$ rpki-client -vvf repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft File: 7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft (raw, json) Hash identifier: VzI2enR45q+x1lPxtF6hGGIqwkGGZ3NXmuTHxkR1BOg= Subject key identifier: 8F:86:E9:24:43:59:85:08:AD:65:66:9D:91:B3:5E:1E:E8:75:24:A1 Authority key identifier: 7D:6E:DF:DB:21:B8:B7:E6:A7:5A:99:0A:7B:EC:AD:85:E8:BE:B9:53 Certificate issuer: /CN=7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953 Certificate serial: 0C5C3757C9341B7C4CA808A2020827F7DBD2E29F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft Manifest number: 0186 Signing time: Wed 04 Jun 2025 12:50:04 +0000 Manifest this update: Wed 04 Jun 2025 12:45:04 +0000 Manifest next update: Sat 07 Jun 2025 13:02:04 +0000 Files and hashes: 1: 7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.crl (hash: upw/fvmi5qd9laLkbqTWXybaU5dW+abq4SFNrx0oIz0=) 2: 3130332e34362e352e302f32342d3234203d3e20313530343630.roa (hash: OiXuaCFeHNTNKTkxwDwZ/IJjAlYs+aZs7qWhd3mySzg=) 3: 3130332e34362e342e302f32332d3233203d3e20313530343630.roa (hash: NXHMc5cBUZitTQZ4ST9s7lp3tsPIg2LlkZ5yYQ7KPUA=) 4: 3130332e34362e342e302f32342d3234203d3e20313530343630.roa (hash: 70RFcRoz1w22nVDdjd8xwvOHx9oaAPRDsiAFJSjZRVk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.crl rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 13:02:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:5c:37:57:c9:34:1b:7c:4c:a8:08:a2:02:08:27:f7:db:d2:e2:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953 Validity Not Before: Jun 4 12:45:04 2025 GMT Not After : Jun 7 13:02:04 2025 GMT Subject: CN=8F86E92443598508AD65669D91B35E1EE87524A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:ad:4f:87:f8:9e:d6:b8:40:87:a6:9e:7d:e0: 65:4f:b3:ba:79:da:fb:36:70:a1:6d:6d:b0:8d:f2: fa:30:9a:ab:64:a5:d1:2d:46:72:86:19:66:d2:c8: 17:fd:15:f8:45:68:a1:7d:18:46:e7:5f:78:fd:09: 6a:1a:05:80:9c:d8:05:69:37:ab:ca:d0:ca:4e:db: 06:f5:54:d5:36:e9:1a:99:5a:96:4f:9b:a8:1c:cc: a1:8d:1a:97:1e:2c:89:a7:01:cf:3a:af:f7:d7:e1: 04:ce:62:f7:2d:a6:5b:95:31:8e:63:c1:f1:43:e7: 12:a5:ac:12:c1:b1:00:51:bf:97:70:bb:a0:eb:5a: 20:11:48:fe:15:d1:83:43:58:b1:25:47:ca:aa:54: 41:f6:aa:48:36:2a:c4:06:57:a2:77:a3:75:ca:db: f3:43:97:08:b6:fa:a6:3b:5e:63:b0:6b:b0:08:4f: f4:74:44:c8:4d:0c:79:79:23:92:08:ca:8e:c5:8c: ce:aa:af:d1:ee:1a:60:26:07:ab:93:e8:8a:b7:a1: 76:e3:6c:93:3c:f5:66:2e:06:51:cc:b9:c8:67:49: 96:0f:85:73:e0:2f:5b:6d:97:86:84:da:f2:6d:40: 3e:9d:10:fa:c9:94:cc:72:ad:2c:58:88:1c:af:3b: b8:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:86:E9:24:43:59:85:08:AD:65:66:9D:91:B3:5E:1E:E8:75:24:A1 X509v3 Authority Key Identifier: keyid:7D:6E:DF:DB:21:B8:B7:E6:A7:5A:99:0A:7B:EC:AD:85:E8:BE:B9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:d1:9a:4f:a6:ce:82:ea:11:c0:36:c3:6b:ae:02:37:47:3f: cf:58:92:07:3a:9c:bd:c2:00:55:02:74:b6:7e:f5:fb:58:15: 84:3b:10:24:7e:ae:f9:fa:dd:c2:3a:66:df:65:f4:59:4b:89: 3b:ea:d4:24:a1:2f:0e:d1:58:a7:7b:5b:f5:33:07:68:01:03: 7c:8d:b7:3b:01:ce:58:8e:aa:1e:7f:cc:85:ae:11:b8:f0:1b: a3:fe:fa:2d:d5:3a:e1:de:3b:33:72:e2:c0:f2:df:27:c0:fa: f7:c3:14:3b:f9:8e:81:9c:d2:67:ab:6c:fe:ee:e9:38:f4:a0: 1f:2d:eb:d8:dc:7a:7e:5c:b8:56:26:a3:b9:71:7c:4c:37:00: 1a:75:d0:e1:b1:b1:ec:1e:bb:62:00:5c:91:6d:7c:0b:52:91: ed:6d:9c:9c:b2:80:df:f3:b8:b2:d8:9a:a3:46:2a:8e:bb:ea: b9:36:2e:bc:a0:e2:cd:ca:34:5c:7f:74:f9:b4:9e:16:bf:d0: 8b:0b:73:4c:87:3e:5c:62:f0:83:cc:d1:f1:91:79:24:54:66: a8:cb:c0:12:f6:8e:4e:00:7b:1c:2f:8d:09:7f:45:d4:5e:2e: 9a:e0:2f:43:45:ab:ec:6e:d3:14:ca:05:9d:85:21:18:d5:d5: 77:40:74:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDFw3V8k0G3xMqAiiAggn99vS4p8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q2RURGREIyMUI4QjdFNkE3NUE5OTBBN0JFQ0FEODVF OEJFQjk1MzAeFw0yNTA2MDQxMjQ1MDRaFw0yNTA2MDcxMzAyMDRaMDMxMTAvBgNV BAMTKDhGODZFOTI0NDM1OTg1MDhBRDY1NjY5RDkxQjM1RTFFRTg3NTI0QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDArU+H+J7WuECHpp594GVPs7p5 2vs2cKFtbbCN8vowmqtkpdEtRnKGGWbSyBf9FfhFaKF9GEbnX3j9CWoaBYCc2AVp N6vK0MpO2wb1VNU26RqZWpZPm6gczKGNGpceLImnAc86r/fX4QTOYvctpluVMY5j wfFD5xKlrBLBsQBRv5dwu6DrWiARSP4V0YNDWLElR8qqVEH2qkg2KsQGV6J3o3XK 2/NDlwi2+qY7XmOwa7AIT/R0RMhNDHl5I5IIyo7FjM6qr9HuGmAmB6uT6Iq3oXbj bJM89WYuBlHMuchnSZYPhXPgL1ttl4aE2vJtQD6dEPrJlMxyrSxYiByvO7hbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj4bpJENZhQitZWadkbNeHuh1JKEwHwYDVR0j BBgwFoAUfW7f2yG4t+anWpkKe+ythei+uVMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmM4Y2RhNS0zNDgzLTQyYjAtYjM4NS1mYzA3MDcxNmZiY2MvMC83RDZFREZEQjIx QjhCN0U2QTc1QTk5MEE3QkVDQUQ4NUU4QkVCOTUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q2RURGREIyMUI4QjdFNkE3NUE5OTBBN0JFQ0FEODVFOEJF Qjk1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJjOGNkYTUtMzQ4My00MmIwLWIz ODUtZmMwNzA3MTZmYmNjLzAvN0Q2RURGREIyMUI4QjdFNkE3NUE5OTBBN0JFQ0FE ODVFOEJFQjk1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG3Rmk+mzoLqEcA2w2uuAjdHP89Ykgc6nL3C AFUCdLZ+9ftYFYQ7ECR+rvn63cI6Zt9l9FlLiTvq1CShLw7RWKd7W/UzB2gBA3yN tzsBzliOqh5/zIWuEbjwG6P++i3VOuHeOzNy4sDy3yfA+vfDFDv5joGc0merbP7u 6Tj0oB8t69jcen5cuFYmo7lxfEw3ABp10OGxseweu2IAXJFtfAtSke1tnJyygN/z uLLYmqNGKo676rk2Lryg4s3KNFx/dPm0nha/0IsLc0yHPlxi8IPM0fGReSRUZqjL wBL2jk4AexwvjQl/RdReLprgL0NFq+xu0xTKBZ2FIRjV1XdAdO8= -----END CERTIFICATE-----Generated at Thu Jun 5 18:41:40 2025 by rpki-client