$ rpki-client -vvf repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft File: 7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft (raw, json) Hash identifier: O4ulqqnn2dwXzStyY9nObORqDtCYuvY4TnVgu3lUUGI= Subject key identifier: 8D:1E:F4:55:8A:D4:B2:57:24:62:E0:92:83:E2:B6:9D:49:CE:18:A6 Authority key identifier: 7F:DB:76:1B:09:E7:A9:A8:0C:D2:8C:84:A5:FF:DB:12:F5:C9:BB:D0 Certificate issuer: /CN=7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0 Certificate serial: 3BFBBB271AFC821575947847574CFB5E9B219EBF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft Manifest number: 01DE Signing time: Mon 16 Jun 2025 03:21:00 +0000 Manifest this update: Mon 16 Jun 2025 03:16:00 +0000 Manifest next update: Thu 19 Jun 2025 14:07:00 +0000 Files and hashes: 1: 3130332e3138362e38382e302f32342d3234203d3e20313439373137.roa (hash: qKtIrqocYRtH9mFT0B1bJLwWXs7q8vOuLUP4J+rTPCk=) 2: 7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.crl (hash: pdjlGbP3qhGWfzgPXTYCqmo+rnTS4iWD8nn2G7AEQjM=) 3: 3130332e3138362e38392e302f32342d3234203d3e20313439373137.roa (hash: d85h85v2ptQz3vrVN5qkUm0+GStqZnlOAr5LKlkna3k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.crl rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 14:07:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:fb:bb:27:1a:fc:82:15:75:94:78:47:57:4c:fb:5e:9b:21:9e:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0 Validity Not Before: Jun 16 03:16:00 2025 GMT Not After : Jun 19 14:07:00 2025 GMT Subject: CN=8D1EF4558AD4B2572462E09283E2B69D49CE18A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:92:ad:8a:9f:cb:2b:8f:a9:cf:06:88:4b:0e: d0:97:b3:18:62:0a:ec:13:5b:09:e7:3e:f6:bf:82: 83:13:0a:24:21:58:7f:f8:b3:fd:89:0a:76:ec:d2: 45:9a:16:3a:f6:b3:a3:de:d5:c6:2b:86:5c:30:a5: d5:62:e8:7f:86:8b:bf:c3:a2:2a:16:25:45:0e:52: a4:81:80:df:7d:77:9c:d7:ca:ec:1c:ff:80:f7:71: d4:0a:87:56:72:fb:04:c0:14:db:24:3a:81:ff:a0: a8:61:88:48:bd:e8:58:f3:9f:9b:f6:55:29:15:a3: ba:d8:96:f1:1f:1b:45:a6:04:d3:df:6a:8a:77:32: 6b:5b:f4:f6:55:f3:f1:ee:a4:17:e4:09:00:0e:fb: 58:97:41:ca:01:62:04:c2:2e:fe:23:1b:dd:51:4d: 67:6f:36:a2:57:ce:62:66:7d:10:01:36:c2:a2:1f: 8d:93:88:ba:71:83:b0:92:fb:e9:24:79:ab:dd:41: 56:a9:1d:de:09:78:46:d7:12:1c:61:12:31:ef:b9: 8c:aa:fd:62:ca:c1:4d:c9:5c:44:8e:10:74:87:02: 35:02:8c:30:7f:06:57:00:4c:d8:ad:bf:46:1d:8c: 14:5e:1c:15:e9:7a:59:3a:2d:6c:ed:7c:c7:08:2a: f0:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:1E:F4:55:8A:D4:B2:57:24:62:E0:92:83:E2:B6:9D:49:CE:18:A6 X509v3 Authority Key Identifier: keyid:7F:DB:76:1B:09:E7:A9:A8:0C:D2:8C:84:A5:FF:DB:12:F5:C9:BB:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:b6:c9:86:e8:95:10:89:0a:91:76:46:4d:96:81:31:ae:a1: fc:fb:28:6b:65:a2:fd:e7:b8:82:82:1f:58:c5:33:28:84:5c: ec:6f:a5:9e:ff:04:45:5b:dd:57:fd:c3:3e:cd:90:90:4e:e2: 5e:f2:0d:2a:1e:54:69:6d:ed:d4:23:8c:ae:65:c5:a4:a8:3c: 3b:30:b1:b8:d3:4c:b2:47:f4:4d:79:49:c9:e1:e5:68:12:70: 12:4f:9c:38:3f:32:9c:85:cc:36:e7:e8:b2:a0:c8:68:d7:0b: c1:51:3e:8a:9d:28:5c:ce:af:98:a6:33:32:0f:4e:42:4c:08: 30:4c:09:71:d4:c3:82:0e:bc:5f:27:9f:07:b9:87:b9:ec:80: 3b:08:14:e2:6d:4a:d9:f7:71:55:fc:9f:0b:91:3c:3b:69:9b: 85:19:af:41:a3:68:d4:b4:65:51:74:86:d1:40:38:38:59:8b: e0:d1:fa:c3:4f:57:45:d5:fe:50:f6:70:e4:3d:bf:65:e0:a5: f0:04:aa:42:46:9a:1a:59:cf:db:71:6e:07:68:c8:2a:32:bf: dd:d2:d7:68:a5:1c:27:5b:e4:bc:22:9a:d9:a9:8f:73:3d:c9: c9:85:81:20:85:5d:96:e0:be:e2:ae:4a:84:48:d6:e0:96:cf: 1a:1c:ad:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO/u7Jxr8ghV1lHhHV0z7Xpshnr8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ZEQjc2MUIwOUU3QTlBODBDRDI4Qzg0QTVGRkRCMTJG NUM5QkJEMDAeFw0yNTA2MTYwMzE2MDBaFw0yNTA2MTkxNDA3MDBaMDMxMTAvBgNV BAMTKDhEMUVGNDU1OEFENEIyNTcyNDYyRTA5MjgzRTJCNjlENDlDRTE4QTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXkq2Kn8srj6nPBohLDtCXsxhi CuwTWwnnPva/goMTCiQhWH/4s/2JCnbs0kWaFjr2s6Pe1cYrhlwwpdVi6H+Gi7/D oioWJUUOUqSBgN99d5zXyuwc/4D3cdQKh1Zy+wTAFNskOoH/oKhhiEi96Fjzn5v2 VSkVo7rYlvEfG0WmBNPfaop3Mmtb9PZV8/HupBfkCQAO+1iXQcoBYgTCLv4jG91R TWdvNqJXzmJmfRABNsKiH42TiLpxg7CS++kkeavdQVapHd4JeEbXEhxhEjHvuYyq /WLKwU3JXESOEHSHAjUCjDB/BlcATNitv0YdjBReHBXpelk6LWztfMcIKvAbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjR70VYrUslckYuCSg+K2nUnOGKYwHwYDVR0j BBgwFoAUf9t2GwnnqagM0oyEpf/bEvXJu9AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzI5NWRlNi0yMDU4LTQ2YTctOTM2Yi0wNTJjZjJmYTkyMGQvMC83RkRCNzYxQjA5 RTdBOUE4MENEMjhDODRBNUZGREIxMkY1QzlCQkQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0ZEQjc2MUIwOUU3QTlBODBDRDI4Qzg0QTVGRkRCMTJGNUM5 QkJEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTMyOTVkZTYtMjA1OC00NmE3LTkz NmItMDUyY2YyZmE5MjBkLzAvN0ZEQjc2MUIwOUU3QTlBODBDRDI4Qzg0QTVGRkRC MTJGNUM5QkJEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGq2yYbolRCJCpF2Rk2WgTGuofz7KGtlov3n uIKCH1jFMyiEXOxvpZ7/BEVb3Vf9wz7NkJBO4l7yDSoeVGlt7dQjjK5lxaSoPDsw sbjTTLJH9E15Scnh5WgScBJPnDg/MpyFzDbn6LKgyGjXC8FRPoqdKFzOr5imMzIP TkJMCDBMCXHUw4IOvF8nnwe5h7nsgDsIFOJtStn3cVX8nwuRPDtpm4UZr0GjaNS0 ZVF0htFAODhZi+DR+sNPV0XV/lD2cOQ9v2XgpfAEqkJGmhpZz9txbgdoyCoyv93S 12ilHCdb5Lwimtmpj3M9ycmFgSCFXZbgvuKuSoRI1uCWzxocreA= -----END CERTIFICATE-----Generated at Wed Jun 18 12:43:38 2025 by rpki-client