$ rpki-client -vvf repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft File: 7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft (raw, json) Hash identifier: X9M6nVgAqKc4C+vZer0WxqNgfTCnXKYyUtG43aSK3lQ= Subject key identifier: 4C:5C:2D:48:5F:96:7A:E8:C4:A8:95:C8:9A:B9:1E:A2:AD:05:AF:D0 Authority key identifier: 7B:94:59:74:A7:9E:8C:77:CB:02:F9:44:95:BA:9F:87:BA:A0:E0:38 Certificate issuer: /CN=7B945974A79E8C77CB02F94495BA9F87BAA0E038 Certificate serial: 057AEC3F52EF39F5733448949FEE6AAD9711810A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B945974A79E8C77CB02F94495BA9F87BAA0E038.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft Manifest number: 0359 Signing time: Thu 05 Jun 2025 05:52:05 +0000 Manifest this update: Thu 05 Jun 2025 05:47:05 +0000 Manifest next update: Sun 08 Jun 2025 08:48:05 +0000 Files and hashes: 1: 7B945974A79E8C77CB02F94495BA9F87BAA0E038.crl (hash: FrASxYms1pJ/hr9A9CyRgVKJhQXfv58sqC5xfu5BkbM=) 2: 3130332e3136372e33302e302f32332d3234203d3e203137393935.roa (hash: gtwTI3DJtMemj0Ti0EgOwcabGH1uQz62nqOF7QPkYWU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.crl rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B945974A79E8C77CB02F94495BA9F87BAA0E038.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 08:48:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:7a:ec:3f:52:ef:39:f5:73:34:48:94:9f:ee:6a:ad:97:11:81:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B945974A79E8C77CB02F94495BA9F87BAA0E038 Validity Not Before: Jun 5 05:47:05 2025 GMT Not After : Jun 8 08:48:05 2025 GMT Subject: CN=4C5C2D485F967AE8C4A895C89AB91EA2AD05AFD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f2:da:6f:72:92:52:c2:ba:c1:99:02:6c:ce: ac:79:3f:17:48:97:b9:a8:6d:58:57:c2:32:c2:1f: a6:19:e7:0f:cb:05:6c:db:d7:d8:ed:e6:83:da:0b: 1f:4e:61:70:f6:6a:89:01:04:a6:46:18:d7:b9:7c: de:a0:c5:a8:ec:6c:f9:16:6c:1f:41:af:79:c5:e1: b7:76:12:cc:e0:02:85:69:49:cc:3c:ac:b6:1e:99: 36:e2:58:66:5d:09:14:eb:f7:6c:73:65:73:09:25: f4:f4:74:4c:6e:5c:7e:70:45:3b:33:3e:a5:cf:02: a7:a8:d8:08:cb:6a:58:ff:4f:dd:c7:60:8d:1f:91: 0e:c4:7f:7a:46:34:b1:79:a8:87:61:71:4b:2f:d7: 20:71:fd:71:a9:fc:e1:ef:2c:30:e9:3f:75:c9:8a: 22:40:0d:9b:ca:9e:4d:89:b2:27:53:cd:1f:55:f6: a5:c2:94:73:74:aa:21:40:b3:5d:07:e7:a2:06:d3: 79:8d:43:1f:40:5d:63:8f:6f:79:6e:7c:15:61:0c: db:38:86:b0:cd:fa:7a:90:f6:1f:1f:75:76:92:67: 90:ca:2e:bd:cb:99:21:0d:2c:cc:8e:bc:80:41:6a: c6:81:e8:ec:68:38:ba:8c:1d:2e:eb:41:ca:a1:c8: e2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:5C:2D:48:5F:96:7A:E8:C4:A8:95:C8:9A:B9:1E:A2:AD:05:AF:D0 X509v3 Authority Key Identifier: keyid:7B:94:59:74:A7:9E:8C:77:CB:02:F9:44:95:BA:9F:87:BA:A0:E0:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B945974A79E8C77CB02F94495BA9F87BAA0E038.