$ rpki-client -vvf repo-rpki.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.mft File: 7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.mft (raw, json) Hash identifier: tf8BdCv2rLKaGagFVqK+JM4ipAUvBgS2Z15BkqMALPA= Subject key identifier: 9A:C4:D8:FC:03:1A:7F:21:22:0C:A1:32:0D:2B:5F:90:6A:73:F7:60 Authority key identifier: 7C:85:92:B0:80:A1:7A:9C:E2:F7:82:DE:A4:C1:29:7A:97:B6:0C:DC Certificate issuer: /CN=7C8592B080A17A9CE2F782DEA4C1297A97B60CDC Certificate serial: 4FA81A5343794436F6C745F35D5A2CF5B58B36F2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.mft Manifest number: 017F Signing time: Wed 04 Jun 2025 13:51:28 +0000 Manifest this update: Wed 04 Jun 2025 13:46:28 +0000 Manifest next update: Sat 07 Jun 2025 14:37:28 +0000 Files and hashes: 1: 3130332e36382e3231332e302f32342d3234203d3e20313530353330.roa (hash: cHp1PrRnqsW34jqmb6yO4cCFmXfZNHvvcfXkiTq83Hk=) 2: 3130332e36382e3231322e302f32332d3234203d3e20313530353330.roa (hash: ZT9C4ozjXu7zgMyjGuykG3d8zzHdnxWgyq99AWHagU0=) 3: 7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.crl (hash: /W5jOpr+lAWD1mH0A+TEUBDGyGFIAAk73kKle/8ywvk=) 4: 3130332e36382e3231322e302f32342d3234203d3e20313530353330.roa (hash: Ttq6OmcuDA2jvY00pswCCvXRwFmH52FGSMDBivzFf7A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.crl rsync://repo-rpki.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:37:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:a8:1a:53:43:79:44:36:f6:c7:45:f3:5d:5a:2c:f5:b5:8b:36:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C8592B080A17A9CE2F782DEA4C1297A97B60CDC Validity Not Before: Jun 4 13:46:28 2025 GMT Not After : Jun 7 14:37:28 2025 GMT Subject: CN=9AC4D8FC031A7F21220CA1320D2B5F906A73F760 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d8:29:15:8b:26:5b:a5:cc:db:0f:68:42:ca: eb:2c:34:7f:64:80:db:1b:1d:53:56:86:44:1f:e7: cd:4c:03:d6:ee:56:2f:c9:56:55:6d:e9:98:18:29: cc:c3:67:a2:19:a9:10:ed:d8:ff:00:32:df:c7:d2: d7:5c:95:23:de:6d:be:74:59:bf:4a:a4:71:b3:65: b5:03:f4:cf:58:51:90:5b:0c:08:e2:6e:c8:d0:87: cb:8e:3a:91:5d:cb:4b:af:b2:8c:69:e0:9f:53:6f: a6:51:23:46:fc:a7:4f:1c:ab:5f:99:16:95:ef:8e: 38:3c:17:58:35:3b:44:53:2b:38:58:0b:89:34:52: ba:77:3c:71:6a:be:e2:dc:d1:2f:96:05:51:14:18: fa:cf:9b:7b:d0:24:a9:8c:1b:9c:c6:3f:b6:35:be: 71:31:9e:70:7c:d6:2a:e6:38:9d:2d:ce:b0:ee:a0: c8:cd:bd:4f:f5:58:d0:a0:7c:cd:56:15:cb:a5:d1: b0:48:ce:1e:c3:a0:10:e0:fd:90:83:48:e5:e3:62: 66:81:53:28:f9:f4:07:97:39:41:5a:9b:87:cd:0f: 78:83:ad:69:ad:6a:0d:44:80:28:d9:4e:0d:57:59: a8:2d:73:de:8a:65:83:73:0c:82:6e:44:33:67:d8: 54:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:C4:D8:FC:03:1A:7F:21:22:0C:A1:32:0D:2B:5F:90:6A:73:F7:60 X509v3 Authority Key Identifier: keyid:7C:85:92:B0:80:A1:7A:9C:E2:F7:82:DE:A4:C1:29:7A:97:B6:0C:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0260cf16-74ff-4f2f-b56c-e581eaea251c/0/7C8592B080A17A9CE2F782DEA4C1297A97B60CDC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:54:fb:47:0b:c6:9e:af:fb:42:6f:4f:6a:fb:f0:1d:d1:b6: 8d:ac:7e:e3:83:21:b6:4d:ed:49:fb:69:ff:62:3d:13:b4:de: 94:92:76:17:f2:3a:8c:99:c6:38:85:0c:35:e7:84:d7:97:43: 13:2f:0e:08:1a:96:14:da:0b:61:c0:21:74:d6:5b:2d:52:ce: f0:1b:a8:e5:2f:62:59:ae:9e:5a:c4:f7:a0:c6:22:63:aa:8d: 48:e2:ce:d4:c0:42:b0:a6:2d:ed:ec:c8:52:d6:d6:32:7d:f6: bd:b0:66:6a:39:80:ca:0e:a9:b6:d7:40:35:18:28:01:d3:c4: 7c:55:0f:e0:6e:27:48:b0:4e:87:c8:f1:e7:32:6f:d4:e5:e8: 5b:04:a5:99:4c:81:45:e3:68:19:40:d5:14:19:30:45:02:00: 6f:ff:66:77:53:4d:4e:b4:06:fe:0c:b4:fb:f1:f4:46:3f:70: e5:a4:e0:f5:db:ad:1c:af:ac:47:fc:ba:e3:2a:7d:e6:1b:02: b0:9b:64:8c:d2:cf:7b:1f:f5:5f:24:d5:a2:7f:70:06:c8:5e: a5:a2:d0:97:cb:07:12:98:cf:63:95:3b:f0:5c:5f:77:4a:4d: ed:99:76:98:e9:c5:62:62:43:38:6b:73:ce:bb:10:40:a0:ca: 44:65:a9:64 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT6gaU0N5RDb2x0XzXVos9bWLNvIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M4NTkyQjA4MEExN0E5Q0UyRjc4MkRFQTRDMTI5N0E5 N0I2MENEQzAeFw0yNTA2MDQxMzQ2MjhaFw0yNTA2MDcxNDM3MjhaMDMxMTAvBgNV BAMTKDlBQzREOEZDMDMxQTdGMjEyMjBDQTEzMjBEMkI1RjkwNkE3M0Y3NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC82CkViyZbpczbD2hCyussNH9k gNsbHVNWhkQf581MA9buVi/JVlVt6ZgYKczDZ6IZqRDt2P8AMt/H0tdclSPebb50 Wb9KpHGzZbUD9M9YUZBbDAjibsjQh8uOOpFdy0uvsoxp4J9Tb6ZRI0b8p08cq1+Z FpXvjjg8F1g1O0RTKzhYC4k0Urp3PHFqvuLc0S+WBVEUGPrPm3vQJKmMG5zGP7Y1 vnExnnB81irmOJ0tzrDuoMjNvU/1WNCgfM1WFcul0bBIzh7DoBDg/ZCDSOXjYmaB Uyj59AeXOUFam4fND3iDrWmtag1EgCjZTg1XWagtc96KZYNzDIJuRDNn2FTtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmsTY/AMafyEiDKEyDStfkGpz92AwHwYDVR0j BBgwFoAUfIWSsIChepzi94LepMEpepe2DNwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MjYwY2YxNi03NGZmLTRmMmYtYjU2Yy1lNTgxZWFlYTI1MWMvMC83Qzg1OTJCMDgw QTE3QTlDRTJGNzgyREVBNEMxMjk3QTk3QjYwQ0RDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0M4NTkyQjA4MEExN0E5Q0UyRjc4MkRFQTRDMTI5N0E5N0I2 MENEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDI2MGNmMTYtNzRmZi00ZjJmLWI1 NmMtZTU4MWVhZWEyNTFjLzAvN0M4NTkyQjA4MEExN0E5Q0UyRjc4MkRFQTRDMTI5 N0E5N0I2MENEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACNU+0cLxp6v+0JvT2r78B3Rto2sfuODIbZN 7Un7af9iPRO03pSSdhfyOoyZxjiFDDXnhNeXQxMvDggalhTaC2HAIXTWWy1SzvAb qOUvYlmunlrE96DGImOqjUjiztTAQrCmLe3syFLW1jJ99r2wZmo5gMoOqbbXQDUY KAHTxHxVD+BuJ0iwTofI8ecyb9Tl6FsEpZlMgUXjaBlA1RQZMEUCAG//ZndTTU60 Bv4MtPvx9EY/cOWk4PXbrRyvrEf8uuMqfeYbArCbZIzSz3sf9V8k1aJ/cAbIXqWi 0JfLBxKYz2OVO/BcX3dKTe2ZdpjpxWJiQzhrc867EECgykRlqWQ= -----END CERTIFICATE-----Generated at Fri Jun 6 16:30:05 2025 by rpki-client