$ rpki-client -vvf repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft File: 7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft (raw, json) Hash identifier: vf+zxtv1Hl3HeMI67E8E4fT0cJEpAD19Tc8pMJ21Tkw= Subject key identifier: 9D:48:62:0D:09:C1:5D:28:CE:EB:D0:DF:8C:A8:E3:EA:7F:02:44:83 Authority key identifier: 7F:EF:6B:F5:3F:A3:12:2A:0F:09:CE:F4:B4:08:E1:37:92:A1:45:45 Certificate issuer: /CN=7FEF6BF53FA3122A0F09CEF4B408E13792A14545 Certificate serial: 3FA770024B22D00AFF0F60A60BAF71166FA20E01 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.cer Subject info access: rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft Manifest number: 01EA Signing time: Thu 03 Jul 2025 08:31:30 +0000 Manifest this update: Thu 03 Jul 2025 08:26:30 +0000 Manifest next update: Sun 06 Jul 2025 19:33:30 +0000 Files and hashes: 1: 3130332e3136372e3130342e302f32342d3234203d3e20313339343130.roa (hash: cilQSsMRfqwA9LOmx5CPo41uuLBHWQ7Qq5S49MHRn2E=) 2: 3130332e3136372e3130352e302f32342d3234203d3e203338333230.roa (hash: t5DmPirQU+jLx9aHjmb/pgwv+a8S0p8w/q4YuXRMJQI=) 3: 7FEF6BF53FA3122A0F09CEF4B408E13792A14545.crl (hash: xu1BO8KFlPQBTrSbboY09ZPIUmOPsT3uP3CqnKcK0lU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.crl rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Jul 2025 08:03:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:a7:70:02:4b:22:d0:0a:ff:0f:60:a6:0b:af:71:16:6f:a2:0e:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7FEF6BF53FA3122A0F09CEF4B408E13792A14545 Validity Not Before: Jul 3 08:26:30 2025 GMT Not After : Jul 6 19:33:30 2025 GMT Subject: CN=9D48620D09C15D28CEEBD0DF8CA8E3EA7F024483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:05:2d:41:21:7d:e3:bf:3d:58:f9:e8:51:7b: f5:4a:60:2c:28:91:fb:88:33:27:9c:50:02:6e:c9: 0a:fe:85:3a:81:ca:c2:66:a7:d2:b9:c4:87:90:e3: 43:31:e1:a8:6c:18:0b:b0:d2:b8:c1:70:44:fa:86: 24:3d:f9:94:33:ba:92:a1:e8:15:16:76:b9:66:10: 51:8d:87:5e:a6:ce:71:a9:1b:39:9b:ee:55:1d:a6: 43:71:4f:ac:15:c2:37:72:8d:b3:70:81:78:95:c4: 47:cc:31:ff:7c:ad:ed:99:a1:cf:4f:42:ce:36:5c: 54:dd:a9:5c:2d:20:dd:bd:46:eb:a3:6b:07:77:d4: d3:30:fc:b1:70:f1:62:bd:af:d0:1b:5b:8c:ea:92: fb:5c:a9:d2:0c:ab:02:c7:83:80:33:90:f4:bb:c2: d5:7a:bb:8f:89:08:ba:41:44:a2:e6:3e:92:72:f5: 52:79:2d:fe:94:a3:ee:b0:2e:1a:8f:d3:92:57:06: 10:11:11:5c:21:14:e1:57:0b:f5:2b:13:50:ec:5e: c0:0c:48:9a:52:42:97:59:85:8f:4c:23:29:78:9f: c3:4e:6e:36:58:8b:e5:74:31:88:55:5b:db:f4:d9: b2:36:37:cb:9a:7a:ea:40:fa:d8:7a:50:8f:1c:77: 0e:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:48:62:0D:09:C1:5D:28:CE:EB:D0:DF:8C:A8:E3:EA:7F:02:44:83 X509v3 Authority Key Identifier: keyid:7F:EF:6B:F5:3F:A3:12:2A:0F:09:CE:F4:B4:08:E1:37:92:A1:45:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:67:ce:71:47:8f:34:7f:34:f0:fb:8e:a0:04:14:01:27:02: e0:0b:4a:dd:ee:28:24:75:1c:75:b7:8b:19:a8:23:13:41:06: a4:31:75:2c:04:60:a8:a4:b4:52:b3:51:32:12:0d:d9:39:39: 64:d8:84:0f:7c:40:5c:7e:4a:60:e5:5a:2a:53:b4:a3:b5:76: 86:f7:73:3b:a0:c7:5c:b2:95:6e:6e:b3:89:ab:91:e9:36:ec: f5:97:78:9a:a1:1b:6a:3f:bb:2b:df:a7:98:b5:c6:ac:70:bd: 7a:e4:e3:6e:42:f8:12:7e:49:dc:f5:86:7d:06:0f:d2:79:09: 40:2c:3d:07:79:c0:67:e6:59:01:9a:09:e7:30:7a:88:18:96: cd:c4:24:f0:27:03:2d:4e:ae:f7:a5:f8:07:32:91:66:88:62: cd:d3:78:58:4a:b2:58:80:ae:82:88:50:51:05:a6:d0:da:3d: a9:60:cd:3b:52:7f:a1:da:fe:b8:c5:9e:a8:99:0d:a3:a8:34: a8:b7:1c:13:18:64:09:10:b8:e9:93:86:80:c9:ba:ae:a1:48: 45:72:66:cc:37:3b:c5:a2:4d:e1:23:35:cc:c4:74:38:9f:a6: e1:a7:74:7a:08:d7:6b:e0:e4:53:13:2c:3e:26:a7:60:46:e1: 5d:ec:e0:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP6dwAksi0Ar/D2CmC69xFm+iDgEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ZFRjZCRjUzRkEzMTIyQTBGMDlDRUY0QjQwOEUxMzc5 MkExNDU0NTAeFw0yNTA3MDMwODI2MzBaFw0yNTA3MDYxOTMzMzBaMDMxMTAvBgNV BAMTKDlENDg2MjBEMDlDMTVEMjhDRUVCRDBERjhDQThFM0VBN0YwMjQ0ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSBS1BIX3jvz1Y+ehRe/VKYCwo kfuIMyecUAJuyQr+hTqBysJmp9K5xIeQ40Mx4ahsGAuw0rjBcET6hiQ9+ZQzupKh 6BUWdrlmEFGNh16mznGpGzmb7lUdpkNxT6wVwjdyjbNwgXiVxEfMMf98re2Zoc9P Qs42XFTdqVwtIN29Ruujawd31NMw/LFw8WK9r9AbW4zqkvtcqdIMqwLHg4AzkPS7 wtV6u4+JCLpBRKLmPpJy9VJ5Lf6Uo+6wLhqP05JXBhAREVwhFOFXC/UrE1DsXsAM SJpSQpdZhY9MIyl4n8NObjZYi+V0MYhVW9v02bI2N8uaeupA+th6UI8cdw4RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnUhiDQnBXSjO69DfjKjj6n8CRIMwHwYDVR0j BBgwFoAUf+9r9T+jEioPCc70tAjhN5KhRUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MDNlYmFiYi05OTlmLTRmM2UtODRjMS1iZjI3OWJmZTE3ODcvMC83RkVGNkJGNTNG QTMxMjJBMEYwOUNFRjRCNDA4RTEzNzkyQTE0NTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0ZFRjZCRjUzRkEzMTIyQTBGMDlDRUY0QjQwOEUxMzc5MkEx NDU0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzAzZWJhYmItOTk5Zi00ZjNlLTg0 YzEtYmYyNzliZmUxNzg3LzAvN0ZFRjZCRjUzRkEzMTIyQTBGMDlDRUY0QjQwOEUx Mzc5MkExNDU0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGRnznFHjzR/NPD7jqAEFAEnAuALSt3uKCR1 HHW3ixmoIxNBBqQxdSwEYKiktFKzUTISDdk5OWTYhA98QFx+SmDlWipTtKO1dob3 czugx1yylW5us4mrkek27PWXeJqhG2o/uyvfp5i1xqxwvXrk425C+BJ+Sdz1hn0G D9J5CUAsPQd5wGfmWQGaCecweogYls3EJPAnAy1Orvel+AcykWaIYs3TeFhKsliA roKIUFEFptDaPalgzTtSf6Ha/rjFnqiZDaOoNKi3HBMYZAkQuOmThoDJuq6hSEVy Zsw3O8WiTeEjNczEdDifpuGndHoI12vg5FMTLD4mp2BG4V3s4J8= -----END CERTIFICATE-----Generated at Thu Jul 3 10:35:14 2025 by rpki-client