$ rpki-client -vvf repo-rpki.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/7B7F414EB90DB2AC9713729961F3D35102FEA537.mft File: 7B7F414EB90DB2AC9713729961F3D35102FEA537.mft (raw, json) Hash identifier: qnSV06pgDa3/qDdMmnLhrXAs55k6cKyJTtAFH9rWOz4= Subject key identifier: 6F:05:AC:11:18:CB:E8:75:55:C6:FE:61:2F:7D:C1:95:A0:82:A3:B6 Authority key identifier: 7B:7F:41:4E:B9:0D:B2:AC:97:13:72:99:61:F3:D3:51:02:FE:A5:37 Certificate issuer: /CN=7B7F414EB90DB2AC9713729961F3D35102FEA537 Certificate serial: 4CCE3D29728F21B6CBB6A2E3B2707423F8D936AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B7F414EB90DB2AC9713729961F3D35102FEA537.cer Subject info access: rsync://repo-rpki.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/7B7F414EB90DB2AC9713729961F3D35102FEA537.mft Manifest number: 0188 Signing time: Thu 05 Jun 2025 09:04:41 +0000 Manifest this update: Thu 05 Jun 2025 08:59:41 +0000 Manifest next update: Sun 08 Jun 2025 19:04:41 +0000 Files and hashes: 1: 3130332e3131352e33352e302f32342d3234203d3e20313530343831.roa (hash: UcVriHXLq51fdaANA3PdMhx9PaPhtGFXAVilM8tjzJU=) 2: 7B7F414EB90DB2AC9713729961F3D35102FEA537.crl (hash: ysNjZcmuy09x7Rpfb1hoqqCRVkpgwaPiGpS4zhPxGD0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/7B7F414EB90DB2AC9713729961F3D35102FEA537.crl rsync://repo-rpki.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/7B7F414EB90DB2AC9713729961F3D35102FEA537.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B7F414EB90DB2AC9713729961F3D35102FEA537.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 19:04:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:ce:3d:29:72:8f:21:b6:cb:b6:a2:e3:b2:70:74:23:f8:d9:36:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B7F414EB90DB2AC9713729961F3D35102FEA537 Validity Not Before: Jun 5 08:59:41 2025 GMT Not After : Jun 8 19:04:41 2025 GMT Subject: CN=6F05AC1118CBE87555C6FE612F7DC195A082A3B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:65:0d:65:c0:ac:8d:21:a0:f7:8d:56:6d:8e: c1:48:a6:42:a5:e2:06:b5:b0:14:95:29:1d:ce:32: 5b:18:d4:ae:2d:2d:e4:8f:91:9a:a5:c5:9c:f6:70: 6d:1f:35:ce:fb:82:a3:d9:f0:6e:d5:ee:02:92:90: fb:04:24:53:b7:30:3d:f0:6c:45:2c:67:74:81:ce: cd:e9:5b:f9:89:ef:9a:a5:74:6d:d7:9e:68:eb:54: 3a:1f:20:78:fb:cc:f7:36:23:61:e0:73:84:5a:10: 4b:0f:bb:39:4b:06:69:2f:68:14:54:0a:05:52:07: 7a:0d:2a:65:0e:d9:77:c6:52:08:cc:79:6c:ef:19: 5f:4e:c6:fd:ee:6c:ef:b2:a1:6b:e7:e8:61:28:46: f2:86:2e:f7:af:9b:51:91:22:31:25:de:7d:40:9f: d9:2f:11:1b:7a:81:d4:c9:25:6d:80:05:24:1a:67: ae:d3:14:8a:2d:f2:61:e5:60:94:d8:b9:4c:f8:9f: d1:1c:23:c2:e3:95:5d:ce:a2:cc:6b:b8:f7:9f:1f: b6:39:17:19:b9:3e:fe:0d:bd:18:b9:bd:3c:7f:53: 96:b2:bb:78:2c:4f:e0:69:2e:76:0c:7e:a2:0c:ad: 9b:52:9f:17:3e:80:9a:82:75:f8:b6:3e:5d:b0:44: 7f:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:05:AC:11:18:CB:E8:75:55:C6:FE:61:2F:7D:C1:95:A0:82:A3:B6 X509v3 Authority Key Identifier: keyid:7B:7F:41:4E:B9:0D:B2:AC:97:13:72:99:61:F3:D3:51:02:FE:A5:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/7B7F414EB90DB2AC9713729961F3D35102FEA537.