$ rpki-client -vvf repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft File: 4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft (raw, json) Hash identifier: HMNct5RKOzdlGVKCn15OIkuO4YwuVClacZXGkC9TNY8= Subject key identifier: 6A:BD:DE:F3:00:C1:E9:E5:BF:17:1E:91:B8:12:4D:A3:94:29:44:9B Authority key identifier: 4E:CF:7D:FB:09:FB:3B:5C:21:DD:E6:61:15:0B:95:76:8B:6B:D3:19 Certificate issuer: /CN=4ECF7DFB09FB3B5C21DDE661150B95768B6BD319 Certificate serial: 7226383039E2290166EC09E52010873B3C538BDC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft Manifest number: 01EC Signing time: Sat 14 Jun 2025 09:31:19 +0000 Manifest this update: Sat 14 Jun 2025 09:26:19 +0000 Manifest next update: Tue 17 Jun 2025 10:50:19 +0000 Files and hashes: 1: 3130332e3136332e3233302e302f32332d3233203d3e20313431393037.roa (hash: TWsMpo4cWVJOgLuAED46zFpQBaqLsvvEiv7xGtW44bE=) 2: 3130332e3136332e3233302e302f32342d3234203d3e20313431393037.roa (hash: BplHdHRvA1GeP43VsiSGj8a+Gmuq6dP6VgR2vhuZ0uU=) 3: 3130332e3136332e3233312e302f32342d3234203d3e20313431393037.roa (hash: yg4jobWhxttigVY/iZoK6bsKdtykwi2az+8aCa0nyW4=) 4: 4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl (hash: uwjzJ8iDwa30TkQhjJXgyjpcGCb4MdzEeDpLwuRdN4M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 10:50:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:26:38:30:39:e2:29:01:66:ec:09:e5:20:10:87:3b:3c:53:8b:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ECF7DFB09FB3B5C21DDE661150B95768B6BD319 Validity Not Before: Jun 14 09:26:19 2025 GMT Not After : Jun 17 10:50:19 2025 GMT Subject: CN=6ABDDEF300C1E9E5BF171E91B8124DA39429449B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:38:19:ca:c6:b3:e9:88:05:77:f3:9c:40:92: af:98:1c:9b:00:e1:dc:6d:b5:da:95:21:ff:ab:d1: 7c:40:4b:97:31:97:b8:d6:16:05:55:21:49:33:8a: 15:a4:74:4d:1f:c7:56:fc:6f:ab:4d:57:50:fb:ff: c8:97:bd:75:9f:1a:3d:73:d3:80:91:85:83:b3:e4: c1:fa:1f:ce:c4:0a:af:dd:80:23:e4:aa:00:a4:0d: 1c:2a:b3:75:ac:04:99:de:0e:3f:12:13:f5:ed:f6: b4:c4:dd:97:35:9e:9e:6e:fe:d5:02:0c:14:75:7d: 69:2a:82:7f:a4:98:3c:b1:81:81:77:b4:5a:41:e2: f2:92:3e:82:9d:43:07:84:d7:cc:e4:d0:ba:40:0f: 49:97:cc:b3:cb:16:db:53:51:33:0f:a3:cc:c8:51: 43:83:ee:3e:96:78:1c:2c:dc:28:a9:50:b4:79:47: b9:6f:4d:bb:24:fd:ac:77:bf:39:d8:11:06:74:30: 9e:e9:87:15:21:0a:82:4f:29:26:0e:d7:d0:a5:d9: 53:d3:31:3b:a3:17:e6:1b:ad:71:75:b8:33:3b:ae: 76:21:31:fe:70:c9:7c:dd:29:1e:1e:8b:c8:67:73: dd:b5:12:6c:da:72:81:53:5f:de:f2:dd:30:16:7f: be:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:BD:DE:F3:00:C1:E9:E5:BF:17:1E:91:B8:12:4D:A3:94:29:44:9B X509v3 Authority Key Identifier: