$ rpki-client -vvf repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft File: C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft (raw, json) Hash identifier: NuWfu25KLyMXMscvtmh1pAARAP3adHoCPy6xZXeQzME= Subject key identifier: 8C:63:13:FB:43:46:BF:F0:94:9C:3E:9A:8D:73:6C:0B:48:0D:9A:E8 Authority key identifier: C7:F5:AA:72:DB:87:0E:16:1B:62:AC:A9:25:0A:D9:8A:A1:10:A0:14 Certificate issuer: /CN=C7F5AA72DB870E161B62ACA9250AD98AA110A014 Certificate serial: 32EBDBB726FB3554798E10FC74DFD25B29D12FE2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F5AA72DB870E161B62ACA9250AD98AA110A014.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft Manifest number: 027F Signing time: Sat 28 Jun 2025 01:11:55 +0000 Manifest this update: Sat 28 Jun 2025 01:06:55 +0000 Manifest next update: Tue 01 Jul 2025 10:13:55 +0000 Files and hashes: 1: 3130332e3230372e3233382e302f32342d3234203d3e20313338303936.roa (hash: kqyShD8grMzsW8WAD+q93A9hYlzfgDARjSsqGTZiG54=) 2: C7F5AA72DB870E161B62ACA9250AD98AA110A014.crl (hash: 5ri3Y6lMRO4LqHjl1o/yJOGyCTrNveOUKR2T5UKgL/w=) 3: 3130332e3230372e3233362e302f32332d3234203d3e20313334363434.roa (hash: FuTP+olekR94POOQRMWB2DM9MZrHgp1r/imUNhheQk0=) 4: 3130332e3230372e3233392e302f32342d3234203d3e20313338303936.roa (hash: bCN0BjFIkGXQoNiGlR2Rw4pyaw/6SRLkI5yDk6Jonrg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.crl rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F5AA72DB870E161B62ACA9250AD98AA110A014.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 10:13:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:eb:db:b7:26:fb:35:54:79:8e:10:fc:74:df:d2:5b:29:d1:2f:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7F5AA72DB870E161B62ACA9250AD98AA110A014 Validity Not Before: Jun 28 01:06:55 2025 GMT Not After : Jul 1 10:13:55 2025 GMT Subject: CN=8C6313FB4346BFF0949C3E9A8D736C0B480D9AE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:31:5c:eb:7c:ee:e0:d1:b2:33:03:5b:29:03: 3e:2f:d6:55:32:a8:47:c5:a4:03:36:40:c6:6a:0f: 79:25:69:e2:0e:fe:a8:c9:cd:fa:19:63:ab:ee:44: be:af:cc:33:e3:54:f4:90:a3:84:ae:58:f7:6d:3a: ec:1e:fa:a6:33:00:57:13:07:dc:38:ca:1c:cb:da: b7:20:1e:70:35:9b:eb:a9:ff:29:99:1e:af:e4:93: 51:df:e7:e1:34:69:87:93:c4:2f:0b:13:f2:79:4d: 6c:78:d4:bd:fa:2e:05:c6:c2:00:90:0d:b6:eb:76: 90:88:a7:e9:67:fd:87:fd:f6:6f:a4:6c:cd:ce:03: 97:41:2c:85:31:a1:6d:35:36:1b:6b:d4:14:47:a9: 3d:d9:5e:c0:e5:60:0c:92:53:df:b6:e5:98:01:a2: ec:24:52:de:12:1a:2f:7c:59:fd:db:af:a5:b7:82: ad:f2:00:77:4d:2a:82:d3:c6:12:83:ad:d5:70:a0: bc:d2:91:bb:14:09:2b:bb:75:42:39:15:09:9a:01: c2:cd:34:7f:86:f6:6b:91:37:77:c2:4f:f1:9e:26: e2:bb:83:e0:2d:94:69:d4:b5:05:90:3e:66:7e:5d: 2f:3b:9e:39:0a:73:6f:18:26:7f:82:88:1d:07:bc: 63:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:63:13:FB:43:46:BF:F0:94:9C:3E:9A:8D:73:6C:0B:48:0D:9A:E8 X509v3 Authority Key Identifier: keyid:C7:F5:AA:72:DB:87:0E:16:1B:62:AC:A9:25:0A:D9:8A:A1:10:A0:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F5AA72DB870E161B62ACA9250AD98AA110A014.