$ rpki-client -vvf repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.mft File: 07043FF6B66099F2CBFBBB64672822F3014937E8.mft (raw, json) Hash identifier: OQLWEH0rgs1MlCceR41/s6uoZp6fjs25f+wrkn32ZyM= Subject key identifier: 80:39:F0:FA:9B:FD:C5:8A:E9:D1:98:75:0B:70:F3:AF:1B:9F:F1:3E Authority key identifier: 07:04:3F:F6:B6:60:99:F2:CB:FB:BB:64:67:28:22:F3:01:49:37:E8 Certificate issuer: /CN=07043FF6B66099F2CBFBBB64672822F3014937E8 Certificate serial: 7F9F548699252AE7194AC082F5EE7AD6A9E494CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07043FF6B66099F2CBFBBB64672822F3014937E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.mft Manifest number: 01D4 Signing time: Sun 20 Jul 2025 05:51:38 +0000 Manifest this update: Sun 20 Jul 2025 05:46:38 +0000 Manifest next update: Wed 23 Jul 2025 06:57:38 +0000 Files and hashes: 1: 3130332e3132352e31322e302f32342d3234203d3e20313533333137.roa (hash: 1xo0DjDSXvXZUNtwZdd+vDQQvBq4jlF/Yl9f8y0lmbA=) 2: 3130332e3132352e31332e302f32342d3234203d3e20313335363336.roa (hash: 9YIt3S9f2TckOIHLJingGQoR7QpEu3PnRMAwc6NgmOA=) 3: 3130332e3132352e31352e302f32342d3234203d3e20313335363336.roa (hash: jfBPikwcOXfyCAw2T4LtcRftqdJoZDQGQR3Ub10AvuI=) 4: 07043FF6B66099F2CBFBBB64672822F3014937E8.crl (hash: WeQFKU5/qjuhJ/E4JBbGtQcOjTboMWdgGe6iOsPTr+A=) 5: 3130332e3132352e31342e302f32342d3234203d3e20313335363336.roa (hash: LDE8MHvWr7ClJaD2b6MGzIMO0HFW7Xb1cGyTVwE6YBs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.crl rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07043FF6B66099F2CBFBBB64672822F3014937E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 06:57:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:9f:54:86:99:25:2a:e7:19:4a:c0:82:f5:ee:7a:d6:a9:e4:94:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07043FF6B66099F2CBFBBB64672822F3014937E8 Validity Not Before: Jul 20 05:46:38 2025 GMT Not After : Jul 23 06:57:38 2025 GMT Subject: CN=8039F0FA9BFDC58AE9D198750B70F3AF1B9FF13E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:54:fc:cf:63:1c:47:26:10:cd:8d:ac:5f:4f: b4:5c:af:9b:ac:9e:48:ab:c3:c3:b7:53:77:bc:cc: d7:4a:00:44:f3:0a:33:a2:5f:10:45:78:3a:7c:76: c6:40:9d:69:5c:f6:71:bc:cd:5c:01:b1:47:f0:49: d9:4b:f1:d1:21:5d:cf:76:fe:7a:37:9a:ee:dc:88: 26:26:f9:90:5e:ed:ca:4e:6b:77:5e:cf:55:02:75: 57:19:d0:ea:10:16:1a:e7:35:83:df:04:2c:28:a7: 3a:05:e6:58:82:c8:e9:c9:78:2c:4a:d2:ed:ca:62: c0:7a:e6:4c:0c:cf:d9:8c:5f:95:d6:7a:b1:e9:f3: 29:83:72:49:ed:99:ae:e4:59:15:e7:6d:80:39:a1: eb:35:81:6c:0c:ff:20:1d:81:7b:60:ef:d5:78:ca: 54:52:eb:94:2d:12:00:ae:8a:79:12:e0:e8:cc:23: 35:84:6c:5a:38:98:48:30:7c:1f:2c:cd:0f:e9:7e: bb:86:4c:f4:37:75:3d:dd:7b:4c:60:18:20:22:de: 1b:1e:4f:a1:db:25:20:37:a2:2f:2c:0d:80:0c:de: b9:e0:51:a3:86:24:41:7d:0c:d2:bf:88:d3:9d:fa: 3c:c0:f9:09:83:fe:91:67:4a:7a:11:fc:bb:e1:d0: f8:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:39:F0:FA:9B:FD:C5:8A:E9:D1:98:75:0B:70:F3:AF:1B:9F:F1:3E X509v3 Authority Key Identifier: keyid:07:04:3F:F6:B6:60:99:F2:CB:FB:BB:64:67:28:22:F3:01:49:37:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07043FF6B66099F2CBFBBB64672822F3014937E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:e8:9d:e6:7f:53:7c:15:44:c0:0b:5c:be:88:d4:fb:66:3d: 23:3b:c2:80:9d:27:49:49:86:5f:80:88:77:58:2f:3c:04:42: c4:d1:91:ed:6e:dd:5f:64:78:c6:ad:45:b3:08:50:c1:83:04: 15:d7:ac:b0:7d:7e:bf:18:67:18:d3:c1:1c:d1:fd:37:ea:11: 9e:c6:1c:63:e0:83:11:b0:10:03:12:39:8c:0e:34:e0:35:46: e6:8c:fe:79:bc:6f:0e:4e:e7:92:c6:c6:60:c2:5e:83:f9:c6: 3e:2e:c2:56:bb:1b:9e:0b:3d:ec:28:97:56:1d:97:97:e6:53: 91:7b:39:27:48:ee:2b:e7:01:92:03:09:71:bb:53:15:4f:52: e7:c1:e5:7d:87:10:65:46:22:ce:66:19:7b:e3:6f:6c:ae:98: d4:b3:8f:b1:8a:04:8c:b1:fe:ae:58:57:cf:f9:d1:c4:0b:e2: 1b:8f:dc:6e:b0:9c:9a:d6:7f:00:1d:7f:27:91:61:0b:6a:63: 68:de:61:8f:5b:fb:cd:01:5e:db:59:6d:3e:8f:c3:1f:8a:17: 2f:8e:fd:42:1a:4b:6d:6f:d5:4c:94:57:a1:09:2b:77:51:8b: fc:47:f0:08:d5:0c:6e:36:4a:c3:df:42:10:61:20:ba:c0:3d: 2c:85:02:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf59UhpklKucZSsCC9e561qnklM8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDcwNDNGRjZCNjYwOTlGMkNCRkJCQjY0NjcyODIyRjMw MTQ5MzdFODAeFw0yNTA3MjAwNTQ2MzhaFw0yNTA3MjMwNjU3MzhaMDMxMTAvBgNV BAMTKDgwMzlGMEZBOUJGREM1OEFFOUQxOTg3NTBCNzBGM0FGMUI5RkYxM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJVPzPYxxHJhDNjaxfT7Rcr5us nkirw8O3U3e8zNdKAETzCjOiXxBFeDp8dsZAnWlc9nG8zVwBsUfwSdlL8dEhXc92 /no3mu7ciCYm+ZBe7cpOa3dez1UCdVcZ0OoQFhrnNYPfBCwopzoF5liCyOnJeCxK 0u3KYsB65kwMz9mMX5XWerHp8ymDckntma7kWRXnbYA5oes1gWwM/yAdgXtg79V4 ylRS65QtEgCuinkS4OjMIzWEbFo4mEgwfB8szQ/pfruGTPQ3dT3de0xgGCAi3hse T6HbJSA3oi8sDYAM3rngUaOGJEF9DNK/iNOd+jzA+QmD/pFnSnoR/Lvh0PijAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgDnw+pv9xYrp0Zh1C3Dzrxuf8T4wHwYDVR0j BBgwFoAUBwQ/9rZgmfLL+7tkZygi8wFJN+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzU0YmU5YS05YjVkLTRjNjQtYjRlOC02MWM3NGU5ZWNlZGMvMC8wNzA0M0ZGNkI2 NjA5OUYyQ0JGQkJCNjQ2NzI4MjJGMzAxNDkzN0U4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDcwNDNGRjZCNjYwOTlGMkNCRkJCQjY0NjcyODIyRjMwMTQ5 MzdFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGM1NGJlOWEtOWI1ZC00YzY0LWI0 ZTgtNjFjNzRlOWVjZWRjLzAvMDcwNDNGRjZCNjYwOTlGMkNCRkJCQjY0NjcyODIy RjMwMTQ5MzdFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADjoneZ/U3wVRMALXL6I1PtmPSM7woCdJ0lJ hl+AiHdYLzwEQsTRke1u3V9keMatRbMIUMGDBBXXrLB9fr8YZxjTwRzR/TfqEZ7G HGPggxGwEAMSOYwONOA1RuaM/nm8bw5O55LGxmDCXoP5xj4uwla7G54LPewol1Yd l5fmU5F7OSdI7ivnAZIDCXG7UxVPUufB5X2HEGVGIs5mGXvjb2yumNSzj7GKBIyx /q5YV8/50cQL4huP3G6wnJrWfwAdfyeRYQtqY2jeYY9b+80BXttZbT6Pwx+KFy+O /UIaS21v1UyUV6EJK3dRi/xH8AjVDG42SsPfQhBhILrAPSyFAi8= -----END CERTIFICATE-----Generated at Tue Jul 22 04:16:21 2025 by rpki-client