$ rpki-client -vvf repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft File: 7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft (raw, json) Hash identifier: 8xz47RyA4jMrMh9hhRs+hv1aOjRtQhrAuDDAnxs+TNE= Subject key identifier: 0A:08:BD:D2:69:48:B7:39:38:92:BE:39:F8:7D:68:3A:69:13:8A:0F Authority key identifier: 7A:21:6F:23:D8:A2:28:FB:B8:F5:63:EC:15:DF:76:FD:50:32:31:B3 Certificate issuer: /CN=7A216F23D8A228FBB8F563EC15DF76FD503231B3 Certificate serial: 201563E3651D77D525A1E9D5F5A5D04910911334 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A216F23D8A228FBB8F563EC15DF76FD503231B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft Manifest number: 01C5 Signing time: Mon 02 Jun 2025 06:42:08 +0000 Manifest this update: Mon 02 Jun 2025 06:37:08 +0000 Manifest next update: Thu 05 Jun 2025 17:48:08 +0000 Files and hashes: 1: 3130332e32302e3130392e302f32342d3234203d3e20313439373037.roa (hash: rOc9IS1yKanFrzj6lHEyVZN9K3Au8qIy9aCKaCdjEsw=) 2: 3130332e32302e3130382e302f32332d3234203d3e20313439373037.roa (hash: YUh1E1cCB+Tam8Lv4+/c622A6XvCbyDIufb9eqoPvMQ=) 3: 7A216F23D8A228FBB8F563EC15DF76FD503231B3.crl (hash: LT1Ah0EjC1G+Bm1WCNLncKtKZV7y4jQ5W6L9dDMt+Gw=) 4: 3130332e32302e3130382e302f32342d3234203d3e20313439373037.roa (hash: l72fTVO4iPS3td7y6iJ6FZ6Iq9uNFhg1kwCppW10yoE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.crl rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A216F23D8A228FBB8F563EC15DF76FD503231B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 17:48:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:15:63:e3:65:1d:77:d5:25:a1:e9:d5:f5:a5:d0:49:10:91:13:34 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A216F23D8A228FBB8F563EC15DF76FD503231B3 Validity Not Before: Jun 2 06:37:08 2025 GMT Not After : Jun 5 17:48:08 2025 GMT Subject: CN=0A08BDD26948B7393892BE39F87D683A69138A0F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:af:68:bb:59:16:8b:f1:30:b8:23:2a:c8:eb: 7e:4f:0f:69:97:96:6a:a3:6e:11:11:ad:a6:72:c8: fa:dc:cd:66:d5:f4:4e:44:f9:5a:bd:94:65:36:de: 7e:51:01:e0:2a:6a:f5:7a:7c:cc:18:3d:3f:16:f5: 0f:f5:96:70:2c:37:41:c0:0e:f8:61:65:51:cb:6f: 66:f7:75:dd:8a:dc:4e:ea:0f:5d:82:e5:3f:b1:67: f6:11:46:6d:b2:55:94:36:fa:db:ed:00:c8:d8:4a: c2:38:f7:3a:2e:bb:03:40:85:c5:3f:97:fc:7d:95: af:45:9b:0a:84:df:c2:f0:73:25:1e:99:91:95:3f: bb:ff:41:fb:07:66:b8:74:29:0e:7c:9d:47:4f:f6: f4:8d:d5:f0:c7:f7:60:64:7d:91:c7:77:d4:73:ff: 0d:1a:48:22:2c:bc:96:04:9f:7c:27:35:67:e5:62: 8d:ea:6b:ff:37:e9:c8:57:f6:9f:32:48:17:13:12: 9e:00:45:05:12:3e:5b:0a:9e:a6:b3:28:35:97:21: fe:c5:fe:37:6b:1e:8d:c4:44:c4:87:e7:1f:02:31: 70:0d:55:21:19:08:16:f2:9b:6e:5d:ff:97:b1:1b: 23:c9:bf:aa:ff:53:45:e6:89:5a:f4:55:c0:15:ed: 10:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:08:BD:D2:69:48:B7:39:38:92:BE:39:F8:7D:68:3A:69:13:8A:0F