$ rpki-client -vvf repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft File: F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft (raw, json) Hash identifier: mxp8EEkSpUOVkPjKq1FJ6ITWHW4Ja3Yh75BgCfST6/o= Subject key identifier: 28:60:7E:22:76:0A:F5:93:2E:E2:F5:38:ED:51:8F:85:C3:2E:D2:D6 Authority key identifier: F7:00:7F:FD:A6:6A:99:D7:58:8D:A9:3F:FA:F2:6B:DE:57:B3:CA:64 Certificate issuer: /CN=F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64 Certificate serial: 5394C1B816187A9BBD3B85393D7F23F3A80E9618 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.cer Subject info access: rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft Manifest number: 01FB Signing time: Sat 07 Jun 2025 21:01:18 +0000 Manifest this update: Sat 07 Jun 2025 20:56:18 +0000 Manifest next update: Wed 11 Jun 2025 06:38:18 +0000 Files and hashes: 1: F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.crl (hash: XKOLD4o0Pr9aHmkLvXK0qcsEUcB20nto4HbIqZcLCkg=) 2: 3130332e3138362e3230382e302f32342d3234203d3e20313337333331.roa (hash: 7ko0bxN2Z7aHh5HxpPGcoXd3wiTgQprx370mdkriXlU=) 3: 3130332e3138362e3230392e302f32342d3234203d3e20313336383733.roa (hash: LoEOvDkV9bQaYXTmNRoMjCJnrRw7dRDwtZgFA/xt/mM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.crl rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 11 Jun 2025 02:27:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:94:c1:b8:16:18:7a:9b:bd:3b:85:39:3d:7f:23:f3:a8:0e:96:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64 Validity Not Before: Jun 7 20:56:18 2025 GMT Not After : Jun 11 06:38:18 2025 GMT Subject: CN=28607E22760AF5932EE2F538ED518F85C32ED2D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b8:fa:31:d4:1c:82:90:7a:79:e0:28:b6:df: 6f:82:73:b5:33:c1:b3:cb:97:aa:e2:91:14:8e:8c: b5:5b:5d:27:e8:e3:07:87:9e:ac:07:36:f1:af:e4: ab:a5:3a:96:96:f7:dc:35:c1:b1:b8:f9:b6:6b:e5: 82:52:39:5b:f6:7a:1e:4c:5e:6d:ce:db:8c:fe:a6: bc:93:b3:73:3e:1e:3a:13:63:aa:59:3e:75:b0:b5: c3:75:c9:01:83:79:1a:a2:b2:46:f0:52:b1:7a:64: 50:a8:44:98:32:27:df:e7:23:bf:64:18:5c:7c:9a: 0e:37:69:b2:82:85:a6:77:82:c1:4e:39:59:47:52: b9:e3:07:8d:51:f5:5e:be:b8:6b:91:7a:74:72:95: 31:ca:4f:78:ec:fd:1b:d2:8a:41:3b:57:5e:a5:fd: c6:7c:8c:5e:76:59:f7:4c:38:5c:4c:65:80:7c:04: 50:b8:a0:29:65:42:f6:1a:49:f0:73:55:4b:29:5e: de:1e:99:6d:31:d6:c6:f0:d5:60:26:6f:6a:62:4c: ac:2b:2e:74:1e:c2:32:c5:5a:27:74:45:c9:58:ae: f0:f1:b8:75:af:8b:c8:64:dc:4d:bd:bd:ce:57:b6: 14:3a:22:cf:d7:7b:16:a6:af:17:36:29:3f:f7:34: f5:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:60:7E:22:76:0A:F5:93:2E:E2:F5:38:ED:51:8F:85:C3:2E:D2:D6 X509v3 Authority Key Identifier: keyid:F7:00:7F:FD:A6:6A:99:D7:58:8D:A9:3F:FA:F2:6B:DE:57:B3:CA:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:b6:97:5b:97:48:1d:c9:10:89:d6:28:34:1d:0f:ef:0f:86: e8:8c:b8:e1:5e:a2:e5:4d:2b:44:cc:22:40:25:57:2c:1f:51: 2a:07:81:8d:7b:9b:cf:e2:b4:4d:cc:f8:87:ae:e8:3c:63:58: 52:2e:cd:5f:7e:51:ee:dc:3e:33:cd:b1:6b:56:c6:0f:3d:2b: f9:df:70:c0:3a:95:e2:6e:c0:08:b6:b9:ab:2c:88:52:75:52: ab:38:08:05:47:55:df:79:d6:9b:d7:97:5d:6b:20:57:fe:ce: 62:d8:18:5b:a1:47:03:7d:11:84:8b:78:c4:4c:c3:69:bc:6b: 93:8b:e9:d3:15:8f:e8:be:85:76:a5:e6:26:f8:5d:9c:df:70: bc:89:71:d7:bf:4e:74:8f:2a:cd:21:77:58:60:49:5d:16:03: 8e:0a:24:b3:c6:39:60:c0:de:b7:1b:9d:47:f9:85:61:b1:ca: 70:e8:a3:27:8e:e6:d4:62:c4:fe:5c:96:4e:32:d9:a1:7b:f3: 74:2b:74:a5:c4:bc:eb:c1:b3:d2:0f:70:2a:e0:68:eb:f1:c5: e4:e8:ac:27:a1:1c:2a:44:7b:d7:d4:a1:3a:6b:4f:d1:c3:e9: 48:39:82:65:f4:ae:b7:d1:09:01:da:1b:b8:87:9b:51:1a:c9: a6:d0:44:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU5TBuBYYepu9O4U5PX8j86gOlhgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjcwMDdGRkRBNjZBOTlENzU4OERBOTNGRkFGMjZCREU1 N0IzQ0E2NDAeFw0yNTA2MDcyMDU2MThaFw0yNTA2MTEwNjM4MThaMDMxMTAvBgNV BAMTKDI4NjA3RTIyNzYwQUY1OTMyRUUyRjUzOEVENTE4Rjg1QzMyRUQyRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFuPox1ByCkHp54Ci232+Cc7Uz wbPLl6rikRSOjLVbXSfo4weHnqwHNvGv5KulOpaW99w1wbG4+bZr5YJSOVv2eh5M Xm3O24z+pryTs3M+HjoTY6pZPnWwtcN1yQGDeRqiskbwUrF6ZFCoRJgyJ9/nI79k GFx8mg43abKChaZ3gsFOOVlHUrnjB41R9V6+uGuRenRylTHKT3js/RvSikE7V16l /cZ8jF52WfdMOFxMZYB8BFC4oCllQvYaSfBzVUspXt4emW0x1sbw1WAmb2piTKwr LnQewjLFWid0RclYrvDxuHWvi8hk3E29vc5XthQ6Is/Xexamrxc2KT/3NPW5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKGB+InYK9ZMu4vU47VGPhcMu0tYwHwYDVR0j BBgwFoAU9wB//aZqmddYjak/+vJr3lezymQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OWE5ZTgzNS1mM2ExLTRjMzYtYjQ3ZC02ZjJmNzFlYjhhYTQvMC9GNzAwN0ZGREE2 NkE5OUQ3NTg4REE5M0ZGQUYyNkJERTU3QjNDQTY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjcwMDdGRkRBNjZBOTlENzU4OERBOTNGRkFGMjZCREU1N0Iz Q0E2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDlhOWU4MzUtZjNhMS00YzM2LWI0 N2QtNmYyZjcxZWI4YWE0LzAvRjcwMDdGRkRBNjZBOTlENzU4OERBOTNGRkFGMjZC REU1N0IzQ0E2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEO2l1uXSB3JEInWKDQdD+8PhuiMuOFeouVN K0TMIkAlVywfUSoHgY17m8/itE3M+Ieu6DxjWFIuzV9+Ue7cPjPNsWtWxg89K/nf cMA6leJuwAi2uassiFJ1Uqs4CAVHVd951pvXl11rIFf+zmLYGFuhRwN9EYSLeMRM w2m8a5OL6dMVj+i+hXal5ib4XZzfcLyJcde/TnSPKs0hd1hgSV0WA44KJLPGOWDA 3rcbnUf5hWGxynDooyeO5tRixP5clk4y2aF783QrdKXEvOvBs9IPcCrgaOvxxeTo rCehHCpEe9fUoTprT9HD6Ug5gmX0rrfRCQHaG7iHm1EayabQRCE= -----END CERTIFICATE-----Generated at Sun Jun 8 10:14:46 2025 by rpki-client