$ rpki-client -vvf repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft File: B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft (raw, json) Hash identifier: hqoz5Quyncv/n/3lupmSqpRh/i2UXFWuf2EOttzKWf4= Subject key identifier: 6A:C2:88:CC:7A:CA:AE:62:2A:0B:00:B3:AA:8E:8C:BD:02:90:1F:80 Authority key identifier: B7:A3:DE:01:7F:B3:D7:40:B2:93:22:D8:18:D5:C6:A8:FE:6D:4C:30 Certificate issuer: /CN=B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30 Certificate serial: 62060A82089E73E394570F42D3BA146FAB9A8EED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft Manifest number: F7 Signing time: Mon 30 Jun 2025 01:11:15 +0000 Manifest this update: Mon 30 Jun 2025 01:06:15 +0000 Manifest next update: Thu 03 Jul 2025 03:47:15 +0000 Files and hashes: 1: 3130332e3231352e36312e302f32342d3234203d3e20313531353033.roa (hash: yI+x3QlccThUEQyL4aGgW81et+4syWgCbrFAnQNyq/g=) 2: B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.crl (hash: zJvsmBsQB8t13alZcLj5fVqq20vLdmffhkPLcL7IbFQ=) 3: 3130332e3231352e36302e302f32342d3234203d3e20313531353033.roa (hash: b0fuY1pKKFn/0Zi2JNlIa5wt7XKTYP6sji14ARgrEj0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.crl rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 03:47:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:06:0a:82:08:9e:73:e3:94:57:0f:42:d3:ba:14:6f:ab:9a:8e:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30 Validity Not Before: Jun 30 01:06:15 2025 GMT Not After : Jul 3 03:47:15 2025 GMT Subject: CN=6AC288CC7ACAAE622A0B00B3AA8E8CBD02901F80 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:85:e3:17:03:ae:17:91:01:93:1c:ad:a2:44: d0:29:52:02:f0:58:df:92:de:7b:1c:f6:c8:24:33: 7b:d7:3b:fa:a2:ee:79:55:98:75:db:3a:b5:15:61: 00:6b:17:d0:22:f9:97:4f:f7:c7:3c:aa:9d:fb:09: 48:bb:39:71:fb:1d:d3:2c:97:76:2a:a8:cb:8f:35: ee:95:8f:36:8e:88:b0:44:04:28:78:fe:f3:66:64: 29:b8:e3:86:4f:e4:ed:9d:a7:0a:17:07:92:1e:03: f2:fa:9e:5d:40:4b:12:9d:c4:b1:0e:49:72:d3:4d: 1a:e6:42:2b:06:13:c7:fa:02:3e:78:08:fb:91:4b: 81:4f:04:06:8e:33:d1:af:8c:d6:fb:28:94:26:39: 46:4a:11:c7:b3:0f:05:92:1b:6a:1d:06:01:e1:85: ab:c7:75:37:65:73:c6:61:ca:0c:16:6b:5b:34:68: 5d:bd:b4:1c:b9:e1:f5:2f:e0:51:45:ec:5c:02:c4: 15:12:5b:9e:4d:c4:9f:a6:d0:7f:bb:da:a8:8b:28: 94:69:e4:9a:d3:00:cc:ca:66:ef:81:b1:51:84:3c: a4:f3:97:18:51:42:5c:17:30:7c:23:48:aa:b9:7f: 39:3a:a0:6f:50:db:b1:2f:d0:cd:d9:27:0e:10:1f: 1a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:C2:88:CC:7A:CA:AE:62:2A:0B:00:B3:AA:8E:8C:BD:02:90:1F:80 X509v3 Authority Key Identifier: keyid:B7:A3:DE:01:7F:B3:D7:40:B2:93:22:D8:18:D5:C6:A8:FE:6D:4C:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:40:d2:9b:ae:04:54:88:6e:82:a3:de:74:09:25:40:ad:77: 8d:3a:bd:c3:0f:2d:d9:92:42:4d:e4:66:86:04:ce:43:ce:fb: 5d:40:7d:d2:ca:d4:56:67:0b:c6:9f:eb:31:22:14:82:b6:bb: 4f:dc:ca:c1:4b:95:0b:ef:99:11:18:01:96:9b:9f:77:14:b7: 33:5b:79:4b:b4:54:c8:e6:3b:1c:2f:60:c1:38:e2:f8:85:dc: 2b:ee:17:15:da:e6:a5:d6:40:0c:55:74:76:51:36:be:4f:be: f5:ee:8e:6f:e1:62:c3:05:c8:1c:b6:a9:0e:08:41:6f:da:4a: 57:88:12:a1:69:cd:32:ac:f0:fb:2b:db:a8:21:10:25:47:d6: bb:c9:27:13:94:9e:99:0d:29:43:81:ab:3d:e9:44:34:00:65: 01:1d:15:d8:d7:6f:0d:0e:98:1f:5d:53:82:c5:7b:a9:ef:4a: 33:36:2b:a9:18:b1:25:ab:e8:48:d2:fe:a9:06:5b:08:55:ca: 74:ac:2e:8b:24:24:46:6a:54:6c:a0:01:d8:b6:04:5e:ab:28: 62:37:a8:86:68:0f:ea:11:e9:6a:be:94:17:f1:80:0f:a9:76: 02:69:4a:80:e7:cb:25:5f:a2:1c:15:56:33:0e:ca:31:9f:ea: bb:67:2a:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYgYKggiec+OUVw9C07oUb6uaju0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdBM0RFMDE3RkIzRDc0MEIyOTMyMkQ4MThENUM2QThG RTZENEMzMDAeFw0yNTA2MzAwMTA2MTVaFw0yNTA3MDMwMzQ3MTVaMDMxMTAvBgNV BAMTKDZBQzI4OENDN0FDQUFFNjIyQTBCMDBCM0FBOEU4Q0JEMDI5MDFGODAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoheMXA64XkQGTHK2iRNApUgLw WN+S3nsc9sgkM3vXO/qi7nlVmHXbOrUVYQBrF9Ai+ZdP98c8qp37CUi7OXH7HdMs l3YqqMuPNe6VjzaOiLBEBCh4/vNmZCm444ZP5O2dpwoXB5IeA/L6nl1ASxKdxLEO SXLTTRrmQisGE8f6Aj54CPuRS4FPBAaOM9GvjNb7KJQmOUZKEcezDwWSG2odBgHh havHdTdlc8ZhygwWa1s0aF29tBy54fUv4FFF7FwCxBUSW55NxJ+m0H+72qiLKJRp 5JrTAMzKZu+BsVGEPKTzlxhRQlwXMHwjSKq5fzk6oG9Q27Ev0M3ZJw4QHxofAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUasKIzHrKrmIqCwCzqo6MvQKQH4AwHwYDVR0j BBgwFoAUt6PeAX+z10CykyLYGNXGqP5tTDAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjE2YzA0ZC1kOWUwLTRjMWYtOGExNC1lMjNiZjI3NDQ1OTIvMC9CN0EzREUwMTdG QjNENzQwQjI5MzIyRDgxOEQ1QzZBOEZFNkQ0QzMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjdBM0RFMDE3RkIzRDc0MEIyOTMyMkQ4MThENUM2QThGRTZE NEMzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYxNmMwNGQtZDllMC00YzFmLThh MTQtZTIzYmYyNzQ0NTkyLzAvQjdBM0RFMDE3RkIzRDc0MEIyOTMyMkQ4MThENUM2 QThGRTZENEMzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHNA0puuBFSIboKj3nQJJUCtd406vcMPLdmS Qk3kZoYEzkPO+11AfdLK1FZnC8af6zEiFIK2u0/cysFLlQvvmREYAZabn3cUtzNb eUu0VMjmOxwvYME44viF3CvuFxXa5qXWQAxVdHZRNr5PvvXujm/hYsMFyBy2qQ4I QW/aSleIEqFpzTKs8Psr26ghECVH1rvJJxOUnpkNKUOBqz3pRDQAZQEdFdjXbw0O mB9dU4LFe6nvSjM2K6kYsSWr6EjS/qkGWwhVynSsLoskJEZqVGygAdi2BF6rKGI3 qIZoD+oR6Wq+lBfxgA+pdgJpSoDnyyVfohwVVjMOyjGf6rtnKlo= -----END CERTIFICATE-----Generated at Tue Jul 1 11:44:09 2025 by rpki-client