$ rpki-client -vvf repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft File: 7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft (raw, json) Hash identifier: nmDvLXzWcrfXjskwsuUK9z09RkI2NJWnnUic9SoHBiw= Subject key identifier: EA:F5:B6:1C:82:8A:58:53:CB:28:A3:EE:65:B1:9E:38:06:12:9C:CC Authority key identifier: 7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67 Certificate issuer: /CN=7D64B8F4CFB687141137D10F9E73FFD0BAB93F67 Certificate serial: 4ABE8B1C59F6A0B07A353C254C0762EE6C98221D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer Subject info access: rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft Manifest number: 029D Signing time: Sat 14 Jun 2025 03:32:08 +0000 Manifest this update: Sat 14 Jun 2025 03:27:08 +0000 Manifest next update: Tue 17 Jun 2025 11:27:08 +0000 Files and hashes: 1: 323430313a383434303a3133313a3a2f34382d3438203d3e20313336313331.roa (hash: 7XF+7tNQBQV2Wy0AsX8lBCySJ+ATYXgli7NY4z4VmfM=) 2: 3130332e39372e37372e302f32342d3234203d3e20313336313331.roa (hash: rgwWhpicbIXeIE3pTFSF/nJgGhjsTFXordy0vbByPyc=) 3: 323430313a383434303a33313a3a2f34382d3438203d3e20313336313331.roa (hash: imoDv7fNxiS0ABFe1mnjo4w6QxU9zgowGM6VjXLrifM=) 4: 3130332e39372e37392e302f32342d3234203d3e20313336313331.roa (hash: g7TDmW1J5jNMb6eLJToYzt8xdajrekh1Q+uRWpcwKv0=) 5: 7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl (hash: PiHx14v1IMfyoE5eVWrfs022oCxoKrSToX918V5Epxs=) 6: 323430313a383434303a3233313a3a2f34382d3438203d3e20313336313331.roa (hash: 9q0QjNfZ8ZidXQKSI35eyNIOpPTa4MZHY+H9XcdTGqQ=) 7: 3130332e39372e37382e302f32342d3234203d3e20313336313331.roa (hash: gTWqsHLXGzmwOn5oUbLdKwsFxUOTG6JntDETCN1uoJg=) 8: 3130332e39372e37362e302f32342d3234203d3e20313336313331.roa (hash: sppd+EBGEaepceJfNxlZXMQLq/sqMLGJt/R8ADFWUfE=) 9: 323430313a383434303a3331313a3a2f34382d3438203d3e20313336313331.roa (hash: uNKV4J4iyB42iT7YiJbc/obq8TacFQRWwVPHqjYHdt4=) 10: 323430313a383434303a3a2f33322d3332203d3e20313336313331.roa (hash: J/TKA4DxZMeIQk5lGShBOGO9FvcMo90L9nK349bvEzs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 11:27:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:be:8b:1c:59:f6:a0:b0:7a:35:3c:25:4c:07:62:ee:6c:98:22:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D64B8F4CFB687141137D10F9E73FFD0BAB93F67 Validity Not Before: Jun 14 03:27:08 2025 GMT Not After : Jun 17 11:27:08 2025 GMT Subject: CN=EAF5B61C828A5853CB28A3EE65B19E3806129CCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:0c:2d:79:53:c0:03:d9:b0:dd:37:35:d2:67: 60:07:58:15:4e:f6:86:96:ac:ab:3b:c6:ab:74:68: 35:c4:e9:9d:95:fe:dd:0c:63:50:4f:63:8a:07:92: 17:7d:d8:65:6b:e1:b5:e3:62:a7:ff:a4:3d:57:68: ee:df:6e:4d:36:ed:c0:c0:2f:0f:b9:fa:bf:2a:57: 77:24:56:19:5e:47:08:dd:c1:c4:62:c4:ef:ce:54: a5:2d:2c:87:da:ed:c6:ce:40:3f:d6:53:73:2a:d1: 41:85:29:3c:2c:f7:04:8b:5f:ac:f4:c7:26:00:69: 5b:c4:27:82:69:4e:31:4d:47:c4:f9:20:78:0a:ac: 97:77:07:f6:37:87:93:4a:90:3c:3f:2f:5b:2c:fe: 9e:95:2d:bd:0f:3b:b7:59:0c:5c:27:44:60:92:7e: 