$ rpki-client -vvf repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.mft File: 7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.mft (raw, json) Hash identifier: 4/tuejVFZaZlz9EzvEWIVCYmCu/ovI7CcLwAMtCXe1c= Subject key identifier: 0E:06:F1:A7:A8:AF:7D:FF:08:EA:15:22:53:D4:F4:A8:E6:6E:B4:3F Authority key identifier: 7C:4E:AC:B6:A8:C8:C7:27:6D:4C:EB:86:DC:DC:A3:E7:F4:68:A7:93 Certificate issuer: /CN=7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793 Certificate serial: 6DCF39D2CFE76AA00BF0411B55932B8F18279E53 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.mft Manifest number: BE Signing time: Thu 05 Jun 2025 00:20:44 +0000 Manifest this update: Thu 05 Jun 2025 00:15:44 +0000 Manifest next update: Sun 08 Jun 2025 07:59:44 +0000 Files and hashes: 1: 7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.crl (hash: YiaY4Pdwip7RO3KwChXv/J5T2SdZRVPApeXcQRhsPts=) 2: 3135372e32302e3231322e302f32332d3234203d3e20313532343135.roa (hash: rbjJyAwc8hNNHHozNUZcHui2yrJ3XRP3MxmsmjgubzQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.crl rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 07:59:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:cf:39:d2:cf:e7:6a:a0:0b:f0:41:1b:55:93:2b:8f:18:27:9e:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793 Validity Not Before: Jun 5 00:15:44 2025 GMT Not After : Jun 8 07:59:44 2025 GMT Subject: CN=0E06F1A7A8AF7DFF08EA152253D4F4A8E66EB43F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:ea:ae:ca:d4:47:28:7f:a0:69:e0:f6:9a:62: 05:7c:f9:6c:a6:2c:9e:cd:e8:b3:41:87:a0:08:52: af:40:05:44:57:cc:bb:74:a7:41:40:f9:6b:40:ff: 5b:80:05:5a:11:c2:30:3a:01:f3:87:f6:a3:eb:97: 9d:a9:2e:8e:5e:ee:17:4d:60:05:f7:84:c9:25:d4: c8:04:ae:19:3b:22:33:60:20:ff:b7:25:99:40:d1: c8:b2:0e:33:2f:f2:1b:0b:de:f9:79:ac:89:33:92: 1b:25:8d:c2:62:d8:26:61:8e:7c:d3:f0:28:5e:ab: 29:a8:63:70:59:18:a9:48:e3:ac:94:de:d4:95:09: 21:1f:04:f8:aa:ea:6f:1c:b9:50:39:38:06:c6:ed: 45:c1:55:e1:d0:23:3b:32:d4:eb:6b:bf:7f:59:cb: db:d7:24:e0:7b:61:b9:95:a0:b0:12:ce:f5:79:c2: 42:c0:a9:2b:b1:7b:4c:de:e6:ce:ca:14:2f:12:0d: 0e:a3:80:5a:99:c8:cf:e5:ec:88:7b:23:bc:7e:d4: c8:8d:ed:1f:5e:5f:96:5b:b2:b8:09:73:0a:b4:7e: 4b:26:21:b3:c9:dc:c8:9c:a2:04:0c:75:85:d0:1d: 3c:06:92:fa:f2:90:c2:cb:ab:7b:fa:ab:d9:dd:1f: c1:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:06:F1:A7:A8:AF:7D:FF:08:EA:15:22:53:D4:F4:A8:E6:6E:B4:3F X509v3 Authority Key Identifier: keyid:7C:4E:AC:B6:A8:C8:C7:27:6D:4C:EB:86:DC:DC:A3:E7:F4:68:A7:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:8d:97:f0:91:88:dd:e7:63:7f:56:dd:8c:32:b7:6e:e5:6e: 