$ rpki-client -vvf repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft File: 7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft (raw, json) Hash identifier: 2weVWzXr95WGLwG+diLz6pJmiE1vjTNp/+kI6WMX5Ro= Subject key identifier: 8D:4D:59:58:7F:17:62:89:ED:59:07:8A:B3:73:91:F6:1D:4E:49:B5 Authority key identifier: 7D:5A:E0:85:96:8D:C7:CB:31:10:23:F7:EB:E0:BF:8E:12:67:06:E4 Certificate issuer: /CN=7D5AE085968DC7CB311023F7EBE0BF8E126706E4 Certificate serial: 769742F9C96DA1C558F95853C7D84B0643C1EF2A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft Manifest number: 5E Signing time: Fri 06 Jun 2025 09:52:18 +0000 Manifest this update: Fri 06 Jun 2025 09:47:18 +0000 Manifest next update: Mon 09 Jun 2025 19:56:18 +0000 Files and hashes: 1: 3130332e38372e3139362e302f32342d3234203d3e20313336303837.roa (hash: PKJay4YTUMIamculUnWc/1iHvOFg1R7DDFoaRZ7eMb0=) 2: 3130332e38372e3139392e302f32342d3234203d3e20313336303837.roa (hash: H2vMbusg9cc7KJr3RTfXCg88poNhf1lCs+Xogw0psfI=) 3: 3130332e38372e3139372e302f32342d3234203d3e20313336303837.roa (hash: QdxrdH7DJeQ01d2yPs/0LNDYNMsAKR57bx9AHeSr82o=) 4: 3130332e38372e3139382e302f32342d3234203d3e20313336303837.roa (hash: V4UBKbCeji0pbV7a6XBtcRsd6l6kzHNKhpG08xb4pYs=) 5: 7D5AE085968DC7CB311023F7EBE0BF8E126706E4.crl (hash: mqqda2mlXES1A6/KP/bswF9hMHnqoZwh/RdUVq4s++Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.crl rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 19:56:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:97:42:f9:c9:6d:a1:c5:58:f9:58:53:c7:d8:4b:06:43:c1:ef:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D5AE085968DC7CB311023F7EBE0BF8E126706E4 Validity Not Before: Jun 6 09:47:18 2025 GMT Not After : Jun 9 19:56:18 2025 GMT Subject: CN=8D4D59587F176289ED59078AB37391F61D4E49B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:43:a6:fe:ec:ca:1e:f9:13:e4:e0:66:6a:3f: e4:36:88:0f:87:88:8e:b2:3d:49:2a:74:39:3c:8c: 96:fd:79:ec:83:70:c9:b5:ea:b4:f8:34:b6:40:93: e8:59:66:f1:8f:cf:ac:99:40:34:79:29:b1:13:9b: 60:10:1c:67:9a:90:b0:b5:2b:93:a7:93:d4:7c:fa: 72:7b:cb:e7:0f:5f:46:3c:f0:26:87:c1:b2:e7:6f: ab:85:b4:ea:22:fc:16:50:f8:ad:14:30:7c:d8:fe: a1:44:d2:ef:71:9b:da:69:f2:30:14:3c:de:11:c5: 60:48:67:a9:0b:73:c3:5e:4d:8b:29:40:6d:56:2a: da:88:b1:66:3d:51:08:a4:e6:fa:9a:18:31:d6:18: 95:3a:5a:24:e8:0f:71:e2:57:4d:b4:5b:a2:71:62: ef:ab:80:e8:7a:46:da:c5:d0:45:be:a8:f5:98:f8: 44:e5:be:dc:c0:f2:7c:af:d7:f3:4c:36:f1:df:d2: 39:5c:0a:a2:86:18:28:8d:0a:4d:4e:f6:df:7f:78: 62:55:5a:97:2d:d1:c4:27:9f:75:4d:80:a7:2b:65: 68:54:43:5b:65:c2:33:98:a1:fb:c9:20:73:98:a7: 8d:91:d1:17:1c:9a:c2:bd:9e:c0:63:75:f0:a8:c8: 13:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8D:4D:59:58:7F:17:62:89:ED:59:07:8A:B3:73:91:F6:1D:4E:49:B5 