$ rpki-client -vvf repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft File: C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft (raw, json) Hash identifier: Tr4ugimRHNK+GHPUHDY6dGzFLD2gSu5yG9qgJLyWIpM= Subject key identifier: 57:0D:6A:AD:25:24:2E:9D:09:BD:01:87:54:08:B8:F2:AB:C9:C4:89 Authority key identifier: C7:83:94:27:F4:4C:8E:D8:9E:6C:27:20:F1:9C:CF:27:92:70:FD:2A Certificate issuer: /CN=C7839427F44C8ED89E6C2720F19CCF279270FD2A Certificate serial: 10826EAC2723E4518A3214F7DBA4E43CFBAC71C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C7839427F44C8ED89E6C2720F19CCF279270FD2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft Manifest number: 71 Signing time: Thu 05 Jun 2025 00:01:03 +0000 Manifest this update: Wed 04 Jun 2025 23:56:03 +0000 Manifest next update: Sun 08 Jun 2025 03:31:03 +0000 Files and hashes: 1: 3135372e32302e3233392e302f32342d3234203d3e20313532343239.roa (hash: +vgEkqNs4IZ18TGSuIZbEqxX1A4966mLzeBSJvGF+d0=) 2: 3135372e32302e3233382e302f32342d3234203d3e20313532343239.roa (hash: YUfWeO4Zp71JGwLmW0ExOlIuGUiX5R5EB5q+WHM4Ews=) 3: C7839427F44C8ED89E6C2720F19CCF279270FD2A.crl (hash: ai8Z4br82h0QvqrJjddCjgSQjx1lrd413qHVWW4t1yI=) 4: 3135372e32302e3233382e302f32332d3233203d3e20313532343239.roa (hash: 47XUtIsbPhvEMu3eZ7qPRDeVpw2v8OOWFwMXf8PZG1I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.crl rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C7839427F44C8ED89E6C2720F19CCF279270FD2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 03:31:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:82:6e:ac:27:23:e4:51:8a:32:14:f7:db:a4:e4:3c:fb:ac:71:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7839427F44C8ED89E6C2720F19CCF279270FD2A Validity Not Before: Jun 4 23:56:03 2025 GMT Not After : Jun 8 03:31:03 2025 GMT Subject: CN=570D6AAD25242E9D09BD01875408B8F2ABC9C489 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:29:aa:cd:d6:fd:12:6b:33:81:cc:c0:5a:a4: 03:43:f5:93:bb:f3:c3:63:66:e3:db:e6:d4:42:31: 72:23:60:b6:13:7d:47:eb:2b:7f:51:53:7c:b0:22: 10:3e:44:64:b9:85:03:36:85:ac:85:07:cc:dc:fa: df:23:74:9f:e4:28:3e:19:a8:c5:ab:50:4f:1c:d3: c0:d5:7d:7f:d5:3b:e3:ff:c6:8f:53:86:15:cc:b3: c1:97:94:21:9f:83:00:c1:8c:ca:d5:ee:0b:ea:c3: d2:92:49:88:b0:b2:b6:25:6d:82:45:9a:2b:78:30: af:a2:4d:42:1f:fa:a2:20:03:b1:45:ad:c5:0d:16: b4:9a:7f:47:ce:42:ac:5f:c1:bb:78:3e:69:8c:af: 6c:58:97:7d:18:1a:5a:16:85:b6:f2:87:07:41:d9: 8f:92:0a:ad:2c:12:08:52:e0:8d:df:a7:2d:63:74: 3a:70:ed:2d:6a:b7:a1:25:66:e5:84:b8:a4:20:63: 98:3f:4f:ba:24:0c:f4:c6:81:46:1a:4c:bb:d3:06: 8b:40:06:24:be:64:e9:95:b5:b4:f1:1e:27:0e:5d: da:89:56:81:df:c5:6c:eb:1b:bb:57:91:cf:ac:8a: 06:9e:ed:54:dc:e2:36:4b:75:4c:a6:ba:9c:18:0c: 36:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:0D:6A:AD:25:24:2E:9D:09:BD:01:87:54:08:B8:F2:AB:C9:C4:89 