$ rpki-client -vvf repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft File: F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft (raw, json) Hash identifier: CE5D82uopdLXGXloQf1ctOHqLEKiVyvLdh6MKhfMfNA= Subject key identifier: 18:75:26:22:EC:10:4D:B1:73:54:56:DA:45:2F:6D:47:E6:CB:DB:36 Authority key identifier: F7:A5:C0:89:7A:1A:B3:1B:FD:31:BE:0A:F2:1D:82:5C:5A:A6:97:2D Certificate issuer: /CN=F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D Certificate serial: 640C15154AB81CDC14E0F35E64C4C8E548890BB5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft Manifest number: 0204 Signing time: Sun 29 Jun 2025 03:11:07 +0000 Manifest this update: Sun 29 Jun 2025 03:06:07 +0000 Manifest next update: Wed 02 Jul 2025 08:14:07 +0000 Files and hashes: 1: F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.crl (hash: 54fWYi9fb8lVuOa80y8YeLiB77m66hsrCKp2CQFeatQ=) 2: 3130332e3135392e3139372e302f32342d3234203d3e20313430343730.roa (hash: M+p5nzecECxGFfN8VhgDof1M+5/v42AUXWVnabcezYY=) 3: 3130332e3135392e3139362e302f32342d3234203d3e20313430343730.roa (hash: g1aV9FkDrLUpjctEPjCk3eEqDOG7iPplwBZej8bhpjM=) 4: 3130332e3135392e3139362e302f32332d3233203d3e20313430343730.roa (hash: K1+FytjoejdmG1Rus/G2hZCtW5hkde5AWHgsou+ZdZo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.crl rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 08:14:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:0c:15:15:4a:b8:1c:dc:14:e0:f3:5e:64:c4:c8:e5:48:89:0b:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D Validity Not Before: Jun 29 03:06:07 2025 GMT Not After : Jul 2 08:14:07 2025 GMT Subject: CN=18752622EC104DB1735456DA452F6D47E6CBDB36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:63:cb:13:9b:97:ef:62:16:f6:71:b5:e8:4d: 0e:25:32:d8:b5:5f:20:57:f5:00:3b:ac:e6:2d:4f: ac:d5:43:39:40:33:e8:1a:bd:59:b4:64:41:81:a9: c0:17:6c:26:ea:49:86:90:51:4e:11:87:fc:ba:d0: bb:7b:f0:74:04:06:d2:49:07:43:bb:3d:b2:b3:4e: e9:4f:51:1a:9b:95:ef:07:b1:84:60:04:cd:ad:3e: 64:ea:c8:78:85:aa:56:76:00:c9:b1:cc:8a:cb:66: 2b:83:18:67:a6:cf:d1:ba:9e:33:fc:ff:df:cc:11: 57:7b:0a:ec:81:82:3d:ec:84:31:26:6f:8b:eb:c9: 64:cb:90:40:ef:4a:40:5e:8d:1c:64:1e:8d:19:bb: 5a:08:7b:2e:1c:88:93:76:32:55:af:5e:26:c5:ca: 01:58:e5:67:16:d7:1c:9e:ad:58:50:ed:bf:15:66: b7:b4:ab:a6:98:c9:c5:55:e5:80:bf:e9:d7:03:73: b6:31:fe:bc:92:5f:9d:8b:95:18:93:a9:d6:ed:49: c3:4c:c4:10:37:15:c4:8f:6f:ca:7c:19:37:d4:47: 05:54:80:1b:36:e4:83:cd:3b:7d:4e:df:00:02:04: e7:f4:7b:a7:05:f3:08:8c:35:ca:ce:6f:2d:21:36: b1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:75:26:22:EC:10:4D:B1:73:54:56:DA:45:2F:6D:47:E6:CB:DB:36 X509v3 Authority Key Identifier: keyid:F7:A5:C0:89:7A:1A:B3:1B:FD:31:BE:0A:F2:1D:82:5C:5A:A6:97:2D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3cdd5774-30dd-4a00-b1a9-9b12826930c2/0/F7A5C0897A1AB31BFD31BE0AF21D825C5AA6972D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:e7:1b:04:90:00:47:bf:8c:3a:80:17:d3:de:05:5b:e7:30: 72:c2:60:9f:85:fe:a8:ae:db:40:2f:c5:60:0b:eb:9d:24:dd: fc:52:00:1a:cf:a1:5e:d0:33:7e:d2:c5:ec:6d:33:c8:02:ea: 4c:c8:96:d4:d0:65:93:dd:1c:58:24:0f:45:c5:fd:92:1b:1a: 5a:b0:91:c6:cd:d0:f4:09:2c:1d:f9:f0:bc:00:f6:e5:c7:f6: 45:5f:2f:9e:f5:0b:aa:42:a7:69:e1:a4:83:26:45:9a:5f:77: 5d:92:77:86:38:e7:8a:76:47:42:28:8d:5c:bc:fe:00:3d:ab: 32:31:a9:57:1c:d3:df:78:68:4b:68:fd:ef:79:46:70:21:01: 9d:0c:a6:36:02:4a:84:67:af:27:71:e5:fd:4c:2c:16:f5:43: 9a:49:07:0d:5f:81:22:42:9f:d1:8e:48:7e:fd:d0:25:1a:36: 9a:aa:52:fb:31:a4:46:92:59:4f:27:5d:51:11:6c:c7:4e:a3: 0e:e5:2d:32:57:c7:a3:85:fb:72:88:0f:d6:f3:be:c1:3d:27: 22:64:6e:a3:2b:bf:01:24:4b:58:b7:4a:74:57:3b:4e:74:00: 7a:16:89:a3:4b:ad:8e:bf:87:6c:d7:a8:3e:19:8f:b1:40:f2: fd:a6:93:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZAwVFUq4HNwU4PNeZMTI5UiJC7UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjdBNUMwODk3QTFBQjMxQkZEMzFCRTBBRjIxRDgyNUM1 QUE2OTcyRDAeFw0yNTA2MjkwMzA2MDdaFw0yNTA3MDIwODE0MDdaMDMxMTAvBgNV BAMTKDE4NzUyNjIyRUMxMDREQjE3MzU0NTZEQTQ1MkY2RDQ3RTZDQkRCMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsY8sTm5fvYhb2cbXoTQ4lMti1 XyBX9QA7rOYtT6zVQzlAM+gavVm0ZEGBqcAXbCbqSYaQUU4Rh/y60Lt78HQEBtJJ B0O7PbKzTulPURqble8HsYRgBM2tPmTqyHiFqlZ2AMmxzIrLZiuDGGemz9G6njP8 /9/MEVd7CuyBgj3shDEmb4vryWTLkEDvSkBejRxkHo0Zu1oIey4ciJN2MlWvXibF ygFY5WcW1xyerVhQ7b8VZre0q6aYycVV5YC/6dcDc7Yx/rySX52LlRiTqdbtScNM xBA3FcSPb8p8GTfURwVUgBs25IPNO31O3wACBOf0e6cF8wiMNcrOby0hNrGtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGHUmIuwQTbFzVFbaRS9tR+bL2zYwHwYDVR0j BBgwFoAU96XAiXoasxv9Mb4K8h2CXFqmly0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z Y2RkNTc3NC0zMGRkLTRhMDAtYjFhOS05YjEyODI2OTMwYzIvMC9GN0E1QzA4OTdB MUFCMzFCRkQzMUJFMEFGMjFEODI1QzVBQTY5NzJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRjdBNUMwODk3QTFBQjMxQkZEMzFCRTBBRjIxRDgyNUM1QUE2 OTcyRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2NkZDU3NzQtMzBkZC00YTAwLWIx YTktOWIxMjgyNjkzMGMyLzAvRjdBNUMwODk3QTFBQjMxQkZEMzFCRTBBRjIxRDgy NUM1QUE2OTcyRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJPnGwSQAEe/jDqAF9PeBVvnMHLCYJ+F/qiu 20AvxWAL650k3fxSABrPoV7QM37SxextM8gC6kzIltTQZZPdHFgkD0XF/ZIbGlqw kcbN0PQJLB358LwA9uXH9kVfL571C6pCp2nhpIMmRZpfd12Sd4Y454p2R0IojVy8 /gA9qzIxqVcc0994aEto/e95RnAhAZ0MpjYCSoRnrydx5f1MLBb1Q5pJBw1fgSJC n9GOSH790CUaNpqqUvsxpEaSWU8nXVERbMdOow7lLTJXx6OF+3KID9bzvsE9JyJk bqMrvwEkS1i3SnRXO050AHoWiaNLrY6/h2zXqD4Zj7FA8v2mk0Q= -----END CERTIFICATE-----Generated at Mon Jun 30 06:34:23 2025 by rpki-client