$ rpki-client -vvf repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.mft File: 7433AB64571BE1827F0BC97ED291976B6E3429FA.mft (raw, json) Hash identifier: WSiI7v2t+kuV7reDWmg3+mrrf/rnXykwvRwL6rOmSck= Subject key identifier: 49:DD:FC:DB:E7:CA:C3:BC:CC:6C:26:4C:76:42:2A:8C:41:39:E1:0A Authority key identifier: 74:33:AB:64:57:1B:E1:82:7F:0B:C9:7E:D2:91:97:6B:6E:34:29:FA Certificate issuer: /CN=7433AB64571BE1827F0BC97ED291976B6E3429FA Certificate serial: 7565D6BD4896FE149E09396F1D17CAB018DA4539 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7433AB64571BE1827F0BC97ED291976B6E3429FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.mft Manifest number: 0177 Signing time: Wed 04 Jun 2025 04:02:13 +0000 Manifest this update: Wed 04 Jun 2025 03:57:13 +0000 Manifest next update: Sat 07 Jun 2025 09:59:13 +0000 Files and hashes: 1: 7433AB64571BE1827F0BC97ED291976B6E3429FA.crl (hash: 8B0AEPnvycIT6/1VWUT4VmdMphozXD3R15PYYzceFAU=) 2: 3130332e37352e36322e302f32332d3234203d3e20313530353339.roa (hash: LDOqOfl8+d8Lz+/c+0knmLxGK2Kr8P4Ti1sIU0L3/wo=) 3: 3130332e37352e36322e302f32342d3234203d3e20313530353339.roa (hash: Foo7ECvYM8eC5QdFLfci515Pz4pdcUotJYsrxOmUjnQ=) 4: 3130332e37352e36332e302f32342d3234203d3e20313530353339.roa (hash: dt0M2E6hMVGXyd6wchuCJpbqgL7DjAEk9eGkYZfJTqo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.crl rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7433AB64571BE1827F0BC97ED291976B6E3429FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 09:59:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:65:d6:bd:48:96:fe:14:9e:09:39:6f:1d:17:ca:b0:18:da:45:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7433AB64571BE1827F0BC97ED291976B6E3429FA Validity Not Before: Jun 4 03:57:13 2025 GMT Not After : Jun 7 09:59:13 2025 GMT Subject: CN=49DDFCDBE7CAC3BCCC6C264C76422A8C4139E10A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3c:b6:bb:51:92:f2:fc:16:88:be:2c:24:85: 20:9c:3f:34:ec:2c:04:4a:32:fc:c0:38:ce:1e:3f: 4e:b0:1f:cb:3d:e2:bd:06:73:68:67:58:59:a2:83: 3e:d6:83:59:df:c8:db:c8:3d:14:62:9f:29:4f:b8: ba:64:cb:b7:3a:19:52:49:57:15:9b:1c:d8:a7:bd: 00:0f:cb:63:72:73:5f:7f:5e:d2:be:d4:57:40:f5: 83:c7:05:9e:34:4a:36:35:db:6f:f3:d0:95:1a:69: ca:74:69:36:40:d5:26:31:69:3d:71:ac:08:d8:0e: 66:a3:9e:39:20:5d:aa:a9:32:1c:cd:ae:ee:05:cf: 14:e9:30:31:80:66:57:e5:65:bb:b3:83:d9:cc:35: e5:ba:f0:11:4f:b5:ff:1e:e8:fe:0d:a7:20:bc:ae: 29:67:9e:24:7f:f7:43:60:ee:c4:98:ca:b4:b8:b7: 65:e6:55:75:dc:c1:b2:cb:f7:b1:83:e0:94:6c:07: 0f:65:f2:7d:7f:ce:d0:63:1e:7d:07:e8:0c:54:cd: 39:3b:82:4d:6a:05:f5:49:59:e2:c1:b2:b6:20:03: ec:8c:38:db:50:25:88:12:d0:b9:57:63:6e:d9:4c: b6:f9:c9:51:8d:73:59:95:01:97:08:3b:b7:5e:af: 92:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:DD:FC:DB:E7:CA:C3:BC:CC:6C:26:4C:76:42:2A:8C:41:39:E1:0A