$ rpki-client -vvf repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.mft File: 07087494011A8BD71E0AB56E4A29820B0C265D45.mft (raw, json) Hash identifier: aDtCYxoQFXqZTiWmbNf1vV2KB9copdxVOpp+TRMU/sw= Subject key identifier: 4D:FF:10:0F:87:FB:D9:0F:A0:05:32:36:E9:FD:7D:49:0C:B1:FE:A4 Authority key identifier: 07:08:74:94:01:1A:8B:D7:1E:0A:B5:6E:4A:29:82:0B:0C:26:5D:45 Certificate issuer: /CN=07087494011A8BD71E0AB56E4A29820B0C265D45 Certificate serial: 7B7D03303EE1CC617CB8D221F3FA2D9D04C11C81 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07087494011A8BD71E0AB56E4A29820B0C265D45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.mft Manifest number: 39 Signing time: Sun 29 Jun 2025 09:51:16 +0000 Manifest this update: Sun 29 Jun 2025 09:46:16 +0000 Manifest next update: Wed 02 Jul 2025 21:48:16 +0000 Files and hashes: 1: 3130332e38392e3234382e302f32342d3234203d3e20313336303939.roa (hash: nJDk2moXVJKOcLf/s2ENaD41Lvuu7Wv1fbgDq/e+7rk=) 2: 07087494011A8BD71E0AB56E4A29820B0C265D45.crl (hash: eWAttwiIlMqD/w4KHjw39vYOHYrElISH/wI9zrYZdmM=) 3: 323030313a6466303a633330303a3a2f34382d3438203d3e20313336303939.roa (hash: 7vK5kAAznF/vtGtOCVNcNBhvktxpMswh2ctIXuNsU5A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.crl rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07087494011A8BD71E0AB56E4A29820B0C265D45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 21:48:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:7d:03:30:3e:e1:cc:61:7c:b8:d2:21:f3:fa:2d:9d:04:c1:1c:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07087494011A8BD71E0AB56E4A29820B0C265D45 Validity Not Before: Jun 29 09:46:16 2025 GMT Not After : Jul 2 21:48:16 2025 GMT Subject: CN=4DFF100F87FBD90FA0053236E9FD7D490CB1FEA4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:84:6a:b8:f5:73:04:3f:c0:f5:9e:6c:10:a5: 39:23:d8:03:ba:55:56:6a:5b:d1:4b:cd:f4:aa:78: b8:c9:7d:18:1e:3a:12:52:17:54:66:55:28:c8:56: 46:bb:f3:da:7a:de:9d:c6:e6:d8:37:ab:c3:1c:70: 01:12:23:0d:9f:94:bf:15:4c:99:e8:b6:94:22:04: ac:2a:7b:cb:b4:9f:78:44:36:33:51:89:56:61:c0: 64:fd:c7:9e:27:f1:b1:01:d7:33:f8:74:c2:5f:07: f1:64:f5:1f:48:4a:6b:77:0a:c7:5e:ad:d4:53:cd: 84:52:10:0c:76:6e:75:db:37:72:a2:db:19:b8:3c: b4:2c:41:15:3b:2a:42:93:3d:12:ca:9f:53:e6:c5: 83:78:a6:6f:d4:ec:39:95:8e:96:b9:8b:bd:b4:3a: 41:5e:c4:9c:b3:57:8c:8d:d6:61:9f:cd:06:82:40: 45:b6:09:80:93:ef:23:16:44:99:74:8a:51:58:70: 88:1d:d4:ec:d1:5a:4e:2c:94:52:42:a6:15:5a:21: f6:e8:c7:0d:1b:13:26:f5:e3:4f:66:bc:c2:74:9d: ae:be:87:73:19:36:04:15:7e:a3:66:68:00:78:a6: 4e:c1:59:77:f7:e9:15:af:ef:15:7c:cc:54:7b:1e: 4f:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:FF:10:0F:87:FB:D9:0F:A0:05:32:36:E9:FD:7D:49:0C:B1:FE:A4 X509v3 Authority Key Identifier: