$ rpki-client -vvf repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.mft File: B7959E04EF090801395CE53E099D09F7AF2EF81B.mft (raw, json) Hash identifier: l/n+Hx5EWS9MECD98w/qtGzyprgVfSxRxo6i3te0X9U= Subject key identifier: AD:16:59:83:AC:EC:0B:2C:4C:8D:27:87:FB:C3:1A:09:8C:D1:3F:60 Authority key identifier: B7:95:9E:04:EF:09:08:01:39:5C:E5:3E:09:9D:09:F7:AF:2E:F8:1B Certificate issuer: /CN=B7959E04EF090801395CE53E099D09F7AF2EF81B Certificate serial: 7CE979862B6B016420D5C248595BBBC3F425DFAF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7959E04EF090801395CE53E099D09F7AF2EF81B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.mft Manifest number: 01D9 Signing time: Tue 01 Jul 2025 09:20:59 +0000 Manifest this update: Tue 01 Jul 2025 09:15:59 +0000 Manifest next update: Fri 04 Jul 2025 19:33:59 +0000 Files and hashes: 1: B7959E04EF090801395CE53E099D09F7AF2EF81B.crl (hash: vyU0iS5CWpUkmddGhqw+sLVpDQmZNhIvqmUcbIo6KHE=) 2: 3230332e3131342e3232362e302f32332d3233203d3e203435373033.roa (hash: 6Ec3PjRbQ83AgMPSDqdSdFcRTMZUzCno6pS4ublkNCA=) 3: 3230332e3131342e3232362e302f32342d3234203d3e203435373033.roa (hash: 1cX8i6kVHz142LzobmEyC/+1K1VM1wldny1qyaPLfIA=) 4: 3230332e3131342e3232372e302f32342d3234203d3e203435373033.roa (hash: S8koCw5Zpdz9WUfwrWHvdyG3BqQzOLzzd7o5WN4coH4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.crl rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7959E04EF090801395CE53E099D09F7AF2EF81B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 19:33:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:e9:79:86:2b:6b:01:64:20:d5:c2:48:59:5b:bb:c3:f4:25:df:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7959E04EF090801395CE53E099D09F7AF2EF81B Validity Not Before: Jul 1 09:15:59 2025 GMT Not After : Jul 4 19:33:59 2025 GMT Subject: CN=AD165983ACEC0B2C4C8D2787FBC31A098CD13F60 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:99:39:6d:80:af:33:4a:94:46:19:d0:19:e4: 72:43:72:32:29:40:58:f1:b4:81:d6:6a:d9:fb:b1: 97:29:f9:5b:b1:57:58:8d:b9:2f:51:af:f2:6a:0d: 9e:40:99:96:b0:34:a6:65:8e:fe:6e:f1:d6:be:6a: a9:0d:c7:71:01:42:98:81:b3:63:59:2d:d8:c0:09: 36:99:98:3e:e4:81:d0:bd:39:c2:a2:2b:65:70:b3: ba:34:a0:aa:46:17:24:15:c0:04:e6:67:ec:26:67: 8b:d6:ac:c8:03:1b:14:4f:19:ca:44:3a:41:f9:fb: d5:36:5e:d7:f6:5e:9b:ab:da:ea:f0:3f:82:0d:3c: 56:e0:f5:9a:79:94:81:11:25:1a:fa:35:85:db:61: 15:32:0f:52:b8:b9:f5:0b:cf:b4:ff:bc:26:2f:12: 1f:9d:4b:b7:cb:09:97:dc:2c:7f:5b:9c:f3:6e:90: d4:ab:16:38:9e:51:5b:94:07:94:96:a1:6e:56:8b: ec:36:d0:cd:91:19:21:89:27:9e:40:90:63:bb:e1: 79:66:c3:05:22:c1:a8:7c:fe:d6:b1:48:fd:82:2c: 25:93:22:34:5b:04:57:62:83:dc:50:3b:3f:35:17: e7:92:42:81:fc:ba:02:77:e5:df:5d:f2:db:4a:94: f6:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:16:59:83:AC:EC:0B:2C:4C:8D:27:87:FB:C3:1A:09:8C:D1:3F:60 X509v3 Authority Key Identifier: keyid:B7:95:9E:04:EF:09:08:01:39:5C:E5:3E:09:9D:09:F7:AF:2E:F8:1B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7959E04EF090801395CE53E099D09F7AF2EF81B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0463ae7c-a6ff-4fd8-96f2-0ba1880133c7/0/B7959E04EF090801395CE53E099D09F7AF2EF81B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:1e:a1:74:44:41:f4:e2:7a:48:5a:b2:88:27:d5:70:1a:3c: 64:40:07:fd:31:73:32:9c:97:78:da:bd:b6:c7:7f:3d:27:a3: d7:c3:8b:62:27:89:9e:c0:f3:64:bb:20:58:e5:9b:e0:b1:9d: 89:8d:46:e0:ab:88:43:22:02:61:ec:8a:72:9b:53:73:df:a6: 58:d7:3d:3a:01:82:a5:d3:46:e7:2d:4f:b7:82:b5:2d:b1:39: 67:2e:7e:66:7a:cb:5b:ae:4b:0c:26:7e:17:03:7e:40:dc:d8: fb:73:b9:42:3a:dd:88:64:c8:85:fa:5d:49:b1:5f:59:77:45: ab:64:c6:dd:66:2c:16:f1:29:25:18:4f:63:e2:ce:6c:86:81: 0c:b9:f8:7c:34:84:09:a8:6a:b5:0e:ff:14:19:ea:b7:dd:2a: d0:5b:3a:39:98:bf:13:d8:e0:57:69:4a:f5:52:ce:e4:fc:c7: 1f:55:68:d5:87:2c:e7:0b:a6:7f:97:2b:a7:6a:ce:fb:c7:68: bc:97:7b:9b:f8:9a:34:1b:f5:38:30:5a:ee:b9:37:fc:6c:14: a8:8d:2d:f8:49:50:df:1a:0d:24:da:a1:96:1d:de:ff:60:f3: 72:a9:6f:69:e2:88:4b:45:ca:8d:f3:d1:69:2f:8f:02:76:b6: 07:1b:36:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfOl5hitrAWQg1cJIWVu7w/Ql368wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjc5NTlFMDRFRjA5MDgwMTM5NUNFNTNFMDk5RDA5RjdB RjJFRjgxQjAeFw0yNTA3MDEwOTE1NTlaFw0yNTA3MDQxOTMzNTlaMDMxMTAvBgNV BAMTKEFEMTY1OTgzQUNFQzBCMkM0QzhEMjc4N0ZCQzMxQTA5OENEMTNGNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgmTltgK8zSpRGGdAZ5HJDcjIp QFjxtIHWatn7sZcp+VuxV1iNuS9Rr/JqDZ5AmZawNKZljv5u8da+aqkNx3EBQpiB s2NZLdjACTaZmD7kgdC9OcKiK2Vws7o0oKpGFyQVwATmZ+wmZ4vWrMgDGxRPGcpE OkH5+9U2Xtf2Xpur2urwP4INPFbg9Zp5lIERJRr6NYXbYRUyD1K4ufULz7T/vCYv Eh+dS7fLCZfcLH9bnPNukNSrFjieUVuUB5SWoW5Wi+w20M2RGSGJJ55AkGO74Xlm wwUiwah8/taxSP2CLCWTIjRbBFdig9xQOz81F+eSQoH8ugJ35d9d8ttKlPZFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrRZZg6zsCyxMjSeH+8MaCYzRP2AwHwYDVR0j BBgwFoAUt5WeBO8JCAE5XOU+CZ0J968u+BswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NDYzYWU3Yy1hNmZmLTRmZDgtOTZmMi0wYmExODgwMTMzYzcvMC9CNzk1OUUwNEVG MDkwODAxMzk1Q0U1M0UwOTlEMDlGN0FGMkVGODFCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjc5NTlFMDRFRjA5MDgwMTM5NUNFNTNFMDk5RDA5RjdBRjJF RjgxQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDQ2M2FlN2MtYTZmZi00ZmQ4LTk2 ZjItMGJhMTg4MDEzM2M3LzAvQjc5NTlFMDRFRjA5MDgwMTM5NUNFNTNFMDk5RDA5 RjdBRjJFRjgxQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIIeoXREQfTiekhasogn1XAaPGRAB/0xczKc l3javbbHfz0no9fDi2IniZ7A82S7IFjlm+CxnYmNRuCriEMiAmHsinKbU3PfpljX PToBgqXTRuctT7eCtS2xOWcufmZ6y1uuSwwmfhcDfkDc2PtzuUI63YhkyIX6XUmx X1l3Ratkxt1mLBbxKSUYT2PizmyGgQy5+Hw0hAmoarUO/xQZ6rfdKtBbOjmYvxPY 4FdpSvVSzuT8xx9VaNWHLOcLpn+XK6dqzvvHaLyXe5v4mjQb9TgwWu65N/xsFKiN LfhJUN8aDSTaoZYd3v9g83Kpb2niiEtFyo3z0WkvjwJ2tgcbNrc= -----END CERTIFICATE-----Generated at Wed Jul 2 14:19:34 2025 by rpki-client