$ rpki-client -vvf repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft File: 407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft (raw, json) Hash identifier: o0uM9m9h4rKvh+2AJXlpUm+IsiWfw352LJlVssz7EjE= Subject key identifier: C9:34:CA:F4:E3:4C:F8:9F:2A:CF:8F:49:7B:09:2A:F0:E9:6D:D1:AB Authority key identifier: 40:7B:7C:7E:E0:9E:DB:AA:0A:35:25:E2:09:FF:8E:93:E4:86:53:C8 Certificate issuer: /CN=407B7C7EE09EDBAA0A3525E209FF8E93E48653C8 Certificate serial: 02B6D8B66D7C1484D2C92E34B0F15A54C76E3D6C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft Manifest number: A0 Signing time: Mon 21 Jul 2025 10:32:20 +0000 Manifest this update: Mon 21 Jul 2025 10:27:20 +0000 Manifest next update: Thu 24 Jul 2025 15:11:20 +0000 Files and hashes: 1: 3130332e3136302e3230322e302f32332d3233203d3e20313431363036.roa (hash: Gj+dL3k6BLOV8ougeJn8Z24XkFylft6ZOL9dKAW0YtU=) 2: 323030313a6466313a366263303a3a2f34382d3438203d3e20313431363036.roa (hash: LnoUiVTC+YkZ5Y/4/Q1S1mXaeabC5U6lsaInD923/gY=) 3: 3130332e3136302e3230322e302f32342d3234203d3e20313431363036.roa (hash: NqmMORtYspcubuoIhO/lJNy3KlFyaaaNEdp/IXvq0Ng=) 4: 3130332e3136302e3230332e302f32342d3234203d3e20313431363036.roa (hash: gOnGfuRTcZIR+30ZYAMikHYwYT1lMfTYagdIRfIVS+c=) 5: 407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.crl (hash: PAjTG3YxXlsdXov+jvKVytJVzoMxELSjza9GXYUt8hM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.crl rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 15:11:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:b6:d8:b6:6d:7c:14:84:d2:c9:2e:34:b0:f1:5a:54:c7:6e:3d:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=407B7C7EE09EDBAA0A3525E209FF8E93E48653C8 Validity Not Before: Jul 21 10:27:20 2025 GMT Not After : Jul 24 15:11:20 2025 GMT Subject: CN=C934CAF4E34CF89F2ACF8F497B092AF0E96DD1AB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:67:46:6b:0b:f6:e2:64:18:be:53:99:14:e9: 04:8e:a8:e2:a7:dd:ac:24:ee:82:37:8d:73:1e:f5: 7a:03:b8:72:1d:5b:70:01:4e:1e:6c:e2:71:1a:ba: 03:92:d2:72:2e:5d:c4:f4:26:7e:15:69:38:25:32: 35:e0:09:d9:5f:05:85:5b:ce:0b:73:5a:7d:69:8f: 98:b7:f8:f3:e8:35:5e:f4:24:44:96:17:8a:ca:94: 7b:d4:1b:35:e0:c8:bd:63:ae:33:90:a8:01:6f:81: 2f:e1:8b:5e:b7:ba:33:13:90:95:f8:48:16:f4:eb: 6d:d8:7d:80:80:ef:48:20:d7:31:d7:6e:e4:ef:b8: e5:e6:06:11:fc:5a:91:32:a4:c1:5a:62:ab:1c:cf: b8:fd:21:d5:09:b4:47:37:c3:ab:5d:fc:a0:79:6c: ed:15:cd:8f:51:7f:5a:7e:3b:b5:6b:10:26:57:8a: 62:42:4f:58:10:ea:81:9b:09:3d:81:64:b3:c0:c3: 42:9a:0a:d0:29:1a:96:06:d4:06:5f:87:23:a0:c0: 9e:b8:66:2a:9b:2d:86:af:b2:23:d0:8d:fc:c3:91: df:12:90:68:0c:f9:5c:a0:3b:65:94:85:13:ad:4c: 7c:fd:21:2f:05:ba:d4:96:9b:d3:c4:d4:83:8b:55: c7:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:34:CA:F4:E3:4C:F8:9F:2A:CF:8F:49:7B:09:2A:F0:E9:6D:D1:AB