$ rpki-client -vvf repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.mft File: 7376922C93BF667FFBBDAF0735AE73D1451B08C2.mft (raw, json) Hash identifier: 0OOSvAaeCpfa6dEkh1GO0egXsOjqoTaHW9hvPmDzp0I= Subject key identifier: 4B:88:89:86:0C:A7:67:EE:7F:8D:9A:6D:E4:85:94:6B:CC:5E:6D:22 Authority key identifier: 73:76:92:2C:93:BF:66:7F:FB:BD:AF:07:35:AE:73:D1:45:1B:08:C2 Certificate issuer: /CN=7376922C93BF667FFBBDAF0735AE73D1451B08C2 Certificate serial: 153527CB045974ED82B6CD45CD7A9B0BAC8421CB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7376922C93BF667FFBBDAF0735AE73D1451B08C2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.mft Manifest number: 04D9 Signing time: Sat 28 Jun 2025 05:02:21 +0000 Manifest this update: Sat 28 Jun 2025 04:57:21 +0000 Manifest next update: Tue 01 Jul 2025 09:03:21 +0000 Files and hashes: 1: 3130332e372e3137362e302f32342d3234203d3e20313336303830.roa (hash: pULFJZ+nbfV5jOVZtN4jB+N6TsIyKwD9xJ39aFL57ak=) 2: 7376922C93BF667FFBBDAF0735AE73D1451B08C2.crl (hash: tB0acJg4mlCiTB25yIaKnLpaULRmNxbUlkprbxNbmG0=) 3: 3130332e38392e3136342e302f32342d3234203d3e20313333383030.roa (hash: +2SP7VdADvevew0k00TuxJ1WZ3WZFkGqu4JZIMGxgpw=) 4: 3130332e38392e3135342e302f32342d3234203d3e20313333383030.roa (hash: 21L4D1hu21+7UR3Mn3cvc8Jhs/U+RaE8nhEhhkQ5YEA=) 5: 3130332e38392e3136352e302f32342d3234203d3e20313333383030.roa (hash: 0V79HEBuKR1jbK8PkSQwyA4BziEgKvO+/ItR4BkRmQg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.crl rsync://repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7376922C93BF667FFBBDAF0735AE73D1451B08C2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 09:03:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:35:27:cb:04:59:74:ed:82:b6:cd:45:cd:7a:9b:0b:ac:84:21:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7376922C93BF667FFBBDAF0735AE73D1451B08C2 Validity Not Before: Jun 28 04:57:21 2025 GMT Not After : Jul 1 09:03:21 2025 GMT Subject: CN=4B8889860CA767EE7F8D9A6DE485946BCC5E6D22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:35:45:b6:17:73:1a:73:01:a6:f8:2a:ac:ca: c3:47:1b:1b:d1:cf:53:ab:31:13:6d:02:2a:64:c8: d4:cf:e0:42:24:51:87:f1:3c:e3:32:8a:67:1a:66: 16:f8:8a:07:6c:28:f3:e0:40:90:d6:70:b6:2b:02: 90:20:75:74:ed:5c:6f:fd:13:ef:31:2e:63:70:8b: 8b:3d:9c:13:40:e5:3a:c9:65:88:6e:5b:4c:de:fb: 6b:35:46:a7:a1:96:d4:f9:3c:fd:f5:c6:63:65:fd: ea:0f:7e:70:0e:5a:cb:53:8d:f6:cc:c0:2e:65:53: 18:54:86:20:4c:25:60:9a:74:9d:80:fa:be:b3:7e: e5:8a:94:f7:65:48:ef:96:76:39:1f:bd:fc:ac:ec: a1:b6:de:7f:57:2c:b6:93:a1:b4:fe:bc:46:52:29: b6:95:88:8f:b2:d6:4f:40:b5:cc:ce:73:a6:bc:ab: 80:41:8d:17:1d:64:3b:13:b4:5e:07:23:ba:02:02: 6d:33:cf:b1:fc:37:04:e4:9c:00:27:7d:6c:77:bc: a3:1a:ad:ef:21:d2:f9:03:ac:49:02:8d:15:22:e8: be:bc:a1:f2:d2:40:94:36:8e:ef:f8:b8:83:60:cc: 74:5b:12:15:15:c1:f6:99:d1:a4:4b:c3:d8:66:28: 