$ rpki-client -vvf repo-rpki.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/07479445ACFB5044B3A1BCAAD626072CABEA5C10.mft File: 07479445ACFB5044B3A1BCAAD626072CABEA5C10.mft (raw, json) Hash identifier: FvH0d0ST7jw2rqH4of0kzDk7d7EyM5YwM/sywPui6DQ= Subject key identifier: A4:12:37:AC:28:1F:B0:7B:BC:17:21:7F:58:39:44:63:B5:74:50:33 Authority key identifier: 07:47:94:45:AC:FB:50:44:B3:A1:BC:AA:D6:26:07:2C:AB:EA:5C:10 Certificate issuer: /CN=07479445ACFB5044B3A1BCAAD626072CABEA5C10 Certificate serial: 137D55EEE171EAB4B2398B96BAD163ABC8428E49 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07479445ACFB5044B3A1BCAAD626072CABEA5C10.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/07479445ACFB5044B3A1BCAAD626072CABEA5C10.mft Manifest number: 0389 Signing time: Mon 21 Jul 2025 09:40:36 +0000 Manifest this update: Mon 21 Jul 2025 09:35:36 +0000 Manifest next update: Thu 24 Jul 2025 10:45:36 +0000 Files and hashes: 1: 07479445ACFB5044B3A1BCAAD626072CABEA5C10.crl (hash: cxg2/0bATywZ6td+gcmuzmMTZDggIjJNjrF3WN+e9KY=) 2: 3130332e3136302e3133362e302f32342d3234203d3e20313431353838.roa (hash: oUBWXXStIDyPZSiCAParv1979xKJJMQyaI/tmorNEfQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/07479445ACFB5044B3A1BCAAD626072CABEA5C10.crl rsync://repo-rpki.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/07479445ACFB5044B3A1BCAAD626072CABEA5C10.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07479445ACFB5044B3A1BCAAD626072CABEA5C10.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 10:45:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:7d:55:ee:e1:71:ea:b4:b2:39:8b:96:ba:d1:63:ab:c8:42:8e:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07479445ACFB5044B3A1BCAAD626072CABEA5C10 Validity Not Before: Jul 21 09:35:36 2025 GMT Not After : Jul 24 10:45:36 2025 GMT Subject: CN=A41237AC281FB07BBC17217F58394463B5745033 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:39:0e:8d:11:6b:3b:fe:d2:52:b6:30:64:99: 70:32:1c:13:03:1f:92:2a:35:82:03:83:6e:6c:82: 57:35:0a:dc:c8:76:fd:6d:55:f9:21:48:be:62:3f: d5:02:73:b7:17:9e:d5:ff:df:b4:04:3c:fd:b2:72: e4:c2:d1:61:4d:f6:d9:b5:ef:8e:44:e9:cc:af:13: 22:1a:8a:95:64:a5:04:77:90:23:1e:a6:cd:62:94: 46:e8:c0:7c:8f:47:d9:d6:bb:71:e6:b2:20:70:5b: ac:f5:33:25:d1:a2:e3:96:15:68:fa:c7:a8:95:b2: 6f:38:8c:10:4e:c5:f6:0e:da:12:32:65:a2:08:d4: 60:9b:f3:36:6e:0a:56:38:64:20:6a:34:e7:13:f8: 69:63:37:9f:1c:98:46:84:e8:c1:b6:e3:41:bf:dd: 9c:8c:6a:0f:6d:ec:97:89:59:1f:1f:c3:08:a0:ff: 21:4e:9e:bd:09:50:bc:4c:9d:99:c8:fa:b2:d4:b2: 2d:03:e0:f5:31:cb:ae:57:2a:8d:4f:af:27:55:e3: 35:16:e9:de:3a:8f:9b:e8:53:24:96:2d:20:4a:c0: 73:f9:0a:c3:02:2b:82:67:50:c0:de:ae:cd:52:b9: 7b:c2:ca:18:63:cf:f0:52:05:d5:83:75:11:d4:a7: fd:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:12:37:AC:28:1F:B0:7B:BC:17:21:7F:58:39:44:63:B5:74:50:33 X509v3 Authority Key Identifier: keyid:07:47:94:45:AC:FB:50:44:B3:A1:BC:AA:D6:26:07:2C:AB:EA:5C:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/07479445ACFB5044B3A1BCAAD626072CABEA5C10.