$ rpki-client -vvf repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft File: 7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft (raw, json) Hash identifier: P/3PCVy9zCvLPcRMqGBKeWQvU/UheSA37vNaNu72slQ= Subject key identifier: 3A:B9:38:60:CF:F4:08:6D:06:46:44:23:5E:26:A3:6A:CB:01:AA:C8 Authority key identifier: 7F:EF:6B:F5:3F:A3:12:2A:0F:09:CE:F4:B4:08:E1:37:92:A1:45:45 Certificate issuer: /CN=7FEF6BF53FA3122A0F09CEF4B408E13792A14545 Certificate serial: 7AF7BDB793B1DD9E9198C737D34FF1D74D39333E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.cer Subject info access: rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft Manifest number: 01F4 Signing time: Sat 26 Jul 2025 00:41:34 +0000 Manifest this update: Sat 26 Jul 2025 00:36:34 +0000 Manifest next update: Tue 29 Jul 2025 09:01:34 +0000 Files and hashes: 1: 3130332e3136372e3130352e302f32342d3234203d3e203338333230.roa (hash: t5DmPirQU+jLx9aHjmb/pgwv+a8S0p8w/q4YuXRMJQI=) 2: 3130332e3136372e3130342e302f32342d3234203d3e20313339343130.roa (hash: cilQSsMRfqwA9LOmx5CPo41uuLBHWQ7Qq5S49MHRn2E=) 3: 7FEF6BF53FA3122A0F09CEF4B408E13792A14545.crl (hash: CjjM9kBXFrnIg5K/DKZna3xSnkjmhLxYS01QIwc24nA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.crl rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 09:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:f7:bd:b7:93:b1:dd:9e:91:98:c7:37:d3:4f:f1:d7:4d:39:33:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7FEF6BF53FA3122A0F09CEF4B408E13792A14545 Validity Not Before: Jul 26 00:36:34 2025 GMT Not After : Jul 29 09:01:34 2025 GMT Subject: CN=3AB93860CFF4086D064644235E26A36ACB01AAC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:70:04:46:93:f6:ae:5c:37:34:6e:1e:15:8b: 32:36:19:40:ba:36:27:db:1e:45:86:c5:a2:78:47: 20:60:6a:e9:b9:a4:d6:5b:a1:05:23:cc:4b:76:b6: 1e:89:e6:f7:b2:ed:9b:af:92:13:0f:a0:a9:14:94: 04:07:71:ed:a3:8b:49:62:a7:e3:de:8e:0b:ea:e8: d1:b5:83:8f:74:a5:b9:52:ca:b8:31:97:02:9c:52: 3d:e6:b3:40:55:8f:1c:9a:b9:37:e4:cd:cd:f7:c7: 1f:8e:9a:0d:7b:1c:17:91:e2:2d:dd:33:b4:b0:b9: 21:13:37:d0:19:79:20:e6:5f:48:42:7a:45:1a:0f: f6:b4:4b:d4:94:ff:74:a3:a6:41:8e:42:b7:c3:ed: b5:0d:a4:5f:4b:d4:c8:f9:ea:dc:ce:2d:7c:1c:bf: b0:17:92:70:bf:16:e9:49:3c:9b:2a:1a:9d:81:62: a9:5d:c1:4f:52:fb:eb:02:f9:af:f1:1c:12:0d:f6: 83:2d:5b:ef:9d:b0:57:b1:b2:18:eb:c7:0e:24:95: f9:d7:00:97:24:53:45:d1:12:77:1e:6d:0a:d2:f2: c3:a5:62:7c:36:1f:3d:44:59:a8:34:37:d7:54:5d: b4:d4:52:53:38:c7:67:35:41:20:92:58:d6:1f:fa: b4:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:B9:38:60:CF:F4:08:6D:06:46:44:23:5E:26:A3:6A:CB:01:AA:C8 X509v3 Authority Key Identifier: keyid:7F:EF:6B:F5:3F:A3:12:2A:0F:09:CE:F4:B4:08:E1:37:92:A1:45:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c9:8a:c9:05:cf:15:88:3e:a5:c3:28:ae:e8:f4:52:ce:c2:b3: b6:b5:57:39:f8:26:ff:25:6f:4b:6a:5b:0e:53:dc:11:84:c1: 36:47:f5:be:10:c1:9c:d0:aa:67:b1:27:bb:83:4b:e6:60:34: 2b:c1:ba:82:9c:63:34:c0:ea:da:06:1f:3d:21:51:a1:cb:e9: 8e:92:5a:99:d2:57:da:99:8b:bc:3a:ab:e6:be:1f:7c:6b:70: be:c4:f8:6b:6d:06:ed:95:45:da:d9:29:de:c1:27:05:70:9b: 53:83:a2:65:ce:b8:6f:a5:ce:4a:89:34:b4:f2:a5:ff:c7:b1: 4d:c5:d3:3a:96:51:04:c4:8d:0f:9a:4d:b1:81:34:f0:9a:1d: e0:cb:62:38:07:e1:27:5f:02:0b:0e:c6:a8:cd:74:cb:9f:3f: 5c:ed:67:cb:ef:2c:9b:25:b9:55:ca:db:ce:5a:5e:f2:a5:21: 83:69:35:4e:1a:09:de:42:d1:77:32:f2:73:49:68:50:22:64: fa:30:b0:ea:79:62:f8:e9:85:34:9f:8a:c2:f0:57:6d:6d:9c: 9e:c3:f0:72:02:2a:80:a5:20:2f:fe:3f:2d:63:40:c5:4e:ed: 83:59:4f:3a:99:45:d6:72:90:0a:a5:64:76:ac:fb:71:30:91: 62:43:ff:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeve9t5Ox3Z6RmMc300/x1005Mz4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ZFRjZCRjUzRkEzMTIyQTBGMDlDRUY0QjQwOEUxMzc5 MkExNDU0NTAeFw0yNTA3MjYwMDM2MzRaFw0yNTA3MjkwOTAxMzRaMDMxMTAvBgNV BAMTKDNBQjkzODYwQ0ZGNDA4NkQwNjQ2NDQyMzVFMjZBMzZBQ0IwMUFBQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdcARGk/auXDc0bh4VizI2GUC6 NifbHkWGxaJ4RyBgaum5pNZboQUjzEt2th6J5vey7ZuvkhMPoKkUlAQHce2ji0li p+Pejgvq6NG1g490pblSyrgxlwKcUj3ms0BVjxyauTfkzc33xx+Omg17HBeR4i3d M7SwuSETN9AZeSDmX0hCekUaD/a0S9SU/3SjpkGOQrfD7bUNpF9L1Mj56tzOLXwc v7AXknC/FulJPJsqGp2BYqldwU9S++sC+a/xHBIN9oMtW++dsFexshjrxw4klfnX AJckU0XREncebQrS8sOlYnw2Hz1EWag0N9dUXbTUUlM4x2c1QSCSWNYf+rT5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOrk4YM/0CG0GRkQjXiajassBqsgwHwYDVR0j BBgwFoAUf+9r9T+jEioPCc70tAjhN5KhRUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MDNlYmFiYi05OTlmLTRmM2UtODRjMS1iZjI3OWJmZTE3ODcvMC83RkVGNkJGNTNG QTMxMjJBMEYwOUNFRjRCNDA4RTEzNzkyQTE0NTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0ZFRjZCRjUzRkEzMTIyQTBGMDlDRUY0QjQwOEUxMzc5MkEx NDU0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzAzZWJhYmItOTk5Zi00ZjNlLTg0 YzEtYmYyNzliZmUxNzg3LzAvN0ZFRjZCRjUzRkEzMTIyQTBGMDlDRUY0QjQwOEUx Mzc5MkExNDU0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMmKyQXPFYg+pcMoruj0Us7Cs7a1Vzn4Jv8l b0tqWw5T3BGEwTZH9b4QwZzQqmexJ7uDS+ZgNCvBuoKcYzTA6toGHz0hUaHL6Y6S WpnSV9qZi7w6q+a+H3xrcL7E+GttBu2VRdrZKd7BJwVwm1ODomXOuG+lzkqJNLTy pf/HsU3F0zqWUQTEjQ+aTbGBNPCaHeDLYjgH4SdfAgsOxqjNdMufP1ztZ8vvLJsl uVXK285aXvKlIYNpNU4aCd5C0Xcy8nNJaFAiZPowsOp5YvjphTSfisLwV21tnJ7D 8HICKoClIC/+Py1jQMVO7YNZTzqZRdZykAqlZHas+3EwkWJD/+A= -----END CERTIFICATE-----Generated at Sun Jul 27 00:28:28 2025 by rpki-client