$ rpki-client -vvf repo-rpki.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/7470038419B67CD1743CE4D96953077ECE6928FE.mft File: 7470038419B67CD1743CE4D96953077ECE6928FE.mft (raw, json) Hash identifier: u3JtgeygiaDZ1/Fpm20KycMn0g7M/SMh+7EILyXOTrI= Subject key identifier: 45:9B:E0:C6:74:A9:24:6E:22:5F:AF:33:DD:1D:56:DC:A6:E4:50:B4 Authority key identifier: 74:70:03:84:19:B6:7C:D1:74:3C:E4:D9:69:53:07:7E:CE:69:28:FE Certificate issuer: /CN=7470038419B67CD1743CE4D96953077ECE6928FE Certificate serial: 11562110071B31431B33F6F1A94E492110A01CE5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7470038419B67CD1743CE4D96953077ECE6928FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/7470038419B67CD1743CE4D96953077ECE6928FE.mft Manifest number: 01A6 Signing time: Fri 06 Jun 2025 17:01:49 +0000 Manifest this update: Fri 06 Jun 2025 16:56:49 +0000 Manifest next update: Mon 09 Jun 2025 20:36:49 +0000 Files and hashes: 1: 3130332e3135342e35322e302f32342d3234203d3e20313430343739.roa (hash: DQ6tr9CPErOI4RG1ZAv/ldO7tY9jf/c+WNf9/AzYbiQ=) 2: 323430363a353463303a3a2f33332d3333203d3e20313430343739.roa (hash: WKukFhTAk9Wfv4/OtDk/a2nJ3JcuJ/OWKwAPnS7JgvA=) 3: 7470038419B67CD1743CE4D96953077ECE6928FE.crl (hash: QkLRt5Ga4eG1nLVpNLoujMviRr7Z0YDIArgXyky5O40=) 4: 323430363a353463303a383030303a3a2f33332d3333203d3e20313430343739.roa (hash: 3w+VK+tvKAA1AfC4liESzr0B7Kk6JlTbtXB9BTFuOGs=) 5: 3130332e3135342e35332e302f32342d3234203d3e20313430343739.roa (hash: seK97eEttenVyvDeIj5FLJRpNr+qf4DujlJD8pAoG3I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/7470038419B67CD1743CE4D96953077ECE6928FE.crl rsync://repo-rpki.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/7470038419B67CD1743CE4D96953077ECE6928FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7470038419B67CD1743CE4D96953077ECE6928FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 20:36:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:56:21:10:07:1b:31:43:1b:33:f6:f1:a9:4e:49:21:10:a0:1c:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7470038419B67CD1743CE4D96953077ECE6928FE Validity Not Before: Jun 6 16:56:49 2025 GMT Not After : Jun 9 20:36:49 2025 GMT Subject: CN=459BE0C674A9246E225FAF33DD1D56DCA6E450B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:63:d1:35:e3:6a:76:dc:c0:23:16:11:d8:27: 74:ef:19:0a:e4:0c:05:9b:f6:e4:fb:a8:68:53:82: a3:19:be:5f:70:af:a6:08:5d:67:f7:c3:c0:d5:f4: f3:f2:8e:3c:1c:59:35:ce:01:61:d2:0e:9b:85:0c: cf:3c:6d:68:82:14:42:9c:01:8b:0b:1e:a7:70:a2: 06:ab:a2:24:23:8b:4b:20:61:2b:aa:d1:4f:e6:56: af:5d:e9:35:80:3f:e2:15:a0:54:4c:11:e7:4f:93: f8:83:3c:1a:30:84:3f:96:79:b5:cd:e3:4a:65:2f: d0:64:44:a1:3d:bb:0d:42:20:86:f0:f3:b3:b5:4c: d7:a8:87:ac:95:f5:22:76:13:db:1f:91:95:68:d4: 2b:2c:ba:01:53:e4:eb:7d:98:e0:b6:17:81:7d:40: a8:6d:84:ca:27:23:30:52:5a:7e:26:7f:47:18:33: 85:b0:9a:7b:b3:13:9c:07:90:28:11:67:f4:b5:c1: 16:7f:28:bd:2a:c4:22:68:36:17:3f:1a:dd:25:b9: e1:a0:d2:ba:a3:0b:f7:08:19:a7:3f:46:8e:46:24: 49:f9:6c:a3:6f:56:78:85:49:b1:17:5d:69:15:00: 55:87:bf:04:d0:e9:67:de:5e:82:4a:78:96:1d:9e: 