9c:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:88:89:86:0C:A7:67:EE:7F:8D:9A:6D:E4:85:94:6B:CC:5E:6D:22 X509v3 Authority Key Identifier: keyid:73:76:92:2C:93:BF:66:7F:FB:BD:AF:07:35:AE:73:D1:45:1B:08:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7376922C93BF667FFBBDAF0735AE73D1451B08C2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:85:6c:9d:1c:fc:0a:eb:11:fe:64:e4:e4:c4:36:d5:14:1c: 68:bc:3b:6c:23:e2:a9:4c:11:38:cf:9c:6c:ff:07:f3:ae:ca: 11:1b:d8:99:f7:ce:36:33:f5:9a:1d:05:27:ee:42:dc:99:ab: 1c:e1:fd:91:e4:06:8d:19:71:76:ca:b7:df:10:7c:7e:a9:0c: 53:51:28:24:9d:ba:b2:46:41:6e:3b:cb:15:7e:a4:45:c0:05: b4:65:dd:eb:cd:8c:01:e0:72:2a:ad:81:d2:bf:bd:f6:2f:ea: 03:c9:30:84:67:b7:2b:ae:2b:d2:66:9c:43:0c:72:83:3f:18: 4d:93:7e:92:4c:b3:c8:7b:db:ff:16:8f:54:c3:88:30:89:09: 4a:0c:53:9a:a6:84:49:14:96:d2:cc:f0:5d:d3:c8:66:8c:24: b9:35:2c:95:3d:31:cd:0c:ab:0e:40:4a:cf:b9:2d:d4:fb:40: 9d:20:b7:22:cb:54:02:23:56:e2:16:71:a0:6b:87:68:24:70: ec:12:6f:4d:03:76:35:b0:5b:73:66:0a:47:18:ba:0a:c3:ef: 85:6d:6c:25:2d:b3:cf:91:33:86:58:ac:b2:1b:5a:4d:2e:97: 41:c3:d5:c9:ac:2b:d5:11:e4:31:ad:5c:3d:bf:d9:e9:d7:47: b6:22:cf:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFTUnywRZdO2Cts1FzXqbC6yEIcswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzM3NjkyMkM5M0JGNjY3RkZCQkRBRjA3MzVBRTczRDE0 NTFCMDhDMjAeFw0yNTA2MjgwNDU3MjFaFw0yNTA3MDEwOTAzMjFaMDMxMTAvBgNV BAMTKDRCODg4OTg2MENBNzY3RUU3RjhEOUE2REU0ODU5NDZCQ0M1RTZEMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9NUW2F3MacwGm+CqsysNHGxvR z1OrMRNtAipkyNTP4EIkUYfxPOMyimcaZhb4igdsKPPgQJDWcLYrApAgdXTtXG/9 E+8xLmNwi4s9nBNA5TrJZYhuW0ze+2s1RqehltT5PP31xmNl/eoPfnAOWstTjfbM wC5lUxhUhiBMJWCadJ2A+r6zfuWKlPdlSO+Wdjkfvfys7KG23n9XLLaTobT+vEZS KbaViI+y1k9AtczOc6a8q4BBjRcdZDsTtF4HI7oCAm0zz7H8NwTknAAnfWx3vKMa re8h0vkDrEkCjRUi6L68ofLSQJQ2ju/4uINgzHRbEhUVwfaZ0aRLw9hmKJyzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS4iJhgynZ+5/jZpt5IWUa8xebSIwHwYDVR0j BBgwFoAUc3aSLJO/Zn/7va8HNa5z0UUbCMIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDE3NmRkZC1hOTgwLTQzZDYtOTRhNy05NWVlZGE1Mzk2NjUvMC83Mzc2OTIyQzkz QkY2NjdGRkJCREFGMDczNUFFNzNEMTQ1MUIwOEMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzM3NjkyMkM5M0JGNjY3RkZCQkRBRjA3MzVBRTczRDE0NTFC MDhDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQxNzZkZGQtYTk4MC00M2Q2LTk0 YTctOTVlZWRhNTM5NjY1LzAvNzM3NjkyMkM5M0JGNjY3RkZCQkRBRjA3MzVBRTcz RDE0NTFCMDhDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADKFbJ0c/ArrEf5k5OTENtUUHGi8O2wj4qlM ETjPnGz/B/OuyhEb2Jn3zjYz9ZodBSfuQtyZqxzh/ZHkBo0ZcXbKt98QfH6pDFNR KCSdurJGQW47yxV+pEXABbRl3evNjAHgciqtgdK/vfYv6gPJMIRntyuuK9JmnEMM coM/GE2TfpJMs8h72/8Wj1TDiDCJCUoMU5qmhEkUltLM8F3TyGaMJLk1LJU9Mc0M qw5ASs+5LdT7QJ0gtyLLVAIjVuIWcaBrh2gkcOwSb00DdjWwW3NmCkcYugrD74Vt bCUts8+RM4ZYrLIbWk0ul0HD1cmsK9UR5DGtXD2/2enXR7Yiz1M= -----END CERTIFICATE-----Generated at Sun Jun 29 19:56:30 2025 by rpki-client