$ rpki-client -vvf repo-rpki.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/7470038419B67CD1743CE4D96953077ECE6928FE.mft File: 7470038419B67CD1743CE4D96953077ECE6928FE.mft (raw, json) Hash identifier: V1yLJlR0eyb8eGwF8/QAe93xn/9KESNgDtp5zaz3y6U= Subject key identifier: 62:6B:9E:68:54:6F:1E:3D:BB:BA:2B:35:17:63:32:68:AD:B3:13:2D Authority key identifier: 74:70:03:84:19:B6:7C:D1:74:3C:E4:D9:69:53:07:7E:CE:69:28:FE Certificate issuer: /CN=7470038419B67CD1743CE4D96953077ECE6928FE Certificate serial: 7B7754E335F9BF814EB20688F33628553CAD5ACD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7470038419B67CD1743CE4D96953077ECE6928FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/7470038419B67CD1743CE4D96953077ECE6928FE.mft Manifest number: 01B0 Signing time: Sun 29 Jun 2025 05:31:47 +0000 Manifest this update: Sun 29 Jun 2025 05:26:47 +0000 Manifest next update: Wed 02 Jul 2025 07:47:47 +0000 Files and hashes: 1: 7470038419B67CD1743CE4D96953077ECE6928FE.crl (hash: JdMusqpt3Bosaac6HtdAL2GMuGJtQEr5YPiNXXYRpjw=) 2: 323430363a353463303a383030303a3a2f33332d3333203d3e20313430343739.roa (hash: 3w+VK+tvKAA1AfC4liESzr0B7Kk6JlTbtXB9BTFuOGs=) 3: 3130332e3135342e35322e302f32342d3234203d3e20313430343739.roa (hash: DQ6tr9CPErOI4RG1ZAv/ldO7tY9jf/c+WNf9/AzYbiQ=) 4: 3130332e3135342e35332e302f32342d3234203d3e20313430343739.roa (hash: seK97eEttenVyvDeIj5FLJRpNr+qf4DujlJD8pAoG3I=) 5: 323430363a353463303a3a2f33332d3333203d3e20313430343739.roa (hash: WKukFhTAk9Wfv4/OtDk/a2nJ3JcuJ/OWKwAPnS7JgvA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/7470038419B67CD1743CE4D96953077ECE6928FE.crl rsync://repo-rpki.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/7470038419B67CD1743CE4D96953077ECE6928FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7470038419B67CD1743CE4D96953077ECE6928FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:77:54:e3:35:f9:bf:81:4e:b2:06:88:f3:36:28:55:3c:ad:5a:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7470038419B67CD1743CE4D96953077ECE6928FE Validity Not Before: Jun 29 05:26:47 2025 GMT Not After : Jul 2 07:47:47 2025 GMT Subject: CN=626B9E68546F1E3DBBBA2B3517633268ADB3132D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9c:f4:7a:75:c9:6d:3a:b5:74:18:67:32:9e: b8:00:30:f8:b7:38:3e:f3:19:9e:43:39:d3:30:88: a9:59:fb:98:db:13:a0:38:2a:45:e2:00:f1:46:52: b6:10:cd:6b:e6:19:c3:49:55:7a:fd:7e:5c:dc:38: 09:5f:a9:01:c6:ec:43:cd:30:11:20:a9:ad:15:ba: 6b:24:e4:a6:c9:16:b1:1f:fc:69:0f:c2:e7:6d:17: b1:7c:31:dc:62:0b:c5:8b:7c:5a:07:eb:9f:82:26: c3:ad:62:8d:2c:19:f9:e2:ac:ce:58:50:55:db:80: a4:94:d9:55:49:da:fb:1a:80:b7:49:49:97:68:af: f5:b2:b3:a4:31:9c:96:11:9a:85:02:04:c4:28:20: 1c:55:37:27:9d:7a:eb:f6:e5:77:33:66:ad:1f:2d: 07:92:30:d8:a8:d2:d5:50:9a:3e:df:97:da:f6:16: 73:60:30:c5:ba:ae:6a:72:4c:83:f5:31:00:50:4c: b8:73:4b:f0:89:f7:90:b8:4b:97:0e:90:11:f4:d9: 51:a4:b9:4e:4b:43:fa:9d:af:d7:4e:ea:f9:4e:bb: c0:5b:73:48:ad:5e:30:56:74:f7:aa:57:48:25:bb: 3a:3b:ed:94:d4:00:d7:91:62:ac:4c:60:e1:ad:23: 71:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:6B:9E:68:54:6F:1E:3D:BB:BA:2B:35:17:63:32:68:AD:B3:13:2D X509v3 Authority Key Identifier: keyid:74:70:03:84:19:B6:7C:D1:74:3C:E4:D9:69:53:07:7E:CE:69:28:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/7470038419B67CD1743CE4D96953077ECE6928FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7470038419B67CD1743CE4D96953077ECE6928FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c765d51-b0b1-435d-a66b-604c6e5d29ef/0/7470038419B67CD1743CE4D96953077ECE6928FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:40:6b:51:d6:21:5a:ad:59:68:46:70:65:99:7b:d4:3d:3d: 8c:f7:e5:12:81:80:1c:6d:ae:26:bb:e9:b0:9f:11:70:d9:4c: e9:74:12:be:44:5d:f0:b3:b4:9c:f2:40:2d:62:cc:a0:06:98: 86:f3:98:b9:d4:06:68:3e:16:a8:71:e7:82:75:9f:4b:ba:7f: b1:e5:ce:de:17:1e:31:74:7d:46:7a:71:3d:91:38:75:98:26: 8f:9a:71:ed:ad:e0:6a:b6:f2:43:9e:e2:6d:28:2c:cf:cf:4a: ad:b6:df:6e:0f:bd:36:ae:1b:4a:e1:b1:47:25:36:65:b8:7d: 2e:38:2c:dd:4c:73:d2:66:d7:4b:af:96:cc:aa:58:e1:e6:64: 69:57:30:38:72:56:c1:fd:4f:21:f6:b5:d2:c6:b0:6b:55:3f: 31:1e:77:b5:de:30:12:76:80:75:33:bd:39:ed:b7:20:42:aa: af:f3:6b:71:ee:1b:3a:fb:2b:00:c1:a2:7f:f4:68:f5:96:b8: 9e:b1:f3:55:ca:69:1d:5a:5b:a4:da:f6:2d:6b:33:3c:8d:45: 1d:83:ef:0a:f1:dd:2d:52:2d:33:8a:59:e9:af:00:b7:12:0c: 30:c7:b3:37:97:68:65:c2:4f:94:33:ee:91:be:d2:31:58:81: 1b:6d:f1:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe3dU4zX5v4FOsgaI8zYoVTytWs0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQ3MDAzODQxOUI2N0NEMTc0M0NFNEQ5Njk1MzA3N0VD RTY5MjhGRTAeFw0yNTA2MjkwNTI2NDdaFw0yNTA3MDIwNzQ3NDdaMDMxMTAvBgNV BAMTKDYyNkI5RTY4NTQ2RjFFM0RCQkJBMkIzNTE3NjMzMjY4QURCMzEzMkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPnPR6dcltOrV0GGcynrgAMPi3 OD7zGZ5DOdMwiKlZ+5jbE6A4KkXiAPFGUrYQzWvmGcNJVXr9flzcOAlfqQHG7EPN MBEgqa0Vumsk5KbJFrEf/GkPwudtF7F8MdxiC8WLfFoH65+CJsOtYo0sGfnirM5Y UFXbgKSU2VVJ2vsagLdJSZdor/Wys6QxnJYRmoUCBMQoIBxVNyedeuv25XczZq0f LQeSMNio0tVQmj7fl9r2FnNgMMW6rmpyTIP1MQBQTLhzS/CJ95C4S5cOkBH02VGk uU5LQ/qdr9dO6vlOu8Bbc0itXjBWdPeqV0gluzo77ZTUANeRYqxMYOGtI3FXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYmueaFRvHj27uis1F2MyaK2zEy0wHwYDVR0j BBgwFoAUdHADhBm2fNF0POTZaVMHfs5pKP4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w Yzc2NWQ1MS1iMGIxLTQzNWQtYTY2Yi02MDRjNmU1ZDI5ZWYvMC83NDcwMDM4NDE5 QjY3Q0QxNzQzQ0U0RDk2OTUzMDc3RUNFNjkyOEZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzQ3MDAzODQxOUI2N0NEMTc0M0NFNEQ5Njk1MzA3N0VDRTY5 MjhGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGM3NjVkNTEtYjBiMS00MzVkLWE2 NmItNjA0YzZlNWQyOWVmLzAvNzQ3MDAzODQxOUI2N0NEMTc0M0NFNEQ5Njk1MzA3 N0VDRTY5MjhGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAlAa1HWIVqtWWhGcGWZe9Q9PYz35RKBgBxt ria76bCfEXDZTOl0Er5EXfCztJzyQC1izKAGmIbzmLnUBmg+Fqhx54J1n0u6f7Hl zt4XHjF0fUZ6cT2ROHWYJo+ace2t4Gq28kOe4m0oLM/PSq22324PvTauG0rhsUcl NmW4fS44LN1Mc9Jm10uvlsyqWOHmZGlXMDhyVsH9TyH2tdLGsGtVPzEed7XeMBJ2 gHUzvTnttyBCqq/za3HuGzr7KwDBon/0aPWWuJ6x81XKaR1aW6Ta9i1rMzyNRR2D 7wrx3S1SLTOKWemvALcSDDDHszeXaGXCT5Qz7pG+0jFYgRtt8Ys= -----END CERTIFICATE-----Generated at Sun Jun 29 18:10:39 2025 by rpki-client