$ rpki-client -vvf repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft File: 7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft (raw, json) Hash identifier: KeF9OFXPx8PyDOpI/l3x1gEjFdQBg/7lhwmmoxCFEII= Subject key identifier: B0:1D:8F:1D:59:14:75:16:6B:C8:0A:32:2A:B8:FA:67:79:1A:3D:51 Authority key identifier: 7D:9E:0E:E5:BE:72:73:60:81:01:D9:3C:5F:7F:B6:1C:BC:04:04:C7 Certificate issuer: /CN=7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7 Certificate serial: 0E06C24B2735B146186A21A33D7FDC1C23CFE959 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft Manifest number: 8C Signing time: Mon 16 Jun 2025 21:40:00 +0000 Manifest this update: Mon 16 Jun 2025 21:35:00 +0000 Manifest next update: Fri 20 Jun 2025 09:03:00 +0000 Files and hashes: 1: 3130332e3136392e3134332e302f32342d3234203d3e20313531353831.roa (hash: V98kYcU8v569igqvltJ62ENZBRSZDERQept9pSJvYEE=) 2: 7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.crl (hash: FRu36XCBbR42bgrJ8sqdDORoKOp9Rzg1cc6sRLa38Us=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.crl rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 09:03:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:06:c2:4b:27:35:b1:46:18:6a:21:a3:3d:7f:dc:1c:23:cf:e9:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7 Validity Not Before: Jun 16 21:35:00 2025 GMT Not After : Jun 20 09:03:00 2025 GMT Subject: CN=B01D8F1D591475166BC80A322AB8FA67791A3D51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:95:60:f9:28:44:d2:bf:2b:59:52:9b:ab:da: 51:a3:fc:fa:3f:7e:6d:ba:fd:90:d1:b9:79:fa:61: d1:60:e7:7b:84:c2:ee:03:ab:a8:22:22:99:f8:98: 82:bc:9b:a3:44:bb:e6:26:18:ca:36:0f:fe:ff:31: 9d:a2:cf:d2:0e:a8:03:03:95:a9:44:ba:2e:a9:da: 0c:7f:bf:d7:15:fe:f2:fc:a4:78:ef:38:06:43:6b: 31:12:a8:21:6d:30:fb:d4:3e:49:65:25:5e:87:14: 71:4d:e6:dd:54:c1:18:2f:41:87:e3:cb:eb:1a:81: 34:39:c8:28:08:4d:e7:11:b3:cb:25:03:01:af:96: b1:d9:5a:43:eb:d7:b1:24:8f:8d:30:df:0e:bc:dc: 3d:c9:03:47:e6:1b:9d:39:8a:73:6e:46:bd:f7:52: a7:6b:3d:1d:24:27:55:bc:b0:be:07:47:0e:20:e5: b0:26:fb:00:18:47:3b:56:c1:11:90:a6:6b:07:44: 4d:cb:1f:19:1a:93:07:b9:e0:19:ce:89:aa:54:15: fb:b9:69:b1:4c:f3:a2:a0:0b:43:49:8d:55:33:8b: f0:ec:19:3b:d8:15:03:40:c2:ce:6a:fe:62:cc:ec: e3:10:37:5a:bc:fd:18:00:f7:f1:56:e9:78:55:ce: 9d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:1D:8F:1D:59:14:75:16:6B:C8:0A:32:2A:B8:FA:67:79:1A:3D:51 X509v3 Authority Key Identifier: keyid:7D:9E:0E:E5:BE:72:73:60:81:01:D9:3C:5F:7F:B6:1C:BC:04:04:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ba:02:d1:d9:4e:97:cc:fe:17:02:1f:bb:56:33:d5:3d:ad:07: 