$ rpki-client -vvf repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.mft File: 7136382578BA0ACBDD5EEAC687FF3234D04614B1.mft (raw, json) Hash identifier: mp46gSrMx+x08sPU0S5taseUN5ajXdLdavYkO4RMfVs= Subject key identifier: F4:94:7C:F9:3B:35:E7:3F:2E:A8:F0:81:F5:95:77:9A:BE:3C:92:F4 Authority key identifier: 71:36:38:25:78:BA:0A:CB:DD:5E:EA:C6:87:FF:32:34:D0:46:14:B1 Certificate issuer: /CN=7136382578BA0ACBDD5EEAC687FF3234D04614B1 Certificate serial: 30E0043FA203CB38A6985A9F9A26B65C55C0EED8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7136382578BA0ACBDD5EEAC687FF3234D04614B1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.mft Manifest number: 0364 Signing time: Sun 29 Jun 2025 16:01:53 +0000 Manifest this update: Sun 29 Jun 2025 15:56:53 +0000 Manifest next update: Wed 02 Jul 2025 23:04:53 +0000 Files and hashes: 1: 3130332e3136392e3230372e302f32342d3234203d3e203435333235.roa (hash: af3wLczo6S1Ff2cHv7BLC7ZKbE+GaXVBqYVonmsEaYA=) 2: 7136382578BA0ACBDD5EEAC687FF3234D04614B1.crl (hash: g7M4ud4UlysNFPR/+n8K0W6SMfD/Ckuvwt6epoEg1QE=) 3: 3130332e3136392e3230362e302f32342d3234203d3e203435333235.roa (hash: /3CGvY//H1css9zYuxxW/Bez/32hDDiVLYL7tvwgxws=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.crl rsync://repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7136382578BA0ACBDD5EEAC687FF3234D04614B1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 23:04:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:e0:04:3f:a2:03:cb:38:a6:98:5a:9f:9a:26:b6:5c:55:c0:ee:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7136382578BA0ACBDD5EEAC687FF3234D04614B1 Validity Not Before: Jun 29 15:56:53 2025 GMT Not After : Jul 2 23:04:53 2025 GMT Subject: CN=F4947CF93B35E73F2EA8F081F595779ABE3C92F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:71:a9:b8:c8:41:c7:34:c4:66:b5:78:35:c1: 82:41:59:33:51:fe:70:52:61:e4:e1:cd:8b:ca:5b: eb:d7:74:d7:ef:e0:b2:2a:c1:d0:99:2f:49:15:1a: 30:c9:a1:19:b8:5c:48:e8:cd:8f:10:83:95:44:3b: 5e:09:3e:de:f1:71:db:c1:ef:be:77:a5:30:fd:57: 8c:81:dc:3c:c4:df:8e:ef:64:69:d4:7b:8b:e4:eb: fc:c2:30:ef:51:0d:30:9c:aa:fe:d2:f7:a8:b6:2d: 0b:e3:6c:42:21:36:a2:3d:a8:cb:7d:ee:3e:97:72: 62:ee:30:7a:6f:a3:16:cc:d5:74:34:35:b4:61:81: f0:d4:95:6e:ac:52:72:7b:ed:f1:a7:a1:8f:6d:b5: 64:2a:21:ed:47:cc:25:09:c0:52:79:5c:e1:8c:2c: f7:ba:70:b2:cc:fc:02:76:de:05:42:8a:bb:b0:55: 9d:94:54:27:36:c8:fd:b5:02:72:4b:b6:f3:ab:cc: 5e:74:1b:dc:ac:7e:32:2e:bb:5a:60:57:e2:c9:ea: 29:95:23:ec:c0:fd:e7:dc:5a:75:36:05:48:22:ff: d1:a3:37:06:ac:9f:1e:41:0f:c2:99:f0:99:5c:4a: ac:36:f0:f1:8e:85:28:c7:27:5f:af:22:da:54:30: 88:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:94:7C:F9:3B:35:E7:3F:2E:A8:F0:81:F5:95:77:9A:BE:3C:92:F4 X509v3 Authority Key Identifier: keyid:71:36:38:25:78:BA:0A:CB:DD:5E:EA:C6:87:FF:32:34:D0:46:14:B1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7136382578BA0ACBDD5EEAC687FF3234D04614B1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/17f73780-0925-4b4a-bca7-a1e7ed3ff42a/0/7136382578BA0ACBDD5EEAC687FF3234D04614B1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:46:cf:83:95:29:b8:c5:e6:67:29:4e:80:42:3b:a0:35:45: e8:7b:12:28:6d:50:b7:48:ee:8f:8a:70:f4:24:a3:02:5c:9d: 57:fe:86:d6:ca:21:60:0b:69:b8:33:d9:28:67:78:26:93:7d: d0:bd:49:89:eb:4f:f8:c6:5b:76:69:a6:80:32:9a:bc:ed:87: 83:3d:6b:e6:80:0d:98:11:b9:e7:6c:f8:71:81:64:9b:39:ed: 74:c4:09:94:a7:4e:2d:41:dc:e5:19:02:a0:6c:6e:4b:85:48: 0f:bb:6f:92:4f:7c:3e:45:b0:4a:3f:06:56:65:4f:e6:b0:28: e2:1a:b3:45:87:07:74:a0:83:9a:13:5c:18:ca:28:00:7d:84: de:eb:29:8f:76:69:5d:eb:59:e3:61:cd:9a:44:01:b2:25:73: ad:07:2f:e6:51:8c:e6:77:8a:8e:30:70:1e:44:92:c1:15:20: 85:2c:25:59:85:a1:bc:bc:ff:cf:c0:35:b6:71:39:fa:b7:25: ae:70:8c:aa:ba:ff:cc:71:df:17:91:23:71:68:57:5e:a7:ef: 4b:82:f5:87:cc:d0:98:a4:49:03:68:85:70:00:e1:4e:7f:60: 4f:08:4b:4c:30:f3:29:eb:01:14:e8:b5:ff:e9:91:7e:1f:d8: a5:98:f7:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMOAEP6IDyzimmFqfmia2XFXA7tgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzEzNjM4MjU3OEJBMEFDQkRENUVFQUM2ODdGRjMyMzRE MDQ2MTRCMTAeFw0yNTA2MjkxNTU2NTNaFw0yNTA3MDIyMzA0NTNaMDMxMTAvBgNV BAMTKEY0OTQ3Q0Y5M0IzNUU3M0YyRUE4RjA4MUY1OTU3NzlBQkUzQzkyRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+cam4yEHHNMRmtXg1wYJBWTNR /nBSYeThzYvKW+vXdNfv4LIqwdCZL0kVGjDJoRm4XEjozY8Qg5VEO14JPt7xcdvB 7753pTD9V4yB3DzE347vZGnUe4vk6/zCMO9RDTCcqv7S96i2LQvjbEIhNqI9qMt9 7j6XcmLuMHpvoxbM1XQ0NbRhgfDUlW6sUnJ77fGnoY9ttWQqIe1HzCUJwFJ5XOGM LPe6cLLM/AJ23gVCiruwVZ2UVCc2yP21AnJLtvOrzF50G9ysfjIuu1pgV+LJ6imV I+zA/efcWnU2BUgi/9GjNwasnx5BD8KZ8JlcSqw28PGOhSjHJ1+vItpUMIh7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9JR8+Ts15z8uqPCB9ZV3mr48kvQwHwYDVR0j BBgwFoAUcTY4JXi6CsvdXurGh/8yNNBGFLEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x N2Y3Mzc4MC0wOTI1LTRiNGEtYmNhNy1hMWU3ZWQzZmY0MmEvMC83MTM2MzgyNTc4 QkEwQUNCREQ1RUVBQzY4N0ZGMzIzNEQwNDYxNEIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzEzNjM4MjU3OEJBMEFDQkRENUVFQUM2ODdGRjMyMzREMDQ2 MTRCMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTdmNzM3ODAtMDkyNS00YjRhLWJj YTctYTFlN2VkM2ZmNDJhLzAvNzEzNjM4MjU3OEJBMEFDQkRENUVFQUM2ODdGRjMy MzREMDQ2MTRCMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA5Gz4OVKbjF5mcpToBCO6A1Reh7EihtULdI 7o+KcPQkowJcnVf+htbKIWALabgz2ShneCaTfdC9SYnrT/jGW3ZppoAymrzth4M9 a+aADZgRueds+HGBZJs57XTECZSnTi1B3OUZAqBsbkuFSA+7b5JPfD5FsEo/BlZl T+awKOIas0WHB3Sgg5oTXBjKKAB9hN7rKY92aV3rWeNhzZpEAbIlc60HL+ZRjOZ3 io4wcB5EksEVIIUsJVmFoby8/8/ANbZxOfq3Ja5wjKq6/8xx3xeRI3FoV16n70uC 9YfM0JikSQNohXAA4U5/YE8IS0ww8ynrARTotf/pkX4f2KWY94g= -----END CERTIFICATE-----Generated at Mon Jun 30 13:27:15 2025 by rpki-client