$ rpki-client -vvf repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft File: 407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft (raw, json) Hash identifier: odsfNCfGGDIwLsq3AmFsFcAVVY2U5TFcZ5w7SGgTfGo= Subject key identifier: A2:27:19:39:E0:D1:F2:0C:22:07:79:99:ED:0B:1D:1C:4F:51:40:26 Authority key identifier: 40:7B:7C:7E:E0:9E:DB:AA:0A:35:25:E2:09:FF:8E:93:E4:86:53:C8 Certificate issuer: /CN=407B7C7EE09EDBAA0A3525E209FF8E93E48653C8 Certificate serial: 0FB0DEC24C21C6E2276162BBCEC28F1E4A537EC9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft Manifest number: 97 Signing time: Wed 02 Jul 2025 08:12:17 +0000 Manifest this update: Wed 02 Jul 2025 08:07:17 +0000 Manifest next update: Sat 05 Jul 2025 14:01:17 +0000 Files and hashes: 1: 3130332e3136302e3230322e302f32342d3234203d3e20313431363036.roa (hash: haTibr3tt22zSchSW2+rcU9iqZLSDGd/xcHfzqqfZOo=) 2: 3130332e3136302e3230332e302f32342d3234203d3e20313431363036.roa (hash: 2o2Ekkt+3oPedQ6t7WSvFM6gdfyWmdr+vQqMDBCvSgE=) 3: 3130332e3136302e3230322e302f32332d3233203d3e20313431363036.roa (hash: Gj+dL3k6BLOV8ougeJn8Z24XkFylft6ZOL9dKAW0YtU=) 4: 323030313a6466313a366263303a3a2f34382d3438203d3e20313431363036.roa (hash: ELx/Mo51D3GSaEDSyBhL7pvfhZmjCeLx8uPSmWVwFVo=) 5: 407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.crl (hash: elWGg2IThe6puIdd7IoUzkGqmhMxdglu+eObgu1sDv8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.crl rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 05 Jul 2025 14:01:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:b0:de:c2:4c:21:c6:e2:27:61:62:bb:ce:c2:8f:1e:4a:53:7e:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=407B7C7EE09EDBAA0A3525E209FF8E93E48653C8 Validity Not Before: Jul 2 08:07:17 2025 GMT Not After : Jul 5 14:01:17 2025 GMT Subject: CN=A2271939E0D1F20C22077999ED0B1D1C4F514026 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:ad:da:d5:b7:62:d9:7a:de:e7:4b:bc:b2:07: 41:75:f1:f5:01:1a:a7:cb:6d:0e:b0:dc:25:9d:d5: 08:96:d0:b2:16:82:f9:66:10:79:7b:b7:50:b1:2b: 5e:d6:c4:0a:f5:94:0e:54:8b:8a:a5:ef:fc:95:f1: 72:3a:c4:7e:f4:6a:f3:aa:af:f9:99:a1:0b:5d:df: b3:cd:99:aa:f9:3b:49:a5:4b:25:79:a1:48:2b:05: 4b:ab:52:c1:1f:26:e4:ca:1c:8f:e4:1e:7a:5e:ec: 41:01:45:ca:43:33:66:7c:24:9e:b1:57:38:4f:df: 1d:16:c7:f8:c5:b7:f2:cc:b3:cc:12:8b:09:0d:b4: 5b:8b:9f:e9:a0:63:99:cf:9b:7e:09:fa:78:5d:89: 77:21:1f:74:8c:fc:c3:d2:e7:f3:84:ae:36:fc:a5: 9e:bc:51:30:87:62:a1:5f:60:1a:a2:e2:bd:cd:b5: f3:c5:bb:0b:c9:32:57:ae:0d:f2:f9:d4:35:0e:3c: 52:37:5c:02:4d:23:0c:10:e2:e7:26:db:40:9e:9c: df:93:ea:d7:af:68:ad:cd:53:47:3a:01:a3:95:ec: a7:18:56:b9:f6:a6:d8:7f:81:b4:b1:7e:8f:6c:16: 99:e2:7c:63:fa:57:cf:ea:a7:3d:8a:2e:ab:df:23: 