5b:f9:55:3e:40:5e:0e:e1:94:45:0f:1a:4f:30:e8:7c:f2:b9: cc:30:87:3b:d8:03:4b:79:69:19:f3:1a:da:f1:0f:6d:21:c5: 7a:25:33:e3:3e:3b:b1:88:b4:f2:fb:05:6c:ec:ba:8f:b9:e9: 1f:04:2f:e1:2a:3e:f8:15:be:e3:14:df:c8:cb:6d:09:3c:33: 8d:76:c9:ff:ad:47:03:12:d7:f6:e0:89:36:fb:fa:96:1d:00: 5c:da:b3:5e:a8:a5:c5:d6:c1:a8:40:01:66:21:34:a6:04:f1: 46:17:e9:82:75:b2:2f:bc:0a:e6:2f:56:b0:cd:fb:28:fd:af: 68:3e:5f:7d:27:a1:25:91:b7:05:0e:c3:a7:5a:fa:67:2d:6e: 8b:20:10:de:63:6a:3d:9d:3d:28:bc:66:fe:82:a9:24:cb:b2: 71:87:34:75:70:62:d8:ad:fd:0c:ea:35:4d:a3:0a:a9:33:61: 4c:d3:b8:33:01:41:d0:96:95:42:2f:05:a2:1a:ef:25:57:63: 58:6d:9d:3c:b8:79:cc:39:1b:26:19:dd:08:4c:06:32:85:a1: a5:b4:9d:75:d4:7a:e5:8b:16:c4:3f:4e:85:dc:40:76:e6:d2: 3d:ac:d3:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbc850s/naqAL8EEbVZMrjxgnnlMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M0RUFDQjZBOEM4QzcyNzZENENFQjg2RENEQ0EzRTdG NDY4QTc5MzAeFw0yNTA2MDUwMDE1NDRaFw0yNTA2MDgwNzU5NDRaMDMxMTAvBgNV BAMTKDBFMDZGMUE3QThBRjdERkYwOEVBMTUyMjUzRDRGNEE4RTY2RUI0M0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+6q7K1Ecof6Bp4PaaYgV8+Wym LJ7N6LNBh6AIUq9ABURXzLt0p0FA+WtA/1uABVoRwjA6AfOH9qPrl52pLo5e7hdN YAX3hMkl1MgErhk7IjNgIP+3JZlA0ciyDjMv8hsL3vl5rIkzkhsljcJi2CZhjnzT 8CheqymoY3BZGKlI46yU3tSVCSEfBPiq6m8cuVA5OAbG7UXBVeHQIzsy1Otrv39Z y9vXJOB7YbmVoLASzvV5wkLAqSuxe0ze5s7KFC8SDQ6jgFqZyM/l7Ih7I7x+1MiN 7R9eX5ZbsrgJcwq0fksmIbPJ3MicogQMdYXQHTwGkvrykMLLq3v6q9ndH8ERAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDgbxp6ivff8I6hUiU9T0qOZutD8wHwYDVR0j BBgwFoAUfE6stqjIxydtTOuG3Nyj5/Rop5MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2I0N2FiNi1kMWYxLTRkMmUtOWNmYy04MDg0YTRiYWNmMGIvMC83QzRFQUNCNkE4 QzhDNzI3NkQ0Q0VCODZEQ0RDQTNFN0Y0NjhBNzkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0M0RUFDQjZBOEM4QzcyNzZENENFQjg2RENEQ0EzRTdGNDY4 QTc5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNiNDdhYjYtZDFmMS00ZDJlLTlj ZmMtODA4NGE0YmFjZjBiLzAvN0M0RUFDQjZBOEM4QzcyNzZENENFQjg2RENEQ0Ez RTdGNDY4QTc5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE6Nl/CRiN3nY39W3Ywyt27lblv5VT5AXg7h lEUPGk8w6HzyucwwhzvYA0t5aRnzGtrxD20hxXolM+M+O7GItPL7BWzsuo+56R8E L+EqPvgVvuMU38jLbQk8M412yf+tRwMS1/bgiTb7+pYdAFzas16opcXWwahAAWYh NKYE8UYX6YJ1si+8CuYvVrDN+yj9r2g+X30noSWRtwUOw6da+mctbosgEN5jaj2d PSi8Zv6CqSTLsnGHNHVwYtit/QzqNU2jCqkzYUzTuDMBQdCWlUIvBaIa7yVXY1ht nTy4ecw5GyYZ3QhMBjKFoaW0nXXUeuWLFsQ/ToXcQHbm0j2s03E= -----END CERTIFICATE-----Generated at Sat Jun 7 02:15:39 2025 by rpki-client