$ rpki-client -vvf repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft File: F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft (raw, json) Hash identifier: E+WUfhuFjuhTHhU/iPE4MH+0PNexYrmIbz45GGcddQg= Subject key identifier: D5:FB:33:A8:59:E8:D6:EF:60:E3:EB:CA:1F:F2:9E:8D:13:77:37:96 Authority key identifier: F7:00:7F:FD:A6:6A:99:D7:58:8D:A9:3F:FA:F2:6B:DE:57:B3:CA:64 Certificate issuer: /CN=F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64 Certificate serial: 06F67FAE94E23539D5053CCED89AD4C5EE1B1D24 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.cer Subject info access: rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft Manifest number: 0204 Signing time: Sat 28 Jun 2025 13:21:17 +0000 Manifest this update: Sat 28 Jun 2025 13:16:17 +0000 Manifest next update: Tue 01 Jul 2025 16:50:17 +0000 Files and hashes: 1: 3130332e3138362e3230392e302f32342d3234203d3e20313336383733.roa (hash: LoEOvDkV9bQaYXTmNRoMjCJnrRw7dRDwtZgFA/xt/mM=) 2: 3130332e3138362e3230382e302f32342d3234203d3e20313337333331.roa (hash: 7ko0bxN2Z7aHh5HxpPGcoXd3wiTgQprx370mdkriXlU=) 3: F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.crl (hash: 2T2WZ4gqe5iOoTTJxoa9y27rblsZxeLSm8kxKzO4CDo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.crl rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 16:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:f6:7f:ae:94:e2:35:39:d5:05:3c:ce:d8:9a:d4:c5:ee:1b:1d:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64 Validity Not Before: Jun 28 13:16:17 2025 GMT Not After : Jul 1 16:50:17 2025 GMT Subject: CN=D5FB33A859E8D6EF60E3EBCA1FF29E8D13773796 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a9:ec:57:f6:9e:0d:37:b2:93:ef:d9:81:fb: e2:bd:48:97:42:6d:80:3b:cb:73:06:67:5f:12:c0: 18:43:ba:74:e7:98:ce:4b:df:25:3a:65:c3:49:27: 41:78:39:a1:10:c2:02:11:3e:75:44:48:cb:68:96: f0:c4:f3:04:1c:48:ad:e2:cf:b3:77:f8:eb:b5:0e: 85:46:09:12:64:a8:70:fe:d0:4c:46:dd:0d:20:f8: b4:91:68:96:92:d5:7c:6a:28:a4:04:01:85:66:ee: fd:83:49:9f:54:b5:ed:91:09:a7:76:58:c4:19:01: 05:9b:e3:0b:59:96:18:8b:f0:08:47:d5:d1:bc:8e: b8:6f:b7:c7:13:25:ea:f3:94:7c:d1:14:05:1d:02: 2a:01:78:26:8a:9e:9b:7d:0e:7f:3a:84:3b:28:87: f3:21:b9:a6:cf:fc:82:22:2e:64:67:72:cc:c1:9d: c3:6b:f9:79:6c:40:24:22:12:46:74:3b:58:f6:f2: 07:63:8f:bc:58:8b:df:14:54:0d:cb:00:56:2f:ab: 52:59:16:d5:9c:fa:15:57:cd:d6:04:ad:16:5c:0d: 46:dd:95:7c:cd:53:34:35:fa:8e:60:25:24:2e:5b: 6e:a6:75:68:a3:02:06:c4:08:eb:48:e1:11:d3:1d: fe:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D5:FB:33:A8:59:E8:D6:EF:60:E3:EB:CA:1F:F2:9E:8D:13:77:37:96 X509v3 Authority Key Identifier: keyid:F7:00:7F:FD:A6:6A:99:D7:58:8D:A9:3F:FA:F2:6B:DE:57:B3:CA:64 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/09a9e835-f3a1-4c36-b47d-6f2f71eb8aa4/0/F7007FFDA66A99D7588DA93FFAF26BDE57B3CA64.