X509v3 Authority Key Identifier: keyid:C7:83:94:27:F4:4C:8E:D8:9E:6C:27:20:F1:9C:CF:27:92:70:FD:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C7839427F44C8ED89E6C2720F19CCF279270FD2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:3d:28:38:39:dd:ed:f1:3b:b5:c7:89:2c:fa:12:ad:45:cc: 8a:15:b4:93:fd:85:95:7c:b5:35:ff:e4:e9:f2:ef:eb:56:d6: ea:5d:0a:ce:52:24:1e:e3:43:6c:03:5d:55:0d:81:25:a4:f9: ae:ff:2f:25:91:5c:05:c1:d3:4a:fd:30:5b:72:35:be:f8:30: 98:69:33:01:80:cb:fb:02:7d:d5:11:3f:2a:61:a1:fd:0d:8b: 70:21:b4:67:91:8e:41:c6:9a:3c:99:36:a0:b5:85:71:3d:7d: 1c:39:8e:73:15:1f:25:07:1e:34:77:b1:06:2d:20:71:b3:c7: 2f:60:2c:a6:51:0c:b2:7b:03:07:2b:02:d5:95:07:11:e3:a0: fa:9c:96:b8:d1:35:cd:3f:df:fe:e6:80:6e:c1:7c:17:1f:68: 92:27:d1:a3:00:9e:40:a4:41:36:e7:ed:b0:8d:0c:a8:c3:ec: 36:72:b0:ff:16:3b:e3:62:fc:3e:71:c6:72:1c:5b:16:66:1e: 8b:c7:09:97:44:4c:26:ba:b6:50:45:9a:70:62:ef:dc:5b:7d: 28:d7:19:60:cd:0b:0f:ad:78:fc:85:05:46:3f:a3:9a:94:a7: d7:de:4b:34:f8:37:aa:e8:43:75:af:b1:90:92:fc:50:b1:3a: 00:14:76:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEIJurCcj5FGKMhT326TkPPusccYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc4Mzk0MjdGNDRDOEVEODlFNkMyNzIwRjE5Q0NGMjc5 MjcwRkQyQTAeFw0yNTA2MDQyMzU2MDNaFw0yNTA2MDgwMzMxMDNaMDMxMTAvBgNV BAMTKDU3MEQ2QUFEMjUyNDJFOUQwOUJEMDE4NzU0MDhCOEYyQUJDOUM0ODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxKarN1v0SazOBzMBapAND9ZO7 88NjZuPb5tRCMXIjYLYTfUfrK39RU3ywIhA+RGS5hQM2hayFB8zc+t8jdJ/kKD4Z qMWrUE8c08DVfX/VO+P/xo9ThhXMs8GXlCGfgwDBjMrV7gvqw9KSSYiwsrYlbYJF mit4MK+iTUIf+qIgA7FFrcUNFrSaf0fOQqxfwbt4PmmMr2xYl30YGloWhbbyhwdB 2Y+SCq0sEghS4I3fpy1jdDpw7S1qt6ElZuWEuKQgY5g/T7okDPTGgUYaTLvTBotA BiS+ZOmVtbTxHicOXdqJVoHfxWzrG7tXkc+sigae7VTc4jZLdUymupwYDDb/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVw1qrSUkLp0JvQGHVAi48qvJxIkwHwYDVR0j BBgwFoAUx4OUJ/RMjtiebCcg8ZzPJ5Jw/SowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OGQxYzQ0OS05NzhjLTQ4NDUtYjgyMy1iNTkyNWE5MDU0MjcvMC9DNzgzOTQyN0Y0 NEM4RUQ4OUU2QzI3MjBGMTlDQ0YyNzkyNzBGRDJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzc4Mzk0MjdGNDRDOEVEODlFNkMyNzIwRjE5Q0NGMjc5Mjcw RkQyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMThkMWM0NDktOTc4Yy00ODQ1LWI4 MjMtYjU5MjVhOTA1NDI3LzAvQzc4Mzk0MjdGNDRDOEVEODlFNkMyNzIwRjE5Q0NG Mjc5MjcwRkQyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEg9KDg53e3xO7XHiSz6Eq1FzIoVtJP9hZV8 tTX/5Ony7+tW1updCs5SJB7jQ2wDXVUNgSWk+a7/LyWRXAXB00r9MFtyNb74MJhp MwGAy/sCfdURPyphof0Ni3AhtGeRjkHGmjyZNqC1hXE9fRw5jnMVHyUHHjR3sQYt IHGzxy9gLKZRDLJ7AwcrAtWVBxHjoPqclrjRNc0/3/7mgG7BfBcfaJIn0aMAnkCk QTbn7bCNDKjD7DZysP8WO+Ni/D5xxnIcWxZmHovHCZdETCa6tlBFmnBi79xbfSjX GWDNCw+tePyFBUY/o5qUp9feSzT4N6roQ3WvsZCS/FCxOgAUdmo= -----END CERTIFICATE-----Generated at Fri Jun 6 19:13:56 2025 by rpki-client