$ rpki-client -vvf repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft File: C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft (raw, json) Hash identifier: ZFCe7LExcfmX56cxkUT8MdVvDVFZdOUwpjF1e45YzFI= Subject key identifier: C1:3F:69:F6:36:72:56:EE:1A:C4:8E:B5:E9:BE:94:C6:D5:F1:6F:E8 Authority key identifier: C0:7F:5A:E2:D9:DC:99:D0:AF:28:B6:B1:54:21:0C:91:1E:FB:1D:8A Certificate issuer: /CN=C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A Certificate serial: 21F8E699382A5E2508E6E03F3626FB1CFF6A7E47 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft Manifest number: 8F Signing time: Thu 05 Jun 2025 05:21:57 +0000 Manifest this update: Thu 05 Jun 2025 05:16:57 +0000 Manifest next update: Sun 08 Jun 2025 15:29:57 +0000 Files and hashes: 1: C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.crl (hash: vPm8nll+lcyu/EVpbQKz1F9JWOnolKW7EemaUjjV3MM=) 2: 323030313a6466343a6363303a3a2f34382d3438203d3e20313532383431.roa (hash: Jn99cL4fgcEPbh24njIDYKuvldMIr2jNGSja0e4Hk1s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.crl rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 15:29:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:f8:e6:99:38:2a:5e:25:08:e6:e0:3f:36:26:fb:1c:ff:6a:7e:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A Validity Not Before: Jun 5 05:16:57 2025 GMT Not After : Jun 8 15:29:57 2025 GMT Subject: CN=C13F69F6367256EE1AC48EB5E9BE94C6D5F16FE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:47:37:99:1e:3d:4e:8d:af:de:a6:01:b6:33: cc:4b:a0:5b:6c:c3:e8:59:51:d2:6c:8f:b7:57:3d: 3f:16:52:35:91:bd:27:6d:47:fb:2a:25:c1:fb:ce: 70:b4:7c:7b:3f:fb:d7:9e:23:fe:50:1e:04:70:4d: ad:c7:c8:55:94:3d:94:b5:59:8e:0a:8c:d7:ae:92: ea:f7:ae:98:c4:b1:a8:9e:f5:d9:1c:8a:9b:38:cf: 63:34:51:93:ce:13:b4:7e:1f:9a:f1:eb:ad:82:0b: f4:3c:a7:30:c3:ee:01:9d:0b:9c:e5:d6:7f:3a:4c: 00:71:2f:f2:d9:61:ab:4f:1a:02:1a:e6:7a:8e:d2: 74:33:9d:4e:ef:21:22:b0:dd:d0:8f:97:a6:86:1b: 7f:e4:b1:cc:47:70:bb:44:79:d4:03:ca:8c:04:79: 59:5b:a2:ec:2d:5a:09:2f:e0:a1:74:9f:87:2f:60: e4:2d:53:0d:02:78:60:c2:29:f2:2f:73:cf:26:8f: b5:b6:4b:a1:e2:05:27:7e:a0:53:6a:dd:1b:8a:34: 5f:9a:99:26:37:6e:11:fd:bd:b6:ab:8c:51:28:a0: 85:f0:25:58:66:99:cd:5b:a6:32:a6:ee:83:7a:17: e3:b3:36:55:06:1b:1a:13:23:b5:e2:47:42:4d:a5: c7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:3F:69:F6:36:72:56:EE:1A:C4:8E:B5:E9:BE:94:C6:D5:F1:6F:E8 X509v3 Authority Key Identifier: keyid:C0:7F:5A:E2:D9:DC:99:D0:AF:28:B6:B1:54:21:0C:91:1E:FB:1D:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:a6:02:40:67:1e:ac:f4:ed:cf:0d:07:98:e5:a8:fd:9d:8a: 