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:11:e4:53:92:c2:c6:94:b0:e4:9f:54:04:cc:0c:65:02:42: 5e:27:6b:cd:38:82:89:49:67:ac:f5:a7:b7:df:9f:9b:6e:de: 63:00:26:0d:47:26:76:67:09:24:4f:2f:08:e4:a0:4e:7b:b0: 63:18:1a:63:21:fc:47:12:3c:5e:35:d1:96:0e:9a:87:19:ee: ad:03:1b:89:14:ae:c5:f5:20:f4:33:b5:33:ef:d4:17:49:5b: 8d:b7:43:a8:6b:4b:d7:72:c3:0d:54:cb:5e:6f:dc:f8:8d:60: 65:fd:c0:be:b1:cb:4b:35:91:20:cb:8a:1b:5e:14:19:53:53: 1b:7c:d3:cd:72:45:9a:6a:fb:55:b4:68:d6:05:38:29:84:9f: 5f:bc:7c:a4:06:02:23:9f:fa:2e:0e:61:df:8c:bf:fd:32:09: a5:17:7b:6d:21:3b:2b:bb:5b:4a:36:a4:e2:61:7f:c0:7d:71: 7a:f3:bb:73:da:42:ac:d5:85:6a:ad:4b:a6:4e:f7:53:76:af: a3:62:39:ae:c3:8f:23:2a:53:27:e3:53:6e:1f:67:57:d0:c3: 1f:24:a8:71:d6:f0:8d:a4:6a:a4:50:53:cf:7f:da:63:ae:ba: cc:6a:2b:16:d7:95:d4:83:1d:58:56:a1:e3:01:ae:d3:68:ea: 56:14:8f:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBXrsP1LvOfVzNEiUn+5qrZcRgQowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0I5NDU5NzRBNzlFOEM3N0NCMDJGOTQ0OTVCQTlGODdC QUEwRTAzODAeFw0yNTA2MDUwNTQ3MDVaFw0yNTA2MDgwODQ4MDVaMDMxMTAvBgNV BAMTKDRDNUMyRDQ4NUY5NjdBRThDNEE4OTVDODlBQjkxRUEyQUQwNUFGRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/8tpvcpJSwrrBmQJszqx5PxdI l7mobVhXwjLCH6YZ5w/LBWzb19jt5oPaCx9OYXD2aokBBKZGGNe5fN6gxajsbPkW bB9Br3nF4bd2EszgAoVpScw8rLYemTbiWGZdCRTr92xzZXMJJfT0dExuXH5wRTsz PqXPAqeo2AjLalj/T93HYI0fkQ7Ef3pGNLF5qIdhcUsv1yBx/XGp/OHvLDDpP3XJ iiJADZvKnk2JsidTzR9V9qXClHN0qiFAs10H56IG03mNQx9AXWOPb3lufBVhDNs4 hrDN+nqQ9h8fdXaSZ5DKLr3LmSENLMyOvIBBasaB6OxoOLqMHS7rQcqhyOKJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTFwtSF+WeujEqJXImrkeoq0Fr9AwHwYDVR0j BBgwFoAUe5RZdKeejHfLAvlElbqfh7qg4DgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzYzNWNlOS0wZWE1LTQ3ZDgtOWZjYy1jYWQxYzlmMDZmYmUvMC83Qjk0NTk3NEE3 OUU4Qzc3Q0IwMkY5NDQ5NUJBOUY4N0JBQTBFMDM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0I5NDU5NzRBNzlFOEM3N0NCMDJGOTQ0OTVCQTlGODdCQUEw RTAzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2M2MzVjZTktMGVhNS00N2Q4LTlm Y2MtY2FkMWM5ZjA2ZmJlLzAvN0I5NDU5NzRBNzlFOEM3N0NCMDJGOTQ0OTVCQTlG ODdCQUEwRTAzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAAR5FOSwsaUsOSfVATMDGUCQl4na804golJ Z6z1p7ffn5tu3mMAJg1HJnZnCSRPLwjkoE57sGMYGmMh/EcSPF410ZYOmocZ7q0D G4kUrsX1IPQztTPv1BdJW423Q6hrS9dyww1Uy15v3PiNYGX9wL6xy0s1kSDLihte FBlTUxt8081yRZpq+1W0aNYFOCmEn1+8fKQGAiOf+i4OYd+Mv/0yCaUXe20hOyu7 W0o2pOJhf8B9cXrzu3PaQqzVhWqtS6ZO91N2r6NiOa7DjyMqUyfjU24fZ1fQwx8k qHHW8I2kaqRQU89/2mOuusxqKxbXldSDHVhWoeMBrtNo6lYUj7k= -----END CERTIFICATE-----Generated at Sat Jun 7 03:58:58 2025 by rpki-client