$ rpki-client -vvf repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/7ED69B0DB232E419E90D72766374EA03E6F18F73.mft File: 7ED69B0DB232E419E90D72766374EA03E6F18F73.mft (raw, json) Hash identifier: vrCyJe16d3v/0XLA+hCFY6e9lpov5lHT6U8tb3BJdd8= Subject key identifier: C3:B1:32:AA:65:5C:23:08:12:80:7B:D8:7D:54:3E:2E:B7:DA:08:E1 Authority key identifier: 7E:D6:9B:0D:B2:32:E4:19:E9:0D:72:76:63:74:EA:03:E6:F1:8F:73 Certificate issuer: /CN=7ED69B0DB232E419E90D72766374EA03E6F18F73 Certificate serial: 58877ECCF8101F7EC34ABAE5B1E6D73FB2D0AE91 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7ED69B0DB232E419E90D72766374EA03E6F18F73.cer Subject info access: rsync://repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/7ED69B0DB232E419E90D72766374EA03E6F18F73.mft Manifest number: B5 Signing time: Mon 09 Jun 2025 18:41:22 +0000 Manifest this update: Mon 09 Jun 2025 18:36:22 +0000 Manifest next update: Fri 13 Jun 2025 04:16:22 +0000 Files and hashes: 1: 3135372e32302e39342e302f32342d3234203d3e20313532343039.roa (hash: yeQYlb5D5MRjJOZy3icwpq+Xda5AxDKy2LKlKgiIVJg=) 2: 7ED69B0DB232E419E90D72766374EA03E6F18F73.crl (hash: sA4iWJLqx6GaytTYSH0LuyxLHDfceN8Obve2E0QxY6c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/7ED69B0DB232E419E90D72766374EA03E6F18F73.crl rsync://repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/7ED69B0DB232E419E90D72766374EA03E6F18F73.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7ED69B0DB232E419E90D72766374EA03E6F18F73.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 04:16:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:87:7e:cc:f8:10:1f:7e:c3:4a:ba:e5:b1:e6:d7:3f:b2:d0:ae:91 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ED69B0DB232E419E90D72766374EA03E6F18F73 Validity Not Before: Jun 9 18:36:22 2025 GMT Not After : Jun 13 04:16:22 2025 GMT Subject: CN=C3B132AA655C230812807BD87D543E2EB7DA08E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:44:6f:9f:3a:bb:dd:11:f0:18:f7:52:3c:95: 9c:4c:b0:c7:1c:4e:e6:86:e9:91:07:c3:bb:24:34: 28:bf:08:f7:14:20:68:e5:3b:b5:cb:90:eb:1c:ed: 45:f6:e2:e3:33:8f:35:57:9d:3c:bc:fd:32:4f:aa: 0f:ab:19:5d:ad:84:af:5e:1e:75:a3:db:76:66:3c: 56:93:fb:98:c5:3b:df:45:49:fc:28:b9:79:b5:59: b3:30:2a:4f:27:f7:a0:81:14:30:dc:56:4d:7f:8d: 94:97:8e:69:e7:1b:ce:b9:93:7c:ae:4e:5e:f2:90: 4a:2f:e4:a9:e3:b0:f0:45:1d:b1:fa:49:a8:c4:22: cd:ad:ee:98:85:36:37:ed:0d:9a:d3:d1:be:81:b1: 3c:eb:6b:8d:b1:e5:3b:ef:3c:4d:10:1e:c7:6e:cf: 15:2b:af:f5:4e:8f:97:91:89:a2:9d:e9:3e:a4:9b: 6f:97:2c:8b:c2:aa:23:c8:c9:cb:66:0f:30:06:00: 4b:06:92:6a:2a:e0:dd:50:e2:b6:50:45:d6:d3:e7: 98:2d:f9:69:7e:17:95:a5:20:92:ee:9a:24:93:64: bb:11:80:8c:60:68:b7:3f:7e:8d:9b:12:da:7c:a3: 17:df:98:19:9a:c8:1a:02:77:5a:15:65:27:51:db: f7:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C3:B1:32:AA:65:5C:23:08:12:80:7B:D8:7D:54:3E:2E:B7:DA:08:E1 X509v3 Authority Key Identifier: keyid:7E:D6:9B:0D:B2:32:E4:19:E9:0D:72:76:63:74:EA:03:E6:F1:8F:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/7ED69B0DB232E419E90D72766374EA03E6F18F73.