$ rpki-client -vvf repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft File: 7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft (raw, json) Hash identifier: pkrZaYFgeJjTGdFHLiAKtmUEgYH4URcu2VasoacPYcE= Subject key identifier: 37:D0:13:8A:B0:23:95:32:87:3C:2D:F1:62:2B:93:EA:A9:1D:B9:CC Authority key identifier: 7B:94:59:74:A7:9E:8C:77:CB:02:F9:44:95:BA:9F:87:BA:A0:E0:38 Certificate issuer: /CN=7B945974A79E8C77CB02F94495BA9F87BAA0E038 Certificate serial: A38A9993EA8991B225A0751742B9FC9B91CAE0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B945974A79E8C77CB02F94495BA9F87BAA0E038.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft Manifest number: 0363 Signing time: Fri 27 Jun 2025 20:42:05 +0000 Manifest this update: Fri 27 Jun 2025 20:37:05 +0000 Manifest next update: Tue 01 Jul 2025 07:31:05 +0000 Files and hashes: 1: 7B945974A79E8C77CB02F94495BA9F87BAA0E038.crl (hash: YDKXyr3r5Ut1lpdxWBrulE78QVUwY1PezQS7tVbEJns=) 2: 3130332e3136372e33302e302f32332d3234203d3e203137393935.roa (hash: gtwTI3DJtMemj0Ti0EgOwcabGH1uQz62nqOF7QPkYWU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.crl rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B945974A79E8C77CB02F94495BA9F87BAA0E038.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 07:31:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: a3:8a:99:93:ea:89:91:b2:25:a0:75:17:42:b9:fc:9b:91:ca:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B945974A79E8C77CB02F94495BA9F87BAA0E038 Validity Not Before: Jun 27 20:37:05 2025 GMT Not After : Jul 1 07:31:05 2025 GMT Subject: CN=37D0138AB0239532873C2DF1622B93EAA91DB9CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:1c:16:57:eb:97:12:e3:70:c9:e6:b6:4e:b9: f9:9b:c6:fc:fd:7f:ca:e3:95:4e:09:20:ad:6e:7c: 06:be:3e:84:b9:7e:fe:88:f6:48:79:f9:b3:f7:a1: 10:81:e4:2f:e1:52:c8:91:17:fe:76:a1:4e:c6:d1: 5f:9e:fa:30:28:d1:68:18:20:23:38:cf:41:33:b5: 3f:16:fc:a6:3d:ff:2e:3d:71:88:f6:33:77:1c:b5: 29:5b:c6:fa:66:96:11:13:df:c5:18:a9:89:fa:8c: 74:63:ea:5a:91:57:c8:8e:b3:94:ce:45:d8:83:df: 20:22:b5:dd:14:eb:a3:7f:57:3c:3e:47:8b:79:00: dd:70:2c:ad:55:9b:52:79:fa:5b:3a:ff:4f:54:2c: 97:29:da:9b:6d:2a:9d:b1:a6:f4:89:61:07:5c:9c: d7:63:f1:14:3b:4f:9b:b7:48:7d:87:06:00:1d:30: 93:d4:4d:c0:d8:ce:26:77:78:2c:92:e0:2f:ca:61: ec:54:9c:0d:a2:f0:c9:f2:f8:66:06:88:69:cb:ca: c2:33:5b:00:d4:a8:1f:03:81:ef:e9:61:2d:6c:41: aa:d1:93:b0:20:74:c9:1e:ac:e2:2e:25:41:85:ac: fc:ad:45:bc:2f:35:b1:25:24:a4:06:29:ed:4c:bf: 53:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:D0:13:8A:B0:23:95:32:87:3C:2D:F1:62:2B:93:EA:A9:1D:B9:CC X509v3 Authority Key Identifier: keyid:7B:94:59:74:A7:9E:8C:77:CB:02:F9:44:95:BA:9F:87:BA:A0:E0:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B945974A79E8C77CB02F94495BA9F87BAA0E038.