keyid:4E:CF:7D:FB:09:FB:3B:5C:21:DD:E6:61:15:0B:95:76:8B:6B:D3:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:4c:28:40:f2:93:da:19:84:7d:55:d3:32:35:9c:7e:08:43: ec:77:ef:f5:aa:5a:b4:2f:ab:68:57:a4:f0:02:fe:ae:8c:74: fb:f6:94:9e:63:6f:bc:93:66:27:ef:d2:a4:43:7e:74:8f:f1: 3f:98:24:64:f6:90:51:b9:f7:a8:e2:26:2f:cb:f1:fe:60:8f: ff:fe:aa:ea:d6:2a:92:9c:b1:13:eb:ec:02:e0:ec:d0:d0:35: 59:e5:38:6d:4b:11:ae:54:a5:c1:24:a1:a0:15:9b:b8:0b:02: ea:55:46:9c:56:17:ab:2d:5d:93:9e:02:bc:0c:f7:39:b1:49: e8:0f:31:5a:bf:45:2d:87:6c:6c:1d:cc:a3:bb:7b:a9:82:5e: eb:f9:c0:f0:60:5a:8f:85:85:c7:d1:35:a4:cc:a4:08:34:c3: d4:70:b4:e9:7f:4e:19:6e:45:ac:04:2a:7e:0d:b1:3f:20:12: 0e:dc:2b:5c:c3:89:ae:8a:cf:99:c3:60:33:1c:cd:85:ee:c0: e2:55:19:2f:f9:9f:a6:99:af:ee:44:1c:11:d0:3e:55:9e:a8: 62:29:f7:17:76:b8:7d:94:04:e0:6e:41:0e:11:0c:f1:21:4b: 20:f0:a3:bd:14:78:39:a1:51:79:b0:09:c0:2c:cb:35:7a:d7: 6d:a9:9d:a4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUciY4MDniKQFm7AnlIBCHOzxTi9wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVDRjdERkIwOUZCM0I1QzIxRERFNjYxMTUwQjk1NzY4 QjZCRDMxOTAeFw0yNTA2MTQwOTI2MTlaFw0yNTA2MTcxMDUwMTlaMDMxMTAvBgNV BAMTKDZBQkRERUYzMDBDMUU5RTVCRjE3MUU5MUI4MTI0REEzOTQyOTQ0OUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3OBnKxrPpiAV385xAkq+YHJsA 4dxttdqVIf+r0XxAS5cxl7jWFgVVIUkzihWkdE0fx1b8b6tNV1D7/8iXvXWfGj1z 04CRhYOz5MH6H87ECq/dgCPkqgCkDRwqs3WsBJneDj8SE/Xt9rTE3Zc1np5u/tUC DBR1fWkqgn+kmDyxgYF3tFpB4vKSPoKdQweE18zk0LpAD0mXzLPLFttTUTMPo8zI UUOD7j6WeBws3CipULR5R7lvTbsk/ax3vznYEQZ0MJ7phxUhCoJPKSYO19Cl2VPT MTujF+YbrXF1uDM7rnYhMf5wyXzdKR4ei8hnc921EmzacoFTX97y3TAWf77JAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUar3e8wDB6eW/Fx6RuBJNo5QpRJswHwYDVR0j BBgwFoAUTs99+wn7O1wh3eZhFQuVdotr0xkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDAzNWIzYi1lNmM1LTQ3ZjgtOTliNC0xY2IwMzI2ZWRhZTUvMC80RUNGN0RGQjA5 RkIzQjVDMjFEREU2NjExNTBCOTU3NjhCNkJEMzE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEVDRjdERkIwOUZCM0I1QzIxRERFNjYxMTUwQjk1NzY4QjZC RDMxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2QwMzViM2ItZTZjNS00N2Y4LTk5 YjQtMWNiMDMyNmVkYWU1LzAvNEVDRjdERkIwOUZCM0I1QzIxRERFNjYxMTUwQjk1 NzY4QjZCRDMxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACVMKEDyk9oZhH1V0zI1nH4IQ+x37/WqWrQv q2hXpPAC/q6MdPv2lJ5jb7yTZifv0qRDfnSP8T+YJGT2kFG596jiJi/L8f5gj//+ qurWKpKcsRPr7ALg7NDQNVnlOG1LEa5UpcEkoaAVm7gLAupVRpxWF6stXZOeArwM 9zmxSegPMVq/RS2HbGwdzKO7e6mCXuv5wPBgWo+FhcfRNaTMpAg0w9RwtOl/Thlu RawEKn4NsT8gEg7cK1zDia6Kz5nDYDMczYXuwOJVGS/5n6aZr+5EHBHQPlWeqGIp 9xd2uH2UBOBuQQ4RDPEhSyDwo70UeDmhUXmwCcAsyzV6122pnaQ= -----END CERTIFICATE-----Generated at Mon Jun 16 12:18:03 2025 by rpki-client