07:2c:b6:3c:e6:4c:c9:ee:ca:40:49:57:06:6d:3c:d4:45: 10:df:b9:8b:70:60:82:6d:79:56:e0:6e:e5:55:e9:40:85:4e: 18:54:4b:80:a1:14:b0:ba:5d:01:1d:79:d6:06:92:17:88:79: 22:db:1a:74:26:53:81:1a:0f:a3:37:19:24:d5:73:91:56:2d: e6:d8:81:de:c4:62:1b:d0:fa:dd:f0:87:01:b0:c5:26:af:ab: 3f:68:10:d8:c7:f7:de:88:3b:07:16:f6:87:58:48:e6:5a:16: 29:e6:99:f7:98:32:90:1e:08:f9:56:89:88:0e:c1:7f:c3:34: 3c:44:2c:10:1f:a3:3a:3e:2f:03:40:bc:ca:77:bc:89:fe:01: 5d:58:7c:59:d2:fe:b6:49:cf:9f:9c:ad:7c:fc:41:fd:d1:76: b8:88:e0:05:00:99:15:d0:2b:1d:29:df:05:3f:7d:1f:18:01: 1f:c9:44:46:07:0a:30:34:d2:ca:f4:f7:18:71:77:01:25:2c: d6:fc:69:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeifnVa4IbQjkVgQVxiWJ4oI99FEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjA0QzQ0MUFDREY1NTRGMzgwRDdGRUQ4RjY4QjJFQzdG Qjc4MDQxMzAeFw0yNTA2MTQwNjE2MDJaFw0yNTA2MTcxMTQyMDJaMDMxMTAvBgNV BAMTKEI4QjM3Nzg4NDU2MEFFMDA4QTlDMjcwRkYxODQ2NzVCQzU0NjgwQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9VOnqaB93R2FgBFakKcVS7D20 Apys+2vL9UsmijB2V4eAQHOMYsWsGC68OhkEQQj+mm3+LU3IHkbIx0X82McwxVMq diwjFcKE/nOCQliEbwEzjzueNX7OGlxj1zF+P8OF34439OlkpWFlkTNx5PqgTZaZ c8cWkJbdxAFnmmPsxcSi5SQdix/T/JyqlpP2c6achJFVcR9Un2SwGQ6b3HTcFCDT tKlL6p4kVo8XdFeMuwLFBUv5mrCwdu57+/GaZz282V/J4GzLL5ddmvxdUUmpELcv n0aH1AMnlpMGo11TR0orgWX9a3sigz7Bmua7gh46fY1wzPQMPdf/gxy+uVm3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuLN3iEVgrgCKnCcP8YRnW8VGgMswHwYDVR0j BBgwFoAUYExEGs31VPOA1/7Y9osux/t4BBMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NWQ2ZWZmZi04NWIyLTRhZjQtODlhYi02ZDk4Yzk1MjdkYTQvMC82MDRDNDQxQUNE RjU1NEYzODBEN0ZFRDhGNjhCMkVDN0ZCNzgwNDEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNjA0QzQ0MUFDREY1NTRGMzgwRDdGRUQ4RjY4QjJFQzdGQjc4 MDQxMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzVkNmVmZmYtODViMi00YWY0LTg5 YWItNmQ5OGM5NTI3ZGE0LzAvNjA0QzQ0MUFDREY1NTRGMzgwRDdGRUQ4RjY4QjJF QzdGQjc4MDQxMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF4Bg+F55ylKQlwvfZ9wghi3LzORwZortB8b HPCGb+C0fjSkdDBYA7oBxmgl4fLTm/0Zwe6Q76AHLLY85kzJ7spASVcGbTzURRDf uYtwYIJteVbgbuVV6UCFThhUS4ChFLC6XQEdedYGkheIeSLbGnQmU4EaD6M3GSTV c5FWLebYgd7EYhvQ+t3whwGwxSavqz9oENjH996IOwcW9odYSOZaFinmmfeYMpAe CPlWiYgOwX/DNDxELBAfozo+LwNAvMp3vIn+AV1YfFnS/rZJz5+crXz8Qf3RdriI 4AUAmRXQKx0p3wU/fR8YAR/JREYHCjA00sr09xhxdwElLNb8aSY= -----END CERTIFICATE-----Generated at Mon Jun 16 12:14:51 2025 by rpki-client