$ rpki-client -vvf repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft File: C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft (raw, json) Hash identifier: q70u/iL9aAVSMfvSs/2pM0h2bpro6xN7H28TMd31bnY= Subject key identifier: 0A:52:61:AE:EE:5A:66:E2:B8:8E:1E:81:BA:13:B7:97:83:8A:E0:BD Authority key identifier: C7:F5:AA:72:DB:87:0E:16:1B:62:AC:A9:25:0A:D9:8A:A1:10:A0:14 Certificate issuer: /CN=C7F5AA72DB870E161B62ACA9250AD98AA110A014 Certificate serial: 6ECF2B9C1F11C9FBEC9FDEE155985C9C2475A8A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F5AA72DB870E161B62ACA9250AD98AA110A014.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft Manifest number: 0274 Signing time: Tue 03 Jun 2025 07:11:57 +0000 Manifest this update: Tue 03 Jun 2025 07:06:57 +0000 Manifest next update: Fri 06 Jun 2025 18:34:57 +0000 Files and hashes: 1: C7F5AA72DB870E161B62ACA9250AD98AA110A014.crl (hash: ybsHDFXyGmu01bse5Rja8JFAt0YzCPzNe9OLiLNiTaA=) 2: 3130332e3230372e3233392e302f32342d3234203d3e20313338303936.roa (hash: bCN0BjFIkGXQoNiGlR2Rw4pyaw/6SRLkI5yDk6Jonrg=) 3: 3130332e3230372e3233362e302f32332d3234203d3e20313334363434.roa (hash: FuTP+olekR94POOQRMWB2DM9MZrHgp1r/imUNhheQk0=) 4: 3130332e3230372e3233382e302f32342d3234203d3e20313338303936.roa (hash: kqyShD8grMzsW8WAD+q93A9hYlzfgDARjSsqGTZiG54=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.crl rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F5AA72DB870E161B62ACA9250AD98AA110A014.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:34:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:cf:2b:9c:1f:11:c9:fb:ec:9f:de:e1:55:98:5c:9c:24:75:a8:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7F5AA72DB870E161B62ACA9250AD98AA110A014 Validity Not Before: Jun 3 07:06:57 2025 GMT Not After : Jun 6 18:34:57 2025 GMT Subject: CN=0A5261AEEE5A66E2B88E1E81BA13B797838AE0BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:81:34:bd:47:dd:48:1a:3f:a9:c7:be:9a:e4: b2:62:ed:d4:a0:95:39:54:17:d9:42:7c:37:ab:5a: 4e:30:8d:2d:c4:e0:7b:93:b3:38:77:2a:c3:ea:ba: 9d:c4:db:be:37:2f:72:da:90:0c:3e:06:1b:36:28: e6:d0:7c:5d:02:37:ad:a4:51:cf:4e:40:32:e1:9f: e5:bc:99:cc:0a:35:5b:db:5c:aa:8b:e8:7a:cc:80: 75:25:29:87:14:5d:7e:20:be:92:b2:27:44:2f:c6: 2c:a2:58:f5:47:5d:ff:94:2c:fa:27:a7:54:a2:6f: c7:c3:b9:e4:e2:ad:5e:45:d9:a9:69:0a:07:5b:97: 0d:34:d6:b8:c9:ab:e6:d2:cb:6f:cb:06:33:be:63: 13:42:98:40:a9:0f:20:f1:77:e7:85:2c:77:b3:db: 37:31:fe:f0:b4:68:82:95:91:26:05:f5:d8:24:8a: 43:b3:68:10:2d:d5:37:62:fd:8f:f9:a1:68:c1:fb: 4e:9d:ad:a2:52:eb:1a:c9:5a:69:1e:1d:6c:1f:c7: 39:ff:c0:26:41:61:29:6d:ec:2d:02:41:95:9d:ba: c7:2d:65:1c:1e:bb:11:8c:d7:5a:40:b2:5c:95:48: d4:a3:b2:46:c1:25:d0:d7:2e:8e:4d:a6:9f:59:8d: d4:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:52:61:AE:EE:5A:66:E2:B8:8E:1E:81:BA:13:B7:97:83:8A:E0:BD X509v3 Authority Key Identifier: keyid:C7:F5:AA:72:DB:87:0E:16:1B:62:AC:A9:25:0A:D9:8A:A1:10:A0:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F5AA72DB870E161B62ACA9250AD98AA110A014.