X509v3 Authority Key Identifier: keyid:7A:21:6F:23:D8:A2:28:FB:B8:F5:63:EC:15:DF:76:FD:50:32:31:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A216F23D8A228FBB8F563EC15DF76FD503231B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:41:10:95:6b:7e:81:5c:76:91:eb:04:a0:a1:19:1a:07:d4: 63:05:74:62:f6:7d:50:8c:ee:b7:ea:38:2d:40:c0:24:4d:32: 77:1d:41:b3:f0:84:79:74:1e:83:03:72:e7:5c:e4:9f:8b:1c: 55:73:71:c5:77:eb:17:84:84:76:de:d9:63:dc:56:f6:60:3a: 9a:01:ba:2c:82:83:ae:af:5a:68:56:95:61:36:64:48:f1:cc: 73:a4:01:f3:dc:e6:9f:a3:f6:45:ca:43:ba:4a:17:ae:d0:fa: 4e:8b:81:e6:64:2b:3c:6a:02:90:bf:df:f8:fe:17:58:77:02: d8:7d:c7:aa:24:fa:13:5f:a2:8f:1b:02:e9:9b:76:8d:9d:0c: ba:54:f6:65:50:58:14:f0:87:84:17:87:6c:72:11:e8:d1:49: 74:95:e1:e2:af:aa:1b:4b:7a:5b:10:1c:e4:35:63:68:6d:ca: 06:85:40:28:c7:be:b6:f3:1f:e8:9b:b7:26:5f:b8:7d:b5:c1: 84:d2:63:b0:3d:2d:05:98:d1:5f:e4:04:e7:52:6c:14:26:8f: d9:ec:90:0f:ff:13:a3:78:fa:a1:89:77:90:a6:4c:ad:7b:b1: 43:92:0a:f6:d2:07:52:e1:66:6f:dc:36:e0:b7:94:1b:a9:cf: ed:ff:8e:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIBVj42Udd9UloenV9aXQSRCREzQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0EyMTZGMjNEOEEyMjhGQkI4RjU2M0VDMTVERjc2RkQ1 MDMyMzFCMzAeFw0yNTA2MDIwNjM3MDhaFw0yNTA2MDUxNzQ4MDhaMDMxMTAvBgNV BAMTKDBBMDhCREQyNjk0OEI3MzkzODkyQkUzOUY4N0Q2ODNBNjkxMzhBMEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6r2i7WRaL8TC4IyrI635PD2mX lmqjbhERraZyyPrczWbV9E5E+Vq9lGU23n5RAeAqavV6fMwYPT8W9Q/1lnAsN0HA DvhhZVHLb2b3dd2K3E7qD12C5T+xZ/YRRm2yVZQ2+tvtAMjYSsI49zouuwNAhcU/ l/x9la9FmwqE38LwcyUemZGVP7v/QfsHZrh0KQ58nUdP9vSN1fDH92BkfZHHd9Rz /w0aSCIsvJYEn3wnNWflYo3qa/836chX9p8ySBcTEp4ARQUSPlsKnqazKDWXIf7F /jdrHo3ERMSH5x8CMXANVSEZCBbym25d/5exGyPJv6r/U0XmiVr0VcAV7RBZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCgi90mlItzk4kr45+H1oOmkTig8wHwYDVR0j BBgwFoAUeiFvI9iiKPu49WPsFd92/VAyMbMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Y2M2YmQ3My1mOWJkLTRmNWEtOWM1OS1mYmVhMWJkODM0NzMvMC83QTIxNkYyM0Q4 QTIyOEZCQjhGNTYzRUMxNURGNzZGRDUwMzIzMUIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0EyMTZGMjNEOEEyMjhGQkI4RjU2M0VDMTVERjc2RkQ1MDMy MzFCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWNjNmJkNzMtZjliZC00ZjVhLTlj NTktZmJlYTFiZDgzNDczLzAvN0EyMTZGMjNEOEEyMjhGQkI4RjU2M0VDMTVERjc2 RkQ1MDMyMzFCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALBBEJVrfoFcdpHrBKChGRoH1GMFdGL2fVCM 7rfqOC1AwCRNMncdQbPwhHl0HoMDcudc5J+LHFVzccV36xeEhHbe2WPcVvZgOpoB uiyCg66vWmhWlWE2ZEjxzHOkAfPc5p+j9kXKQ7pKF67Q+k6LgeZkKzxqApC/3/j+ F1h3Ath9x6ok+hNfoo8bAumbdo2dDLpU9mVQWBTwh4QXh2xyEejRSXSV4eKvqhtL elsQHOQ1Y2htygaFQCjHvrbzH+ibtyZfuH21wYTSY7A9LQWY0V/kBOdSbBQmj9ns kA//E6N4+qGJd5CmTK17sUOSCvbSB1LhZm/cNuC3lBupz+3/jsw= -----END CERTIFICATE-----Generated at Tue Jun 3 23:42:58 2025 by rpki-client