keyid:07:08:74:94:01:1A:8B:D7:1E:0A:B5:6E:4A:29:82:0B:0C:26:5D:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07087494011A8BD71E0AB56E4A29820B0C265D45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:6a:cc:b9:e3:f6:79:25:a0:02:6b:67:3f:78:26:32:cb:c7: c9:b9:a2:e5:e3:ce:a4:85:11:e4:2a:6f:20:63:87:76:f1:1a: 31:2f:28:23:a6:13:0f:79:49:45:82:20:18:56:b7:0b:43:51: db:ed:e6:39:ce:28:18:60:1e:f9:d1:d8:48:0a:58:1d:5e:43: 71:31:02:82:56:33:a8:b7:c6:64:9a:21:31:76:61:79:d4:e6: a6:bb:bc:2d:8f:3c:69:2d:98:3b:43:55:62:58:60:dd:ef:67: 17:5f:a9:30:45:8b:b1:64:f4:33:54:f1:0c:91:f3:fb:1e:52: 44:15:02:88:65:ef:46:db:60:20:eb:df:a1:da:e8:90:a5:74: d8:ec:50:8e:4a:7e:ea:c8:f1:49:b8:db:99:50:6f:98:dc:dd: af:89:7f:bd:16:2e:52:66:f3:c3:7e:b1:20:7f:1c:8d:a9:89: e0:29:07:3d:45:b7:2d:f9:ca:ce:b2:78:71:8f:08:20:5c:65: 6e:16:9a:6a:37:dc:79:01:58:af:cb:ce:5a:8c:a0:6c:e2:d8: 47:f9:58:ae:5e:74:fb:79:a4:71:2a:65:3f:4e:40:5d:8a:99: c2:14:5b:1f:74:d1:75:74:11:5a:54:e9:49:86:9f:1d:71:f4: 06:a3:3e:57 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe30DMD7hzGF8uNIh8/otnQTBHIEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDcwODc0OTQwMTFBOEJENzFFMEFCNTZFNEEyOTgyMEIw QzI2NUQ0NTAeFw0yNTA2MjkwOTQ2MTZaFw0yNTA3MDIyMTQ4MTZaMDMxMTAvBgNV BAMTKDRERkYxMDBGODdGQkQ5MEZBMDA1MzIzNkU5RkQ3RDQ5MENCMUZFQTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDChGq49XMEP8D1nmwQpTkj2AO6 VVZqW9FLzfSqeLjJfRgeOhJSF1RmVSjIVka789p63p3G5tg3q8MccAESIw2flL8V TJnotpQiBKwqe8u0n3hENjNRiVZhwGT9x54n8bEB1zP4dMJfB/Fk9R9ISmt3Csde rdRTzYRSEAx2bnXbN3Ki2xm4PLQsQRU7KkKTPRLKn1PmxYN4pm/U7DmVjpa5i720 OkFexJyzV4yN1mGfzQaCQEW2CYCT7yMWRJl0ilFYcIgd1OzRWk4slFJCphVaIfbo xw0bEyb1409mvMJ0na6+h3MZNgQVfqNmaAB4pk7BWXf36RWv7xV8zFR7Hk+7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTf8QD4f72Q+gBTI26f19SQyx/qQwHwYDVR0j BBgwFoAUBwh0lAEai9ceCrVuSimCCwwmXUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MTQwNTU0NS1jMzVkLTRkZTEtOTYxOC00NGI1ZjQxN2EzMDMvMC8wNzA4NzQ5NDAx MUE4QkQ3MUUwQUI1NkU0QTI5ODIwQjBDMjY1RDQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDcwODc0OTQwMTFBOEJENzFFMEFCNTZFNEEyOTgyMEIwQzI2 NUQ0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDE0MDU1NDUtYzM1ZC00ZGUxLTk2 MTgtNDRiNWY0MTdhMzAzLzAvMDcwODc0OTQwMTFBOEJENzFFMEFCNTZFNEEyOTgy MEIwQzI2NUQ0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAANqzLnj9nkloAJrZz94JjLLx8m5ouXjzqSF EeQqbyBjh3bxGjEvKCOmEw95SUWCIBhWtwtDUdvt5jnOKBhgHvnR2EgKWB1eQ3Ex AoJWM6i3xmSaITF2YXnU5qa7vC2PPGktmDtDVWJYYN3vZxdfqTBFi7Fk9DNU8QyR 8/seUkQVAohl70bbYCDr36Ha6JCldNjsUI5KfurI8Um425lQb5jc3a+Jf70WLlJm 88N+sSB/HI2pieApBz1Fty35ys6yeHGPCCBcZW4Wmmo33HkBWK/LzlqMoGzi2Ef5 WK5edPt5pHEqZT9OQF2KmcIUWx900XV0EVpU6UmGnx1x9AajPlc= -----END CERTIFICATE-----Generated at Tue Jul 1 15:35:04 2025 by rpki-client