$ rpki-client -vvf repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft File: 7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft (raw, json) Hash identifier: sAlUHqA60ohF245aeaYeNt4K9D/uAZMS491fSh7XFy0= Subject key identifier: F6:86:82:30:8C:5D:DB:DA:96:94:B3:26:87:ED:E8:FD:32:37:31:41 Authority key identifier: 7E:FA:64:C1:15:73:C2:92:E1:92:C2:CD:EA:C4:D5:F8:B8:C2:1D:BD Certificate issuer: /CN=7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD Certificate serial: 73C1CF672FD094B5E765D870C47B63D75D07F4A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft Manifest number: 04E4 Signing time: Sat 28 Jun 2025 19:12:36 +0000 Manifest this update: Sat 28 Jun 2025 19:07:36 +0000 Manifest next update: Tue 01 Jul 2025 20:23:36 +0000 Files and hashes: 1: 3130332e31392e35392e302f32342d3234203d3e20313332363337.roa (hash: 9iu7ypE0DOgzIq5HMAnIVo4kGKAs2AlVlOiv5hSXbmQ=) 2: 7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.crl (hash: uTdBmI4yFC5XDR9FDXXC7Va7hrI70vD6O73/eY4lR4M=) 3: 3130332e31392e35372e302f32342d3234203d3e20313332363337.roa (hash: 3QyxS0wngZcXbj5VM1EbTD1iHrmW5SRruXkHQg8JcfQ=) 4: 3130332e31392e35382e302f32342d3234203d3e20313332363337.roa (hash: Pfzw8Y0xsuh7UKTJV02Yk1orDZhcKdBrnY+4Hy9M/Ss=) 5: 323430323a333263303a3a2f33322d3332203d3e20313332363337.roa (hash: alekTqBBNWqAI5oX1dPM5eFA94/uemvvhURj4TPNUr4=) 6: 3130332e31392e35362e302f32342d3234203d3e20313332363337.roa (hash: 1GyJK6Rqd4FApqF94uFU3YdEq/5dWlAXo/swD/OMmMQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.crl rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 20:23:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:c1:cf:67:2f:d0:94:b5:e7:65:d8:70:c4:7b:63:d7:5d:07:f4:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD Validity Not Before: Jun 28 19:07:36 2025 GMT Not After : Jul 1 20:23:36 2025 GMT Subject: CN=F68682308C5DDBDA9694B32687EDE8FD32373141 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:3b:1a:c4:0f:cc:e4:f0:3d:f8:7c:d3:ff:6c: 82:6b:81:fa:7f:30:8a:4e:d6:48:4b:fd:7f:79:41: ac:e9:06:2b:75:fc:af:8a:de:39:6b:f1:1a:44:5a: 6e:df:2e:62:df:35:42:cc:19:31:20:15:82:2d:62: 88:6a:0f:b3:38:c1:c8:7f:c5:63:32:39:59:67:0c: 47:09:a2:17:f3:c7:f5:2c:f1:c9:7a:b8:6f:05:c9: 23:ea:d2:b2:de:42:f0:e1:72:c6:40:d0:8d:17:ea: 93:73:c5:f6:e8:bf:af:62:f9:f6:0c:68:dd:f8:8c: a0:94:d5:29:8f:3b:3f:aa:1e:6c:fe:a8:a5:45:c1: 2c:ef:32:52:12:97:5e:da:62:78:cb:1a:26:13:5a: 37:87:22:ce:53:4e:f6:c1:6e:0f:dc:b6:0f:ed:45: 2a:74:48:f7:10:a4:e0:56:24:c7:6d:de:9f:57:b8: 22:f5:95:7b:41:14:c5:ec:20:48:b0:07:4f:e4:d7: c1:57:2a:2b:3b:e4:0d:2d:c0:2e:be:dc:7a:54:0f: 17:50:64:29:53:c2:95:13:97:26:02:7f:e2:5c:cf: 05:aa:79:9c:8d:5b:24:fc:9b:3f:7a:46:6d:92:11: 6e:6f:e2:10:54:b2:65:79:43:c1:23:94:56:05:89: 