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:3f:18:b8:18:a0:bf:fc:c5:a0:36:af:24:47:e1:2a:48:63: 00:11:69:35:8e:19:d7:29:04:93:53:76:c7:2c:c2:1d:c1:26: 87:a5:bf:f4:84:4e:33:b2:92:60:85:2a:5d:90:f0:f1:88:13: 5d:1a:76:c9:b7:e7:32:23:2e:12:c4:43:04:10:6d:20:e4:28: a1:bc:7d:66:e8:5c:fe:f1:89:83:0b:21:28:6d:07:07:7d:6b: 6e:ef:b9:3f:7a:ca:83:78:d9:09:37:fb:75:df:9e:83:b9:47: 39:4d:9b:8b:57:96:98:3b:66:a7:d6:c0:1a:8f:72:a5:22:8b: 56:d6:c4:a9:cb:e6:e4:72:d9:8b:ba:e5:17:0b:51:96:4d:76: 92:97:37:29:54:5d:68:db:e1:fc:87:d7:62:2f:6b:5b:0c:66: 71:80:83:20:cb:07:8e:0b:d2:4e:3c:32:9d:b8:a2:3d:1f:80: b8:5e:7c:3e:69:e0:05:7e:6a:8e:4e:0d:de:9f:5c:d1:66:d4: f0:7b:83:01:c0:a9:02:a0:fe:95:62:af:43:63:e9:f9:77:da: 41:1f:d5:c2:10:59:2f:84:d8:7d:d9:da:ca:5a:f5:2b:c5:b4: f5:ba:b2:d3:91:67:b6:9c:50:8c:83:56:c7:3f:1e:26:7b:63: cc:89:b1:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAKOKmZPqiZGyJaB1F0K5/JuRyuAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0I5NDU5NzRBNzlFOEM3N0NCMDJGOTQ0OTVCQTlGODdC QUEwRTAzODAeFw0yNTA2MjcyMDM3MDVaFw0yNTA3MDEwNzMxMDVaMDMxMTAvBgNV BAMTKDM3RDAxMzhBQjAyMzk1MzI4NzNDMkRGMTYyMkI5M0VBQTkxREI5Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdHBZX65cS43DJ5rZOufmbxvz9 f8rjlU4JIK1ufAa+PoS5fv6I9kh5+bP3oRCB5C/hUsiRF/52oU7G0V+e+jAo0WgY ICM4z0EztT8W/KY9/y49cYj2M3cctSlbxvpmlhET38UYqYn6jHRj6lqRV8iOs5TO RdiD3yAitd0U66N/Vzw+R4t5AN1wLK1Vm1J5+ls6/09ULJcp2pttKp2xpvSJYQdc nNdj8RQ7T5u3SH2HBgAdMJPUTcDYziZ3eCyS4C/KYexUnA2i8Mny+GYGiGnLysIz WwDUqB8Dge/pYS1sQarRk7AgdMkerOIuJUGFrPytRbwvNbElJKQGKe1Mv1O7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUN9ATirAjlTKHPC3xYiuT6qkducwwHwYDVR0j BBgwFoAUe5RZdKeejHfLAvlElbqfh7qg4DgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzYzNWNlOS0wZWE1LTQ3ZDgtOWZjYy1jYWQxYzlmMDZmYmUvMC83Qjk0NTk3NEE3 OUU4Qzc3Q0IwMkY5NDQ5NUJBOUY4N0JBQTBFMDM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0I5NDU5NzRBNzlFOEM3N0NCMDJGOTQ0OTVCQTlGODdCQUEw RTAzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2M2MzVjZTktMGVhNS00N2Q4LTlm Y2MtY2FkMWM5ZjA2ZmJlLzAvN0I5NDU5NzRBNzlFOEM3N0NCMDJGOTQ0OTVCQTlG ODdCQUEwRTAzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADs/GLgYoL/8xaA2ryRH4SpIYwARaTWOGdcp BJNTdscswh3BJoelv/SETjOykmCFKl2Q8PGIE10adsm35zIjLhLEQwQQbSDkKKG8 fWboXP7xiYMLIShtBwd9a27vuT96yoN42Qk3+3XfnoO5RzlNm4tXlpg7ZqfWwBqP cqUii1bWxKnL5uRy2Yu65RcLUZZNdpKXNylUXWjb4fyH12Iva1sMZnGAgyDLB44L 0k48Mp24oj0fgLhefD5p4AV+ao5ODd6fXNFm1PB7gwHAqQKg/pVir0Nj6fl32kEf 1cIQWS+E2H3Z2spa9SvFtPW6stORZ7acUIyDVsc/HiZ7Y8yJsdw= -----END CERTIFICATE-----Generated at Sun Jun 29 18:29:03 2025 by rpki-client