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:7e:d4:03:b7:55:86:86:39:cf:c0:ae:f5:6e:27:11:15:fe: c8:b7:1e:91:3e:e2:a7:4f:16:ab:56:da:c3:a7:db:20:fe:7a: 20:62:e6:cf:73:c9:a6:cf:2e:c1:b3:00:24:4e:38:a0:02:0e: 19:e6:3c:47:96:b0:8e:8b:c2:12:1f:5c:46:bf:1e:66:1e:6d: 4e:09:e5:d1:8f:5a:00:1b:16:a4:0b:5c:77:66:09:32:d8:dd: e7:8b:73:5c:4a:41:ce:53:a4:97:d2:79:8f:e6:e3:22:4e:d7: 36:c5:0f:06:d0:62:07:25:0c:f5:50:49:1b:e0:dc:a3:10:50: d0:d4:1e:43:98:b8:65:f8:19:91:35:2a:59:90:9b:3b:55:bc: b5:7e:fa:f2:f6:ee:be:29:ae:32:7b:30:21:bb:68:eb:3f:d5: c0:a2:c6:56:50:29:c0:58:a2:07:2e:8a:01:d3:06:98:8c:85: f9:16:f8:b1:29:f0:90:48:e9:ca:ae:5c:80:87:03:d8:34:cb: ea:e6:a9:34:4d:73:33:93:21:bd:ab:05:d2:3c:ce:5e:76:84: c8:c1:dc:13:d7:97:69:5b:c2:17:c8:a4:5e:c0:a2:25:d2:93: 38:d4:35:f0:38:e9:d2:40:76:85:e4:d7:0f:72:2f:98:f9:bf: c4:74:67:29 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMuvbtyb7NVR5jhD8dN/SWynRL+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdGNUFBNzJEQjg3MEUxNjFCNjJBQ0E5MjUwQUQ5OEFB MTEwQTAxNDAeFw0yNTA2MjgwMTA2NTVaFw0yNTA3MDExMDEzNTVaMDMxMTAvBgNV BAMTKDhDNjMxM0ZCNDM0NkJGRjA5NDlDM0U5QThENzM2QzBCNDgwRDlBRTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYMVzrfO7g0bIzA1spAz4v1lUy qEfFpAM2QMZqD3klaeIO/qjJzfoZY6vuRL6vzDPjVPSQo4SuWPdtOuwe+qYzAFcT B9w4yhzL2rcgHnA1m+up/ymZHq/kk1Hf5+E0aYeTxC8LE/J5TWx41L36LgXGwgCQ DbbrdpCIp+ln/Yf99m+kbM3OA5dBLIUxoW01Nhtr1BRHqT3ZXsDlYAySU9+25ZgB ouwkUt4SGi98Wf3br6W3gq3yAHdNKoLTxhKDrdVwoLzSkbsUCSu7dUI5FQmaAcLN NH+G9muRN3fCT/GeJuK7g+AtlGnUtQWQPmZ+XS87njkKc28YJn+CiB0HvGMnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjGMT+0NGv/CUnD6ajXNsC0gNmugwHwYDVR0j BBgwFoAUx/WqctuHDhYbYqypJQrZiqEQoBQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YjBlN2Y4ZS1jMjlmLTRlNmItYWQwYS05OTU3ZmJkNTY5NTMvMC9DN0Y1QUE3MkRC ODcwRTE2MUI2MkFDQTkyNTBBRDk4QUExMTBBMDE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzdGNUFBNzJEQjg3MEUxNjFCNjJBQ0E5MjUwQUQ5OEFBMTEw QTAxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGIwZTdmOGUtYzI5Zi00ZTZiLWFk MGEtOTk1N2ZiZDU2OTUzLzAvQzdGNUFBNzJEQjg3MEUxNjFCNjJBQ0E5MjUwQUQ5 OEFBMTEwQTAxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI1+1AO3VYaGOc/ArvVuJxEV/si3HpE+4qdP FqtW2sOn2yD+eiBi5s9zyabPLsGzACROOKACDhnmPEeWsI6LwhIfXEa/HmYebU4J 5dGPWgAbFqQLXHdmCTLY3eeLc1xKQc5TpJfSeY/m4yJO1zbFDwbQYgclDPVQSRvg 3KMQUNDUHkOYuGX4GZE1KlmQmztVvLV++vL27r4prjJ7MCG7aOs/1cCixlZQKcBY ogcuigHTBpiMhfkW+LEp8JBI6cquXICHA9g0y+rmqTRNczOTIb2rBdI8zl52hMjB 3BPXl2lbwhfIpF7AoiXSkzjUNfA46dJAdoXk1w9yL5j5v8R0Zyk= -----END CERTIFICATE-----Generated at Sun Jun 29 21:32:37 2025 by rpki-client