X509v3 Authority Key Identifier: keyid:7D:5A:E0:85:96:8D:C7:CB:31:10:23:F7:EB:E0:BF:8E:12:67:06:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 45:07:c1:56:2a:33:ca:6b:e3:ff:d0:32:c7:ee:ce:92:6a:aa: e2:e5:d7:0b:8a:15:f9:68:4d:67:bd:ab:b5:0b:c4:01:44:a3: 25:e4:40:29:1c:1b:cf:9f:7e:22:f4:7b:d7:12:9c:b0:8c:38: 6c:ca:b7:c6:f3:3e:69:fa:71:cc:2e:77:4c:33:a1:db:96:8f: 0e:fc:5a:b7:0e:f7:86:64:58:f4:3e:78:12:c9:9d:f3:0a:84: 72:61:9d:27:6a:06:30:4c:87:4a:3f:d1:97:91:63:41:56:6d: b8:37:2a:4e:09:a5:03:39:f5:4e:e5:da:da:55:cd:69:9d:21: 43:47:c9:f9:73:f1:54:75:b0:ae:64:c2:09:63:5f:a1:1d:6f: 02:ff:18:06:10:0b:44:2c:d0:a8:24:7c:fc:ad:ce:65:bf:d0: 1a:88:d2:83:18:19:88:ee:a8:09:16:e9:72:d4:4c:36:4f:c3: a9:38:30:f2:c5:b5:5f:e4:ec:e7:1c:10:3a:3e:77:d8:20:de: 8d:b8:43:eb:95:f2:58:14:d7:e6:83:01:53:81:9b:77:b1:79: fe:cb:fc:02:42:7d:39:79:17:da:e7:fe:90:93:ad:da:70:22: 82:95:a9:a3:36:63:4d:d0:da:a2:72:37:3b:3a:d5:9d:2f:35: b9:a9:7c:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdpdC+cltocVY+VhTx9hLBkPB7yowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q1QUUwODU5NjhEQzdDQjMxMTAyM0Y3RUJFMEJGOEUx MjY3MDZFNDAeFw0yNTA2MDYwOTQ3MThaFw0yNTA2MDkxOTU2MThaMDMxMTAvBgNV BAMTKDhENEQ1OTU4N0YxNzYyODlFRDU5MDc4QUIzNzM5MUY2MUQ0RTQ5QjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnQ6b+7Moe+RPk4GZqP+Q2iA+H iI6yPUkqdDk8jJb9eeyDcMm16rT4NLZAk+hZZvGPz6yZQDR5KbETm2AQHGeakLC1 K5Onk9R8+nJ7y+cPX0Y88CaHwbLnb6uFtOoi/BZQ+K0UMHzY/qFE0u9xm9pp8jAU PN4RxWBIZ6kLc8NeTYspQG1WKtqIsWY9UQik5vqaGDHWGJU6WiToD3HiV020W6Jx Yu+rgOh6RtrF0EW+qPWY+ETlvtzA8nyv1/NMNvHf0jlcCqKGGCiNCk1O9t9/eGJV Wpct0cQnn3VNgKcrZWhUQ1tlwjOYofvJIHOYp42R0RccmsK9nsBjdfCoyBN/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjU1ZWH8XYontWQeKs3OR9h1OSbUwHwYDVR0j BBgwFoAUfVrghZaNx8sxECP36+C/jhJnBuQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NmU2M2NkMi1mYjNjLTQxYjItYjk2Yi1hYjIzNDQyMGEyMTEvMC83RDVBRTA4NTk2 OERDN0NCMzExMDIzRjdFQkUwQkY4RTEyNjcwNkU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q1QUUwODU5NjhEQzdDQjMxMTAyM0Y3RUJFMEJGOEUxMjY3 MDZFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTZlNjNjZDItZmIzYy00MWIyLWI5 NmItYWIyMzQ0MjBhMjExLzAvN0Q1QUUwODU5NjhEQzdDQjMxMTAyM0Y3RUJFMEJG OEUxMjY3MDZFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEUHwVYqM8pr4//QMsfuzpJqquLl1wuKFflo TWe9q7ULxAFEoyXkQCkcG8+ffiL0e9cSnLCMOGzKt8bzPmn6ccwud0wzoduWjw78 WrcO94ZkWPQ+eBLJnfMKhHJhnSdqBjBMh0o/0ZeRY0FWbbg3Kk4JpQM59U7l2tpV zWmdIUNHyflz8VR1sK5kwgljX6EdbwL/GAYQC0Qs0KgkfPytzmW/0BqI0oMYGYju qAkW6XLUTDZPw6k4MPLFtV/k7OccEDo+d9gg3o24Q+uV8lgU1+aDAVOBm3exef7L /AJCfTl5F9rn/pCTrdpwIoKVqaM2Y03Q2qJyNzs61Z0vNbmpfKY= -----END CERTIFICATE-----Generated at Sun Jun 8 08:21:01 2025 by rpki-client