$ rpki-client -vvf repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft File: 7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft (raw, json) Hash identifier: NMHvFfrpHr8IyCuEepuVkjUf9T5BOfr6QEkXoqP5D/8= Subject key identifier: DF:11:74:8B:6C:9A:76:3B:FE:5D:EB:23:92:59:B4:FA:EC:29:DD:74 Authority key identifier: 7F:EF:6B:F5:3F:A3:12:2A:0F:09:CE:F4:B4:08:E1:37:92:A1:45:45 Certificate issuer: /CN=7FEF6BF53FA3122A0F09CEF4B408E13792A14545 Certificate serial: 39EEBAFA14605C3192C6CC9501ADEE644497CF7A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.cer Subject info access: rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft Manifest number: 01E0 Signing time: Mon 09 Jun 2025 23:21:31 +0000 Manifest this update: Mon 09 Jun 2025 23:16:31 +0000 Manifest next update: Fri 13 Jun 2025 10:50:31 +0000 Files and hashes: 1: 3130332e3136372e3130342e302f32342d3234203d3e20313339343130.roa (hash: cilQSsMRfqwA9LOmx5CPo41uuLBHWQ7Qq5S49MHRn2E=) 2: 7FEF6BF53FA3122A0F09CEF4B408E13792A14545.crl (hash: wGk0m3F1WkpMZAAewC9cwP3+KPqKMdnqty/gBTEc7Bk=) 3: 3130332e3136372e3130352e302f32342d3234203d3e203338333230.roa (hash: t5DmPirQU+jLx9aHjmb/pgwv+a8S0p8w/q4YuXRMJQI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.crl rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 13 Jun 2025 10:50:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:ee:ba:fa:14:60:5c:31:92:c6:cc:95:01:ad:ee:64:44:97:cf:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7FEF6BF53FA3122A0F09CEF4B408E13792A14545 Validity Not Before: Jun 9 23:16:31 2025 GMT Not After : Jun 13 10:50:31 2025 GMT Subject: CN=DF11748B6C9A763BFE5DEB239259B4FAEC29DD74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:2b:9b:56:08:f8:b0:5a:1c:5e:18:5e:66:4c: cb:c2:df:7e:a4:1d:22:18:b9:43:f6:ae:16:b4:3a: 6d:f4:dc:93:ca:68:8a:79:e8:d4:62:b2:4a:31:9a: f0:f8:4b:76:05:1a:c1:04:40:7b:0f:02:16:06:20: 25:79:a3:01:a3:02:95:8f:9e:49:ac:57:3d:83:51: a0:4d:44:66:c7:1e:4c:b1:68:c7:7a:69:97:13:1d: b5:e2:ab:c1:10:bd:2d:6a:87:85:dc:d8:85:93:1c: 9f:77:13:83:d4:b6:df:1f:e0:7c:56:e1:37:89:60: 0d:df:f2:56:53:ce:70:8f:a1:77:1d:01:fa:b8:c1: dc:a4:95:64:66:db:75:64:6a:ae:bc:6e:7c:dc:4c: e1:64:30:25:af:56:5a:59:36:f2:0a:21:a8:3a:fb: 6e:3f:22:59:b0:88:db:3a:dd:8e:a3:bc:44:64:6b: d0:22:c3:92:95:5e:4d:13:0c:67:87:20:ba:a8:c4: c9:e6:fc:6d:0d:d5:af:96:ec:ea:28:89:22:49:63: 4e:18:2f:09:09:7d:40:4a:93:1c:d5:3c:d8:74:46: 0c:15:01:6e:ce:50:d5:b4:5e:ee:65:6e:61:4a:dd: 0d:17:cf:4d:88:6e:5d:4d:b5:d5:7d:ed:24:14:f3: 59:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:11:74:8B:6C:9A:76:3B:FE:5D:EB:23:92:59:B4:FA:EC:29:DD:74 X509v3 Authority Key Identifier: keyid:7F:EF:6B:F5:3F:A3:12:2A:0F:09:CE:F4:B4:08:E1:37:92:A1:45:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cf:42:b9:57:41:de:4e:3c:df:c9:e1:23:af:1d:65:2e:43:48: 2c:98:c5:68:e9:d2:41:6f:03:0a:8b:7a:28:e8:a1:92:2c:cc: 21:84:47:c9:60:e5:12:56:6a:7c:7f:c8:cd:6c:87:18:7f:30: c3:88:79:6f:0e:ab:34:00:77:3c:bc:a4:33:8b:ac:04:5b:94: 1a:c1:58:b2:25:b0:a7:1d:01:6c:3a:9b:9b:22:ea:9f:bc:2c: b0:c4:55:c6:47:9e:6a:68:15:e3:bb:03:83:0b:1b:48:1d:50: 79:22:6e:32:ec:7e:a2:15:04:d2:f4:39:bf:12:42:be:5a:8d: 4e:10:06:81:12:5d:c7:89:2f:d7:63:33:11:42:31:b2:5e:2c: 21:6e:4f:8e:d1:b7:4e:2e:d1:18:35:be:bf:9c:37:06:18:b8: 54:44:dc:5f:29:1d:dd:64:3d:d4:e9:21:d8:76:83:fc:f8:ba: 6a:9a:2a:dd:ea:e1:cd:3c:f6:b3:30:9c:c4:54:64:92:d0:e1: da:af:ea:43:57:e8:c8:4e:6c:f0:f1:18:e6:bf:b0:68:00:ba: 87:87:d2:17:ce:fd:07:c9:74:92:41:a2:5c:7a:36:57:0a:76: ba:82:b5:a1:4e:1f:c0:fa:68:0a:0f:85:e2:c0:77:30:78:ab: f0:a2:17:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOe66+hRgXDGSxsyVAa3uZESXz3owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ZFRjZCRjUzRkEzMTIyQTBGMDlDRUY0QjQwOEUxMzc5 MkExNDU0NTAeFw0yNTA2MDkyMzE2MzFaFw0yNTA2MTMxMDUwMzFaMDMxMTAvBgNV BAMTKERGMTE3NDhCNkM5QTc2M0JGRTVERUIyMzkyNTlCNEZBRUMyOURENzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIK5tWCPiwWhxeGF5mTMvC336k HSIYuUP2rha0Om303JPKaIp56NRiskoxmvD4S3YFGsEEQHsPAhYGICV5owGjApWP nkmsVz2DUaBNRGbHHkyxaMd6aZcTHbXiq8EQvS1qh4Xc2IWTHJ93E4PUtt8f4HxW 4TeJYA3f8lZTznCPoXcdAfq4wdyklWRm23Vkaq68bnzcTOFkMCWvVlpZNvIKIag6 +24/IlmwiNs63Y6jvERka9Aiw5KVXk0TDGeHILqoxMnm/G0N1a+W7OooiSJJY04Y LwkJfUBKkxzVPNh0RgwVAW7OUNW0Xu5lbmFK3Q0Xz02Ibl1NtdV97SQU81mnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3xF0i2yadjv+Xesjklm0+uwp3XQwHwYDVR0j BBgwFoAUf+9r9T+jEioPCc70tAjhN5KhRUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MDNlYmFiYi05OTlmLTRmM2UtODRjMS1iZjI3OWJmZTE3ODcvMC83RkVGNkJGNTNG QTMxMjJBMEYwOUNFRjRCNDA4RTEzNzkyQTE0NTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0ZFRjZCRjUzRkEzMTIyQTBGMDlDRUY0QjQwOEUxMzc5MkEx NDU0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzAzZWJhYmItOTk5Zi00ZjNlLTg0 YzEtYmYyNzliZmUxNzg3LzAvN0ZFRjZCRjUzRkEzMTIyQTBGMDlDRUY0QjQwOEUx Mzc5MkExNDU0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM9CuVdB3k4838nhI68dZS5DSCyYxWjp0kFv AwqLeijooZIszCGER8lg5RJWanx/yM1shxh/MMOIeW8OqzQAdzy8pDOLrARblBrB WLIlsKcdAWw6m5si6p+8LLDEVcZHnmpoFeO7A4MLG0gdUHkibjLsfqIVBNL0Ob8S Qr5ajU4QBoESXceJL9djMxFCMbJeLCFuT47Rt04u0Rg1vr+cNwYYuFRE3F8pHd1k PdTpIdh2g/z4umqaKt3q4c089rMwnMRUZJLQ4dqv6kNX6MhObPDxGOa/sGgAuoeH 0hfO/QfJdJJBolx6NlcKdrqCtaFOH8D6aAoPheLAdzB4q/CiF0k= -----END CERTIFICATE-----Generated at Tue Jun 10 16:07:20 2025 by rpki-client