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:42:84:22:47:b4:ec:ca:b9:8a:1d:77:83:c8:b9:3e:e8:6e: c5:cc:4b:ad:fd:a4:af:5e:55:58:ea:24:ac:a6:d8:e6:4f:da: ac:fc:87:fc:11:a2:f5:48:e9:ab:e4:08:12:7a:c1:8e:d4:f2: e8:4f:49:52:2a:0e:42:7b:69:77:b8:18:8e:39:06:ea:ba:c5: 5a:b6:7e:01:ea:aa:75:1f:c8:f9:e3:40:e3:90:aa:2d:62:d6: bf:ad:03:32:ea:f2:36:5b:4e:4d:ad:c5:d9:69:d9:59:b1:48: da:23:36:86:10:e1:6f:32:cc:de:a0:c4:1b:81:5b:6c:c3:d3: 88:78:2c:61:84:52:50:23:c8:5e:91:b7:75:17:dc:58:3e:d2: 15:c6:66:d8:5f:65:e9:cd:c0:eb:06:00:17:a5:32:6b:7b:8f: 5e:24:02:ec:7d:b6:01:1c:71:8e:e4:a2:9a:76:b1:b6:05:16: b7:e6:1d:63:68:23:0c:85:5a:32:7f:f5:cf:a5:d3:51:93:da: 50:b4:86:d7:05:47:47:e0:a7:9b:3a:29:6a:31:e2:91:b0:0d: 72:2c:b7:d0:ea:2c:17:5d:8a:b7:9a:52:0e:8a:65:21:75:81: 6f:36:66:cf:c7:21:d1:2d:9d:39:52:11:45:e5:3d:db:22:40: 6e:a2:9b:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbs8rnB8Ryfvsn97hVZhcnCR1qKYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdGNUFBNzJEQjg3MEUxNjFCNjJBQ0E5MjUwQUQ5OEFB MTEwQTAxNDAeFw0yNTA2MDMwNzA2NTdaFw0yNTA2MDYxODM0NTdaMDMxMTAvBgNV BAMTKDBBNTI2MUFFRUU1QTY2RTJCODhFMUU4MUJBMTNCNzk3ODM4QUUwQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9gTS9R91IGj+px76a5LJi7dSg lTlUF9lCfDerWk4wjS3E4HuTszh3KsPqup3E2743L3LakAw+Bhs2KObQfF0CN62k Uc9OQDLhn+W8mcwKNVvbXKqL6HrMgHUlKYcUXX4gvpKyJ0QvxiyiWPVHXf+ULPon p1Sib8fDueTirV5F2alpCgdblw001rjJq+bSy2/LBjO+YxNCmECpDyDxd+eFLHez 2zcx/vC0aIKVkSYF9dgkikOzaBAt1Tdi/Y/5oWjB+06draJS6xrJWmkeHWwfxzn/ wCZBYSlt7C0CQZWdusctZRweuxGM11pAslyVSNSjskbBJdDXLo5Npp9ZjdSXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUClJhru5aZuK4jh6BuhO3l4OK4L0wHwYDVR0j BBgwFoAUx/WqctuHDhYbYqypJQrZiqEQoBQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YjBlN2Y4ZS1jMjlmLTRlNmItYWQwYS05OTU3ZmJkNTY5NTMvMC9DN0Y1QUE3MkRC ODcwRTE2MUI2MkFDQTkyNTBBRDk4QUExMTBBMDE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzdGNUFBNzJEQjg3MEUxNjFCNjJBQ0E5MjUwQUQ5OEFBMTEw QTAxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGIwZTdmOGUtYzI5Zi00ZTZiLWFk MGEtOTk1N2ZiZDU2OTUzLzAvQzdGNUFBNzJEQjg3MEUxNjFCNjJBQ0E5MjUwQUQ5 OEFBMTEwQTAxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIlChCJHtOzKuYodd4PIuT7obsXMS639pK9e VVjqJKym2OZP2qz8h/wRovVI6avkCBJ6wY7U8uhPSVIqDkJ7aXe4GI45Buq6xVq2 fgHqqnUfyPnjQOOQqi1i1r+tAzLq8jZbTk2txdlp2VmxSNojNoYQ4W8yzN6gxBuB W2zD04h4LGGEUlAjyF6Rt3UX3Fg+0hXGZthfZenNwOsGABelMmt7j14kAux9tgEc cY7kopp2sbYFFrfmHWNoIwyFWjJ/9c+l01GT2lC0htcFR0fgp5s6KWox4pGwDXIs t9DqLBddireaUg6KZSF1gW82Zs/HIdEtnTlSEUXlPdsiQG6im4Q= -----END CERTIFICATE-----Generated at Thu Jun 5 18:12:06 2025 by rpki-client