$ rpki-client -vvf repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft File: D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft (raw, json) Hash identifier: 2IaaSoeBTHyFh0DZ1xKj+7vvjl2iSzFFq7SGOZfQ3QU= Subject key identifier: 4F:E7:28:FB:D6:83:E5:34:88:CC:83:B9:EE:52:EC:2A:1E:53:3F:50 Authority key identifier: D7:C7:C6:E5:33:C4:1C:36:D9:23:CD:C5:9F:FC:1B:04:36:C3:9F:AF Certificate issuer: /CN=D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF Certificate serial: 183252F749D3EFAC65134971153A4B06F1A9B45F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft Manifest number: 0238 Signing time: Sat 07 Jun 2025 09:01:42 +0000 Manifest this update: Sat 07 Jun 2025 08:56:42 +0000 Manifest next update: Tue 10 Jun 2025 19:12:42 +0000 Files and hashes: 1: 3130332e3130322e3137372e302f32342d3234203d3e20313335343634.roa (hash: oHkNyUxZ+91xlNVhfeWI9Dc0rmMp8x6qN96DcYOObkU=) 2: 3130332e3130322e3137362e302f32342d3234203d3e20313335343634.roa (hash: /nnnpT4J0Tuu/cwXNYMkIuOZtyJHbw8wTsT308/p5rw=) 3: 3130332e37302e36382e302f32342d3234203d3e20313335343634.roa (hash: 2CoQGk4NMRfUrYnvT/UZsUPUuE84h2TZeseeJ7TfgPk=) 4: 3130332e3130322e3136372e302f32342d3234203d3e20313335343634.roa (hash: G2Aj1Erzi22dbwXIe5ZKOYeLnX3IptEzXgXL9BU+vU0=) 5: D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.crl (hash: tRjJUNtq17TixZNunhYWTrRrO5LIMNA+M+Fnwlr0xJc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.crl rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 19:12:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:32:52:f7:49:d3:ef:ac:65:13:49:71:15:3a:4b:06:f1:a9:b4:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF Validity Not Before: Jun 7 08:56:42 2025 GMT Not After : Jun 10 19:12:42 2025 GMT Subject: CN=4FE728FBD683E53488CC83B9EE52EC2A1E533F50 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d5:c4:78:8f:57:16:2d:bd:f9:d4:6a:c0:0d: a8:94:3a:2f:11:9f:f8:21:73:b1:38:42:49:36:74: d5:c9:05:02:62:07:12:00:0a:39:2a:b0:44:17:47: d0:57:e4:69:94:b6:61:b8:8f:35:11:6e:8a:80:4e: f1:98:bb:af:c1:9b:78:26:ee:31:43:fe:56:8c:a7: e8:ec:fb:63:df:9e:2f:76:89:9f:45:0e:d8:69:db: 3a:41:be:25:7d:58:f9:cd:48:1f:66:51:5c:78:07: 20:d5:eb:d0:a6:de:6c:c3:7f:28:bf:a8:2c:8e:d5: 06:58:96:fe:20:a1:a1:c2:40:28:2b:dd:6b:5b:69: e5:c2:f1:ed:f2:47:99:2a:c0:aa:36:2b:43:e3:93: 76:84:76:c6:93:e4:9e:1f:16:f1:71:53:ac:cb:d8: 8c:b9:42:03:7c:9e:b3:a7:50:fa:d0:cb:04:43:14: 76:7b:84:9d:f1:f3:7f:28:69:f2:36:3a:70:a4:00: c4:df:eb:38:f3:86:24:61:80:f1:f3:b6:49:07:82: 51:6c:8b:85:3f:28:9a:ad:c9:95:1e:94:c6:64:aa: d5:39:23:15:84:04:e7:68:18:27:3b:50:12:da:4a: c8:f0:cb:e6:74:29:42:72:a2:02:a7:6e:9a:19:77: 71:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:E7:28:FB:D6:83:E5:34:88:CC:83:B9:EE:52:EC:2A:1E:53:3F:50 