$ rpki-client -vvf repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft File: 7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft (raw, json) Hash identifier: TDt+UVELM+AR1GCgBTduT4IjdPipMSU6gZxm8et3x44= Subject key identifier: AB:0E:67:D0:83:F1:29:59:ED:84:7C:7C:8A:02:7C:9B:17:AB:77:3E Authority key identifier: 7C:A3:F2:C4:0F:E4:53:CE:E2:30:AF:59:49:85:B2:75:51:4F:5E:CF Certificate issuer: /CN=7CA3F2C40FE453CEE230AF594985B275514F5ECF Certificate serial: 4B7431E071758E902F2CE71A109E1C03D2C745DA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA3F2C40FE453CEE230AF594985B275514F5ECF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft Manifest number: 0172 Signing time: Fri 06 Jun 2025 12:52:16 +0000 Manifest this update: Fri 06 Jun 2025 12:47:16 +0000 Manifest next update: Mon 09 Jun 2025 17:54:16 +0000 Files and hashes: 1: 3130332e3139312e3131362e302f32342d3234203d3e20313439393137.roa (hash: LYrLDsZTAbC2Myr0Hc+KOOGkdqztaoQ+U5C2aGpkGQc=) 2: 7CA3F2C40FE453CEE230AF594985B275514F5ECF.crl (hash: TNK+3jn25Jijv9z+hJu5Hmce5gV2u9px7hIQH6Ualfg=) 3: 3130332e3139312e3131372e302f32342d3234203d3e20313439393137.roa (hash: T5ujnMBfrRFq+9a4Ins8EQ3CJj6sZJk55UE2urIjcWM=) 4: 3130332e3139312e3131362e302f32332d3233203d3e20313439393137.roa (hash: wE41NZyo6Pm4ztOuQo15CxbV7OwbZAt3ABv1Or5h/i4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.crl rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA3F2C40FE453CEE230AF594985B275514F5ECF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 12:36:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:74:31:e0:71:75:8e:90:2f:2c:e7:1a:10:9e:1c:03:d2:c7:45:da Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CA3F2C40FE453CEE230AF594985B275514F5ECF Validity Not Before: Jun 6 12:47:16 2025 GMT Not After : Jun 9 17:54:16 2025 GMT Subject: CN=AB0E67D083F12959ED847C7C8A027C9B17AB773E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:01:dd:4a:d1:10:75:67:ca:e6:dc:d2:07:7a: 3e:58:fd:74:f7:19:31:38:5e:06:99:b4:50:6b:ef: e5:9d:bc:c1:96:e7:18:24:9b:1e:bb:e3:bb:2b:82: 63:e4:6f:28:6c:81:ec:25:3f:63:09:cf:35:d3:30: 24:01:30:fb:60:35:0f:ab:be:73:78:70:bc:68:48: 82:16:fa:a3:8b:53:88:d6:2a:5d:f7:2e:02:9d:19: ff:4c:de:5f:46:0e:0a:5f:8d:47:f7:e4:e3:e3:c7: 4f:5b:f9:4c:21:76:49:27:1b:50:76:fb:f7:04:8d: b3:e1:3e:04:9a:c7:29:cb:d0:5b:38:0d:70:63:c4: 3b:c7:83:92:31:58:73:7f:22:97:3f:a8:88:8b:fb: e6:2b:3c:8a:c5:43:67:06:a1:b3:8f:5e:60:25:44: a4:d7:43:26:30:ad:ad:0f:f6:d5:76:13:b6:b1:81: 3a:d2:6c:35:90:a3:4b:ee:da:3d:44:8a:3f:f0:91: 2e:bc:f1:19:28:bb:fd:01:9d:c8:f0:a0:a6:da:75: 7d:d4:7b:6c:0d:24:29:d4:eb:89:99:c5:fa:2e:d8: f3:08:2c:51:1f:7e:38:4a:f5:f3:4f:05:5a:3c:a4: c4:67:43:60:86:39:56:c2:53:1b:e3:c7:67:09:d8: 7f:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:0E:67:D0:83:F1:29:59:ED:84:7C:7C:8A:02:7C:9B:17:AB:77:3E X509v3 Authority Key Identifier: keyid:7C:A3:F2:C4:0F:E4:53:CE:E2:30:AF:59:49:85:B2:75:51:4F:5E:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CA3F2C40FE453CEE230AF594985B275514F5ECF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e6adae2a-47b6-4ae5-9c3f-3e8cb92a3987/0/7CA3F2C40FE453CEE230AF594985B275514F5ECF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:19:15:0d:f3:56:cd:b9:db:4a:06:36:1d:9f:26:75:f5:aa: ba:c6:ed:8e:5d:2d:24:67:33:96:e6:3a:05:94:30:09:df:14: 20:dd:a6:5d:71:1b:17:29:83:65:a5:eb:7c:2e:db:10:6e:81: 38:e5:7b:2a:d2:be:30:e6:13:27:65:9e:20:f1:f4:16:cc:2d: f8:30:24:ba:8b:4f:d6:e4:0e:bb:d8:3b:b6:ef:ef:6f:7c:8f: 43:92:f8:ed:66:50:64:eb:51:6a:03:ad:59:c9:61:a2:b0:7f: 77:6a:d6:89:2f:e6:6f:34:f3:80:92:3f:b2:2a:aa:28:f9:6e: 3e:bc:ea:77:0f:3e:5e:25:79:e6:b2:31:8a:6a:4c:2e:c1:a7: 0b:f5:a9:47:e0:24:3b:10:6e:fe:f0:2c:5f:66:9c:67:10:ea: 87:84:7e:54:e0:8a:9b:0d:d0:18:2a:cb:74:96:f0:05:ba:fa: 9f:95:77:49:00:0f:69:1a:8c:49:6c:96:d2:2e:b6:11:22:b8: dd:8c:1c:c5:04:c8:d8:79:cc:25:06:f2:7f:4d:c2:a5:68:3a: b3:2e:5f:7e:b4:c9:dc:38:91:24:9e:fb:fb:eb:b2:6b:1a:aa: bc:6c:0f:45:22:e6:04:d3:f6:c5:44:ba:e1:05:f2:4d:34:9a: 35:23:57:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS3Qx4HF1jpAvLOcaEJ4cA9LHRdowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NBM0YyQzQwRkU0NTNDRUUyMzBBRjU5NDk4NUIyNzU1 MTRGNUVDRjAeFw0yNTA2MDYxMjQ3MTZaFw0yNTA2MDkxNzU0MTZaMDMxMTAvBgNV BAMTKEFCMEU2N0QwODNGMTI5NTlFRDg0N0M3QzhBMDI3QzlCMTdBQjc3M0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Ad1K0RB1Z8rm3NIHej5Y/XT3 GTE4XgaZtFBr7+WdvMGW5xgkmx6747srgmPkbyhsgewlP2MJzzXTMCQBMPtgNQ+r vnN4cLxoSIIW+qOLU4jWKl33LgKdGf9M3l9GDgpfjUf35OPjx09b+UwhdkknG1B2 +/cEjbPhPgSaxynL0Fs4DXBjxDvHg5IxWHN/Ipc/qIiL++YrPIrFQ2cGobOPXmAl RKTXQyYwra0P9tV2E7axgTrSbDWQo0vu2j1Eij/wkS688Rkou/0BncjwoKbadX3U e2wNJCnU64mZxfou2PMILFEffjhK9fNPBVo8pMRnQ2CGOVbCUxvjx2cJ2H9PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqw5n0IPxKVnthHx8igJ8mxerdz4wHwYDVR0j BBgwFoAUfKPyxA/kU87iMK9ZSYWydVFPXs8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NmFkYWUyYS00N2I2LTRhZTUtOWMzZi0zZThjYjkyYTM5ODcvMC83Q0EzRjJDNDBG RTQ1M0NFRTIzMEFGNTk0OTg1QjI3NTUxNEY1RUNGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0NBM0YyQzQwRkU0NTNDRUUyMzBBRjU5NDk4NUIyNzU1MTRG NUVDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTZhZGFlMmEtNDdiNi00YWU1LTlj M2YtM2U4Y2I5MmEzOTg3LzAvN0NBM0YyQzQwRkU0NTNDRUUyMzBBRjU5NDk4NUIy NzU1MTRGNUVDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKkZFQ3zVs2520oGNh2fJnX1qrrG7Y5dLSRn M5bmOgWUMAnfFCDdpl1xGxcpg2Wl63wu2xBugTjleyrSvjDmEydlniDx9BbMLfgw JLqLT9bkDrvYO7bv7298j0OS+O1mUGTrUWoDrVnJYaKwf3dq1okv5m8084CSP7Iq qij5bj686ncPPl4leeayMYpqTC7Bpwv1qUfgJDsQbv7wLF9mnGcQ6oeEflTgipsN 0Bgqy3SW8AW6+p+Vd0kAD2kajElsltIuthEiuN2MHMUEyNh5zCUG8n9NwqVoOrMu X360ydw4kSSe+/vrsmsaqrxsD0Ui5gTT9sVEuuEF8k00mjUjV8E= -----END CERTIFICATE-----Generated at Fri Jun 6 16:48:36 2025 by rpki-client