$ rpki-client -vvf repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft File: 4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft (raw, json) Hash identifier: 4wyj4B795uiGVj2GAzaravU/MGz1I3w7z8QcwVdxs3E= Subject key identifier: 9B:53:D5:1E:D5:A4:83:E7:3A:EB:F1:F7:D4:F7:CA:65:B7:43:65:6E Authority key identifier: 4A:C7:DC:D8:EB:12:34:AD:C4:27:AE:BE:39:49:E8:69:16:38:A7:07 Certificate issuer: /CN=4AC7DCD8EB1234ADC427AEBE3949E8691638A707 Certificate serial: 722652A3D834556F3A5A752A107CB0E68ECA18D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer Subject info access: rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft Manifest number: 01EF Signing time: Sun 29 Jun 2025 18:30:44 +0000 Manifest this update: Sun 29 Jun 2025 18:25:44 +0000 Manifest next update: Wed 02 Jul 2025 19:17:44 +0000 Files and hashes: 1: 323030313a6466363a366630303a3a2f34382d3438203d3e20313331373034.roa (hash: 3CBY+1byt2hh1kG4N61+QCfs3v8FSbnr3cgZmaX/kYc=) 2: 4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl (hash: uhl3kyt7Zmpv77IeqGd9Pe253B75MUP17XN3VwuVMzo=) 3: 3130332e382e39362e302f32322d3234203d3e203137343530.roa (hash: E/ANh8Obcj2c5y2FA6Ly1F0NL4tMRGMfZqDmckfRl5E=) 4: 3230322e362e3230382e302f32302d3234203d3e203137343530.roa (hash: wpi+A3QiGq0ZlH1T9XK03PNS16oXniLKGOp2khUpYoA=) 5: 3131392e322e36342e302f31392d3234203d3e203137343530.roa (hash: Uce528/KV3oCstaRCZguiOogFuox/yiwX1g2nJn55uk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 19:17:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:26:52:a3:d8:34:55:6f:3a:5a:75:2a:10:7c:b0:e6:8e:ca:18:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4AC7DCD8EB1234ADC427AEBE3949E8691638A707 Validity Not Before: Jun 29 18:25:44 2025 GMT Not After : Jul 2 19:17:44 2025 GMT Subject: CN=9B53D51ED5A483E73AEBF1F7D4F7CA65B743656E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:bc:78:f1:9b:92:4d:20:17:10:ab:2a:0a:97: 5d:f4:4e:8b:c3:ad:34:b1:4a:0c:61:52:07:96:5f: b0:8d:97:95:06:29:ae:c6:c7:fd:49:ab:6d:f8:b5: 04:47:9d:9b:29:92:e9:35:ab:30:d0:f7:ff:26:82: dc:ef:1a:4e:e5:e4:6e:fe:e6:d4:72:bf:03:db:44: 15:7f:67:be:03:af:ff:d1:b5:e8:45:91:d8:3e:fa: 05:24:db:4c:7a:28:a1:af:09:4f:01:dc:9a:5b:9d: a9:20:60:b5:5c:e8:6b:21:e8:fd:bf:ca:16:a7:1f: 7f:e4:30:9a:46:fd:90:2a:30:6b:69:17:21:d2:eb: 2a:db:83:af:f4:20:e6:b4:b2:fa:0f:ff:f6:26:c6: d0:64:72:e7:9e:0e:fe:c2:89:46:91:1e:c4:a4:17: 05:cd:7e:2e:59:5c:a0:ad:97:50:68:9f:1a:c1:c6: 44:fb:1f:b4:42:a9:34:50:c3:09:22:78:15:ff:de: 2a:47:c4:ff:fe:d5:65:4c:ba:51:c8:e0:b1:6d:cd: bb:cb:53:a9:e3:9d:87:a9:3d:ea:50:e0:19:de:6c: 37:1a:90:a6:99:c5:4d:a0:6e:63:5c:fa:57:39:f3: 92:44:75:9b:39:fc:a9:95:17:62:85:c6:f3:17:21: 94:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9B:53:D5:1E:D5:A4:83:E7:3A:EB:F1:F7:D4:F7:CA:65:B7:43:65:6E