$ rpki-client -vvf repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft File: 7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft (raw, json) Hash identifier: Yb5RgtNsGU95Dlj/kWM0Wlzu6BzbJArsxhcvtK4MXcI= Subject key identifier: 0B:1D:4B:47:D8:0C:B4:A7:93:86:98:36:DB:44:57:32:7D:11:2C:23 Authority key identifier: 7D:4F:0D:00:7B:60:13:49:96:AC:31:98:B9:E5:B7:1E:AF:70:E7:33 Certificate issuer: /CN=7D4F0D007B60134996AC3198B9E5B71EAF70E733 Certificate serial: 5BB6F7F9CD475E5347579ABD74EA80756ADA802C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft Manifest number: 04F3 Signing time: Mon 02 Jun 2025 07:32:01 +0000 Manifest this update: Mon 02 Jun 2025 07:27:01 +0000 Manifest next update: Thu 05 Jun 2025 17:12:01 +0000 Files and hashes: 1: 323430333a653063303a3a2f33322d3438203d3e20313338303839.roa (hash: IDS7wT53F/9d+GGxnBDomzis7H+va5MBv/3bGTQques=) 2: 3130332e3132342e3133382e302f32342d3234203d3e20313338303839.roa (hash: J/jPlTXp+kWKv5LyWjv+I0N1cAy55yAD17Rj2NwYkPM=) 3: 323430333a653063303a3a2f33322d3332203d3e20313338303839.roa (hash: N0fiZGpp7G4AcyGQiECW3/6Q5p0a7A1fAhfbX9FH1ms=) 4: 3130332e3132342e3133372e302f32342d3234203d3e20313338303839.roa (hash: vPo4xg80UOtB6VJUwA4UWFKXU9vTxzV/7Yqjm3eG2dU=) 5: 3130332e3132342e3133382e302f32332d3234203d3e20313338303839.roa (hash: UkRWHYHFSXJQvTnbIud8PmlndW+kHrowErEkvw8GIIU=) 6: 323430333a653063303a31333a3a2f34382d3438203d3e20313338303839.roa (hash: NEhivRqvBCnBURZf09iLRn6F9NwBbv/MNUQSDs4qTsQ=) 7: 323430333a653063303a313a3a2f34382d3438203d3e20313338303839.roa (hash: H7BZrybLTpX0NJFsDuTjqzH8VF1huH+0BD/mvn2lSto=) 8: 323430333a653063303a323a3a2f34382d3438203d3e20313338303839.roa (hash: 7qX9WcxP/RC8tMcJg/P60OwjJ/UboqeJrbX2Ange7f0=) 9: 323430333a653063303a3a2f34382d3438203d3e20313338303839.roa (hash: 56yoy1pZXhES0/QXKkOUvjrn9k9A+/MhvPggVyF266U=) 10: 3130332e3132342e3133392e302f32342d3234203d3e20313338303839.roa (hash: qQ/OJJBLuknzR6dOBM+bTowxaxIwEUGdeh8g4k+xMHc=) 11: 7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl (hash: v9c90wd0rJYSee9sZu4m4qEtHMcFkRAXLDT3w/s0BaM=) 12: 3130332e3132342e3133362e302f32322d3234203d3e20313338303839.roa (hash: 0fYEP8T/Nnelfp7GTy05C/LwRW0usrD9PvaWq6iCxUk=) 13: 3130332e3132342e3133362e302f32332d3234203d3e20313338303839.roa (hash: KTTSzhJyEe2+3+LNGtWkObwsWEdVtFCSQXuEdew12yU=) 14: 3130332e3132342e3133362e302f32342d3234203d3e20313338303839.roa (hash: BQTtvc745IuKZaE72oqsQIokxS6D/NEUcrmFIac+agM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 17:12:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:b6:f7:f9:cd:47:5e:53:47:57:9a:bd:74:ea:80:75:6a:da:80:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D4F0D007B60134996AC3198B9E5B71EAF70E733 Validity Not Before: Jun 2 07:27:01 2025 GMT Not After : Jun 5 17:12:01 2025 GMT Subject: CN=0B1D4B47D80CB4A793869836DB4457327D112C23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:00:5a:a9:72:6d:cd:02:24:80:40:07:0f:e3: 6d:d3:8b:f7:5b:e8:22:ac:9b:b6:d7:85:99:d2:61: ce:8c:47:19:d6:01:81:b8:ce:54:4b:73:a7:f2:cb: 30:33:4d:97:15:bd:dc:15:bf:13:90:3b:8f:00:54: d2:6e:5f:ff:18:17:88:36:e0:36:48:e1:68:85:ce: 52:5b:1a:df:82:27:62:7e:77:7b:6a:8b:43:15:16: 04:be:f4:46:bc:f3:29:44:05:f6:84:e6:ec:16:e3: a2:ef:03:64:31:a8:64:42:4c:55:a2:fb:bd:c1:20: b7:e6:3f:f7:97:ef:87:2a:ac:cc:3e:3c:ac:c8:3e: 47:fc:42:6a:6a:2f:6c:21:44:00:09:dc:f8:1f:d0: 10:00:2a:94:02:d6:1a:d5:2c:ae:fb:3c:f8:3e:0f: 95:4a:18:65:7a:39:7c:d5:89:d6:99:0d:5a:b6:cc: 1e:1c:a4:c8:81:be:a2:5e:a8:d9:5d:fe:61:5f:20: 71:a7:45:86:26:fc:87:d2:e9:8b:08:fe:21:14:de: 13:94:7a:dd:5d:79:16:03:00:5f:d3:73:0f:8f:fb: da:46:cc:ba:d8:58:1c:99:19:52:dc:cd:58:f5:22: 0d:30:a5:f4:fa:76:58:25:0c:86:a5:e3:06:b5:1f: 13:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:1D:4B:47:D8:0C:B4:A7:93:86:98:36:DB:44:57:32:7D:11:2C:23 X509v3 Authority Key Identifier: keyid:7D:4F:0D:00:7B:60:13:49:96:AC:31:98:B9:E5:B7:1E:AF:70:E7:33 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:18:a5:5b:40:2c:53:0f:ff:35:67:5e:96:c6:0b:21:11:f9: 08:36:fb:8e:e2:ea:c0:01:1a:df:5d:4a:b2:82:fa:e0:62:d3: 08:45:d3:8f:9a:88:20:05:c2:7e:0d:61:35:7f:05:93:43:4c: bf:67:ab:3f:b0:ee:e3:c8:f1:93:01:47:4d:2f:32:42:a2:67: 3e:be:bd:a7:af:e4:b2:3d:7d:06:eb:4c:0f:dd:c0:5c:2c:fa: c0:0f:5b:60:5e:36:9a:e4:bf:5d:79:bf:bd:d7:d1:49:58:38: 07:d0:9b:4e:e9:74:32:89:14:73:37:f3:e6:b8:61:01:dc:69: d2:5d:24:ff:ac:1b:6c:8f:fc:33:2f:fa:0e:f9:65:1b:62:89: a7:4e:61:1c:a7:6b:ea:cc:80:ae:78:47:c2:61:8b:ba:57:12: 4d:77:ec:b7:64:af:5f:e7:dc:d5:9a:d5:d8:2b:e1:f0:55:af: 55:f3:b8:38:be:5d:41:1f:58:8d:5a:f5:6b:67:e1:17:10:68: b8:63:8c:c4:49:d1:71:73:2b:62:8c:2e:e4:90:00:53:4c:a8: e2:6a:99:e6:09:d5:63:9c:00:ec:7d:f9:9b:47:0a:7b:88:78: 85:69:ae:fd:e3:63:72:fc:bc:cd:bd:af:ea:1d:d2:bc:9b:1f: c9:f2:67:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW7b3+c1HXlNHV5q9dOqAdWragCwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q0RjBEMDA3QjYwMTM0OTk2QUMzMTk4QjlFNUI3MUVB RjcwRTczMzAeFw0yNTA2MDIwNzI3MDFaFw0yNTA2MDUxNzEyMDFaMDMxMTAvBgNV BAMTKDBCMUQ0QjQ3RDgwQ0I0QTc5Mzg2OTgzNkRCNDQ1NzMyN0QxMTJDMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAAFqpcm3NAiSAQAcP423Ti/db 6CKsm7bXhZnSYc6MRxnWAYG4zlRLc6fyyzAzTZcVvdwVvxOQO48AVNJuX/8YF4g2 4DZI4WiFzlJbGt+CJ2J+d3tqi0MVFgS+9Ea88ylEBfaE5uwW46LvA2QxqGRCTFWi +73BILfmP/eX74cqrMw+PKzIPkf8QmpqL2whRAAJ3Pgf0BAAKpQC1hrVLK77PPg+ D5VKGGV6OXzVidaZDVq2zB4cpMiBvqJeqNld/mFfIHGnRYYm/IfS6YsI/iEU3hOU et1deRYDAF/Tcw+P+9pGzLrYWByZGVLczVj1Ig0wpfT6dlglDIal4wa1HxOlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCx1LR9gMtKeThpg220RXMn0RLCMwHwYDVR0j BBgwFoAUfU8NAHtgE0mWrDGYueW3Hq9w5zMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 YWJhNGU1OS1mYjMxLTQxYjUtODhlNy0wYjJjZWQxZjIwMWMvMC83RDRGMEQwMDdC NjAxMzQ5OTZBQzMxOThCOUU1QjcxRUFGNzBFNzMzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q0RjBEMDA3QjYwMTM0OTk2QUMzMTk4QjlFNUI3MUVBRjcw RTczMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWFiYTRlNTktZmIzMS00MWI1LTg4 ZTctMGIyY2VkMWYyMDFjLzAvN0Q0RjBEMDA3QjYwMTM0OTk2QUMzMTk4QjlFNUI3 MUVBRjcwRTczMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHkYpVtALFMP/zVnXpbGCyER+Qg2+47i6sAB Gt9dSrKC+uBi0whF04+aiCAFwn4NYTV/BZNDTL9nqz+w7uPI8ZMBR00vMkKiZz6+ vaev5LI9fQbrTA/dwFws+sAPW2BeNprkv115v73X0UlYOAfQm07pdDKJFHM38+a4 YQHcadJdJP+sG2yP/DMv+g75ZRtiiadOYRyna+rMgK54R8Jhi7pXEk137Ldkr1/n 3NWa1dgr4fBVr1XzuDi+XUEfWI1a9Wtn4RcQaLhjjMRJ0XFzK2KMLuSQAFNMqOJq meYJ1WOcAOx9+ZtHCnuIeIVprv3jY3L8vM29r+od0rybH8nyZzU= -----END CERTIFICATE-----Generated at Tue Jun 3 23:15:43 2025 by rpki-client