$ rpki-client -vvf repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft File: C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft (raw, json) Hash identifier: Om5THZfOUOw2BVEyBrzqDSvmf/TKEAdys124ZQrHXp0= Subject key identifier: 24:D6:D5:4A:25:44:62:26:B3:D4:C0:DF:7D:E9:CE:A2:4F:5B:F2:6F Authority key identifier: C0:7F:5A:E2:D9:DC:99:D0:AF:28:B6:B1:54:21:0C:91:1E:FB:1D:8A Certificate issuer: /CN=C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A Certificate serial: 5BA7F964EB1BF6F9F880DDA3AC6ADECC8300B908 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft Manifest number: 94 Signing time: Mon 16 Jun 2025 17:31:55 +0000 Manifest this update: Mon 16 Jun 2025 17:26:55 +0000 Manifest next update: Fri 20 Jun 2025 03:45:55 +0000 Files and hashes: 1: 323030313a6466343a6363303a3a2f34382d3438203d3e20313532383431.roa (hash: Jn99cL4fgcEPbh24njIDYKuvldMIr2jNGSja0e4Hk1s=) 2: C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.crl (hash: sw87AEhni+ccqb/Lwt+W0/J8wP2HuQcJumuNBpKE46A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.crl rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:33:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:a7:f9:64:eb:1b:f6:f9:f8:80:dd:a3:ac:6a:de:cc:83:00:b9:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A Validity Not Before: Jun 16 17:26:55 2025 GMT Not After : Jun 20 03:45:55 2025 GMT Subject: CN=24D6D54A25446226B3D4C0DF7DE9CEA24F5BF26F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:31:83:5a:32:9a:2b:e9:f9:4c:02:ef:99:0b: 97:63:3a:99:ba:be:2a:88:39:b8:c4:ce:ec:2b:9c: 05:67:d3:98:1a:59:b4:e0:45:02:6a:c3:5d:9f:6d: 3a:73:f5:54:41:2a:f7:ee:0a:49:b5:61:38:b3:ac: 17:99:02:c3:1a:ed:c8:7b:d9:e3:19:9d:d2:58:e5: da:46:b3:4d:a4:13:5c:98:02:04:54:c2:3e:aa:ad: ab:8e:d3:0c:a7:a2:10:e3:8f:22:1f:df:73:b4:ce: d7:56:8f:a4:e7:21:13:be:c7:ba:7b:da:90:7f:28: 6e:d3:fd:4d:3c:2b:da:ab:a0:dd:6a:f0:76:58:2f: e8:47:57:f3:b1:14:e4:d2:a6:0d:12:1b:36:f0:1e: de:e9:dd:3e:32:9e:f3:93:5d:7d:02:63:70:44:65: a7:70:cc:be:ae:88:ac:7d:78:92:12:00:9b:fd:34: 14:5b:1c:b2:db:8b:3a:41:dc:9b:a2:a7:20:42:69: ad:89:29:dc:1d:a6:91:50:ee:a5:cf:0e:cd:dd:49: 9d:b6:3a:a8:53:25:3d:f5:d5:3f:31:00:64:97:86: c9:87:13:0d:8c:99:4e:bc:16:9f:1e:2b:19:89:8b: 47:54:10:12:03:0a:bf:63:75:18:a9:47:df:84:04: c1:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:D6:D5:4A:25:44:62:26:B3:D4:C0:DF:7D:E9:CE:A2:4F:5B:F2:6F X509v3 Authority Key Identifier: keyid:C0:7F:5A:E2:D9:DC:99:D0:AF:28:B6:B1:54:21:0C:91:1E:FB:1D:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:62:a8:43:1e:62:8d:91:6c:2b:c2:8c:16:a9:99:92:3d:47: d7:50:16:8b:a7:9b:48:6a:fa:e6:8e:3e:37:e2:2a:85:a8:f6: 50:8c:65:87:7e:06:d2:de:e5:89:3f:c3:7c:eb:ce:2d:4c:12: b7:83:df:0b:ab:5a:95:5e:12:a1:98:5e:80:0c:83:44:7f:0e: 20:4a:23:50:f1:b9:52:cf:1a:98:0e:ac:5b:10:09:ec:af:f5: 2d:c5:cd:ea:f2:65:76:0f:37:eb:4d:6a:fa:1f:b6:1c:88:6f: 7a:fa:01:ef:30:61:c7:c3:76:13:b7:b9:6f:84:67:5d:ab:c0: 95:4b:81:c2:98:a5:22:e8:c4:cd:eb:e4:54:c7:b3:d8:a1:b6: e5:9c:28:5a:22:1f:52:4d:17:98:b5:69:a7:02:1b:fe:16:e6: 6d:b9:4b:5e:88:dd:6f:53:6d:ac:b4:06:a6:60:76:ae:58:d2: af:7a:b7:f6:93:b2:0c:c9:1a:62:ca:1c:4e:a3:58:03:ae:3b: cb:64:5b:84:3c:00:3f:e8:a5:fa:23:f5:0e:f8:7f:0e:9f:ac: aa:c0:1f:4d:8c:e0:39:64:81:2c:a4:7b:be:56:55:93:ae:8f: 6c:9e:19:9c:d7:5c:c6:0a:1e:f7:1a:84:db:92:bc:4b:0f:02: ba:4b:9f:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW6f5ZOsb9vn4gN2jrGrezIMAuQgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA3RjVBRTJEOURDOTlEMEFGMjhCNkIxNTQyMTBDOTEx RUZCMUQ4QTAeFw0yNTA2MTYxNzI2NTVaFw0yNTA2MjAwMzQ1NTVaMDMxMTAvBgNV BAMTKDI0RDZENTRBMjU0NDYyMjZCM0Q0QzBERjdERTlDRUEyNEY1QkYyNkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMMYNaMpor6flMAu+ZC5djOpm6 viqIObjEzuwrnAVn05gaWbTgRQJqw12fbTpz9VRBKvfuCkm1YTizrBeZAsMa7ch7 2eMZndJY5dpGs02kE1yYAgRUwj6qrauO0wynohDjjyIf33O0ztdWj6TnIRO+x7p7 2pB/KG7T/U08K9qroN1q8HZYL+hHV/OxFOTSpg0SGzbwHt7p3T4ynvOTXX0CY3BE ZadwzL6uiKx9eJISAJv9NBRbHLLbizpB3JuipyBCaa2JKdwdppFQ7qXPDs3dSZ22 OqhTJT311T8xAGSXhsmHEw2MmU68Fp8eKxmJi0dUEBIDCr9jdRipR9+EBMFdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJNbVSiVEYiaz1MDffenOok9b8m8wHwYDVR0j BBgwFoAUwH9a4tncmdCvKLaxVCEMkR77HYowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZTdkNzM4ZS0yY2M3LTRiZDItYmIyOC05MTQyZTFiYWEwYmEvMS9DMDdGNUFFMkQ5 REM5OUQwQUYyOEI2QjE1NDIxMEM5MTFFRkIxRDhBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzA3RjVBRTJEOURDOTlEMEFGMjhCNkIxNTQyMTBDOTExRUZC MUQ4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2U3ZDczOGUtMmNjNy00YmQyLWJi MjgtOTE0MmUxYmFhMGJhLzEvQzA3RjVBRTJEOURDOTlEMEFGMjhCNkIxNTQyMTBD OTExRUZCMUQ4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEdiqEMeYo2RbCvCjBapmZI9R9dQFounm0hq +uaOPjfiKoWo9lCMZYd+BtLe5Yk/w3zrzi1MEreD3wurWpVeEqGYXoAMg0R/DiBK I1DxuVLPGpgOrFsQCeyv9S3FzeryZXYPN+tNavofthyIb3r6Ae8wYcfDdhO3uW+E Z12rwJVLgcKYpSLoxM3r5FTHs9ihtuWcKFoiH1JNF5i1aacCG/4W5m25S16I3W9T bay0BqZgdq5Y0q96t/aTsgzJGmLKHE6jWAOuO8tkW4Q8AD/opfoj9Q74fw6frKrA H02M4DlkgSyke75WVZOuj2yeGZzXXMYKHvcahNuSvEsPArpLn3A= -----END CERTIFICATE-----Generated at Mon Jun 16 20:41:58 2025 by rpki-client