X509v3 Authority Key Identifier: keyid:40:7B:7C:7E:E0:9E:DB:AA:0A:35:25:E2:09:FF:8E:93:E4:86:53:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:64:0a:b8:07:5b:e3:21:40:a0:47:2f:dc:db:39:7b:28:47: c0:c2:a8:a2:e7:df:e3:9d:ae:35:86:da:4d:1b:78:e9:d8:f2: 29:97:b3:d0:ca:56:37:47:65:70:17:8d:07:a6:c9:03:7d:f8: 29:3f:a9:c4:cd:81:44:cf:b7:d8:26:a5:0b:d2:d5:7f:2a:f0: db:54:c5:b8:75:20:dd:a9:3c:7d:c8:2f:bf:94:f0:24:e2:b1: e7:2f:71:1e:b4:ce:15:97:7d:db:19:55:d0:f4:36:ee:93:98: 27:49:73:e2:4a:aa:40:dd:ae:45:b8:bd:0b:9a:89:64:85:72: ba:9d:6c:3a:24:1d:a6:f9:db:10:75:72:66:68:6a:07:11:ee: 3d:d5:89:b9:e7:88:d0:01:23:99:8d:41:89:10:b6:54:fc:45: b2:77:b6:de:87:c7:d9:01:c7:de:90:c4:b3:94:1a:d1:92:6a: ab:09:5a:f7:5d:a7:c5:0c:52:f6:f1:70:39:27:83:92:4b:9b: 24:90:3a:68:b6:bd:f1:6e:47:6b:9c:98:e3:9c:59:a2:84:39: 6d:f3:44:76:c6:cf:30:55:58:09:38:c2:a6:5b:39:3c:39:62: 64:17:9e:23:8b:3c:3a:19:e8:49:fa:a8:50:94:54:65:7d:62: 30:a0:ee:63 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUArbYtm18FITSyS40sPFaVMduPWwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA3QjdDN0VFMDlFREJBQTBBMzUyNUUyMDlGRjhFOTNF NDg2NTNDODAeFw0yNTA3MjExMDI3MjBaFw0yNTA3MjQxNTExMjBaMDMxMTAvBgNV BAMTKEM5MzRDQUY0RTM0Q0Y4OUYyQUNGOEY0OTdCMDkyQUYwRTk2REQxQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeZ0ZrC/biZBi+U5kU6QSOqOKn 3awk7oI3jXMe9XoDuHIdW3ABTh5s4nEaugOS0nIuXcT0Jn4VaTglMjXgCdlfBYVb zgtzWn1pj5i3+PPoNV70JESWF4rKlHvUGzXgyL1jrjOQqAFvgS/hi163ujMTkJX4 SBb0623YfYCA70gg1zHXbuTvuOXmBhH8WpEypMFaYqscz7j9IdUJtEc3w6td/KB5 bO0VzY9Rf1p+O7VrECZXimJCT1gQ6oGbCT2BZLPAw0KaCtApGpYG1AZfhyOgwJ64 ZiqbLYavsiPQjfzDkd8SkGgM+VygO2WUhROtTHz9IS8FutSWm9PE1IOLVcfLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyTTK9ONM+J8qz49Jewkq8Olt0aswHwYDVR0j BBgwFoAUQHt8fuCe26oKNSXiCf+Ok+SGU8gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDY0YmY2YS00MzAyLTQ2MGYtOTY2OS0wOWE1MGE3M2FmMWEvMC80MDdCN0M3RUUw OUVEQkFBMEEzNTI1RTIwOUZGOEU5M0U0ODY1M0M4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA3QjdDN0VFMDlFREJBQTBBMzUyNUUyMDlGRjhFOTNFNDg2 NTNDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ2NGJmNmEtNDMwMi00NjBmLTk2 NjktMDlhNTBhNzNhZjFhLzAvNDA3QjdDN0VFMDlFREJBQTBBMzUyNUUyMDlGRjhF OTNFNDg2NTNDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAhkCrgHW+MhQKBHL9zbOXsoR8DCqKLn3+Od rjWG2k0beOnY8imXs9DKVjdHZXAXjQemyQN9+Ck/qcTNgUTPt9gmpQvS1X8q8NtU xbh1IN2pPH3IL7+U8CTisecvcR60zhWXfdsZVdD0Nu6TmCdJc+JKqkDdrkW4vQua iWSFcrqdbDokHab52xB1cmZoagcR7j3VibnniNABI5mNQYkQtlT8RbJ3tt6Hx9kB x96QxLOUGtGSaqsJWvddp8UMUvbxcDkng5JLmySQOmi2vfFuR2ucmOOcWaKEOW3z RHbGzzBVWAk4wqZbOTw5YmQXniOLPDoZ6En6qFCUVGV9YjCg7mM= -----END CERTIFICATE-----Generated at Wed Jul 23 02:01:34 2025 by rpki-client