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7ED69B0DB232E419E90D72766374EA03E6F18F73.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/7ED69B0DB232E419E90D72766374EA03E6F18F73.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:a6:40:59:bd:45:9a:a0:c0:b6:d9:98:19:7e:21:e1:9e:6c: 34:f2:41:4b:70:3a:67:05:01:0d:7b:d6:07:a9:35:6d:0b:41: 5c:71:c3:c2:30:df:9f:6a:91:af:bc:15:8f:f3:49:a5:f3:d7: b0:11:73:dd:9c:af:fc:1d:50:9f:a6:f7:c5:6e:d7:43:47:23: 81:5a:bc:d6:26:28:8b:51:61:10:ee:b6:2e:eb:e9:a0:92:bf: 56:4a:7d:8f:18:72:6f:8d:1f:99:b2:6d:1f:fd:56:37:b0:8e: d0:ef:3d:01:d0:f3:61:d2:61:67:be:03:d0:b1:6d:95:83:0a: e8:95:1d:56:96:a3:fa:4c:d0:8d:3f:53:59:7a:fc:23:08:f4: 3d:da:c3:87:49:10:e7:4a:01:b1:4f:35:a2:76:62:e0:d7:b4: d3:9f:9b:ae:0c:65:36:4b:fc:13:fe:93:36:f0:6f:58:7b:f7: 06:7f:83:2c:9f:10:f4:5f:df:9b:80:f5:ed:4c:fd:58:60:a6: bd:03:bc:1e:8c:0e:53:9c:92:c7:cd:09:81:0b:96:39:bb:70: 9d:72:1b:5b:b9:0a:00:bd:14:43:ee:c5:46:10:70:6a:94:ad: 91:c0:5a:ac:ca:55:68:fb:67:f6:9d:88:d0:4e:d0:3a:f8:12: 08:0b:72:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWId+zPgQH37DSrrlsebXP7LQrpEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VENjlCMERCMjMyRTQxOUU5MEQ3Mjc2NjM3NEVBMDNF NkYxOEY3MzAeFw0yNTA2MDkxODM2MjJaFw0yNTA2MTMwNDE2MjJaMDMxMTAvBgNV BAMTKEMzQjEzMkFBNjU1QzIzMDgxMjgwN0JEODdENTQzRTJFQjdEQTA4RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeRG+fOrvdEfAY91I8lZxMsMcc TuaG6ZEHw7skNCi/CPcUIGjlO7XLkOsc7UX24uMzjzVXnTy8/TJPqg+rGV2thK9e HnWj23ZmPFaT+5jFO99FSfwouXm1WbMwKk8n96CBFDDcVk1/jZSXjmnnG865k3yu Tl7ykEov5KnjsPBFHbH6SajEIs2t7piFNjftDZrT0b6BsTzra42x5TvvPE0QHsdu zxUrr/VOj5eRiaKd6T6km2+XLIvCqiPIyctmDzAGAEsGkmoq4N1Q4rZQRdbT55gt +Wl+F5WlIJLumiSTZLsRgIxgaLc/fo2bEtp8oxffmBmayBoCd1oVZSdR2/fpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUw7EyqmVcIwgSgHvYfVQ+LrfaCOEwHwYDVR0j BBgwFoAUftabDbIy5BnpDXJ2Y3TqA+bxj3MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NzJkMTc1Mi00ODUzLTRjNzQtYjU3NC05OTRkM2IxMjQwOTAvMC83RUQ2OUIwREIy MzJFNDE5RTkwRDcyNzY2Mzc0RUEwM0U2RjE4RjczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0VENjlCMERCMjMyRTQxOUU5MEQ3Mjc2NjM3NEVBMDNFNkYx OEY3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTcyZDE3NTItNDg1My00Yzc0LWI1 NzQtOTk0ZDNiMTI0MDkwLzAvN0VENjlCMERCMjMyRTQxOUU5MEQ3Mjc2NjM3NEVB MDNFNkYxOEY3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADWmQFm9RZqgwLbZmBl+IeGebDTyQUtwOmcF AQ171gepNW0LQVxxw8Iw359qka+8FY/zSaXz17ARc92cr/wdUJ+m98Vu10NHI4Fa vNYmKItRYRDuti7r6aCSv1ZKfY8Ycm+NH5mybR/9VjewjtDvPQHQ82HSYWe+A9Cx bZWDCuiVHVaWo/pM0I0/U1l6/CMI9D3aw4dJEOdKAbFPNaJ2YuDXtNOfm64MZTZL /BP+kzbwb1h79wZ/gyyfEPRf35uA9e1M/Vhgpr0DvB6MDlOcksfNCYELljm7cJ1y G1u5CgC9FEPuxUYQcGqUrZHAWqzKVWj7Z/adiNBO0Dr4EggLcps= -----END CERTIFICATE-----Generated at Wed Jun 11 11:51:10 2025 by rpki-client