$ rpki-client -vvf repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.mft File: C7840142ADE3E1876CB50EA3A410454EB3889153.mft (raw, json) Hash identifier: b7mJAvnn1enMSYl1MHLvx4OQJ5DntxouwsiXjUF0Q5k= Subject key identifier: 02:C2:39:95:A5:83:3B:42:B3:97:6F:AA:D7:07:B0:14:FE:DE:6B:E9 Authority key identifier: C7:84:01:42:AD:E3:E1:87:6C:B5:0E:A3:A4:10:45:4E:B3:88:91:53 Certificate issuer: /CN=C7840142ADE3E1876CB50EA3A410454EB3889153 Certificate serial: 47AF6E12F1F4479D6760595411F73C366C204DF9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7840142ADE3E1876CB50EA3A410454EB3889153.cer Subject info access: rsync://repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.mft Manifest number: A1 Signing time: Sun 29 Jun 2025 14:10:02 +0000 Manifest this update: Sun 29 Jun 2025 14:05:02 +0000 Manifest next update: Wed 02 Jul 2025 14:59:02 +0000 Files and hashes: 1: 323030313a6466323a633963303a3a2f34382d3438203d3e20313531353338.roa (hash: IoIyP//hrQlYB+aIBKE8acsqetTnMXLdLd08/ax7yKA=) 2: C7840142ADE3E1876CB50EA3A410454EB3889153.crl (hash: 0b9vuk1NZurWpxnLavi5gbwDBMKdfjp2JFHpWSvna+0=) 3: 3130332e3234382e382e302f32332d3234203d3e20313531353338.roa (hash: H6s77RONQxfYVUNz4YRn/C2zSuIhVFg1GTTCJsiiK0o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.crl rsync://repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7840142ADE3E1876CB50EA3A410454EB3889153.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:af:6e:12:f1:f4:47:9d:67:60:59:54:11:f7:3c:36:6c:20:4d:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7840142ADE3E1876CB50EA3A410454EB3889153 Validity Not Before: Jun 29 14:05:02 2025 GMT Not After : Jul 2 14:59:02 2025 GMT Subject: CN=02C23995A5833B42B3976FAAD707B014FEDE6BE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ae:eb:0f:b9:93:5b:f5:9b:00:4c:47:c8:22: 84:c9:3f:f7:bc:ea:92:3a:53:46:57:e1:0b:25:29: 90:9c:db:e9:7c:53:f1:de:1f:96:63:b1:75:c6:bb: e1:e6:2f:ef:5c:c3:9d:77:76:43:3b:a4:22:b2:ae: 41:9f:53:9d:4f:60:d8:d5:05:76:6f:e8:c7:8a:11: 7a:eb:94:1f:0e:3b:c2:28:93:c0:e6:ed:71:d6:dc: 07:6c:7c:3b:33:31:69:2a:97:06:df:75:28:9b:80: f5:0e:f6:65:d1:ea:5e:d6:3f:4e:11:73:2e:ee:14: 42:d5:af:51:2b:d0:cb:eb:0c:ea:cb:2e:5f:75:45: e9:64:15:1f:29:c7:ff:0f:7e:9b:4b:55:56:55:d7: 32:3b:2c:9a:8f:cf:b1:4b:49:75:ce:8c:71:e7:e7: 9e:93:38:a4:06:7f:fd:ac:d6:15:74:20:42:6f:e8: ed:4f:cc:f2:2e:fd:ad:d7:46:84:da:c2:3c:1d:19: 7e:29:d0:9c:e7:46:cc:de:b9:fe:39:87:44:fc:52: b5:05:66:5e:c9:25:60:fc:34:5f:38:b9:48:e0:bd: 93:8f:8f:b1:b3:33:26:a8:4b:b0:ed:6e:4a:9b:7a: 28:3c:b6:5f:15:01:67:76:ac:71:90:cb:c7:4a:74: 3f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:C2:39:95:A5:83:3B:42:B3:97:6F:AA:D7:07:B0:14:FE:DE:6B:E9 X509v3 Authority Key Identifier: keyid:C7:84:01:42:AD:E3:E1:87:6C:B5:0E:A3:A4:10:45:4E:B3:88:91:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7840142ADE3E1876CB50EA3A410454EB3889153.