X509v3 Authority Key Identifier: keyid:74:33:AB:64:57:1B:E1:82:7F:0B:C9:7E:D2:91:97:6B:6E:34:29:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7433AB64571BE1827F0BC97ED291976B6E3429FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:70:b1:c3:11:ea:de:37:af:28:e1:de:7c:76:d8:57:54:80: fe:34:0b:5e:25:1a:c9:72:0d:62:3d:2c:e8:d4:c9:a3:87:70: ce:9e:83:80:e4:d3:62:cc:78:7e:f8:84:8b:70:cd:02:56:b1: 23:ae:23:68:92:82:ca:26:74:9b:2a:2e:b1:f4:78:bb:41:81: ea:31:76:3b:58:e9:36:35:7d:db:fd:5a:44:22:0d:d2:48:31: 7a:0d:01:37:27:1b:7e:06:5e:70:61:57:c3:d4:ae:5f:b5:82: 28:e0:5a:e2:af:53:71:23:dd:95:8e:dd:7d:ed:91:60:cd:c1: fe:ee:77:ae:c2:6a:f0:41:3d:fe:0b:fb:3b:de:92:4f:c7:7a: 11:b3:5a:40:bb:e9:b3:02:ed:f9:92:c9:88:9d:29:87:bf:f5: 23:bc:22:b7:86:93:41:85:45:1c:ae:8a:c8:df:91:27:65:0a: 8e:95:96:9a:0b:90:04:61:b8:09:69:ea:73:51:92:b6:37:5d: 30:7a:df:4a:6b:1c:22:f8:72:3e:49:3b:8d:a7:ff:b1:0c:6c: fa:be:0c:a9:22:9a:cf:c7:f8:59:08:2e:66:51:97:03:4b:76: 71:00:47:83:68:d3:b6:75:c1:64:1a:44:43:86:7b:18:86:83: 0d:a6:ac:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdWXWvUiW/hSeCTlvHRfKsBjaRTkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQzM0FCNjQ1NzFCRTE4MjdGMEJDOTdFRDI5MTk3NkI2 RTM0MjlGQTAeFw0yNTA2MDQwMzU3MTNaFw0yNTA2MDcwOTU5MTNaMDMxMTAvBgNV BAMTKDQ5RERGQ0RCRTdDQUMzQkNDQzZDMjY0Qzc2NDIyQThDNDEzOUUxMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLPLa7UZLy/BaIviwkhSCcPzTs LARKMvzAOM4eP06wH8s94r0Gc2hnWFmigz7Wg1nfyNvIPRRinylPuLpky7c6GVJJ VxWbHNinvQAPy2Nyc19/XtK+1FdA9YPHBZ40SjY122/z0JUaacp0aTZA1SYxaT1x rAjYDmajnjkgXaqpMhzNru4FzxTpMDGAZlflZbuzg9nMNeW68BFPtf8e6P4NpyC8 rilnniR/90Ng7sSYyrS4t2XmVXXcwbLL97GD4JRsBw9l8n1/ztBjHn0H6AxUzTk7 gk1qBfVJWeLBsrYgA+yMONtQJYgS0LlXY27ZTLb5yVGNc1mVAZcIO7der5LxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSd382+fKw7zMbCZMdkIqjEE54QowHwYDVR0j BBgwFoAUdDOrZFcb4YJ/C8l+0pGXa240KfowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w N2M4YTBjMy0zN2Y1LTQ2NjctYTQzMC02ZmExMTFkMzQzYWEvMC83NDMzQUI2NDU3 MUJFMTgyN0YwQkM5N0VEMjkxOTc2QjZFMzQyOUZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzQzM0FCNjQ1NzFCRTE4MjdGMEJDOTdFRDI5MTk3NkI2RTM0 MjlGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDdjOGEwYzMtMzdmNS00NjY3LWE0 MzAtNmZhMTExZDM0M2FhLzAvNzQzM0FCNjQ1NzFCRTE4MjdGMEJDOTdFRDI5MTk3 NkI2RTM0MjlGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALZwscMR6t43ryjh3nx22FdUgP40C14lGsly DWI9LOjUyaOHcM6eg4Dk02LMeH74hItwzQJWsSOuI2iSgsomdJsqLrH0eLtBgeox djtY6TY1fdv9WkQiDdJIMXoNATcnG34GXnBhV8PUrl+1gijgWuKvU3Ej3ZWO3X3t kWDNwf7ud67CavBBPf4L+zvekk/HehGzWkC76bMC7fmSyYidKYe/9SO8IreGk0GF RRyuisjfkSdlCo6VlpoLkARhuAlp6nNRkrY3XTB630prHCL4cj5JO42n/7EMbPq+ DKkims/H+FkILmZRlwNLdnEAR4No07Z1wWQaREOGexiGgw2mrIg= -----END CERTIFICATE-----Generated at Thu Jun 5 19:40:24 2025 by rpki-client