$ rpki-client -vvf repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft File: 7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft (raw, json) Hash identifier: gC724ty+YzbbpOa3PEkQN6nPLBcbvRpVr/s/RpHS+7c= Subject key identifier: EE:DE:B4:EE:BF:F2:4A:CA:86:29:A1:4A:88:76:53:F4:80:57:3C:4B Authority key identifier: 7F:EF:6B:F5:3F:A3:12:2A:0F:09:CE:F4:B4:08:E1:37:92:A1:45:45 Certificate issuer: /CN=7FEF6BF53FA3122A0F09CEF4B408E13792A14545 Certificate serial: 1A4D41910F8254456A494EC32ABD0EADCCD2E854 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.cer Subject info access: rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft Manifest number: 01DF Signing time: Sat 07 Jun 2025 20:21:38 +0000 Manifest this update: Sat 07 Jun 2025 20:16:38 +0000 Manifest next update: Tue 10 Jun 2025 23:11:38 +0000 Files and hashes: 1: 7FEF6BF53FA3122A0F09CEF4B408E13792A14545.crl (hash: xvGyu5NQbDCDaVjNdqqJjn5YTpQmu2fX0Juoa+w1xOQ=) 2: 3130332e3136372e3130342e302f32342d3234203d3e20313339343130.roa (hash: cilQSsMRfqwA9LOmx5CPo41uuLBHWQ7Qq5S49MHRn2E=) 3: 3130332e3136372e3130352e302f32342d3234203d3e203338333230.roa (hash: t5DmPirQU+jLx9aHjmb/pgwv+a8S0p8w/q4YuXRMJQI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.crl rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 23:11:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:4d:41:91:0f:82:54:45:6a:49:4e:c3:2a:bd:0e:ad:cc:d2:e8:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7FEF6BF53FA3122A0F09CEF4B408E13792A14545 Validity Not Before: Jun 7 20:16:38 2025 GMT Not After : Jun 10 23:11:38 2025 GMT Subject: CN=EEDEB4EEBFF24ACA8629A14A887653F480573C4B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:14:72:2f:1f:db:51:3d:d4:e6:35:a6:38:1c: 15:4c:15:59:e0:c3:79:58:47:3a:4c:51:d0:3f:0e: 10:b4:19:a2:b1:d6:20:7c:a6:67:23:03:0f:ed:94: 0e:f1:2b:23:40:40:75:30:1a:cb:e7:d9:3d:47:37: df:72:1b:51:bd:02:3d:d8:9a:8a:fe:3e:d2:cc:56: 1d:3a:ad:fd:c6:ac:10:07:31:0e:5e:23:9a:8f:b6: d8:bc:0d:d3:24:e7:db:2a:3b:cf:68:20:ef:41:56: 87:97:fa:ca:fd:9a:69:2c:db:e1:01:50:8f:08:7b: 8b:0c:13:a1:b9:22:75:f0:e9:90:b3:6f:86:f0:2b: 35:3e:32:7e:d7:15:06:04:2d:2d:2e:ff:c9:89:d5: 50:96:42:57:e5:ac:80:7f:6a:2e:f4:99:0c:bb:fa: 41:64:ec:27:ce:52:5f:89:6b:d7:a3:b2:a6:4b:48: bb:7a:7a:26:46:62:82:0e:4b:76:ea:2a:bd:f9:45: 52:32:ad:9e:24:d5:48:c5:91:f3:48:10:de:3d:b9: 22:f8:ea:0a:be:79:e4:49:a9:c6:72:a7:c5:c7:29: 88:35:a2:47:be:0f:27:4d:09:b2:e5:02:09:1b:34: e4:3e:47:b8:2d:0c:3a:6d:b6:82:16:8f:b5:1b:4f: 9f:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:DE:B4:EE:BF:F2:4A:CA:86:29:A1:4A:88:76:53:F4:80:57:3C:4B X509v3 Authority Key Identifier: keyid:7F:EF:6B:F5:3F:A3:12:2A:0F:09:CE:F4:B4:08:E1:37:92:A1:45:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:1c:7d:0c:10:51:40:c7:cc:40:37:60:83:68:a3:5a:1e:0e: 24:50:2d:f9:cc:27:25:e0:0a:f0:73:cd:2d:af:a0:88:60:2b: 3d:22:31:27:77:0f:90:c4:65:12:f6:dc:2e:4e:74:9e:de:32: b5:2e:89:34:fc:c6:66:5c:b8:6d:4f:12:6e:62:12:04:57:3b: d5:90:3a:d2:61:ed:44:f8:b6:46:71:78:2a:19:96:6a:b9:06: 18:4f:2c:73:ce:54:c5:31:11:fc:30:3d:99:c7:a8:37:bb:db: 13:46:97:32:16:ec:d1:45:85:6d:c6:c7:fc:02:ed:ed:a2:ca: 85:d2:57:0b:56:77:fd:66:02:43:53:b9:dc:3a:46:8b:06:82: df:92:f7:fe:dc:03:19:b5:74:70:fe:76:a3:2d:8b:d6:55:92: 66:5e:81:12:d6:43:62:d9:b1:6a:cc:53:3c:08:3c:c7:23:5a: f4:2f:7e:90:47:00:30:aa:e9:bb:4c:ff:d5:3f:46:2f:1a:ac: 36:01:11:42:cc:9a:40:75:68:47:a3:74:d0:a8:c6:6c:55:99: 15:f9:a6:d4:60:d1:88:a6:d0:60:41:65:45:c4:b3:1d:1b:6b: 90:7e:bb:41:f0:f2:c3:aa:c3:36:da:5e:6d:06:67:23:2c:de: 4a:b0:7b:5c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGk1BkQ+CVEVqSU7DKr0OrczS6FQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ZFRjZCRjUzRkEzMTIyQTBGMDlDRUY0QjQwOEUxMzc5 MkExNDU0NTAeFw0yNTA2MDcyMDE2MzhaFw0yNTA2MTAyMzExMzhaMDMxMTAvBgNV BAMTKEVFREVCNEVFQkZGMjRBQ0E4NjI5QTE0QTg4NzY1M0Y0ODA1NzNDNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6FHIvH9tRPdTmNaY4HBVMFVng w3lYRzpMUdA/DhC0GaKx1iB8pmcjAw/tlA7xKyNAQHUwGsvn2T1HN99yG1G9Aj3Y mor+PtLMVh06rf3GrBAHMQ5eI5qPtti8DdMk59sqO89oIO9BVoeX+sr9mmks2+EB UI8Ie4sME6G5InXw6ZCzb4bwKzU+Mn7XFQYELS0u/8mJ1VCWQlflrIB/ai70mQy7 +kFk7CfOUl+Ja9ejsqZLSLt6eiZGYoIOS3bqKr35RVIyrZ4k1UjFkfNIEN49uSL4 6gq+eeRJqcZyp8XHKYg1oke+DydNCbLlAgkbNOQ+R7gtDDpttoIWj7UbT59jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7t607r/ySsqGKaFKiHZT9IBXPEswHwYDVR0j BBgwFoAUf+9r9T+jEioPCc70tAjhN5KhRUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MDNlYmFiYi05OTlmLTRmM2UtODRjMS1iZjI3OWJmZTE3ODcvMC83RkVGNkJGNTNG QTMxMjJBMEYwOUNFRjRCNDA4RTEzNzkyQTE0NTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0ZFRjZCRjUzRkEzMTIyQTBGMDlDRUY0QjQwOEUxMzc5MkEx NDU0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzAzZWJhYmItOTk5Zi00ZjNlLTg0 YzEtYmYyNzliZmUxNzg3LzAvN0ZFRjZCRjUzRkEzMTIyQTBGMDlDRUY0QjQwOEUx Mzc5MkExNDU0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALEcfQwQUUDHzEA3YINoo1oeDiRQLfnMJyXg CvBzzS2voIhgKz0iMSd3D5DEZRL23C5OdJ7eMrUuiTT8xmZcuG1PEm5iEgRXO9WQ OtJh7UT4tkZxeCoZlmq5BhhPLHPOVMUxEfwwPZnHqDe72xNGlzIW7NFFhW3Gx/wC 7e2iyoXSVwtWd/1mAkNTudw6RosGgt+S9/7cAxm1dHD+dqMti9ZVkmZegRLWQ2LZ sWrMUzwIPMcjWvQvfpBHADCq6btM/9U/Ri8arDYBEULMmkB1aEejdNCoxmxVmRX5 ptRg0Yim0GBBZUXEsx0ba5B+u0Hw8sOqwzbaXm0GZyMs3kqwe1w= -----END CERTIFICATE-----Generated at Mon Jun 9 13:57:31 2025 by rpki-client