$ rpki-client -vvf repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft File: 7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft (raw, json) Hash identifier: bJ3cLV4ZlUX/uijuajt8YxuncLmQl0zNxmtNZcV/kZw= Subject key identifier: 77:A8:FF:E0:C7:16:10:BF:5B:03:E8:8D:5D:AC:20:02:1E:46:F9:61 Authority key identifier: 7E:F8:9B:45:69:2D:93:E9:CA:15:DA:4C:F9:D4:39:30:06:32:EF:D4 Certificate issuer: /CN=7EF89B45692D93E9CA15DA4CF9D439300632EFD4 Certificate serial: 0F573350BEA6A64A9C5B28B85A5DCCC0F704B080 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft Manifest number: 020A Signing time: Sun 29 Jun 2025 17:30:02 +0000 Manifest this update: Sun 29 Jun 2025 17:25:02 +0000 Manifest next update: Thu 03 Jul 2025 03:04:02 +0000 Files and hashes: 1: 7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl (hash: Ub4mcfi3DC80Z1D0pM5QLiO/g50CgrKzie5Tbg9DqBs=) 2: 3130332e3138302e35392e302f32342d3234203d3e2039333431.roa (hash: i2rSOVglupsSuL0ZoSXVd/tHmiF7pW8+dps3wslED5c=) 3: 3130332e3138302e35382e302f32332d3233203d3e2039333431.roa (hash: lr7nUWH/7raRlFDZhAD65ANTChYQYYLQIg/z8dK94J4=) 4: 3130332e3138302e35382e302f32342d3234203d3e2039333431.roa (hash: FdloWvzwT5E7bV0h2MrBbwdyadkn1oI1JIyg7UwS1zQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 03:04:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:57:33:50:be:a6:a6:4a:9c:5b:28:b8:5a:5d:cc:c0:f7:04:b0:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EF89B45692D93E9CA15DA4CF9D439300632EFD4 Validity Not Before: Jun 29 17:25:02 2025 GMT Not After : Jul 3 03:04:02 2025 GMT Subject: CN=77A8FFE0C71610BF5B03E88D5DAC20021E46F961 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:36:49:4b:56:d8:6f:a8:83:2d:02:59:d6:c9: 7d:1a:2f:9a:49:ba:2a:53:b4:e0:3c:5f:a0:d1:06: e6:98:87:a2:34:22:66:03:37:b5:f4:d8:26:cc:6a: 1d:05:b0:7a:d1:b4:02:c6:e7:cf:64:3a:00:0d:04: df:d4:16:83:f6:9e:b5:5a:2d:16:ba:09:8a:79:68: a1:32:80:c6:a5:b2:09:f2:09:84:85:84:e9:13:de: d0:3c:9e:ab:3b:35:64:7a:dd:e9:4f:66:b2:a5:ad: 40:62:75:9b:1e:2f:af:cc:e0:bb:94:24:bc:85:cf: 14:8a:fe:3e:6c:a3:77:36:70:c8:01:b7:49:03:66: d5:18:da:92:ab:9b:37:ae:92:85:03:5f:39:4a:0d: d6:00:74:a7:2a:c5:3b:bc:22:cc:59:82:d2:37:e3: 07:7a:ac:58:91:9b:16:33:8b:62:6b:81:67:03:00: 57:8f:16:0e:51:60:2d:69:46:2f:44:7d:71:d4:7f: 1c:98:5e:95:fc:ae:30:73:fc:48:2a:21:5c:47:a2: 7b:81:38:23:b4:4e:39:fb:26:af:0c:9c:fd:83:a3: d8:21:a9:76:0a:be:87:85:da:d7:91:b4:b9:40:5d: 10:82:8f:6b:2e:1f:42:62:b3:c6:f3:70:0e:72:07: d6:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:A8:FF:E0:C7:16:10:BF:5B:03:E8:8D:5D:AC:20:02:1E:46:F9:61 X509v3 Authority Key Identifier: keyid:7E:F8:9B:45:69:2D:93:E9:CA:15:DA:4C:F9:D4:39:30:06:32:EF:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:28:60:04:1e:9f:37:f1:9b:38:0b:95:cd:0a:81:7f:00:9c: 8d:51:91:68:87:e7:19:40:6d:18:95:de:ec:90:55:6e:47:0d: 48:5c:e3:ca:c2:6b:a6:4f:bc:d1:17:dd:26:7b:11:69:78:14: 9c:45:1f:3d:36:95:d7:3a:8b:84:33:45:19:db:77:f6:9f:ae: c6:92:31:b4:fd:2a:c3:d7:d8:19:3a:84:cf:0c:d5:7c:45:4c: 72:51:c8:42:db:14:4e:ff:3a:46:b3:fb:99:da:62:94:f9:36: 98:8e:7d:d6:ac:20:fe:01:64:3e:59:67:78:de:49:34:8b:b0: f3:a7:e7:34:c8:d9:87:a0:c4:0e:fc:59:d0:86:b0:c6:a3:d9: 16:c1:40:b5:25:58:8d:28:26:b4:5a:2f:67:0b:55:6a:95:73: 4a:b9:26:a0:d2:07:ca:46:22:6d:4e:c0:5e:8b:90:29:5c:81: 7a:8b:45:01:3a:c0:b1:81:11:34:e9:fb:a6:73:4b:5d:34:eb: 2e:bf:58:7d:c2:5c:21:6a:09:c7:dc:54:d5:8b:3d:76:2a:dd: b7:3d:e1:c7:75:0e:89:64:09:cb:6d:96:7d:10:a3:76:dd:05: 3e:1b:01:37:0d:83:35:e4:16:27:1c:da:1c:5b:cb:13:d3:de: ce:65:fa:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD1czUL6mpkqcWyi4Wl3MwPcEsIAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VGODlCNDU2OTJEOTNFOUNBMTVEQTRDRjlENDM5MzAw NjMyRUZENDAeFw0yNTA2MjkxNzI1MDJaFw0yNTA3MDMwMzA0MDJaMDMxMTAvBgNV BAMTKDc3QThGRkUwQzcxNjEwQkY1QjAzRTg4RDVEQUMyMDAyMUU0NkY5NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbNklLVthvqIMtAlnWyX0aL5pJ uipTtOA8X6DRBuaYh6I0ImYDN7X02CbMah0FsHrRtALG589kOgANBN/UFoP2nrVa LRa6CYp5aKEygMalsgnyCYSFhOkT3tA8nqs7NWR63elPZrKlrUBidZseL6/M4LuU JLyFzxSK/j5so3c2cMgBt0kDZtUY2pKrmzeukoUDXzlKDdYAdKcqxTu8IsxZgtI3 4wd6rFiRmxYzi2JrgWcDAFePFg5RYC1pRi9EfXHUfxyYXpX8rjBz/EgqIVxHonuB OCO0Tjn7Jq8MnP2Do9ghqXYKvoeF2teRtLlAXRCCj2suH0Jis8bzcA5yB9bVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd6j/4McWEL9bA+iNXawgAh5G+WEwHwYDVR0j BBgwFoAUfvibRWktk+nKFdpM+dQ5MAYy79QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NzFhODQ3ZC0yNTMxLTRkN2YtOTI0MS05Nzc3ODUwNjA1ZDYvMC83RUY4OUI0NTY5 MkQ5M0U5Q0ExNURBNENGOUQ0MzkzMDA2MzJFRkQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0VGODlCNDU2OTJEOTNFOUNBMTVEQTRDRjlENDM5MzAwNjMy RUZENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTcxYTg0N2QtMjUzMS00ZDdmLTky NDEtOTc3Nzg1MDYwNWQ2LzAvN0VGODlCNDU2OTJEOTNFOUNBMTVEQTRDRjlENDM5 MzAwNjMyRUZENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF4oYAQenzfxmzgLlc0KgX8AnI1RkWiH5xlA bRiV3uyQVW5HDUhc48rCa6ZPvNEX3SZ7EWl4FJxFHz02ldc6i4QzRRnbd/afrsaS MbT9KsPX2Bk6hM8M1XxFTHJRyELbFE7/Okaz+5naYpT5NpiOfdasIP4BZD5ZZ3je STSLsPOn5zTI2YegxA78WdCGsMaj2RbBQLUlWI0oJrRaL2cLVWqVc0q5JqDSB8pG Im1OwF6LkClcgXqLRQE6wLGBETTp+6ZzS1006y6/WH3CXCFqCcfcVNWLPXYq3bc9 4cd1DolkCcttln0Qo3bdBT4bATcNgzXkFicc2hxbyxPT3s5l+lc= -----END CERTIFICATE-----Generated at Tue Jul 1 08:47:57 2025 by rpki-client