$ rpki-client -vvf repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft File: 7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft (raw, json) Hash identifier: s5ZnVGGbiKQ/pTTn0/NOgseJe7xjVYmQ27lYjNqoF7o= Subject key identifier: 0B:77:4D:65:77:A9:26:7C:6F:D1:C1:FF:E4:3E:91:CC:71:D7:E3:81 Authority key identifier: 7E:8D:E1:54:9E:89:D4:B4:80:B5:56:69:5C:AB:E9:CE:7F:DF:5F:24 Certificate issuer: /CN=7E8DE1549E89D4B480B556695CABE9CE7FDF5F24 Certificate serial: 05381CEC49C275EA307F12A3A1E5539F53FF2323 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft Manifest number: 5E Signing time: Mon 30 Jun 2025 07:10:59 +0000 Manifest this update: Mon 30 Jun 2025 07:05:59 +0000 Manifest next update: Thu 03 Jul 2025 13:48:59 +0000 Files and hashes: 1: 7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.crl (hash: 4YhH7AY7xL9sHLlldEvPGhGdJGrR/NykFcCUpys7FW4=) 2: 323030313a6466343a396134303a3a2f34382d3438203d3e20313533313439.roa (hash: TtLF2mCHfSEfxKosRTbgY2pYRo+Ox0NN2gzHDI6VY/0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.crl rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 13:48:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:38:1c:ec:49:c2:75:ea:30:7f:12:a3:a1:e5:53:9f:53:ff:23:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E8DE1549E89D4B480B556695CABE9CE7FDF5F24 Validity Not Before: Jun 30 07:05:59 2025 GMT Not After : Jul 3 13:48:59 2025 GMT Subject: CN=0B774D6577A9267C6FD1C1FFE43E91CC71D7E381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:4d:7a:32:2e:ec:b5:cf:53:b0:bf:37:2b:5d: 74:90:1e:c3:7e:22:2c:62:52:76:ea:8a:d7:9b:45: 6e:e5:90:ec:d7:78:e0:e8:90:f5:e3:b6:15:e4:e1: c2:e5:85:1a:93:cf:39:78:1c:1e:d1:6e:11:5e:cc: ac:c6:b5:2a:be:a3:b5:2b:9e:6c:9d:91:29:8c:57: 78:fb:05:a4:e3:ce:81:98:d1:e7:fd:54:0a:22:51: b0:b2:d9:f9:3b:c3:37:40:9e:d2:72:ba:e0:10:d0: 54:55:57:6b:84:8f:11:e5:eb:5b:ef:df:8d:c8:fb: 1b:f2:42:4c:d0:85:dd:e5:05:55:be:4b:e5:3c:67: 0f:0a:0e:c8:3b:01:d1:ce:7c:a5:a7:61:9f:8a:70: 98:d0:59:dd:b1:b8:d8:74:86:90:28:37:d5:62:48: 36:af:80:17:2f:6c:56:01:1b:c9:c0:fe:1b:83:b7: b6:25:97:c5:22:10:8d:4b:82:90:8c:e2:81:c6:b4: 91:e4:4a:fb:30:a5:17:fd:5d:0b:d0:c2:37:f5:6e: 4a:44:6d:9f:3b:ff:67:c5:3f:09:52:09:3b:bf:12: a5:20:8e:60:2c:df:36:5f:46:9b:73:a6:dd:02:17: b0:ed:cd:25:22:fd:c7:f9:45:46:c3:d5:1a:7b:cb: 22:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:77:4D:65:77:A9:26:7C:6F:D1:C1:FF:E4:3E:91:CC:71:D7:E3:81 X509v3 Authority Key Identifier: keyid:7E:8D:E1:54:9E:89:D4:B4:80:B5:56:69:5C:AB:E9:CE:7F:DF:5F:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:81:41:e1:ba:bc:fe:6f:f6:7c:78:4a:05:fd:54:56:b4:16: ff:09:47:2e:bd:f5:a2:9a:11:f9:c1:28:73:36:99:f9:f7:89: 99:c6:71:13:d1:4e:c3:fb:16:23:bf:82:4f:62:7d:ba:16:80: 4e:ba:0f:87:4a:c1:a1:9e:95:29:05:e4:2d:a4:76:d1:7e:66: 7c:a4:ac:35:51:62:9b:4f:ec:57:d3:a1:76:d0:37:5c:d1:f1: 15:43:b7:ef:73:ac:a7:a3:e9:18:07:9f:f5:3f:00:38:d4:0f: 14:8c:f7:1c:32:cd:75:f8:2e:9a:7d:27:31:83:86:e5:fb:b3: fc:fb:4a:f5:1f:21:d6:ab:0f:46:a5:e9:b8:28:d9:2b:0e:00: 75:2c:d7:a3:74:d1:94:a8:dd:05:2d:10:22:38:2b:ac:11:a7: 18:6d:7d:9a:a8:0b:64:4c:1e:5c:a6:90:e4:41:7f:3e:46:0f: 6f:3b:3d:13:be:6c:0e:8f:65:3b:73:3b:2c:24:56:88:48:7f: 61:01:b4:47:af:75:d4:ab:26:34:14:90:06:54:41:3d:fe:b0: 04:6d:14:e6:85:29:bb:b4:17:3e:92:9c:44:cf:1c:49:71:8a: 92:98:2a:2c:8a:50:29:70:19:44:ef:c7:12:a3:49:b4:b5:76: 33:35:4f:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBTgc7EnCdeowfxKjoeVTn1P/IyMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U4REUxNTQ5RTg5RDRCNDgwQjU1NjY5NUNBQkU5Q0U3 RkRGNUYyNDAeFw0yNTA2MzAwNzA1NTlaFw0yNTA3MDMxMzQ4NTlaMDMxMTAvBgNV BAMTKDBCNzc0RDY1NzdBOTI2N0M2RkQxQzFGRkU0M0U5MUNDNzFEN0UzODEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSTXoyLuy1z1OwvzcrXXSQHsN+ IixiUnbqitebRW7lkOzXeODokPXjthXk4cLlhRqTzzl4HB7RbhFezKzGtSq+o7Ur nmydkSmMV3j7BaTjzoGY0ef9VAoiUbCy2fk7wzdAntJyuuAQ0FRVV2uEjxHl61vv 343I+xvyQkzQhd3lBVW+S+U8Zw8KDsg7AdHOfKWnYZ+KcJjQWd2xuNh0hpAoN9Vi SDavgBcvbFYBG8nA/huDt7Yll8UiEI1LgpCM4oHGtJHkSvswpRf9XQvQwjf1bkpE bZ87/2fFPwlSCTu/EqUgjmAs3zZfRptzpt0CF7DtzSUi/cf5RUbD1Rp7yyJbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC3dNZXepJnxv0cH/5D6RzHHX44EwHwYDVR0j BBgwFoAUfo3hVJ6J1LSAtVZpXKvpzn/fXyQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2RjMDM0Zi0zODIzLTQ4YWYtOTUzZC1hYWE4NzNiMGZiNmEvMS83RThERTE1NDlF ODlENEI0ODBCNTU2Njk1Q0FCRTlDRTdGREY1RjI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0U4REUxNTQ5RTg5RDRCNDgwQjU1NjY5NUNBQkU5Q0U3RkRG NUYyNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNkYzAzNGYtMzgyMy00OGFmLTk1 M2QtYWFhODczYjBmYjZhLzEvN0U4REUxNTQ5RTg5RDRCNDgwQjU1NjY5NUNBQkU5 Q0U3RkRGNUYyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAISBQeG6vP5v9nx4SgX9VFa0Fv8JRy699aKa EfnBKHM2mfn3iZnGcRPRTsP7FiO/gk9ifboWgE66D4dKwaGelSkF5C2kdtF+Znyk rDVRYptP7FfToXbQN1zR8RVDt+9zrKej6RgHn/U/ADjUDxSM9xwyzXX4Lpp9JzGD huX7s/z7SvUfIdarD0al6bgo2SsOAHUs16N00ZSo3QUtECI4K6wRpxhtfZqoC2RM HlymkORBfz5GD287PRO+bA6PZTtzOywkVohIf2EBtEevddSrJjQUkAZUQT3+sARt FOaFKbu0Fz6SnETPHElxipKYKiyKUClwGUTvxxKjSbS1djM1T/4= -----END CERTIFICATE-----Generated at Mon Jun 30 19:08:05 2025 by rpki-client