8a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:27:19:39:E0:D1:F2:0C:22:07:79:99:ED:0B:1D:1C:4F:51:40:26 X509v3 Authority Key Identifier: keyid:40:7B:7C:7E:E0:9E:DB:AA:0A:35:25:E2:09:FF:8E:93:E4:86:53:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:e4:f9:ff:ee:3b:45:0a:69:fa:5b:51:5e:37:7c:49:e5:3c: 12:6c:22:e7:c5:6c:f2:3b:c2:9b:72:e7:31:47:1b:e4:cf:62: 9c:35:d4:79:a6:fd:12:a4:c4:2c:1a:84:68:34:66:41:cc:f0: 7e:3f:e9:d2:23:fd:38:ee:de:fd:1f:28:ce:1f:d9:f3:41:6c: 4c:b8:39:3a:e3:62:0a:73:8e:3e:32:1a:45:eb:65:f1:6c:9e: c0:0b:11:91:25:76:66:f5:c5:9d:91:b3:d5:15:36:9c:9f:9f: e3:bf:97:1a:3d:48:2f:8c:7d:12:fa:77:cc:ac:d3:01:01:f0: 41:b8:4e:25:76:42:14:f1:c3:46:bf:c1:fa:bd:dc:01:0f:50: 65:4c:a3:2d:fd:fc:dc:f3:d4:72:fd:14:18:8e:34:77:d4:cb: b7:90:d5:84:4f:ab:a6:aa:1c:cb:d7:6a:2d:d2:98:3e:59:61: 21:e5:ac:bf:69:bb:5d:a8:3d:32:a7:a6:db:ec:fa:12:6f:90: e6:e1:91:3b:98:18:ea:6d:41:b0:c0:0f:4c:84:6e:37:f2:99: b8:dd:8f:19:6c:60:ed:52:72:a3:6d:ea:d4:eb:85:23:92:fe: 2b:8b:91:9b:63:66:03:6f:60:9c:2c:dc:6c:5e:e7:ee:cb:07: 22:2e:c1:32 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUD7DewkwhxuInYWK7zsKPHkpTfskwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA3QjdDN0VFMDlFREJBQTBBMzUyNUUyMDlGRjhFOTNF NDg2NTNDODAeFw0yNTA3MDIwODA3MTdaFw0yNTA3MDUxNDAxMTdaMDMxMTAvBgNV BAMTKEEyMjcxOTM5RTBEMUYyMEMyMjA3Nzk5OUVEMEIxRDFDNEY1MTQwMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFrdrVt2LZet7nS7yyB0F18fUB GqfLbQ6w3CWd1QiW0LIWgvlmEHl7t1CxK17WxAr1lA5Ui4ql7/yV8XI6xH70avOq r/mZoQtd37PNmar5O0mlSyV5oUgrBUurUsEfJuTKHI/kHnpe7EEBRcpDM2Z8JJ6x VzhP3x0Wx/jFt/LMs8wSiwkNtFuLn+mgY5nPm34J+nhdiXchH3SM/MPS5/OErjb8 pZ68UTCHYqFfYBqi4r3NtfPFuwvJMleuDfL51DUOPFI3XAJNIwwQ4ucm20CenN+T 6tevaK3NU0c6AaOV7KcYVrn2pth/gbSxfo9sFpnifGP6V8/qpz2KLqvfI4rTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoicZOeDR8gwiB3mZ7QsdHE9RQCYwHwYDVR0j BBgwFoAUQHt8fuCe26oKNSXiCf+Ok+SGU8gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDY0YmY2YS00MzAyLTQ2MGYtOTY2OS0wOWE1MGE3M2FmMWEvMC80MDdCN0M3RUUw OUVEQkFBMEEzNTI1RTIwOUZGOEU5M0U0ODY1M0M4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA3QjdDN0VFMDlFREJBQTBBMzUyNUUyMDlGRjhFOTNFNDg2 NTNDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ2NGJmNmEtNDMwMi00NjBmLTk2 NjktMDlhNTBhNzNhZjFhLzAvNDA3QjdDN0VFMDlFREJBQTBBMzUyNUUyMDlGRjhF OTNFNDg2NTNDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADjk+f/uO0UKafpbUV43fEnlPBJsIufFbPI7 wpty5zFHG+TPYpw11Hmm/RKkxCwahGg0ZkHM8H4/6dIj/Tju3v0fKM4f2fNBbEy4 OTrjYgpzjj4yGkXrZfFsnsALEZEldmb1xZ2Rs9UVNpyfn+O/lxo9SC+MfRL6d8ys 0wEB8EG4TiV2QhTxw0a/wfq93AEPUGVMoy39/Nzz1HL9FBiONHfUy7eQ1YRPq6aq HMvXai3SmD5ZYSHlrL9pu12oPTKnptvs+hJvkObhkTuYGOptQbDAD0yEbjfymbjd jxlsYO1ScqNt6tTrhSOS/iuLkZtjZgNvYJws3Gxe5+7LByIuwTI= -----END CERTIFICATE-----Generated at Thu Jul 3 00:42:23 2025 by rpki-client