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:c3:d7:bd:d1:f9:20:0c:e4:2f:b7:de:8a:8a:cd:97:9e:41: 2c:eb:40:98:9d:b7:af:51:fc:26:9d:43:98:51:b0:d2:8b:bd: b9:6b:43:96:c1:05:eb:86:a3:2e:ef:20:d2:4c:4a:e8:fc:9f: 4c:3e:6c:6e:04:b8:a7:a4:b9:83:32:47:47:73:b3:bc:f1:6c: ac:03:74:6c:7c:59:46:37:0b:76:1f:e6:e0:1b:1a:ac:2c:c5: a0:89:c8:14:3d:fd:5c:f7:e4:ed:cc:c5:80:7a:de:eb:b3:ab: f8:48:2a:36:1b:00:ee:87:a6:7c:49:ff:a5:e7:a9:23:33:d8: d2:58:93:5c:da:09:46:72:8f:9a:c8:7f:2b:54:80:b7:c7:12: 9b:d2:93:e4:e4:78:41:cf:58:73:8f:59:e1:10:8e:74:8f:98: 6a:ad:6f:7e:92:4f:48:27:1d:0f:90:b9:89:7f:39:36:1e:4b: 48:15:a7:d7:7f:d8:73:b1:5f:d8:4a:0b:9c:e3:70:bd:45:87: 8a:14:5c:92:b7:6c:32:75:a1:2c:3c:f6:1c:d7:92:2a:08:c1: e7:70:f5:2d:aa:9c:7d:f6:7c:39:49:cc:b0:56:71:6b:42:8d: 32:76:9d:c4:1e:22:d0:16:40:49:8c:2e:d2:54:2c:b8:8e:61: b1:4a:a4:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBvZ/rpTiNTnVBTzO2JrUxe4bHSQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjcwMDdGRkRBNjZBOTlENzU4OERBOTNGRkFGMjZCREU1 N0IzQ0E2NDAeFw0yNTA2MjgxMzE2MTdaFw0yNTA3MDExNjUwMTdaMDMxMTAvBgNV BAMTKEQ1RkIzM0E4NTlFOEQ2RUY2MEUzRUJDQTFGRjI5RThEMTM3NzM3OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3qexX9p4NN7KT79mB++K9SJdC bYA7y3MGZ18SwBhDunTnmM5L3yU6ZcNJJ0F4OaEQwgIRPnVESMtolvDE8wQcSK3i z7N3+Ou1DoVGCRJkqHD+0ExG3Q0g+LSRaJaS1XxqKKQEAYVm7v2DSZ9Ute2RCad2 WMQZAQWb4wtZlhiL8AhH1dG8jrhvt8cTJerzlHzRFAUdAioBeCaKnpt9Dn86hDso h/MhuabP/IIiLmRncszBncNr+XlsQCQiEkZ0O1j28gdjj7xYi98UVA3LAFYvq1JZ FtWc+hVXzdYErRZcDUbdlXzNUzQ1+o5gJSQuW26mdWijAgbECOtI4RHTHf57AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU1fszqFno1u9g4+vKH/KejRN3N5YwHwYDVR0j BBgwFoAU9wB//aZqmddYjak/+vJr3lezymQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w OWE5ZTgzNS1mM2ExLTRjMzYtYjQ3ZC02ZjJmNzFlYjhhYTQvMC9GNzAwN0ZGREE2 NkE5OUQ3NTg4REE5M0ZGQUYyNkJERTU3QjNDQTY0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjcwMDdGRkRBNjZBOTlENzU4OERBOTNGRkFGMjZCREU1N0Iz Q0E2NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDlhOWU4MzUtZjNhMS00YzM2LWI0 N2QtNmYyZjcxZWI4YWE0LzAvRjcwMDdGRkRBNjZBOTlENzU4OERBOTNGRkFGMjZC REU1N0IzQ0E2NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI3D173R+SAM5C+33oqKzZeeQSzrQJidt69R /CadQ5hRsNKLvblrQ5bBBeuGoy7vINJMSuj8n0w+bG4EuKekuYMyR0dzs7zxbKwD dGx8WUY3C3Yf5uAbGqwsxaCJyBQ9/Vz35O3MxYB63uuzq/hIKjYbAO6HpnxJ/6Xn qSMz2NJYk1zaCUZyj5rIfytUgLfHEpvSk+TkeEHPWHOPWeEQjnSPmGqtb36ST0gn HQ+QuYl/OTYeS0gVp9d/2HOxX9hKC5zjcL1Fh4oUXJK3bDJ1oSw89hzXkioIwedw 9S2qnH32fDlJzLBWcWtCjTJ2ncQeItAWQEmMLtJULLiOYbFKpLo= -----END CERTIFICATE-----Generated at Sun Jun 29 18:12:11 2025 by rpki-client