X509v3 Authority Key Identifier: keyid:4A:C7:DC:D8:EB:12:34:AD:C4:27:AE:BE:39:49:E8:69:16:38:A7:07 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:87:51:18:12:6a:79:dd:f4:36:da:df:9b:53:40:3e:cf:57: 8b:b7:61:60:b7:98:21:fd:c8:92:00:21:4f:62:17:ba:9b:c6: f0:0f:1a:5f:d3:45:67:82:dc:1c:07:aa:4a:a0:9c:01:cc:6e: fc:5a:7d:cd:04:7e:ba:35:99:98:a3:af:7f:c1:62:a4:b6:c1: cd:38:6a:1c:ad:4d:70:24:30:9c:4b:3d:6b:92:7e:0c:94:d5: 04:fc:b7:fb:05:50:c3:3f:65:ad:55:da:16:6f:f9:52:63:d9: df:5a:be:16:a8:67:dd:27:16:aa:82:0e:4e:c4:16:1b:3c:3a: cd:ea:c8:7b:c2:e0:d8:b7:3b:37:61:12:45:68:5b:8c:ad:10: 60:08:48:63:30:be:57:1f:9b:41:d7:3f:44:1b:e5:b9:e3:5b: 73:5d:1c:97:a0:91:01:6f:ec:8f:42:8c:b1:f8:fb:a0:28:88: 45:81:13:2c:75:d0:3c:84:92:90:5a:c9:44:cd:46:26:0f:0c: fb:6a:ae:35:21:cc:53:e2:0e:83:d0:88:7e:d7:6b:d4:89:90: 59:7e:ef:44:ba:22:93:ec:de:bd:d2:2a:3c:0e:36:8b:3b:0e: bc:bf:8c:d8:cf:d1:95:04:7c:0e:5c:e2:42:bc:4b:45:ed:f7: 6a:e5:9d:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUciZSo9g0VW86WnUqEHyw5o7KGNcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEFDN0RDRDhFQjEyMzRBREM0MjdBRUJFMzk0OUU4Njkx NjM4QTcwNzAeFw0yNTA2MjkxODI1NDRaFw0yNTA3MDIxOTE3NDRaMDMxMTAvBgNV BAMTKDlCNTNENTFFRDVBNDgzRTczQUVCRjFGN0Q0RjdDQTY1Qjc0MzY1NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfvHjxm5JNIBcQqyoKl130TovD rTSxSgxhUgeWX7CNl5UGKa7Gx/1Jq234tQRHnZspkuk1qzDQ9/8mgtzvGk7l5G7+ 5tRyvwPbRBV/Z74Dr//RtehFkdg++gUk20x6KKGvCU8B3JpbnakgYLVc6Gsh6P2/ yhanH3/kMJpG/ZAqMGtpFyHS6yrbg6/0IOa0svoP//YmxtBkcueeDv7CiUaRHsSk FwXNfi5ZXKCtl1BonxrBxkT7H7RCqTRQwwkieBX/3ipHxP/+1WVMulHI4LFtzbvL U6njnYepPepQ4BnebDcakKaZxU2gbmNc+lc585JEdZs5/KmVF2KFxvMXIZQpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUm1PVHtWkg+c66/H31PfKZbdDZW4wHwYDVR0j BBgwFoAUSsfc2OsSNK3EJ66+OUnoaRY4pwcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MzgwNjFmMS1mYTMwLTRiZDYtODFhMC0yZWM2NzA4MzZjNDIvMC80QUM3RENEOEVC MTIzNEFEQzQyN0FFQkUzOTQ5RTg2OTE2MzhBNzA3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEFDN0RDRDhFQjEyMzRBREM0MjdBRUJFMzk0OUU4NjkxNjM4 QTcwNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDM4MDYxZjEtZmEzMC00YmQ2LTgx YTAtMmVjNjcwODM2YzQyLzAvNEFDN0RDRDhFQjEyMzRBREM0MjdBRUJFMzk0OUU4 NjkxNjM4QTcwNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIeHURgSannd9Dba35tTQD7PV4u3YWC3mCH9 yJIAIU9iF7qbxvAPGl/TRWeC3BwHqkqgnAHMbvxafc0Efro1mZijr3/BYqS2wc04 ahytTXAkMJxLPWuSfgyU1QT8t/sFUMM/Za1V2hZv+VJj2d9avhaoZ90nFqqCDk7E Fhs8Os3qyHvC4Ni3OzdhEkVoW4ytEGAISGMwvlcfm0HXP0Qb5bnjW3NdHJegkQFv 7I9CjLH4+6AoiEWBEyx10DyEkpBayUTNRiYPDPtqrjUhzFPiDoPQiH7Xa9SJkFl+ 70S6IpPs3r3SKjwONos7Dry/jNjP0ZUEfA5c4kK8S0Xt92rlnXw= -----END CERTIFICATE-----Generated at Mon Jun 30 13:50:22 2025 by rpki-client