5b:48:7a:a3:96:6f:1c:d5:2b:d9:da:30:77:13:f0:91:d0:25: 4f:c9:b8:66:cf:95:49:35:b8:73:b1:b8:cd:d7:cc:5f:30:88: f7:1f:57:b0:22:b5:78:d9:94:84:96:5f:52:d9:1e:af:a1:3c: 14:2c:d2:27:8c:34:1f:b3:70:d7:92:60:7a:c5:8d:83:a3:5f: 8c:a7:79:ea:ca:17:c1:83:f0:16:0c:e9:d4:78:f9:09:7e:ff: a9:a1:3a:02:cd:1d:9c:da:78:db:74:95:33:39:0c:2d:ad:76: ea:4b:28:b1:ca:f1:bb:dd:d2:7e:a5:35:ae:82:62:2f:f8:56: 0f:16:53:f5:62:5d:42:f1:5e:7a:c3:b2:fc:78:2c:4e:60:6e: a0:a4:15:15:bc:3f:1a:4e:a6:1c:98:c3:b5:b8:38:b6:89:af: 8d:8d:85:f7:94:bb:ac:88:22:ea:82:f8:20:a4:a8:af:b8:66: 7b:09:f8:2a:d5:da:fd:fa:e4:e6:f7:26:84:a4:08:00:da:11: 55:4c:a7:7e:d5:ab:26:60:65:a2:75:8f:6a:18:21:50:6a:88: 09:31:c3:e6:fe:aa:b7:bb:5a:78:fe:4f:c9:b4:96:63:71:3e: a2:20:6a:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDgbCSyc1sUYYaiGjPX/cHCPP6VkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q5RTBFRTVCRTcyNzM2MDgxMDFEOTNDNUY3RkI2MUNC QzA0MDRDNzAeFw0yNTA2MTYyMTM1MDBaFw0yNTA2MjAwOTAzMDBaMDMxMTAvBgNV BAMTKEIwMUQ4RjFENTkxNDc1MTY2QkM4MEEzMjJBQjhGQTY3NzkxQTNENTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5lWD5KETSvytZUpur2lGj/Po/ fm26/ZDRuXn6YdFg53uEwu4Dq6giIpn4mIK8m6NEu+YmGMo2D/7/MZ2iz9IOqAMD lalEui6p2gx/v9cV/vL8pHjvOAZDazESqCFtMPvUPkllJV6HFHFN5t1UwRgvQYfj y+sagTQ5yCgITecRs8slAwGvlrHZWkPr17Ekj40w3w683D3JA0fmG505inNuRr33 UqdrPR0kJ1W8sL4HRw4g5bAm+wAYRztWwRGQpmsHRE3LHxkakwe54BnOiapUFfu5 abFM86KgC0NJjVUzi/DsGTvYFQNAws5q/mLM7OMQN1q8/RgA9/FW6XhVzp2ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsB2PHVkUdRZryAoyKrj6Z3kaPVEwHwYDVR0j BBgwFoAUfZ4O5b5yc2CBAdk8X3+2HLwEBMcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmRlMWE4ZS1jMmI4LTQ5OTYtOTQ5Mi02ZjkyYzJkZmVjN2EvMC83RDlFMEVFNUJF NzI3MzYwODEwMUQ5M0M1RjdGQjYxQ0JDMDQwNEM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q5RTBFRTVCRTcyNzM2MDgxMDFEOTNDNUY3RkI2MUNCQzA0 MDRDNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZkZTFhOGUtYzJiOC00OTk2LTk0 OTItNmY5MmMyZGZlYzdhLzAvN0Q5RTBFRTVCRTcyNzM2MDgxMDFEOTNDNUY3RkI2 MUNCQzA0MDRDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALoC0dlOl8z+FwIfu1Yz1T2tB1tIeqOWbxzV K9naMHcT8JHQJU/JuGbPlUk1uHOxuM3XzF8wiPcfV7AitXjZlISWX1LZHq+hPBQs 0ieMNB+zcNeSYHrFjYOjX4yneerKF8GD8BYM6dR4+Ql+/6mhOgLNHZzaeNt0lTM5 DC2tdupLKLHK8bvd0n6lNa6CYi/4Vg8WU/ViXULxXnrDsvx4LE5gbqCkFRW8PxpO phyYw7W4OLaJr42NhfeUu6yIIuqC+CCkqK+4ZnsJ+CrV2v365Ob3JoSkCADaEVVM p37VqyZgZaJ1j2oYIVBqiAkxw+b+qre7Wnj+T8m0lmNxPqIgau8= -----END CERTIFICATE-----Generated at Tue Jun 17 19:14:29 2025 by rpki-client