$ rpki-client -vvf repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft File: 4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft (raw, json) Hash identifier: F0+u8bCbHDDAh+IgiZocEKvweXPF8GStvr+/1S1DDrw= Subject key identifier: C0:A0:2F:4A:01:A1:F1:A1:E5:8D:33:47:11:AD:03:EE:73:C1:C2:1E Authority key identifier: 4E:CF:7D:FB:09:FB:3B:5C:21:DD:E6:61:15:0B:95:76:8B:6B:D3:19 Certificate issuer: /CN=4ECF7DFB09FB3B5C21DDE661150B95768B6BD319 Certificate serial: 7A343978198A472B56E8609B0D3160E42043B27C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft Manifest number: 01E8 Signing time: Wed 04 Jun 2025 18:41:21 +0000 Manifest this update: Wed 04 Jun 2025 18:36:21 +0000 Manifest next update: Sun 08 Jun 2025 06:35:21 +0000 Files and hashes: 1: 3130332e3136332e3233302e302f32342d3234203d3e20313431393037.roa (hash: BplHdHRvA1GeP43VsiSGj8a+Gmuq6dP6VgR2vhuZ0uU=) 2: 3130332e3136332e3233302e302f32332d3233203d3e20313431393037.roa (hash: TWsMpo4cWVJOgLuAED46zFpQBaqLsvvEiv7xGtW44bE=) 3: 4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl (hash: s0Bn4f8j2Y5oOQi5tc7ZY7HmYo+qjTDm6IVgQFotXB4=) 4: 3130332e3136332e3233312e302f32342d3234203d3e20313431393037.roa (hash: yg4jobWhxttigVY/iZoK6bsKdtykwi2az+8aCa0nyW4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 06:35:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:34:39:78:19:8a:47:2b:56:e8:60:9b:0d:31:60:e4:20:43:b2:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ECF7DFB09FB3B5C21DDE661150B95768B6BD319 Validity Not Before: Jun 4 18:36:21 2025 GMT Not After : Jun 8 06:35:21 2025 GMT Subject: CN=C0A02F4A01A1F1A1E58D334711AD03EE73C1C21E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:bf:45:49:83:22:3d:17:eb:b4:91:b3:a5:c7: 56:b6:8f:53:cd:3f:4c:51:53:17:62:42:d5:57:76: 00:17:23:82:93:a0:4f:e0:9a:ff:e3:49:a9:fc:88: e8:d6:00:ba:1b:55:e3:0c:16:93:89:ef:ff:3e:33: f2:ea:8e:e0:28:f4:cf:21:4f:42:27:a5:e9:f2:81: 43:42:e6:25:4d:bb:06:be:3c:d6:16:1e:3b:5b:33: cd:b6:53:20:79:bd:ec:dd:4d:6e:23:4e:ef:1c:ec: cd:30:74:c9:14:f1:bb:74:f7:cf:24:24:06:89:bd: 4f:f2:b5:37:a6:bb:0a:40:fd:9f:c2:77:68:37:d9: f7:53:fd:6c:7a:e2:55:42:b9:53:23:89:26:47:56: 9d:44:60:57:11:e4:a4:e0:92:5f:44:5f:88:28:b1: 27:34:0e:2e:96:b6:79:0e:1f:5a:7d:8c:01:f4:c8: d7:d4:84:be:e2:1d:09:7e:5a:f3:62:c1:0d:79:d5: fa:3d:33:ea:0b:8c:92:8c:5a:3a:59:83:51:d2:85: 81:e5:94:62:96:47:be:15:f6:d7:31:4d:57:cc:71: f9:ec:36:16:b6:93:a5:4a:d5:a1:e9:62:8a:72:76: 83:f2:1a:51:dc:23:30:e3:78:89:34:e3:13:f8:60: 27:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:A0:2F:4A:01:A1:F1:A1:E5:8D:33:47:11:AD:03:EE:73:C1:C2:1E X509v3 Authority Key Identifier: keyid:4E:CF:7D:FB:09:FB:3B:5C:21:DD:E6:61:15:0B:95:76:8B:6B:D3:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:d7:29:1e:00:d0:0a:b4:47:14:12:23:68:f5:e7:1d:d2:26: 36:08:41:bf:e5:e5:c6:4f:2d:14:40:90:61:61:e5:6f:a6:22: b6:fe:a7:69:fb:de:e7:b2:c2:d1:7f:c4:23:af:18:37:94:17: f3:73:ac:55:03:29:6f:b5:c4:c5:0d:db:40:e8:6c:31:39:40: df:f3:09:02:be:b0:61:d4:6b:fe:ec:8a:a0:63:9b:b4:6d:77: 48:e5:d2:45:a5:36:9d:0b:5f:21:08:4d:9b:a5:f2:77:1a:dc: 70:f0:d8:20:b5:cf:53:ba:80:ed:93:3b:bb:9a:55:df:be:34: 26:83:dd:db:c4:06:0c:10:b5:73:dc:92:7e:8c:1d:6d:1b:ef: 7b:c9:9f:75:71:e6:0e:68:82:b8:8a:97:69:aa:13:7a:51:e3: ce:fb:88:dd:b0:13:b8:cb:7e:33:c0:fe:16:5b:78:c9:7c:fa: 8e:b1:a7:f7:ae:7a:11:ee:e8:1f:53:ff:c0:3f:09:0f:f6:a4: 6f:bb:4a:0f:c2:21:00:6f:4c:0b:4d:83:d1:d0:c2:af:5e:54: 44:27:2f:41:9b:df:98:c7:ef:a5:c9:2e:be:43:f6:d0:45:84: 7d:da:31:c9:aa:4a:d6:ae:7a:8a:4d:f3:a1:2f:52:85:c4:c3: a2:01:8c:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUejQ5eBmKRytW6GCbDTFg5CBDsnwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVDRjdERkIwOUZCM0I1QzIxRERFNjYxMTUwQjk1NzY4 QjZCRDMxOTAeFw0yNTA2MDQxODM2MjFaFw0yNTA2MDgwNjM1MjFaMDMxMTAvBgNV BAMTKEMwQTAyRjRBMDFBMUYxQTFFNThEMzM0NzExQUQwM0VFNzNDMUMyMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFv0VJgyI9F+u0kbOlx1a2j1PN P0xRUxdiQtVXdgAXI4KToE/gmv/jSan8iOjWALobVeMMFpOJ7/8+M/LqjuAo9M8h T0InpenygUNC5iVNuwa+PNYWHjtbM822UyB5vezdTW4jTu8c7M0wdMkU8bt0988k JAaJvU/ytTemuwpA/Z/Cd2g32fdT/Wx64lVCuVMjiSZHVp1EYFcR5KTgkl9EX4go sSc0Di6WtnkOH1p9jAH0yNfUhL7iHQl+WvNiwQ151fo9M+oLjJKMWjpZg1HShYHl lGKWR74V9tcxTVfMcfnsNha2k6VK1aHpYopydoPyGlHcIzDjeIk04xP4YCfBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwKAvSgGh8aHljTNHEa0D7nPBwh4wHwYDVR0j BBgwFoAUTs99+wn7O1wh3eZhFQuVdotr0xkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDAzNWIzYi1lNmM1LTQ3ZjgtOTliNC0xY2IwMzI2ZWRhZTUvMC80RUNGN0RGQjA5 RkIzQjVDMjFEREU2NjExNTBCOTU3NjhCNkJEMzE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEVDRjdERkIwOUZCM0I1QzIxRERFNjYxMTUwQjk1NzY4QjZC RDMxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2QwMzViM2ItZTZjNS00N2Y4LTk5 YjQtMWNiMDMyNmVkYWU1LzAvNEVDRjdERkIwOUZCM0I1QzIxRERFNjYxMTUwQjk1 NzY4QjZCRDMxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGDXKR4A0Aq0RxQSI2j15x3SJjYIQb/l5cZP LRRAkGFh5W+mIrb+p2n73ueywtF/xCOvGDeUF/NzrFUDKW+1xMUN20DobDE5QN/z CQK+sGHUa/7siqBjm7Rtd0jl0kWlNp0LXyEITZul8nca3HDw2CC1z1O6gO2TO7ua Vd++NCaD3dvEBgwQtXPckn6MHW0b73vJn3Vx5g5ogriKl2mqE3pR4877iN2wE7jL fjPA/hZbeMl8+o6xp/euehHu6B9T/8A/CQ/2pG+7Sg/CIQBvTAtNg9HQwq9eVEQn L0Gb35jH76XJLr5D9tBFhH3aMcmqStaueopN86EvUoXEw6IBjCA= -----END CERTIFICATE-----Generated at Fri Jun 6 16:27:30 2025 by rpki-client