93:24:c8:8a:d7:04:60:41:f9:d3:0b:66:be:21:3f: a2:8f:79:c5:28:5a:f7:5a:c0:99:ca:4d:65:dd:e2: 96:51:f3:e6:98:d5:6f:10:c1:f2:8d:72:b0:92:77: a9:d5:05:6b:66:4f:b5:99:bd:3a:7a:ec:ae:54:60: 81:71:5f:10:ad:ad:bd:31:82:e0:22:18:c8:84:f2: e6:1b:7f:51:89:e6:3f:ab:57:64:4f:4a:96:26:31: 4b:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:F5:B6:1C:82:8A:58:53:CB:28:A3:EE:65:B1:9E:38:06:12:9C:CC X509v3 Authority Key Identifier: keyid:7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:09:b1:a0:03:5e:e9:aa:5f:a0:bb:cc:a0:0c:1b:c5:43:55: 67:87:36:3f:fa:2c:b9:4a:65:b5:45:b0:d3:27:6f:14:3f:e7: 6a:20:07:35:3d:36:e4:ac:33:91:28:49:16:65:33:06:40:07: 14:98:4a:d1:dd:f5:94:e4:0d:eb:c3:0c:33:ff:93:99:02:04: 76:c5:1f:d5:d4:da:ec:ee:b0:04:30:31:1e:f5:4d:26:3b:55: 71:b5:bb:63:c6:f0:e8:84:b2:16:6e:45:89:78:ff:c8:1b:9c: 64:9b:a9:19:ab:5d:2d:f2:d9:19:32:8e:94:3c:a0:15:0d:f9: fb:5f:91:8a:e6:12:bd:e3:ac:59:d9:c0:cd:04:74:75:c3:3a: b2:fc:0b:58:4c:5d:f8:ce:d9:ec:c2:72:40:12:f6:62:8a:cf: b6:a8:c9:83:15:1f:80:fc:ba:4f:56:23:ad:78:57:ac:ac:37: 8f:70:c5:6c:5d:40:11:9f:93:5d:ce:4e:10:c2:3c:a6:df:4a: 3d:6c:15:30:ac:2c:04:f3:0d:42:a7:09:e0:41:99:9f:96:6d: 50:87:e8:93:ad:7a:20:0a:bb:2e:bf:84:18:cf:04:88:11:e8: d2:6e:36:c8:90:ef:08:aa:df:aa:c3:10:fb:a5:f3:26:76:5e: 82:b1:c8:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSr6LHFn2oLB6NTwlTAdi7myYIh0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZGRDBC QUI5M0Y2NzAeFw0yNTA2MTQwMzI3MDhaFw0yNTA2MTcxMTI3MDhaMDMxMTAvBgNV BAMTKEVBRjVCNjFDODI4QTU4NTNDQjI4QTNFRTY1QjE5RTM4MDYxMjlDQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDDC15U8AD2bDdNzXSZ2AHWBVO 9oaWrKs7xqt0aDXE6Z2V/t0MY1BPY4oHkhd92GVr4bXjYqf/pD1XaO7fbk027cDA Lw+5+r8qV3ckVhleRwjdwcRixO/OVKUtLIfa7cbOQD/WU3Mq0UGFKTws9wSLX6z0 xyYAaVvEJ4JpTjFNR8T5IHgKrJd3B/Y3h5NKkDw/L1ss/p6VLb0PO7dZDFwnRGCS fpMkyIrXBGBB+dMLZr4hP6KPecUoWvdawJnKTWXd4pZR8+aY1W8QwfKNcrCSd6nV BWtmT7WZvTp67K5UYIFxXxCtrb0xguAiGMiE8uYbf1GJ5j+rV2RPSpYmMUvnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6vW2HIKKWFPLKKPuZbGeOAYSnMwwHwYDVR0j BBgwFoAUfWS49M+2hxQRN9EPnnP/0Lq5P2cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTdiMGQ3ZS1lYWRlLTQzMTgtYWIyMC04YzdmMmQ1YmU2OWYvMC83RDY0QjhGNENG QjY4NzE0MTEzN0QxMEY5RTczRkZEMEJBQjkzRjY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZGRDBCQUI5 M0Y2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTU3YjBkN2UtZWFkZS00MzE4LWFi MjAtOGM3ZjJkNWJlNjlmLzAvN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZG RDBCQUI5M0Y2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABwJsaADXumqX6C7zKAMG8VDVWeHNj/6LLlK ZbVFsNMnbxQ/52ogBzU9NuSsM5EoSRZlMwZABxSYStHd9ZTkDevDDDP/k5kCBHbF H9XU2uzusAQwMR71TSY7VXG1u2PG8OiEshZuRYl4/8gbnGSbqRmrXS3y2RkyjpQ8 oBUN+ftfkYrmEr3jrFnZwM0EdHXDOrL8C1hMXfjO2ezCckAS9mKKz7aoyYMVH4D8 uk9WI614V6ysN49wxWxdQBGfk13OThDCPKbfSj1sFTCsLATzDUKnCeBBmZ+WbVCH 6JOteiAKuy6/hBjPBIgR6NJuNsiQ7wiq36rDEPul8yZ2XoKxyD4= -----END CERTIFICATE-----Generated at Mon Jun 16 03:44:12 2025 by rpki-client