$ rpki-client -vvf repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft File: 7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft (raw, json) Hash identifier: 9dP2wvt84yudXYB+zaLoPTraBiXTJfvhHEU+thq4PJw= Subject key identifier: 91:65:80:E3:12:CD:BC:9D:4C:1D:51:68:9D:D2:83:F9:1A:76:7E:6A Authority key identifier: 7E:F8:9B:45:69:2D:93:E9:CA:15:DA:4C:F9:D4:39:30:06:32:EF:D4 Certificate issuer: /CN=7EF89B45692D93E9CA15DA4CF9D439300632EFD4 Certificate serial: 4782F1D257EF48C0554B878EEF3BF3822B9BFF24 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft Manifest number: 01FE Signing time: Mon 02 Jun 2025 01:40:36 +0000 Manifest this update: Mon 02 Jun 2025 01:35:36 +0000 Manifest next update: Thu 05 Jun 2025 08:00:36 +0000 Files and hashes: 1: 3130332e3138302e35382e302f32332d3233203d3e2039333431.roa (hash: lr7nUWH/7raRlFDZhAD65ANTChYQYYLQIg/z8dK94J4=) 2: 3130332e3138302e35392e302f32342d3234203d3e2039333431.roa (hash: i2rSOVglupsSuL0ZoSXVd/tHmiF7pW8+dps3wslED5c=) 3: 7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl (hash: E4s5zRQS2vfkFCfT5T5SAMTeK/RoaJPMOdeuKEbmv6k=) 4: 3130332e3138302e35382e302f32342d3234203d3e2039333431.roa (hash: FdloWvzwT5E7bV0h2MrBbwdyadkn1oI1JIyg7UwS1zQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 08:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:82:f1:d2:57:ef:48:c0:55:4b:87:8e:ef:3b:f3:82:2b:9b:ff:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EF89B45692D93E9CA15DA4CF9D439300632EFD4 Validity Not Before: Jun 2 01:35:36 2025 GMT Not After : Jun 5 08:00:36 2025 GMT Subject: CN=916580E312CDBC9D4C1D51689DD283F91A767E6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:74:13:46:97:07:7b:cf:41:dc:01:64:4b:93: b9:94:35:77:c9:b6:46:db:fa:c5:99:f7:4a:80:55: cb:13:87:20:63:09:03:cf:16:b5:58:4b:01:51:04: 18:ff:3b:88:6d:0f:5f:1b:49:a7:54:b1:8b:96:2e: cc:5e:d8:c9:83:c2:69:e9:b4:d6:cd:00:5f:0d:34: 90:39:33:aa:5b:6b:4a:82:c3:14:ff:d7:31:ce:cb: 51:77:42:96:72:30:e5:c8:dc:bc:64:4d:64:41:2a: c0:c6:f2:ef:ff:e3:4a:2c:c6:b3:b7:21:4c:00:3a: 30:6c:aa:50:fb:7c:fb:6b:c1:40:79:3e:2d:0f:e8: fc:78:d8:fe:01:7d:dc:00:32:28:ae:f6:dc:83:f2: 05:94:6d:0b:42:78:6f:89:83:b9:3d:32:50:7b:c1: 71:80:e7:2f:30:cd:d5:2f:cd:25:6c:4c:11:f3:2d: 73:bd:28:c2:0d:94:e5:13:c7:6e:d1:e2:f8:17:02: 7a:97:4d:6b:3f:ed:ba:f2:e2:9d:b1:a0:b3:b1:3b: 5a:51:dd:ae:7c:9b:85:c0:71:04:7d:fd:e8:1e:c9: 9b:7a:59:b2:25:2d:ce:44:76:4f:a2:f7:b5:72:73: e6:81:30:6a:3b:79:d5:8d:67:ee:3a:0d:64:7b:75: b5:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:65:80:E3:12:CD:BC:9D:4C:1D:51:68:9D:D2:83:F9:1A:76:7E:6A X509v3 Authority Key Identifier: