$ rpki-client -vvf repo-rpki.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.mft File: 7767CF49D7661AFAB45870341D88D2F3D9A86CE4.mft (raw, json) Hash identifier: cO4i8zit8eEfg44KwF+qxlco2KOKJXfk/uT2tfDCNm4= Subject key identifier: C4:28:D2:2D:7B:AB:4C:E4:20:F6:00:9E:83:AA:64:13:CE:D3:54:28 Authority key identifier: 77:67:CF:49:D7:66:1A:FA:B4:58:70:34:1D:88:D2:F3:D9:A8:6C:E4 Certificate issuer: /CN=7767CF49D7661AFAB45870341D88D2F3D9A86CE4 Certificate serial: 135D8D87C2F3B5379E387503C80ACB12D146F7FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.mft Manifest number: 0205 Signing time: Sat 07 Jun 2025 01:51:40 +0000 Manifest this update: Sat 07 Jun 2025 01:46:40 +0000 Manifest next update: Tue 10 Jun 2025 12:51:40 +0000 Files and hashes: 1: 3130332e3137342e3137342e302f32342d3234203d3e20313437313031.roa (hash: mg4/qvSGbk0zDsf0Rx7OQC6CJE6sN8kDzPsI7vMCT4w=) 2: 3130332e3137342e3137352e302f32342d3234203d3e20313437313031.roa (hash: hiVWfFJS+ICMc15b4VDK2HR8eWbWj/hyT+N05K9QMHE=) 3: 7767CF49D7661AFAB45870341D88D2F3D9A86CE4.crl (hash: K/A3oOundwQLAFFQpqkl8J8ZmohzmmjogTFX3PFVY1w=) 4: 3130332e3137342e3137342e302f32332d3233203d3e20313437313031.roa (hash: qjco1QI2sNnouAlC+BzAGiX63kc+i+LJElEHwxqlyT4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.crl rsync://repo-rpki.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 12:51:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:5d:8d:87:c2:f3:b5:37:9e:38:75:03:c8:0a:cb:12:d1:46:f7:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7767CF49D7661AFAB45870341D88D2F3D9A86CE4 Validity Not Before: Jun 7 01:46:40 2025 GMT Not After : Jun 10 12:51:40 2025 GMT Subject: CN=C428D22D7BAB4CE420F6009E83AA6413CED35428 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:25:23:90:d8:8b:3c:5b:59:08:41:62:84:f2: a6:f2:5a:92:4f:39:fd:26:c5:8d:85:88:d2:13:0c: 32:96:28:42:d9:81:6f:92:9a:47:11:64:c3:7d:79: d3:94:fc:9f:49:fe:c2:97:7d:cc:ad:75:4c:77:fb: 0e:df:fd:87:a7:0b:b2:e6:1e:9b:b0:bd:c3:19:5f: 06:fe:fa:2a:9b:49:f6:aa:87:19:e0:62:47:8e:62: 74:1a:56:3d:17:87:58:e8:2c:19:ba:27:9a:37:ee: a3:b4:08:3f:78:7a:5e:7d:78:71:15:79:67:23:3a: 03:53:3f:5f:79:7e:7a:68:36:88:6d:8b:1f:07:6c: 32:e3:0f:98:54:cc:c5:cf:4c:82:58:93:d9:eb:3b: dd:0a:f9:2b:80:ac:b9:d3:9d:cf:5c:dd:da:b4:3b: 85:9a:62:d6:b2:45:d2:e3:94:9d:5c:9a:98:96:f8: 78:ab:3a:09:3c:91:fd:19:5e:ed:41:94:df:53:d4: b5:35:a0:06:f0:7f:1e:c1:48:36:ef:69:53:e9:4e: af:90:36:96:2e:83:0a:5a:08:15:cc:94:93:79:4e: dd:f7:31:c9:ec:7b:cf:4b:e1:97:57:de:ac:4c:18: 20:4a:d7:72:a3:a1:ee:34:e3:72:36:98:eb:0e:f1: 68:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C4:28:D2:2D:7B:AB:4C:E4:20:F6:00:9E:83:AA:64:13:CE:D3:54:28 X509v3 