5b:c7:49:97:6a:91:45:1c:67:71:93:c4:7c:f6:04:0a:22:6e: f6:69:87:06:46:e3:e9:f8:43:22:69:2e:f9:77:31:7f:f7:b6: f0:79:5b:c1:9e:12:4c:73:60:8f:48:ee:25:ec:b1:f8:b1:8a: b1:3f:eb:9e:84:18:58:dc:1c:16:56:31:f1:79:8e:95:fe:eb: fd:a4:b1:31:9a:bc:6d:23:b4:16:83:34:9b:1d:04:ab:97:62: f4:67:5c:b2:5e:29:8f:e1:1c:33:73:e3:1d:72:ee:fc:63:3d: 7a:82:22:47:0a:a7:fb:06:c8:03:84:83:9f:66:03:3f:2a:b6: 69:25:d4:f3:f6:a3:7b:77:7f:5f:b9:c4:dc:d7:19:05:ff:4a: 5a:1c:c4:3a:00:90:0b:64:bc:f6:89:c5:eb:28:61:04:3f:e1: 10:d5:04:01:be:58:94:c5:0c:e6:07:c4:50:71:9f:db:82:99: 05:43:00:0a:10:35:f1:bb:29:22:e1:72:cc:6e:7f:ae:d2:b9: 4c:34:8b:0a:99:24:b6:4c:dd:79:2b:f7:48:c9:72:19:be:2b: e5:03:a6:ca:fa:d8:ea:8b:b1:ca:9d:66:8a:43:fe:8b:5a:f6: b4:4d:b3:ce -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIfjmmTgqXiUI5uA/Nib7HP9qfkcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA3RjVBRTJEOURDOTlEMEFGMjhCNkIxNTQyMTBDOTEx RUZCMUQ4QTAeFw0yNTA2MDUwNTE2NTdaFw0yNTA2MDgxNTI5NTdaMDMxMTAvBgNV BAMTKEMxM0Y2OUY2MzY3MjU2RUUxQUM0OEVCNUU5QkU5NEM2RDVGMTZGRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxRzeZHj1Oja/epgG2M8xLoFts w+hZUdJsj7dXPT8WUjWRvSdtR/sqJcH7znC0fHs/+9eeI/5QHgRwTa3HyFWUPZS1 WY4KjNeukur3rpjEsaie9dkcips4z2M0UZPOE7R+H5rx662CC/Q8pzDD7gGdC5zl 1n86TABxL/LZYatPGgIa5nqO0nQznU7vISKw3dCPl6aGG3/kscxHcLtEedQDyowE eVlbouwtWgkv4KF0n4cvYOQtUw0CeGDCKfIvc88mj7W2S6HiBSd+oFNq3RuKNF+a mSY3bhH9vbarjFEooIXwJVhmmc1bpjKm7oN6F+OzNlUGGxoTI7XiR0JNpcfHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwT9p9jZyVu4axI616b6UxtXxb+gwHwYDVR0j BBgwFoAUwH9a4tncmdCvKLaxVCEMkR77HYowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZTdkNzM4ZS0yY2M3LTRiZDItYmIyOC05MTQyZTFiYWEwYmEvMS9DMDdGNUFFMkQ5 REM5OUQwQUYyOEI2QjE1NDIxMEM5MTFFRkIxRDhBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzA3RjVBRTJEOURDOTlEMEFGMjhCNkIxNTQyMTBDOTExRUZC MUQ4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2U3ZDczOGUtMmNjNy00YmQyLWJi MjgtOTE0MmUxYmFhMGJhLzEvQzA3RjVBRTJEOURDOTlEMEFGMjhCNkIxNTQyMTBD OTExRUZCMUQ4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAKmAkBnHqz07c8NB5jlqP2dilvHSZdqkUUc Z3GTxHz2BAoibvZphwZG4+n4QyJpLvl3MX/3tvB5W8GeEkxzYI9I7iXssfixirE/ 656EGFjcHBZWMfF5jpX+6/2ksTGavG0jtBaDNJsdBKuXYvRnXLJeKY/hHDNz4x1y 7vxjPXqCIkcKp/sGyAOEg59mAz8qtmkl1PP2o3t3f1+5xNzXGQX/SlocxDoAkAtk vPaJxesoYQQ/4RDVBAG+WJTFDOYHxFBxn9uCmQVDAAoQNfG7KSLhcsxuf67SuUw0 iwqZJLZM3Xkr90jJchm+K+UDpsr62OqLscqdZopD/ota9rRNs84= -----END CERTIFICATE-----Generated at Thu Jun 5 18:16:03 2025 by rpki-client