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B7F414EB90DB2AC9713729961F3D35102FEA537.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/998432cd-a047-485b-8143-59a3532c07b7/0/7B7F414EB90DB2AC9713729961F3D35102FEA537.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:ae:cd:2c:a8:6c:e5:69:92:35:48:29:09:13:3c:f6:0c:84: fc:25:d8:df:7b:71:63:25:14:89:03:ba:d0:1f:a9:f6:79:a8: 34:04:0a:6a:d7:68:c1:5e:81:79:c9:88:5f:8c:6a:a2:df:6f: 00:94:d1:f5:b5:89:d8:eb:ce:37:c8:a5:bf:21:c9:bd:ed:a4: 98:72:6c:52:88:8e:f5:96:f1:a8:42:a4:2a:69:82:d5:26:c1: e5:ed:d1:81:2a:ba:32:b9:8f:93:b4:bf:1d:21:c8:cb:58:0c: 1a:1c:86:55:23:a5:86:d7:81:b8:5d:3b:55:dd:d0:b8:b6:bb: dd:76:16:73:a4:3b:4e:90:a1:80:6d:3e:8f:de:77:14:0f:97: 6e:3f:13:1a:d3:87:28:dd:52:8b:f8:3f:12:a5:38:ec:c4:c6: e0:24:82:b5:9a:89:8b:7d:e2:54:11:d3:32:13:a9:fd:91:24: af:e7:0e:f9:04:c9:32:54:d3:47:76:bc:80:b9:09:cc:4a:60: 7e:8b:3e:21:a5:5e:5c:1a:fa:7a:29:fe:9e:12:9b:35:e1:20: 41:e7:46:75:ae:9d:c2:18:4d:68:bc:6a:b2:11:19:05:b2:4f: dc:df:cc:03:7c:72:09:cf:33:93:7f:72:d5:24:39:4f:b0:4e: db:cb:d6:ef -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTM49KXKPIbbLtqLjsnB0I/jZNqswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0I3RjQxNEVCOTBEQjJBQzk3MTM3Mjk5NjFGM0QzNTEw MkZFQTUzNzAeFw0yNTA2MDUwODU5NDFaFw0yNTA2MDgxOTA0NDFaMDMxMTAvBgNV BAMTKDZGMDVBQzExMThDQkU4NzU1NUM2RkU2MTJGN0RDMTk1QTA4MkEzQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0ZQ1lwKyNIaD3jVZtjsFIpkKl 4ga1sBSVKR3OMlsY1K4tLeSPkZqlxZz2cG0fNc77gqPZ8G7V7gKSkPsEJFO3MD3w bEUsZ3SBzs3pW/mJ75qldG3XnmjrVDofIHj7zPc2I2Hgc4RaEEsPuzlLBmkvaBRU CgVSB3oNKmUO2XfGUgjMeWzvGV9Oxv3ubO+yoWvn6GEoRvKGLvevm1GRIjEl3n1A n9kvERt6gdTJJW2ABSQaZ67TFIot8mHlYJTYuUz4n9EcI8LjlV3OosxruPefH7Y5 Fxm5Pv4NvRi5vTx/U5ayu3gsT+BpLnYMfqIMrZtSnxc+gJqCdfi2Pl2wRH+jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbwWsERjL6HVVxv5hL33BlaCCo7YwHwYDVR0j BBgwFoAUe39BTrkNsqyXE3KZYfPTUQL+pTcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 OTg0MzJjZC1hMDQ3LTQ4NWItODE0My01OWEzNTMyYzA3YjcvMC83QjdGNDE0RUI5 MERCMkFDOTcxMzcyOTk2MUYzRDM1MTAyRkVBNTM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0I3RjQxNEVCOTBEQjJBQzk3MTM3Mjk5NjFGM0QzNTEwMkZF QTUzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTk4NDMyY2QtYTA0Ny00ODViLTgx NDMtNTlhMzUzMmMwN2I3LzAvN0I3RjQxNEVCOTBEQjJBQzk3MTM3Mjk5NjFGM0Qz NTEwMkZFQTUzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHOuzSyobOVpkjVIKQkTPPYMhPwl2N97cWMl FIkDutAfqfZ5qDQECmrXaMFegXnJiF+MaqLfbwCU0fW1idjrzjfIpb8hyb3tpJhy bFKIjvWW8ahCpCppgtUmweXt0YEqujK5j5O0vx0hyMtYDBochlUjpYbXgbhdO1Xd 0Li2u912FnOkO06QoYBtPo/edxQPl24/ExrThyjdUov4PxKlOOzExuAkgrWaiYt9 4lQR0zITqf2RJK/nDvkEyTJU00d2vIC5CcxKYH6LPiGlXlwa+nop/p4SmzXhIEHn RnWuncIYTWi8arIRGQWyT9zfzAN8cgnPM5N/ctUkOU+wTtvL1u8= -----END CERTIFICATE-----Generated at Thu Jun 5 18:40:29 2025 by rpki-client