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/28f5ba5e-1f5c-4284-9a16-0135a9fd4e28/0/C7840142ADE3E1876CB50EA3A410454EB3889153.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:93:68:52:8f:83:00:29:0d:7b:e1:d2:7d:94:95:0a:76:52: a7:08:26:3d:27:f3:c7:c6:3a:4b:92:77:78:74:86:2c:80:94: de:d7:3f:47:ca:f7:b0:f3:26:e3:db:28:f8:bc:62:92:e9:ee: 99:08:db:01:52:f0:51:67:2e:a0:80:49:72:a4:65:52:23:06: 37:6a:08:24:8f:98:74:e1:bd:7e:47:cc:86:1f:f5:1c:57:6d: 69:b5:6e:d4:be:5e:61:df:f2:6e:3c:69:67:5c:4a:1c:e0:52: dd:65:95:81:a1:50:70:e9:50:2d:8e:c6:53:d5:f6:af:2f:f3: 20:87:12:0d:09:47:c2:98:c3:af:38:72:b5:6f:1c:cf:28:d3: 87:5f:78:c9:4e:c8:ee:2b:db:0f:18:31:6e:68:3b:b2:ab:c7: 12:4c:58:a1:bf:d5:2b:9c:51:b4:22:2e:f1:76:89:d5:c2:d8: 48:ab:80:17:82:6a:dc:6e:82:52:c6:bd:db:5c:9f:e6:4d:66: 2c:88:3b:25:ae:45:ca:62:2c:0d:6f:ca:f6:c8:af:c4:c5:2f: 5f:46:fa:33:d9:cf:35:07:f1:5c:ba:c8:d7:c6:f8:9c:95:51: d2:64:3c:c4:a4:fe:4b:55:0f:5d:f3:dc:03:eb:19:53:5e:ec: 7d:12:7c:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR69uEvH0R51nYFlUEfc8NmwgTfkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc4NDAxNDJBREUzRTE4NzZDQjUwRUEzQTQxMDQ1NEVC Mzg4OTE1MzAeFw0yNTA2MjkxNDA1MDJaFw0yNTA3MDIxNDU5MDJaMDMxMTAvBgNV BAMTKDAyQzIzOTk1QTU4MzNCNDJCMzk3NkZBQUQ3MDdCMDE0RkVERTZCRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwrusPuZNb9ZsATEfIIoTJP/e8 6pI6U0ZX4QslKZCc2+l8U/HeH5ZjsXXGu+HmL+9cw513dkM7pCKyrkGfU51PYNjV BXZv6MeKEXrrlB8OO8Iok8Dm7XHW3AdsfDszMWkqlwbfdSibgPUO9mXR6l7WP04R cy7uFELVr1Er0MvrDOrLLl91RelkFR8px/8PfptLVVZV1zI7LJqPz7FLSXXOjHHn 556TOKQGf/2s1hV0IEJv6O1PzPIu/a3XRoTawjwdGX4p0JznRszeuf45h0T8UrUF Zl7JJWD8NF84uUjgvZOPj7GzMyaoS7Dtbkqbeig8tl8VAWd2rHGQy8dKdD+7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUAsI5laWDO0Kzl2+q1wewFP7ea+kwHwYDVR0j BBgwFoAUx4QBQq3j4YdstQ6jpBBFTrOIkVMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y OGY1YmE1ZS0xZjVjLTQyODQtOWExNi0wMTM1YTlmZDRlMjgvMC9DNzg0MDE0MkFE RTNFMTg3NkNCNTBFQTNBNDEwNDU0RUIzODg5MTUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzc4NDAxNDJBREUzRTE4NzZDQjUwRUEzQTQxMDQ1NEVCMzg4 OTE1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjhmNWJhNWUtMWY1Yy00Mjg0LTlh MTYtMDEzNWE5ZmQ0ZTI4LzAvQzc4NDAxNDJBREUzRTE4NzZDQjUwRUEzQTQxMDQ1 NEVCMzg4OTE1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAESTaFKPgwApDXvh0n2UlQp2UqcIJj0n88fG OkuSd3h0hiyAlN7XP0fK97DzJuPbKPi8YpLp7pkI2wFS8FFnLqCASXKkZVIjBjdq CCSPmHThvX5HzIYf9RxXbWm1btS+XmHf8m48aWdcShzgUt1llYGhUHDpUC2OxlPV 9q8v8yCHEg0JR8KYw684crVvHM8o04dfeMlOyO4r2w8YMW5oO7KrxxJMWKG/1Suc UbQiLvF2idXC2EirgBeCatxuglLGvdtcn+ZNZiyIOyWuRcpiLA1vyvbIr8TFL19G +jPZzzUH8Vy6yNfG+JyVUdJkPMSk/ktVD13z3APrGVNe7H0SfCM= -----END CERTIFICATE-----Generated at Sun Jun 29 18:09:09 2025 by rpki-client