$ rpki-client -vvf repo-rpki.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.mft File: 007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.mft (raw, json) Hash identifier: Uocm0K4iwqunypaqo2RBK4663B9MhjzTqPN+DGOLKlU= Subject key identifier: 87:12:92:74:A4:EA:88:C5:F3:47:A4:88:3C:9E:45:27:8B:89:AA:F1 Authority key identifier: 00:7C:91:B0:49:F7:35:F7:1F:2B:E8:CF:92:AE:AA:53:8D:6B:1F:0B Certificate issuer: /CN=007C91B049F735F71F2BE8CF92AEAA538D6B1F0B Certificate serial: 5EB25EDA61D0449EB28A10E5CB5E03CB7AEE5573 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.mft Manifest number: 0111 Signing time: Sat 14 Jun 2025 15:52:03 +0000 Manifest this update: Sat 14 Jun 2025 15:47:03 +0000 Manifest next update: Wed 18 Jun 2025 01:33:03 +0000 Files and hashes: 1: 3130332e35382e3130342e302f32322d3234203d3e20313333383334.roa (hash: 50H8I9ev+6h3z0JMqGqieFay02FbZ2ohx0kZUlhDVNI=) 2: 007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.crl (hash: HV/DxXC5h5kJ+LNy8SyoxwmmV3JSpKKnHmaC4OLQ5Jc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.crl rsync://repo-rpki.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 01:33:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:b2:5e:da:61:d0:44:9e:b2:8a:10:e5:cb:5e:03:cb:7a:ee:55:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=007C91B049F735F71F2BE8CF92AEAA538D6B1F0B Validity Not Before: Jun 14 15:47:03 2025 GMT Not After : Jun 18 01:33:03 2025 GMT Subject: CN=87129274A4EA88C5F347A4883C9E45278B89AAF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:ef:10:e6:77:a0:79:78:db:ca:29:85:8c:4b: 84:2f:60:01:6e:10:7e:0d:fb:35:55:4e:09:eb:56: 39:9b:df:85:55:19:d1:e9:cb:99:cd:a1:9f:5a:8f: b1:ec:b8:20:9e:8a:96:b5:fa:23:14:28:e5:f4:e5: 39:4f:fb:85:15:a7:b9:dc:be:1a:06:fa:ae:50:50: cf:43:04:7a:18:41:65:c3:64:22:9e:17:7a:d1:ec: 7c:b2:a7:96:66:44:ce:eb:95:43:c3:a7:11:9b:bf: de:4f:d2:0c:98:f6:25:2d:57:c3:24:c6:47:7b:d3: 4a:3c:d3:51:d7:44:60:f5:ec:0d:ce:ce:a4:04:fd: 93:0c:4e:43:d6:36:46:0f:d2:97:fc:90:91:48:34: bd:be:d6:01:44:6c:0c:7e:47:f2:ba:99:a2:8b:3f: 85:3b:62:f2:bb:fd:e0:02:81:6b:6c:5b:58:94:c0: b5:71:03:ee:b0:6f:e5:10:55:5f:17:98:e9:86:f1: b1:32:e1:c2:cd:c8:42:7b:00:15:ad:e2:ee:5f:68: 91:3f:24:a9:6e:5a:b4:6d:4f:a2:72:83:02:40:78: 5b:88:e8:53:08:24:3f:95:8c:63:ac:4f:fb:cc:d5: a6:e9:03:36:42:b9:6a:cb:5f:f0:eb:22:e1:e6:0c: 79:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:12:92:74:A4:EA:88:C5:F3:47:A4:88:3C:9E:45:27:8B:89:AA:F1 X509v3 Authority Key Identifier: keyid:00:7C:91:B0:49:F7:35:F7:1F:2B:E8:CF:92:AE:AA:53:8D:6B:1F:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/871ada9e-e2a9-400e-8dff-9be481aba583/0/007C91B049F735F71F2BE8CF92AEAA538D6B1F0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:48:16:a5:ed:d0:a9:1e:6e:43:25:23:1a:01:6d:0a:ff:73: f6:10:65:99:8c:7d:98:c2:31:f9:8f:f3:61:53:89:81:d1:18: b6:1f:e8:d2:9f:17:bf:ac:d9:97:72:f8:cc:12:94:72:39:87: f6:e0:11:1d:35:94:13:79:ef:95:f7:33:55:24:37:e7:78:87: 6f:0a:16:c8:0c:0b:9b:fb:74:46:63:4b:80:88:51:b6:47:df: 66:2e:83:8b:3b:ae:0d:1e:97:4e:6e:b4:26:5e:2b:c7:04:79: 53:d6:26:74:e9:53:22:5a:21:d4:f1:4a:47:69:b6:52:89:e3: 20:1f:4b:a5:7c:6b:d8:fe:c7:dd:dc:07:a5:36:92:db:c5:b4: 3c:c8:4f:89:3f:24:6a:11:99:c6:db:53:41:9a:04:d4:51:77: f6:87:14:3b:5d:d6:40:8f:9a:26:d7:05:4a:f4:f8:33:27:14: 3b:bc:7c:c9:c2:28:51:a7:91:67:c5:92:0e:bc:07:89:7b:4d: 8c:ad:15:6f:92:08:37:0a:f1:3b:11:04:33:ec:33:b5:d5:9b: d8:0b:a1:b2:f8:a2:53:4a:89:5f:ee:88:70:74:10:6d:82:4f: 22:5b:eb:54:4a:86:8d:17:d9:a2:51:07:97:e1:5f:e3:90:16: d2:24:05:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXrJe2mHQRJ6yihDly14Dy3ruVXMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDA3QzkxQjA0OUY3MzVGNzFGMkJFOENGOTJBRUFBNTM4 RDZCMUYwQjAeFw0yNTA2MTQxNTQ3MDNaFw0yNTA2MTgwMTMzMDNaMDMxMTAvBgNV BAMTKDg3MTI5Mjc0QTRFQTg4QzVGMzQ3QTQ4ODNDOUU0NTI3OEI4OUFBRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC97xDmd6B5eNvKKYWMS4QvYAFu EH4N+zVVTgnrVjmb34VVGdHpy5nNoZ9aj7HsuCCeipa1+iMUKOX05TlP+4UVp7nc vhoG+q5QUM9DBHoYQWXDZCKeF3rR7Hyyp5ZmRM7rlUPDpxGbv95P0gyY9iUtV8Mk xkd700o801HXRGD17A3OzqQE/ZMMTkPWNkYP0pf8kJFINL2+1gFEbAx+R/K6maKL P4U7YvK7/eACgWtsW1iUwLVxA+6wb+UQVV8XmOmG8bEy4cLNyEJ7ABWt4u5faJE/ JKluWrRtT6JygwJAeFuI6FMIJD+VjGOsT/vM1abpAzZCuWrLX/DrIuHmDHlbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhxKSdKTqiMXzR6SIPJ5FJ4uJqvEwHwYDVR0j BBgwFoAUAHyRsEn3NfcfK+jPkq6qU41rHwswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NzFhZGE5ZS1lMmE5LTQwMGUtOGRmZi05YmU0ODFhYmE1ODMvMC8wMDdDOTFCMDQ5 RjczNUY3MUYyQkU4Q0Y5MkFFQUE1MzhENkIxRjBCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDA3QzkxQjA0OUY3MzVGNzFGMkJFOENGOTJBRUFBNTM4RDZC MUYwQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODcxYWRhOWUtZTJhOS00MDBlLThk ZmYtOWJlNDgxYWJhNTgzLzAvMDA3QzkxQjA0OUY3MzVGNzFGMkJFOENGOTJBRUFB NTM4RDZCMUYwQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAtIFqXt0KkebkMlIxoBbQr/c/YQZZmMfZjC MfmP82FTiYHRGLYf6NKfF7+s2Zdy+MwSlHI5h/bgER01lBN575X3M1UkN+d4h28K FsgMC5v7dEZjS4CIUbZH32Yug4s7rg0el05utCZeK8cEeVPWJnTpUyJaIdTxSkdp tlKJ4yAfS6V8a9j+x93cB6U2ktvFtDzIT4k/JGoRmcbbU0GaBNRRd/aHFDtd1kCP mibXBUr0+DMnFDu8fMnCKFGnkWfFkg68B4l7TYytFW+SCDcK8TsRBDPsM7XVm9gL obL4olNKiV/uiHB0EG2CTyJb61RKho0X2aJRB5fhX+OQFtIkBXA= -----END CERTIFICATE-----Generated at Mon Jun 16 21:46:59 2025 by rpki-client