$ rpki-client -vvf repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft File: 7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft (raw, json) Hash identifier: AtMPzxlrHRPTtRC+yt04KiasLMHLlzlD9XqlbzD4okw= Subject key identifier: 0B:87:76:B8:77:31:9E:49:FD:87:8E:E5:B0:4D:B4:DD:8B:21:F5:94 Authority key identifier: 7C:D5:24:05:24:67:F2:2D:D8:E5:7E:02:A1:C9:9E:DE:5A:8C:F2:49 Certificate issuer: /CN=7CD524052467F22DD8E57E02A1C99EDE5A8CF249 Certificate serial: 45D67DE72CDC5167E9FB139701BE995328C8D35A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.cer Subject info access: rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft Manifest number: 04D4 Signing time: Mon 30 Jun 2025 09:30:38 +0000 Manifest this update: Mon 30 Jun 2025 09:25:38 +0000 Manifest next update: Thu 03 Jul 2025 20:42:38 +0000 Files and hashes: 1: 3130332e3135302e34342e302f32332d3234203d3e20313430333838.roa (hash: 9wWnuvCPEe0C8U6UVGeFeb9Dd9afvhSHPrMKavtgge8=) 2: 7CD524052467F22DD8E57E02A1C99EDE5A8CF249.crl (hash: XVgB9YtKpEv1ZgufWuua6MRWUhIdBMs2NkJsf7vhg8Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.crl rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 20:42:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:d6:7d:e7:2c:dc:51:67:e9:fb:13:97:01:be:99:53:28:c8:d3:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CD524052467F22DD8E57E02A1C99EDE5A8CF249 Validity Not Before: Jun 30 09:25:38 2025 GMT Not After : Jul 3 20:42:38 2025 GMT Subject: CN=0B8776B877319E49FD878EE5B04DB4DD8B21F594 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:be:b0:ca:ee:e1:6c:d7:1a:d9:1a:e1:e2:d3: ea:54:d5:5f:4e:ed:af:db:6a:02:81:fc:bc:70:5d: a3:b1:61:39:0e:a1:09:fd:b3:3d:7d:90:21:a0:7b: 77:84:71:73:a5:f7:76:0d:44:00:4d:f6:c1:93:8b: 5c:4e:41:1f:2a:3d:f4:bf:97:a2:69:fe:88:7a:88: 11:e3:41:6f:42:98:1c:70:40:13:22:c2:88:39:72: 36:fe:6a:55:81:a8:87:cc:5f:3f:1b:8f:bb:c0:8e: ff:4a:b7:98:cb:2a:01:f8:c7:13:88:10:c0:0e:4f: b6:24:67:34:d3:61:85:6e:d2:cf:43:bf:89:e6:7e: 75:0d:ff:a1:da:c6:cc:ab:84:a3:0e:ea:bd:c3:9c: bb:72:4f:a7:3b:c3:d9:22:34:97:e7:30:33:f8:97: 5c:45:11:fd:36:91:b1:0a:d3:b4:bb:d1:0c:9b:b7: f2:fc:0e:51:ce:3e:f7:18:84:5b:f2:75:56:4c:eb: 9a:85:03:e6:4e:2a:7b:bd:2e:d1:c0:b9:9b:a0:8d: b6:a8:a0:9a:cf:6b:e3:67:17:00:ce:6b:91:0f:29: 00:45:6a:0d:9c:b3:ec:c4:7c:30:8f:83:f0:c1:78: bf:6c:f4:64:39:86:e0:fd:df:4f:d6:a6:fd:c2:97: 0b:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:87:76:B8:77:31:9E:49:FD:87:8E:E5:B0:4D:B4:DD:8B:21:F5:94 X509v3 Authority Key Identifier: keyid:7C:D5:24:05:24:67:F2:2D:D8:E5:7E:02:A1:C9:9E:DE:5A:8C:F2:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:33:7b:b9:31:54:a8:e1:08:9a:5b:63:a3:eb:86:5d:16:ae: 7d:b1:b7:57:ba:9d:81:3a:d1:48:42:37:b6:70:93:8c:72:1d: 7c:f4:34:a5:7a:9a:fa:20:22:15:56:5e:0f:e2:93:f1:eb:30: b0:d2:8e:f1:53:90:9f:51:8f:99:eb:09:23:3c:7d:96:32:f7: 97:c9:4a:8c:cb:60:3c:d9:1d:65:a7:36:91:be:20:ef:a7:79: 33:9a:27:dd:ea:94:f4:af:2a:d2:df:bc:81:ab:03:f4:a5:3f: b0:1a:9d:76:38:57:ed:ec:ca:ad:75:e6:6d:84:e1:c3:70:b4: 85:dd:c2:31:b5:aa:11:2c:6b:98:8a:59:90:f8:0b:dd:de:01: 83:d2:98:f0:d1:7d:c5:1a:43:8d:8b:19:64:18:e4:26:17:fe: 3e:01:39:49:30:1c:3f:bf:48:29:4e:f0:3b:eb:79:bc:1e:0d: 92:08:28:28:30:c3:1b:83:86:96:81:4f:fc:7d:36:62:b2:9f: e9:74:7c:de:ce:e2:34:26:70:3f:93:78:3d:2a:86:02:0a:65: e0:88:7b:f8:9c:d4:0e:4f:92:05:b3:0c:41:ac:02:a2:39:f6: dc:84:0b:58:f4:df:c7:39:15:f6:86:03:ff:ef:6e:24:b6:59: 84:1c:29:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURdZ95yzcUWfp+xOXAb6ZUyjI01owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NENTI0MDUyNDY3RjIyREQ4RTU3RTAyQTFDOTlFREU1 QThDRjI0OTAeFw0yNTA2MzAwOTI1MzhaFw0yNTA3MDMyMDQyMzhaMDMxMTAvBgNV BAMTKDBCODc3NkI4NzczMTlFNDlGRDg3OEVFNUIwNERCNEREOEIyMUY1OTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVvrDK7uFs1xrZGuHi0+pU1V9O 7a/bagKB/LxwXaOxYTkOoQn9sz19kCGge3eEcXOl93YNRABN9sGTi1xOQR8qPfS/ l6Jp/oh6iBHjQW9CmBxwQBMiwog5cjb+alWBqIfMXz8bj7vAjv9Kt5jLKgH4xxOI EMAOT7YkZzTTYYVu0s9Dv4nmfnUN/6HaxsyrhKMO6r3DnLtyT6c7w9kiNJfnMDP4 l1xFEf02kbEK07S70Qybt/L8DlHOPvcYhFvydVZM65qFA+ZOKnu9LtHAuZugjbao oJrPa+NnFwDOa5EPKQBFag2cs+zEfDCPg/DBeL9s9GQ5huD930/Wpv3ClwvtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUC4d2uHcxnkn9h47lsE203Ysh9ZQwHwYDVR0j BBgwFoAUfNUkBSRn8i3Y5X4Cocme3lqM8kkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NGViNmVkZC1mMTNiLTQ5ZjAtYWQ4Ny02YjhlZTYxNGRjOGYvMC83Q0Q1MjQwNTI0 NjdGMjJERDhFNTdFMDJBMUM5OUVERTVBOENGMjQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0NENTI0MDUyNDY3RjIyREQ4RTU3RTAyQTFDOTlFREU1QThD RjI0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDRlYjZlZGQtZjEzYi00OWYwLWFk ODctNmI4ZWU2MTRkYzhmLzAvN0NENTI0MDUyNDY3RjIyREQ4RTU3RTAyQTFDOTlF REU1QThDRjI0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALAze7kxVKjhCJpbY6Prhl0Wrn2xt1e6nYE6 0UhCN7Zwk4xyHXz0NKV6mvogIhVWXg/ik/HrMLDSjvFTkJ9Rj5nrCSM8fZYy95fJ SozLYDzZHWWnNpG+IO+neTOaJ93qlPSvKtLfvIGrA/SlP7AanXY4V+3syq115m2E 4cNwtIXdwjG1qhEsa5iKWZD4C93eAYPSmPDRfcUaQ42LGWQY5CYX/j4BOUkwHD+/ SClO8DvrebweDZIIKCgwwxuDhpaBT/x9NmKyn+l0fN7O4jQmcD+TeD0qhgIKZeCI e/ic1A5PkgWzDEGsAqI59tyEC1j038c5FfaGA//vbiS2WYQcKaY= -----END CERTIFICATE-----Generated at Mon Jun 30 19:07:12 2025 by rpki-client