$ rpki-client -vvf repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft File: 7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft (raw, json) Hash identifier: GCJeRd0elmh3/GfhpXJLmYsv1dbhAZO+BJdIS+jZnEo= Subject key identifier: 5C:18:44:C3:A0:35:63:BD:8C:9F:10:7C:E5:86:D7:65:12:1E:94:A5 Authority key identifier: 7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67 Certificate issuer: /CN=7D64B8F4CFB687141137D10F9E73FFD0BAB93F67 Certificate serial: 754F6D88AA86D24E09EA22AB42D7BB78500E053A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer Subject info access: rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft Manifest number: 0298 Signing time: Mon 02 Jun 2025 23:53:19 +0000 Manifest this update: Mon 02 Jun 2025 23:48:19 +0000 Manifest next update: Fri 06 Jun 2025 09:07:19 +0000 Files and hashes: 1: 3130332e39372e37372e302f32342d3234203d3e20313336313331.roa (hash: rgwWhpicbIXeIE3pTFSF/nJgGhjsTFXordy0vbByPyc=) 2: 3130332e39372e37392e302f32342d3234203d3e20313336313331.roa (hash: g7TDmW1J5jNMb6eLJToYzt8xdajrekh1Q+uRWpcwKv0=) 3: 323430313a383434303a3233313a3a2f34382d3438203d3e20313336313331.roa (hash: 9q0QjNfZ8ZidXQKSI35eyNIOpPTa4MZHY+H9XcdTGqQ=) 4: 7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl (hash: wLWW6NxxC580EnIEOH8Mbsxciedpr9FIp8bcuHz1o7Y=) 5: 323430313a383434303a3331313a3a2f34382d3438203d3e20313336313331.roa (hash: uNKV4J4iyB42iT7YiJbc/obq8TacFQRWwVPHqjYHdt4=) 6: 323430313a383434303a3133313a3a2f34382d3438203d3e20313336313331.roa (hash: 7XF+7tNQBQV2Wy0AsX8lBCySJ+ATYXgli7NY4z4VmfM=) 7: 323430313a383434303a33313a3a2f34382d3438203d3e20313336313331.roa (hash: imoDv7fNxiS0ABFe1mnjo4w6QxU9zgowGM6VjXLrifM=) 8: 3130332e39372e37362e302f32342d3234203d3e20313336313331.roa (hash: sppd+EBGEaepceJfNxlZXMQLq/sqMLGJt/R8ADFWUfE=) 9: 3130332e39372e37382e302f32342d3234203d3e20313336313331.roa (hash: gTWqsHLXGzmwOn5oUbLdKwsFxUOTG6JntDETCN1uoJg=) 10: 323430313a383434303a3a2f33322d3332203d3e20313336313331.roa (hash: J/TKA4DxZMeIQk5lGShBOGO9FvcMo90L9nK349bvEzs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 09:07:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:4f:6d:88:aa:86:d2:4e:09:ea:22:ab:42:d7:bb:78:50:0e:05:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D64B8F4CFB687141137D10F9E73FFD0BAB93F67 Validity Not Before: Jun 2 23:48:19 2025 GMT Not After : Jun 6 09:07:19 2025 GMT Subject: CN=5C1844C3A03563BD8C9F107CE586D765121E94A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:85:2c:f8:d4:82:6d:3a:05:43:90:8b:5b:65: 3a:80:96:18:a9:c2:a8:50:34:d5:71:76:b2:2a:4a: 0d:76:b6:c5:21:fb:ed:be:1d:38:44:e5:ad:9a:8a: 06:c1:50:57:0c:28:48:4f:b1:2b:fe:c3:7c:ff:9a: 72:b0:9a:a0:5f:ec:87:bf:d8:24:d3:a9:4c:b2:41: 01:26:f3:45:63:9d:3f:26:e9:8a:49:63:f8:ef:f5: 11:b1:f6:38:08:6e:48:fb:36:40:4a:d7:57:56:99: 6b:af:1c:7b:b4:03:7b:68:bb:fc:68:7a:0c:96:f0: 86:cf:f8:23:62:ff:aa:63:a8:20:97:9c:52:53:6b: 07:d8:7b:0a:34:40:1f:63:91:0f:54:38:0b:a0:a3: f5:29:b6:8b:c6:83:08:36:40:16:02:05:de:b8:63: ae:6c:2e:bc:6b:9c:b4:b4:5b:94:48:0a:ef:7c:9d: 4a:67:b6:3a:05:f2:04:85:95:49:8a:3a:04:a9:ed: 57:f9:ea:3c:1c:c8:99:f6:9d:63:a1:4c:09:bb:fa: 3c:17:15:01:86:4a:b2:ba:bf:e6:12:e5:e3:bb:94: ae:87:98:da:59:c5:f3:c1:b7:45:9c:d7:40:4d:35: 92:52:9f:ee:ac:cf:c4:16:07:85:c6:d0:be:74:83: 5f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:18:44:C3:A0:35:63:BD:8C:9F:10:7C:E5:86:D7:65:12:1E:94:A5 X509v3 Authority Key Identifier: keyid:7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:5d:4b:51:9a:a7:7b:d4:65:f8:d3:14:02:9d:52:e4:79:66: cf:c7:b1:4d:fd:59:4b:a7:5a:c5:5a:a0:79:94:51:16:55:fc: c7:e2:fe:f1:6b:0b:25:8a:6f:b7:0f:42:1e:80:a1:32:b2:7a: 69:9c:33:89:cb:0f:7b:aa:10:a9:6b:d7:dc:22:5c:9a:9e:ba: 7f:11:b4:d3:b7:a0:26:10:fb:d8:72:9f:ad:7f:74:73:b5:4d: d5:9d:fe:c7:9b:d1:2a:52:6a:47:d8:44:9a:7c:bc:fe:83:dc: 80:0d:c4:c5:cd:15:73:da:be:dd:30:06:63:f1:00:6f:d1:c6: 1d:73:d1:7a:7e:60:3b:c9:2e:b0:9c:aa:1d:63:82:64:90:fe: 57:d7:86:24:05:ef:51:dd:71:fe:b9:a9:e4:c2:da:6b:a9:88: b6:b8:74:2a:2f:8b:8d:ef:17:0a:82:d0:93:69:05:88:a1:34: 17:69:6e:b5:4f:17:aa:f3:52:67:d4:e3:32:04:f1:80:38:c4: 7b:3e:e6:c9:ad:f6:2e:74:fa:cd:34:5e:cb:9f:5f:01:df:32: 7c:60:00:de:d9:8d:cd:9b:88:7b:cc:90:65:7d:a7:dc:d2:bb: b0:1e:ca:ae:9c:d5:9c:78:50:07:d3:47:de:34:fd:4d:a1:0e: b8:2e:68:9d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdU9tiKqG0k4J6iKrQte7eFAOBTowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZGRDBC QUI5M0Y2NzAeFw0yNTA2MDIyMzQ4MTlaFw0yNTA2MDYwOTA3MTlaMDMxMTAvBgNV BAMTKDVDMTg0NEMzQTAzNTYzQkQ4QzlGMTA3Q0U1ODZENzY1MTIxRTk0QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPhSz41IJtOgVDkItbZTqAlhip wqhQNNVxdrIqSg12tsUh++2+HThE5a2aigbBUFcMKEhPsSv+w3z/mnKwmqBf7Ie/ 2CTTqUyyQQEm80VjnT8m6YpJY/jv9RGx9jgIbkj7NkBK11dWmWuvHHu0A3tou/xo egyW8IbP+CNi/6pjqCCXnFJTawfYewo0QB9jkQ9UOAugo/UptovGgwg2QBYCBd64 Y65sLrxrnLS0W5RICu98nUpntjoF8gSFlUmKOgSp7Vf56jwcyJn2nWOhTAm7+jwX FQGGSrK6v+YS5eO7lK6HmNpZxfPBt0Wc10BNNZJSn+6sz8QWB4XG0L50g18pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXBhEw6A1Y72MnxB85YbXZRIelKUwHwYDVR0j BBgwFoAUfWS49M+2hxQRN9EPnnP/0Lq5P2cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTdiMGQ3ZS1lYWRlLTQzMTgtYWIyMC04YzdmMmQ1YmU2OWYvMC83RDY0QjhGNENG QjY4NzE0MTEzN0QxMEY5RTczRkZEMEJBQjkzRjY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZGRDBCQUI5 M0Y2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTU3YjBkN2UtZWFkZS00MzE4LWFi MjAtOGM3ZjJkNWJlNjlmLzAvN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZG RDBCQUI5M0Y2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACldS1Gap3vUZfjTFAKdUuR5Zs/HsU39WUun WsVaoHmUURZV/Mfi/vFrCyWKb7cPQh6AoTKyemmcM4nLD3uqEKlr19wiXJqeun8R tNO3oCYQ+9hyn61/dHO1TdWd/seb0SpSakfYRJp8vP6D3IANxMXNFXPavt0wBmPx AG/Rxh1z0Xp+YDvJLrCcqh1jgmSQ/lfXhiQF71Hdcf65qeTC2mupiLa4dCovi43v FwqC0JNpBYihNBdpbrVPF6rzUmfU4zIE8YA4xHs+5smt9i50+s00XsufXwHfMnxg AN7Zjc2biHvMkGV9p9zSu7Aeyq6c1Zx4UAfTR940/U2hDrguaJ0= -----END CERTIFICATE-----Generated at Tue Jun 3 23:28:48 2025 by rpki-client