9e:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F6:86:82:30:8C:5D:DB:DA:96:94:B3:26:87:ED:E8:FD:32:37:31:41 X509v3 Authority Key Identifier: keyid:7E:FA:64:C1:15:73:C2:92:E1:92:C2:CD:EA:C4:D5:F8:B8:C2:1D:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:ae:eb:f5:af:23:11:bb:c8:50:a6:0e:5b:92:01:f9:9d:7f: 72:d9:b9:50:eb:be:ab:d3:64:3b:a4:67:a0:78:e8:15:17:3f: b1:bf:c1:4d:71:24:ad:c0:85:5d:84:48:da:25:0e:ad:95:26: de:2a:5e:a9:ed:40:44:2f:c6:9e:b8:db:0f:56:35:b2:88:ba: 50:90:3f:2e:78:e6:b6:7e:70:2b:f8:03:42:19:5f:86:7b:e4: d9:36:45:ae:60:7a:9c:f2:a0:4b:97:0a:02:db:a6:90:4b:6d: 31:72:83:48:84:b8:13:55:f2:fb:96:ab:9b:f7:0a:01:a6:6f: f1:71:86:f7:3d:83:dc:e0:88:15:24:59:20:62:3e:08:18:8f: 93:76:0b:ac:66:18:18:f8:a5:a0:8c:6f:6e:cb:14:c3:d0:bd: a9:cf:1a:15:c6:01:0e:c4:01:59:80:9f:ce:9b:02:c5:49:f8: f0:ed:00:6b:0f:90:9b:72:83:0e:85:ca:7a:56:7c:e0:4c:45: 15:ca:88:f1:8a:63:05:64:90:07:f0:96:66:ff:ee:6a:cf:00: 70:01:2a:18:1d:df:8b:7f:0b:3a:d5:ad:08:56:07:76:9b:21: fa:61:02:71:00:31:9b:97:0f:a9:da:13:ce:ce:29:cb:23:b8: af:66:3b:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc8HPZy/QlLXnZdhwxHtj110H9KcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VGQTY0QzExNTczQzI5MkUxOTJDMkNERUFDNEQ1RjhC OEMyMURCRDAeFw0yNTA2MjgxOTA3MzZaFw0yNTA3MDEyMDIzMzZaMDMxMTAvBgNV BAMTKEY2ODY4MjMwOEM1RERCREE5Njk0QjMyNjg3RURFOEZEMzIzNzMxNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkOxrED8zk8D34fNP/bIJrgfp/ MIpO1khL/X95QazpBit1/K+K3jlr8RpEWm7fLmLfNULMGTEgFYItYohqD7M4wch/ xWMyOVlnDEcJohfzx/Us8cl6uG8FySPq0rLeQvDhcsZA0I0X6pNzxfbov69i+fYM aN34jKCU1SmPOz+qHmz+qKVFwSzvMlISl17aYnjLGiYTWjeHIs5TTvbBbg/ctg/t RSp0SPcQpOBWJMdt3p9XuCL1lXtBFMXsIEiwB0/k18FXKis75A0twC6+3HpUDxdQ ZClTwpUTlyYCf+JczwWqeZyNWyT8mz96Rm2SEW5v4hBUsmV5Q8EjlFYFiZ5RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9oaCMIxd29qWlLMmh+3o/TI3MUEwHwYDVR0j BBgwFoAUfvpkwRVzwpLhksLN6sTV+LjCHb0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDA5MjdlNi04YTBhLTRmYTctODk2OS05ZmI5ZDY5NDM5N2MvMC83RUZBNjRDMTE1 NzNDMjkyRTE5MkMyQ0RFQUM0RDVGOEI4QzIxREJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0VGQTY0QzExNTczQzI5MkUxOTJDMkNERUFDNEQ1RjhCOEMy MURCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQwOTI3ZTYtOGEwYS00ZmE3LTg5 NjktOWZiOWQ2OTQzOTdjLzAvN0VGQTY0QzExNTczQzI5MkUxOTJDMkNERUFDNEQ1 RjhCOEMyMURCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABGu6/WvIxG7yFCmDluSAfmdf3LZuVDrvqvT ZDukZ6B46BUXP7G/wU1xJK3AhV2ESNolDq2VJt4qXqntQEQvxp642w9WNbKIulCQ Py545rZ+cCv4A0IZX4Z75Nk2Ra5gepzyoEuXCgLbppBLbTFyg0iEuBNV8vuWq5v3 CgGmb/Fxhvc9g9zgiBUkWSBiPggYj5N2C6xmGBj4paCMb27LFMPQvanPGhXGAQ7E AVmAn86bAsVJ+PDtAGsPkJtygw6FynpWfOBMRRXKiPGKYwVkkAfwlmb/7mrPAHAB Khgd34t/CzrVrQhWB3abIfphAnEAMZuXD6naE87OKcsjuK9mO/g= -----END CERTIFICATE-----Generated at Sun Jun 29 18:44:47 2025 by rpki-client