Authority Key Identifier: keyid:77:67:CF:49:D7:66:1A:FA:B4:58:70:34:1D:88:D2:F3:D9:A8:6C:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:de:32:9e:e2:65:55:de:82:9f:72:72:8b:a9:13:6a:3e:02: 47:75:5d:3a:4d:b6:01:b6:c6:ae:5f:88:b9:39:23:7b:44:18: c2:ce:1f:5f:51:8c:21:53:60:66:c3:57:2d:90:c8:fd:c7:b7: ef:3d:2f:dc:8c:3e:a9:fc:48:0c:52:ab:0c:28:d9:02:dd:98: f1:5f:b7:eb:60:b0:be:53:d5:a0:f2:01:2b:9a:f7:2c:c1:0c: 59:0f:c1:dc:94:b0:7f:f0:61:f9:42:0d:7a:da:c3:73:0e:ea: bc:5b:2b:22:fb:52:43:60:63:56:d9:db:40:f1:a4:5b:96:9b: 91:49:4e:7e:b7:a1:34:2a:7e:ac:a4:78:e0:cb:47:01:9c:81: 63:41:f0:72:3a:c5:1a:30:bb:28:d8:02:43:b5:b4:d6:81:f3: 9f:7b:60:ca:35:a3:44:40:72:a4:d5:bc:8c:71:d5:3c:58:1c: 26:d3:8e:25:14:73:7b:7b:1d:91:fc:b1:62:97:d8:4a:96:81: 02:04:78:01:84:e6:ae:ab:e1:b3:d8:d3:4f:5a:c4:5b:d6:e9: 6d:1e:2a:37:ee:da:c1:60:b7:51:d9:17:dc:09:c1:72:28:a5: f8:36:cd:73:00:db:3c:07:1b:07:ab:08:c4:dc:07:dc:a8:51: 1d:2f:5e:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE12Nh8LztTeeOHUDyArLEtFG9/0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzc2N0NGNDlENzY2MUFGQUI0NTg3MDM0MUQ4OEQyRjNE OUE4NkNFNDAeFw0yNTA2MDcwMTQ2NDBaFw0yNTA2MTAxMjUxNDBaMDMxMTAvBgNV BAMTKEM0MjhEMjJEN0JBQjRDRTQyMEY2MDA5RTgzQUE2NDEzQ0VEMzU0MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7JSOQ2Is8W1kIQWKE8qbyWpJP Of0mxY2FiNITDDKWKELZgW+SmkcRZMN9edOU/J9J/sKXfcytdUx3+w7f/YenC7Lm HpuwvcMZXwb++iqbSfaqhxngYkeOYnQaVj0Xh1joLBm6J5o37qO0CD94el59eHEV eWcjOgNTP195fnpoNohtix8HbDLjD5hUzMXPTIJYk9nrO90K+SuArLnTnc9c3dq0 O4WaYtayRdLjlJ1cmpiW+HirOgk8kf0ZXu1BlN9T1LU1oAbwfx7BSDbvaVPpTq+Q NpYugwpaCBXMlJN5Tt33Mcnse89L4ZdX3qxMGCBK13Kjoe4043I2mOsO8WjtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxCjSLXurTOQg9gCeg6pkE87TVCgwHwYDVR0j BBgwFoAUd2fPSddmGvq0WHA0HYjS89mobOQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTcwZDQ0ZS0wZjcwLTQ1YTMtYWYwNC04MWY0MjlkYjNhNWQvMC83NzY3Q0Y0OUQ3 NjYxQUZBQjQ1ODcwMzQxRDg4RDJGM0Q5QTg2Q0U0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzc2N0NGNDlENzY2MUFGQUI0NTg3MDM0MUQ4OEQyRjNEOUE4 NkNFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2E3MGQ0NGUtMGY3MC00NWEzLWFm MDQtODFmNDI5ZGIzYTVkLzAvNzc2N0NGNDlENzY2MUFGQUI0NTg3MDM0MUQ4OEQy RjNEOUE4NkNFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKLeMp7iZVXegp9ycoupE2o+Akd1XTpNtgG2 xq5fiLk5I3tEGMLOH19RjCFTYGbDVy2QyP3Ht+89L9yMPqn8SAxSqwwo2QLdmPFf t+tgsL5T1aDyASua9yzBDFkPwdyUsH/wYflCDXraw3MO6rxbKyL7UkNgY1bZ20Dx pFuWm5FJTn63oTQqfqykeODLRwGcgWNB8HI6xRowuyjYAkO1tNaB8597YMo1o0RA cqTVvIxx1TxYHCbTjiUUc3t7HZH8sWKX2EqWgQIEeAGE5q6r4bPY009axFvW6W0e Kjfu2sFgt1HZF9wJwXIopfg2zXMA2zwHGwerCMTcB9yoUR0vXuQ= -----END CERTIFICATE-----Generated at Sun Jun 8 01:28:23 2025 by rpki-client