5c:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:9B:E0:C6:74:A9:24:6E:22:5F:AF:33:DD:1D:56:DC:A6:E4:50:B4 X509v3 Authority Key Identifier: keyid:74:70:03:84:19:B6:7C:D1:74:3C:E4:D9:69:53:07:7E:CE:69:28:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/7470038419B67CD1743CE4D96953077ECE6928FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7470038419B67CD1743CE4D96953077ECE6928FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/7470038419B67CD1743CE4D96953077ECE6928FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:b5:c5:96:c7:95:3f:c9:e6:d9:38:09:89:16:90:15:d4:c7: 10:f9:9f:2d:c1:c4:18:ae:18:20:02:10:14:3f:b2:d5:0e:fe: b4:c1:4d:e6:7e:f2:dc:af:e1:f4:d4:4c:ea:6b:03:db:fe:7d: 1f:c1:47:cd:29:91:e5:4c:cb:fe:4b:0b:e3:7a:e6:34:ad:69: 39:86:a1:74:43:d7:15:46:86:6e:ad:59:3f:33:c6:da:8b:5e: f1:81:5a:9b:3e:85:91:86:9d:aa:6a:d3:00:ec:4b:6c:39:8d: a3:a7:33:b8:24:5c:6e:2a:0a:06:62:41:85:b3:f3:7e:82:a6: 12:99:75:a4:69:e5:3e:4b:0f:de:6d:50:e0:c2:8e:b3:75:27: 3a:c5:84:20:90:3f:b3:85:37:25:b4:81:55:4c:b3:32:18:b9: 13:fc:0d:cf:d3:22:0b:54:f9:41:e3:9f:7e:0d:d0:1a:7d:f3: ef:fb:ec:b5:72:f0:10:71:80:90:67:e2:b0:12:42:a5:68:ac: 25:53:f0:72:86:93:bd:ff:f5:21:50:2b:86:01:76:a8:2d:30: 32:66:32:2d:01:e1:38:1c:fc:b4:53:2f:c5:e4:24:eb:46:6d: 76:e0:10:ee:40:04:f2:e5:e5:64:0f:8a:31:88:7c:2b:ef:d9: d2:b2:69:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEVYhEAcbMUMbM/bxqU5JIRCgHOUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQ3MDAzODQxOUI2N0NEMTc0M0NFNEQ5Njk1MzA3N0VD RTY5MjhGRTAeFw0yNTA2MDYxNjU2NDlaFw0yNTA2MDkyMDM2NDlaMDMxMTAvBgNV BAMTKDQ1OUJFMEM2NzRBOTI0NkUyMjVGQUYzM0REMUQ1NkRDQTZFNDUwQjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJY9E142p23MAjFhHYJ3TvGQrk DAWb9uT7qGhTgqMZvl9wr6YIXWf3w8DV9PPyjjwcWTXOAWHSDpuFDM88bWiCFEKc AYsLHqdwogaroiQji0sgYSuq0U/mVq9d6TWAP+IVoFRMEedPk/iDPBowhD+WebXN 40plL9BkRKE9uw1CIIbw87O1TNeoh6yV9SJ2E9sfkZVo1CssugFT5Ot9mOC2F4F9 QKhthMonIzBSWn4mf0cYM4WwmnuzE5wHkCgRZ/S1wRZ/KL0qxCJoNhc/Gt0lueGg 0rqjC/cIGac/Ro5GJEn5bKNvVniFSbEXXWkVAFWHvwTQ6WfeXoJKeJYdnlzZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURZvgxnSpJG4iX68z3R1W3KbkULQwHwYDVR0j BBgwFoAUdHADhBm2fNF0POTZaVMHfs5pKP4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w Yzc2NWQ1MS1iMGIxLTQzNWQtYTY2Yi02MDRjNmU1ZDI5ZWYvMC83NDcwMDM4NDE5 QjY3Q0QxNzQzQ0U0RDk2OTUzMDc3RUNFNjkyOEZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzQ3MDAzODQxOUI2N0NEMTc0M0NFNEQ5Njk1MzA3N0VDRTY5 MjhGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGM3NjVkNTEtYjBiMS00MzVkLWE2 NmItNjA0YzZlNWQyOWVmLzAvNzQ3MDAzODQxOUI2N0NEMTc0M0NFNEQ5Njk1MzA3 N0VDRTY5MjhGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEa1xZbHlT/J5tk4CYkWkBXUxxD5ny3BxBiu GCACEBQ/stUO/rTBTeZ+8tyv4fTUTOprA9v+fR/BR80pkeVMy/5LC+N65jStaTmG oXRD1xVGhm6tWT8zxtqLXvGBWps+hZGGnapq0wDsS2w5jaOnM7gkXG4qCgZiQYWz 836CphKZdaRp5T5LD95tUODCjrN1JzrFhCCQP7OFNyW0gVVMszIYuRP8Dc/TIgtU +UHjn34N0Bp98+/77LVy8BBxgJBn4rASQqVorCVT8HKGk73/9SFQK4YBdqgtMDJm Mi0B4Tgc/LRTL8XkJOtGbXbgEO5ABPLl5WQPijGIfCvv2dKyaVo= -----END CERTIFICATE-----Generated at Sun Jun 8 01:30:11 2025 by rpki-client