$ rpki-client -vvf repo-rpki.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/07560F77A1685B4C155E037BCDB207359FA510B4.mft File: 07560F77A1685B4C155E037BCDB207359FA510B4.mft (raw, json) Hash identifier: cTpkkf1iTpMfDDosVC41iFgc1nAuX5K5nceVVwJR1vs= Subject key identifier: 72:98:C3:4F:9C:C1:11:36:45:9D:CB:DC:30:4E:44:9E:90:10:FB:FC Authority key identifier: 07:56:0F:77:A1:68:5B:4C:15:5E:03:7B:CD:B2:07:35:9F:A5:10:B4 Certificate issuer: /CN=07560F77A1685B4C155E037BCDB207359FA510B4 Certificate serial: 1AB1CFE07A7A92A77329AFB53BAB7375D95AC5DE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07560F77A1685B4C155E037BCDB207359FA510B4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/07560F77A1685B4C155E037BCDB207359FA510B4.mft Manifest number: 0334 Signing time: Tue 17 Jun 2025 21:12:02 +0000 Manifest this update: Tue 17 Jun 2025 21:07:02 +0000 Manifest next update: Fri 20 Jun 2025 22:53:02 +0000 Files and hashes: 1: 07560F77A1685B4C155E037BCDB207359FA510B4.crl (hash: BlzNCWowgQtxOmRW6Tlov+VddZsbVCQPIvt+EoqQP5s=) 2: 3130332e3137322e31392e302f32342d3234203d3e20313432333832.roa (hash: XF7kzYgNap4G0yVPFf7zneDBRYL02N7Ck706tPQbj40=) 3: 3130332e3137322e31382e302f32342d3234203d3e20313432333832.roa (hash: m7s1hZ0i1sdaUYwPmVwkipgDbv7huwk84zvoGbVUCls=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/07560F77A1685B4C155E037BCDB207359FA510B4.crl rsync://repo-rpki.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/07560F77A1685B4C155E037BCDB207359FA510B4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07560F77A1685B4C155E037BCDB207359FA510B4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 22:53:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:b1:cf:e0:7a:7a:92:a7:73:29:af:b5:3b:ab:73:75:d9:5a:c5:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07560F77A1685B4C155E037BCDB207359FA510B4 Validity Not Before: Jun 17 21:07:02 2025 GMT Not After : Jun 20 22:53:02 2025 GMT Subject: CN=7298C34F9CC11136459DCBDC304E449E9010FBFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:9c:39:8b:1e:ed:96:0b:80:d3:cd:71:3f:83: d0:b4:df:38:bb:a8:38:ec:30:73:bd:13:0b:10:b5: 45:07:db:b3:a1:df:a7:c4:bd:eb:78:de:38:ec:5e: 8b:33:1a:ad:5a:5b:8f:dc:92:ca:03:a4:76:ed:32: 8f:15:07:a5:02:70:5b:be:2f:ef:7f:4f:78:b0:c9: 6b:d2:2c:48:c1:51:57:bd:ae:b5:34:aa:fc:d3:b2: be:8d:53:6d:7e:1d:cc:af:ab:8b:2b:13:d3:50:30: 32:0c:b0:20:76:b8:2d:1e:4f:f7:b6:55:d3:aa:11: c2:ce:26:5c:30:c1:6e:cd:b3:7b:7f:80:68:9f:86: 1c:f5:69:fb:11:55:81:22:39:a4:33:9a:51:58:ed: 39:6c:9d:56:ca:a1:7d:9e:ef:cd:58:08:7e:34:cd: 2b:f1:75:10:1e:e6:a6:c8:69:eb:e9:e0:b7:8c:3d: c8:79:95:8d:eb:49:38:8d:45:f2:5f:c5:aa:6d:10: cf:52:8b:e8:32:18:73:06:c5:72:54:fa:98:dd:2e: 67:51:ba:b4:bb:5e:c3:13:14:4f:3e:50:e3:2c:97: ca:ff:a8:41:a3:d1:e4:22:a2:f8:68:f2:09:72:84: df:e7:52:20:46:d5:3e:0c:37:7d:aa:93:27:40:18: 2e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:98:C3:4F:9C:C1:11:36:45:9D:CB:DC:30:4E:44:9E:90:10:FB:FC X509v3 Authority Key Identifier: keyid:07:56:0F:77:A1:68:5B:4C:15:5E:03:7B:CD:B2:07:35:9F:A5:10:B4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/07560F77A1685B4C155E037BCDB207359FA510B4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07560F77A1685B4C155E037BCDB207359FA510B4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c08cc0b3-2508-477f-9f25-6684d6572dda/0/07560F77A1685B4C155E037BCDB207359FA510B4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:6f:53:6a:03:03:fd:84:72:36:d7:5f:9e:0f:e8:e5:4d:f6: a4:ef:30:23:02:d1:58:19:8b:c7:ff:28:c0:85:70:43:af:a8: e4:77:fa:e9:89:1a:f9:fd:cc:d8:7b:c9:99:d6:17:0e:df:16: 4c:57:dd:4e:c2:a3:95:85:dc:b1:41:c7:c9:51:25:e5:25:8b: 85:3f:bc:fe:d9:fb:76:2a:92:a7:3c:bd:17:fa:d8:67:c1:47: 13:15:ec:48:a1:8a:d9:20:40:a0:ed:0a:44:a0:56:05:b1:31: 12:b0:6d:96:dd:ee:af:88:5e:9a:57:f8:19:ff:3f:51:dc:36: 12:10:c6:1d:fa:88:1b:86:67:41:84:ec:bd:79:e3:2f:3e:66: 74:bb:be:31:89:0b:dd:ad:91:7e:fd:df:96:50:20:b4:f7:93: 28:ca:a9:36:5c:13:6d:13:68:79:5d:f0:15:ea:60:59:13:8e: 49:f1:50:79:49:0a:d6:d9:9b:62:46:05:58:b9:ff:cf:3d:72: c9:25:df:7a:37:02:e0:03:2d:97:f7:36:c4:8b:1e:f7:fe:b9: 55:04:31:f5:d2:f9:5e:e0:63:6d:f6:37:62:92:7c:f4:43:68: 8a:26:a9:10:21:ff:da:02:3b:b4:49:74:9c:79:31:c5:8e:79: 38:f4:f7:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGrHP4Hp6kqdzKa+1O6tzddlaxd4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDc1NjBGNzdBMTY4NUI0QzE1NUUwMzdCQ0RCMjA3MzU5 RkE1MTBCNDAeFw0yNTA2MTcyMTA3MDJaFw0yNTA2MjAyMjUzMDJaMDMxMTAvBgNV BAMTKDcyOThDMzRGOUNDMTExMzY0NTlEQ0JEQzMwNEU0NDlFOTAxMEZCRkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMnDmLHu2WC4DTzXE/g9C03zi7 qDjsMHO9EwsQtUUH27Oh36fEvet43jjsXoszGq1aW4/cksoDpHbtMo8VB6UCcFu+ L+9/T3iwyWvSLEjBUVe9rrU0qvzTsr6NU21+Hcyvq4srE9NQMDIMsCB2uC0eT/e2 VdOqEcLOJlwwwW7Ns3t/gGifhhz1afsRVYEiOaQzmlFY7TlsnVbKoX2e781YCH40 zSvxdRAe5qbIaevp4LeMPch5lY3rSTiNRfJfxaptEM9Si+gyGHMGxXJU+pjdLmdR urS7XsMTFE8+UOMsl8r/qEGj0eQiovho8glyhN/nUiBG1T4MN32qkydAGC4FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcpjDT5zBETZFncvcME5EnpAQ+/wwHwYDVR0j BBgwFoAUB1YPd6FoW0wVXgN7zbIHNZ+lELQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j MDhjYzBiMy0yNTA4LTQ3N2YtOWYyNS02Njg0ZDY1NzJkZGEvMC8wNzU2MEY3N0Ex Njg1QjRDMTU1RTAzN0JDREIyMDczNTlGQTUxMEI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDc1NjBGNzdBMTY4NUI0QzE1NUUwMzdCQ0RCMjA3MzU5RkE1 MTBCNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzA4Y2MwYjMtMjUwOC00NzdmLTlm MjUtNjY4NGQ2NTcyZGRhLzAvMDc1NjBGNzdBMTY4NUI0QzE1NUUwMzdCQ0RCMjA3 MzU5RkE1MTBCNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABRvU2oDA/2EcjbXX54P6OVN9qTvMCMC0VgZ i8f/KMCFcEOvqOR3+umJGvn9zNh7yZnWFw7fFkxX3U7Co5WF3LFBx8lRJeUli4U/ vP7Z+3Yqkqc8vRf62GfBRxMV7EihitkgQKDtCkSgVgWxMRKwbZbd7q+IXppX+Bn/ P1HcNhIQxh36iBuGZ0GE7L154y8+ZnS7vjGJC92tkX7935ZQILT3kyjKqTZcE20T aHld8BXqYFkTjknxUHlJCtbZm2JGBVi5/889cskl33o3AuADLZf3NsSLHvf+uVUE MfXS+V7gY232N2KSfPRDaIomqRAh/9oCO7RJdJx5McWOeTj094s= -----END CERTIFICATE-----Generated at Wed Jun 18 09:33:10 2025 by rpki-client