$ rpki-client -vvf repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft File: 7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft (raw, json) Hash identifier: xpoRKu6te5wIkXiwMc5CmrpaeipireKWROEsH8W8iGc= Subject key identifier: 99:B6:07:A6:87:6B:E5:98:14:03:4B:98:CE:4C:3D:AF:0B:7E:D6:C0 Authority key identifier: 7E:FA:64:C1:15:73:C2:92:E1:92:C2:CD:EA:C4:D5:F8:B8:C2:1D:BD Certificate issuer: /CN=7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD Certificate serial: 3CA9CE360AB4B8E9EA9796AA5964327CFB14B7FC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft Manifest number: 04DA Signing time: Fri 06 Jun 2025 13:32:19 +0000 Manifest this update: Fri 06 Jun 2025 13:27:19 +0000 Manifest next update: Mon 09 Jun 2025 19:33:19 +0000 Files and hashes: 1: 3130332e31392e35372e302f32342d3234203d3e20313332363337.roa (hash: 3QyxS0wngZcXbj5VM1EbTD1iHrmW5SRruXkHQg8JcfQ=) 2: 3130332e31392e35362e302f32342d3234203d3e20313332363337.roa (hash: 1GyJK6Rqd4FApqF94uFU3YdEq/5dWlAXo/swD/OMmMQ=) 3: 7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.crl (hash: EyccbMin7begxY0e42e4pxpbS7c5Xuja+jmDkC6B81E=) 4: 3130332e31392e35392e302f32342d3234203d3e20313332363337.roa (hash: 9iu7ypE0DOgzIq5HMAnIVo4kGKAs2AlVlOiv5hSXbmQ=) 5: 323430323a333263303a3a2f33322d3332203d3e20313332363337.roa (hash: alekTqBBNWqAI5oX1dPM5eFA94/uemvvhURj4TPNUr4=) 6: 3130332e31392e35382e302f32342d3234203d3e20313332363337.roa (hash: Pfzw8Y0xsuh7UKTJV02Yk1orDZhcKdBrnY+4Hy9M/Ss=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.crl rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 19:33:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:a9:ce:36:0a:b4:b8:e9:ea:97:96:aa:59:64:32:7c:fb:14:b7:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD Validity Not Before: Jun 6 13:27:19 2025 GMT Not After : Jun 9 19:33:19 2025 GMT Subject: CN=99B607A6876BE59814034B98CE4C3DAF0B7ED6C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1f:b0:36:45:03:06:67:26:b9:b5:2d:f2:f6: e9:32:88:8b:a1:c5:05:f4:14:73:0a:53:6a:8e:f6: 1c:42:0e:a8:a4:6c:3c:4f:71:67:af:2d:27:fb:89: 2f:16:9d:c8:f0:fc:3b:7f:7b:b6:fc:49:7f:84:4a: f6:e5:d5:a2:fb:e2:b2:ef:d8:05:37:0a:c3:f4:a6: ca:a6:4a:be:d3:26:2e:17:03:c9:a9:be:ee:91:cb: fc:e2:38:ac:b2:71:49:5e:5c:60:76:bf:2e:a3:33: cf:45:39:71:72:54:aa:f2:63:e9:aa:5b:71:fb:1c: b8:18:f9:e5:8c:0f:55:a9:d6:f6:19:4e:ba:6d:5c: 5e:fb:d6:dc:e2:67:07:4d:44:48:a4:c2:c8:ff:9a: 1b:ac:95:35:92:62:45:b3:63:43:8d:6c:2b:81:1a: b5:7b:b6:9b:97:e6:1a:e2:b8:75:f7:63:31:2d:07: d3:70:27:22:60:47:74:27:4b:5b:75:72:60:56:3d: cf:4b:e3:a1:8d:6b:62:7d:23:dc:e6:8e:e1:c2:9e: 84:0b:2f:99:b7:e5:2d:19:58:7e:a2:71:9e:bf:39: f4:4c:44:34:dc:76:14:c9:f8:69:57:79:1f:8f:c9: fb:58:40:12:79:6a:3c:36:91:8d:61:44:48:33:6a: 96:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:B6:07:A6:87:6B:E5:98:14:03:4B:98:CE:4C:3D:AF:0B:7E:D6:C0 X509v3 Authority Key Identifier: keyid:7E:FA:64:C1:15:73:C2:92:E1:92:C2:CD:EA:C4:D5:F8:B8:C2:1D:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:ec:30:07:52:ee:e4:12:06:0e:7d:c6:f1:7b:70:b8:57:bd: f9:4c:f8:00:41:b9:8d:57:b9:8d:71:39:24:8d:d7:e1:35:85: b9:3e:43:62:53:ba:da:e9:4e:48:e1:b6:6e:72:b6:a8:26:f8: 37:4c:d0:59:88:d9:d3:1d:b4:86:97:73:9c:3f:c8:53:5b:ad: ad:44:1d:00:f2:a8:f0:1c:f9:95:2f:12:b9:6a:fb:a9:ee:8d: b6:3b:16:dd:6c:c9:a0:11:8c:94:a9:a7:31:b6:7e:1b:d4:a8: 8d:8c:ec:a9:80:ce:39:d2:66:b7:2e:99:4f:56:a2:39:0f:80: 04:4c:f9:63:d1:15:2f:c1:f0:9e:b6:2a:de:29:fc:c2:64:d3: b1:62:0c:67:e0:9f:a6:4c:9a:22:64:82:30:62:0b:aa:27:06: 48:05:d5:7a:b6:59:f0:23:5d:2c:76:f0:bc:23:03:55:ff:ff: e3:f9:b8:d5:1a:e0:f5:77:3a:b5:52:25:87:b0:8e:03:01:e5: 43:e4:54:52:7b:98:3f:34:36:d1:5a:da:06:fe:b5:c5:bf:1a: ed:54:f9:e2:8c:40:7e:f9:c7:12:24:39:72:64:18:84:ec:a0: cd:c2:42:61:b0:05:26:cf:b0:5b:79:d8:fe:cb:6b:14:09:c9: c7:76:93:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPKnONgq0uOnql5aqWWQyfPsUt/wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VGQTY0QzExNTczQzI5MkUxOTJDMkNERUFDNEQ1RjhC OEMyMURCRDAeFw0yNTA2MDYxMzI3MTlaFw0yNTA2MDkxOTMzMTlaMDMxMTAvBgNV BAMTKDk5QjYwN0E2ODc2QkU1OTgxNDAzNEI5OENFNEMzREFGMEI3RUQ2QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/H7A2RQMGZya5tS3y9ukyiIuh xQX0FHMKU2qO9hxCDqikbDxPcWevLSf7iS8Wncjw/Dt/e7b8SX+ESvbl1aL74rLv 2AU3CsP0psqmSr7TJi4XA8mpvu6Ry/ziOKyycUleXGB2vy6jM89FOXFyVKryY+mq W3H7HLgY+eWMD1Wp1vYZTrptXF771tziZwdNREikwsj/mhuslTWSYkWzY0ONbCuB GrV7tpuX5hriuHX3YzEtB9NwJyJgR3QnS1t1cmBWPc9L46GNa2J9I9zmjuHCnoQL L5m35S0ZWH6icZ6/OfRMRDTcdhTJ+GlXeR+PyftYQBJ5ajw2kY1hREgzapYTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmbYHpodr5ZgUA0uYzkw9rwt+1sAwHwYDVR0j BBgwFoAUfvpkwRVzwpLhksLN6sTV+LjCHb0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDA5MjdlNi04YTBhLTRmYTctODk2OS05ZmI5ZDY5NDM5N2MvMC83RUZBNjRDMTE1 NzNDMjkyRTE5MkMyQ0RFQUM0RDVGOEI4QzIxREJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0VGQTY0QzExNTczQzI5MkUxOTJDMkNERUFDNEQ1RjhCOEMy MURCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQwOTI3ZTYtOGEwYS00ZmE3LTg5 NjktOWZiOWQ2OTQzOTdjLzAvN0VGQTY0QzExNTczQzI5MkUxOTJDMkNERUFDNEQ1 RjhCOEMyMURCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACfsMAdS7uQSBg59xvF7cLhXvflM+ABBuY1X uY1xOSSN1+E1hbk+Q2JTutrpTkjhtm5ytqgm+DdM0FmI2dMdtIaXc5w/yFNbra1E HQDyqPAc+ZUvErlq+6nujbY7Ft1syaARjJSppzG2fhvUqI2M7KmAzjnSZrcumU9W ojkPgARM+WPRFS/B8J62Kt4p/MJk07FiDGfgn6ZMmiJkgjBiC6onBkgF1Xq2WfAj XSx28LwjA1X//+P5uNUa4PV3OrVSJYewjgMB5UPkVFJ7mD80NtFa2gb+tcW/Gu1U +eKMQH75xxIkOXJkGITsoM3CQmGwBSbPsFt52P7LaxQJycd2k+U= -----END CERTIFICATE-----Generated at Sat Jun 7 04:00:30 2025 by rpki-client