keyid:7E:F8:9B:45:69:2D:93:E9:CA:15:DA:4C:F9:D4:39:30:06:32:EF:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 06:0e:d5:6d:be:4b:09:92:fb:3f:ab:bb:84:cd:65:00:83:b4: 2c:73:df:92:9b:80:ab:c5:30:ac:00:a4:ce:43:8b:88:e3:c5: f3:ed:51:89:a6:5e:c5:e4:35:9d:ad:be:e6:58:6c:10:ec:a9: 66:34:0e:ca:f0:c1:fb:82:19:bf:a2:bd:48:cf:36:54:bf:0b: 76:12:8f:99:b3:24:23:ad:df:f1:a9:34:86:61:3b:b9:be:e9: ce:30:93:98:cb:d9:e2:a3:fb:d6:69:c7:aa:4a:90:46:51:36: 8d:89:2a:61:1f:2b:85:6f:14:d6:5f:26:3f:56:6a:87:fb:0d: 07:85:b1:a4:1f:d2:3b:ea:17:ff:68:48:eb:6b:dc:4f:03:01: 8a:90:cc:c5:a4:f4:44:8b:83:b5:2d:2b:03:f7:7b:f8:83:41: 94:c9:82:19:43:9b:a5:2e:3c:f0:5c:0b:b5:e3:a2:e7:de:ff: 29:87:52:95:6b:e2:ac:4a:73:dd:51:09:52:4e:4d:63:ce:94: d2:a2:ef:6b:fc:23:78:01:75:8b:7e:38:17:1f:77:d4:0c:b7: 7c:52:5a:34:64:52:7f:84:3b:1c:12:36:f7:6b:a5:97:e7:ee: 9c:d9:9f:65:f8:fc:c5:5e:3c:1d:9a:c8:1a:e2:d6:d9:01:e9: 67:82:41:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR4Lx0lfvSMBVS4eO7zvzgiub/yQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VGODlCNDU2OTJEOTNFOUNBMTVEQTRDRjlENDM5MzAw NjMyRUZENDAeFw0yNTA2MDIwMTM1MzZaFw0yNTA2MDUwODAwMzZaMDMxMTAvBgNV BAMTKDkxNjU4MEUzMTJDREJDOUQ0QzFENTE2ODlERDI4M0Y5MUE3NjdFNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9dBNGlwd7z0HcAWRLk7mUNXfJ tkbb+sWZ90qAVcsThyBjCQPPFrVYSwFRBBj/O4htD18bSadUsYuWLsxe2MmDwmnp tNbNAF8NNJA5M6pba0qCwxT/1zHOy1F3QpZyMOXI3LxkTWRBKsDG8u//40osxrO3 IUwAOjBsqlD7fPtrwUB5Pi0P6Px42P4BfdwAMiiu9tyD8gWUbQtCeG+Jg7k9MlB7 wXGA5y8wzdUvzSVsTBHzLXO9KMINlOUTx27R4vgXAnqXTWs/7bry4p2xoLOxO1pR 3a58m4XAcQR9/egeyZt6WbIlLc5Edk+i97Vyc+aBMGo7edWNZ+46DWR7dbVjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkWWA4xLNvJ1MHVFondKD+Rp2fmowHwYDVR0j BBgwFoAUfvibRWktk+nKFdpM+dQ5MAYy79QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NzFhODQ3ZC0yNTMxLTRkN2YtOTI0MS05Nzc3ODUwNjA1ZDYvMC83RUY4OUI0NTY5 MkQ5M0U5Q0ExNURBNENGOUQ0MzkzMDA2MzJFRkQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0VGODlCNDU2OTJEOTNFOUNBMTVEQTRDRjlENDM5MzAwNjMy RUZENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTcxYTg0N2QtMjUzMS00ZDdmLTky NDEtOTc3Nzg1MDYwNWQ2LzAvN0VGODlCNDU2OTJEOTNFOUNBMTVEQTRDRjlENDM5 MzAwNjMyRUZENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAYO1W2+SwmS+z+ru4TNZQCDtCxz35KbgKvF MKwApM5Di4jjxfPtUYmmXsXkNZ2tvuZYbBDsqWY0DsrwwfuCGb+ivUjPNlS/C3YS j5mzJCOt3/GpNIZhO7m+6c4wk5jL2eKj+9Zpx6pKkEZRNo2JKmEfK4VvFNZfJj9W aof7DQeFsaQf0jvqF/9oSOtr3E8DAYqQzMWk9ESLg7UtKwP3e/iDQZTJghlDm6Uu PPBcC7Xjoufe/ymHUpVr4qxKc91RCVJOTWPOlNKi72v8I3gBdYt+OBcfd9QMt3xS WjRkUn+EOxwSNvdrpZfn7pzZn2X4/MVePB2ayBri1tkB6WeCQV0= -----END CERTIFICATE-----Generated at Tue Jun 3 23:43:02 2025 by rpki-client