X509v3 Authority Key Identifier: keyid:D7:C7:C6:E5:33:C4:1C:36:D9:23:CD:C5:9F:FC:1B:04:36:C3:9F:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:c6:16:f2:9e:e5:98:f5:7a:10:1e:91:d6:41:98:53:6d:a8: 3c:fe:60:d7:9a:fc:19:d5:8e:1d:eb:08:15:ba:55:9d:da:5c: bd:b7:36:04:72:95:b5:60:99:c3:68:50:c9:7f:0e:67:00:a9: c4:4a:6f:ff:91:2c:69:0d:f3:70:0b:06:10:b3:1e:2a:7e:a0: 8f:69:fb:2b:12:fc:99:26:83:eb:e1:08:29:df:91:40:ab:d1: b8:e6:ed:ec:3d:81:29:13:e6:27:d2:05:47:b4:e1:b8:9f:f9: 89:d9:c6:be:17:06:37:a0:2e:50:be:73:3e:dd:24:ea:78:12: 15:aa:df:90:ab:83:15:66:e9:b8:2a:50:f0:03:27:5d:ac:ab: 60:16:c1:45:47:c9:96:8e:98:78:b0:61:fe:a8:32:b2:20:31: 14:f5:c7:52:04:26:05:93:d7:43:1c:e2:58:27:5b:56:c8:e2: 83:b6:26:05:f9:c0:b8:e4:ad:dd:ed:66:8b:9f:50:0c:5e:8b: 0a:75:36:9c:1b:c3:e4:d9:86:71:1a:17:4c:97:5e:17:85:db: e6:14:ec:d9:c4:db:83:f7:9e:78:67:99:84:b9:67:09:2f:0c: d4:ba:3d:5c:cf:da:2c:33:dc:f8:66:41:ed:b2:11:f9:b3:73: 26:4a:e4:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGDJS90nT76xlE0lxFTpLBvGptF8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdDN0M2RTUzM0M0MUMzNkQ5MjNDREM1OUZGQzFCMDQz NkMzOUZBRjAeFw0yNTA2MDcwODU2NDJaFw0yNTA2MTAxOTEyNDJaMDMxMTAvBgNV BAMTKDRGRTcyOEZCRDY4M0U1MzQ4OENDODNCOUVFNTJFQzJBMUU1MzNGNTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB1cR4j1cWLb351GrADaiUOi8R n/ghc7E4Qkk2dNXJBQJiBxIACjkqsEQXR9BX5GmUtmG4jzURboqATvGYu6/Bm3gm 7jFD/laMp+js+2Pfni92iZ9FDthp2zpBviV9WPnNSB9mUVx4ByDV69Cm3mzDfyi/ qCyO1QZYlv4goaHCQCgr3WtbaeXC8e3yR5kqwKo2K0Pjk3aEdsaT5J4fFvFxU6zL 2Iy5QgN8nrOnUPrQywRDFHZ7hJ3x838oafI2OnCkAMTf6zjzhiRhgPHztkkHglFs i4U/KJqtyZUelMZkqtU5IxWEBOdoGCc7UBLaSsjwy+Z0KUJyogKnbpoZd3EHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT+co+9aD5TSIzIO57lLsKh5TP1AwHwYDVR0j BBgwFoAU18fG5TPEHDbZI83Fn/wbBDbDn68wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTlhODUzOC1kYTQzLTQxNTgtYWJjMi04ZTYzYThlNDA4OTkvMC9EN0M3QzZFNTMz QzQxQzM2RDkyM0NEQzU5RkZDMUIwNDM2QzM5RkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDdDN0M2RTUzM0M0MUMzNkQ5MjNDREM1OUZGQzFCMDQzNkMz OUZBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTE5YTg1MzgtZGE0My00MTU4LWFi YzItOGU2M2E4ZTQwODk5LzAvRDdDN0M2RTUzM0M0MUMzNkQ5MjNDREM1OUZGQzFC MDQzNkMzOUZBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK7GFvKe5Zj1ehAekdZBmFNtqDz+YNea/BnV jh3rCBW6VZ3aXL23NgRylbVgmcNoUMl/DmcAqcRKb/+RLGkN83ALBhCzHip+oI9p +ysS/Jkmg+vhCCnfkUCr0bjm7ew9gSkT5ifSBUe04bif+YnZxr4XBjegLlC+cz7d JOp4EhWq35CrgxVm6bgqUPADJ12sq2AWwUVHyZaOmHiwYf6oMrIgMRT1x1IEJgWT 10Mc4lgnW1bI4oO2JgX5wLjkrd3tZoufUAxeiwp1Npwbw+TZhnEaF0yXXheF2+YU 7NnE24P3nnhnmYS5ZwkvDNS6PVzP2iwz3PhmQe2yEfmzcyZK5CY= -----END CERTIFICATE-----Generated at Sun Jun 8 23:29:42 2025 by rpki-client