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07479445ACFB5044B3A1BCAAD626072CABEA5C10.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/07479445ACFB5044B3A1BCAAD626072CABEA5C10.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:9e:53:25:a0:a5:93:a8:d5:e9:d5:8d:03:25:52:ba:85:85: 09:86:cc:52:4e:43:b7:11:02:43:87:e7:52:8c:82:a9:b8:7f: 68:d3:6d:a9:72:33:1f:2b:30:1d:00:94:9c:e5:cf:72:0a:19: 2d:ac:79:aa:a1:0a:2e:f9:66:91:86:34:a6:2b:aa:76:4e:0f: 44:a1:86:59:0d:22:d9:f7:0b:bf:10:cd:58:39:07:64:4c:d7: 20:2b:1c:86:49:ae:c6:49:fe:bc:f4:a6:7e:e6:ea:f8:33:6d: 9b:e8:f0:bc:45:57:f3:b9:75:39:4f:4c:6b:8e:b2:cd:95:1e: ea:a0:3f:bb:c6:15:9f:46:4e:0c:67:d0:a2:1e:80:b6:ba:b3: 77:1c:bb:3a:e4:0a:4e:6f:ea:ca:cd:11:4a:ca:ea:1c:7d:7c: e6:6d:3e:0b:aa:68:df:4a:5a:d2:9f:ea:97:92:47:65:ac:ca: a1:96:3a:33:2a:fe:26:a3:6c:5b:c2:2e:89:9f:12:94:a9:43: 9b:27:e8:4a:86:ab:81:ea:5d:0b:09:29:48:f4:04:d1:e3:d9: ed:73:12:69:01:ae:b2:df:4e:a1:be:76:6d:26:ef:ca:09:5f: 28:52:02:f1:45:16:15:a8:42:c7:47:9e:02:0c:d3:2a:0d:79: 84:54:14:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE31V7uFx6rSyOYuWutFjq8hCjkkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDc0Nzk0NDVBQ0ZCNTA0NEIzQTFCQ0FBRDYyNjA3MkNB QkVBNUMxMDAeFw0yNTA3MjEwOTM1MzZaFw0yNTA3MjQxMDQ1MzZaMDMxMTAvBgNV BAMTKEE0MTIzN0FDMjgxRkIwN0JCQzE3MjE3RjU4Mzk0NDYzQjU3NDUwMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIOQ6NEWs7/tJStjBkmXAyHBMD H5IqNYIDg25sglc1CtzIdv1tVfkhSL5iP9UCc7cXntX/37QEPP2ycuTC0WFN9tm1 745E6cyvEyIaipVkpQR3kCMeps1ilEbowHyPR9nWu3HmsiBwW6z1MyXRouOWFWj6 x6iVsm84jBBOxfYO2hIyZaII1GCb8zZuClY4ZCBqNOcT+GljN58cmEaE6MG240G/ 3ZyMag9t7JeJWR8fwwig/yFOnr0JULxMnZnI+rLUsi0D4PUxy65XKo1PrydV4zUW 6d46j5voUySWLSBKwHP5CsMCK4JnUMDers1SuXvCyhhjz/BSBdWDdRHUp/1RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpBI3rCgfsHu8FyF/WDlEY7V0UDMwHwYDVR0j BBgwFoAUB0eURaz7UESzobyq1iYHLKvqXBAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MWVlZDA5Yy02MDY4LTQwN2EtYjBhNi01OWI3ZDBiODc4NTUvMC8wNzQ3OTQ0NUFD RkI1MDQ0QjNBMUJDQUFENjI2MDcyQ0FCRUE1QzEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDc0Nzk0NDVBQ0ZCNTA0NEIzQTFCQ0FBRDYyNjA3MkNBQkVB NUMxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjFlZWQwOWMtNjA2OC00MDdhLWIw YTYtNTliN2QwYjg3ODU1LzAvMDc0Nzk0NDVBQ0ZCNTA0NEIzQTFCQ0FBRDYyNjA3 MkNBQkVBNUMxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKieUyWgpZOo1enVjQMlUrqFhQmGzFJOQ7cR AkOH51KMgqm4f2jTbalyMx8rMB0AlJzlz3IKGS2seaqhCi75ZpGGNKYrqnZOD0Sh hlkNItn3C78QzVg5B2RM1yArHIZJrsZJ/rz0pn7m6vgzbZvo8LxFV/O5dTlPTGuO ss2VHuqgP7vGFZ9GTgxn0KIegLa6s3ccuzrkCk5v6srNEUrK6hx9fOZtPguqaN9K WtKf6peSR2WsyqGWOjMq/iajbFvCLomfEpSpQ5sn6EqGq4HqXQsJKUj0BNHj2e1z EmkBrrLfTqG+dm0m78oJXyhSAvFFFhWoQsdHngIM0yoNeYRUFFo= -----END CERTIFICATE-----Generated at Mon Jul 21 18:09:33 2025 by rpki-client