$ rpki-client -vvf repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft File: 4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft (raw, json) Hash identifier: 6RMXwaGN9aH5a6xLSmHvb5OXYLi1dph5EleVXyMBp4o= Subject key identifier: 84:25:09:A4:06:71:6B:B5:BF:0F:05:49:AF:12:BA:EE:8C:6A:30:D0 Authority key identifier: 4E:CF:7D:FB:09:FB:3B:5C:21:DD:E6:61:15:0B:95:76:8B:6B:D3:19 Certificate issuer: /CN=4ECF7DFB09FB3B5C21DDE661150B95768B6BD319 Certificate serial: 09A4BA859EDC8722C2A133A128918D8DC93DF3F9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft Manifest number: 01F3 Signing time: Sun 29 Jun 2025 08:41:21 +0000 Manifest this update: Sun 29 Jun 2025 08:36:21 +0000 Manifest next update: Wed 02 Jul 2025 11:45:21 +0000 Files and hashes: 1: 4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl (hash: WruW7qA24QXrIcU2FspDcntytIsn0YWqDMJDjywOXC8=) 2: 3130332e3136332e3233302e302f32332d3233203d3e20313431393037.roa (hash: TWsMpo4cWVJOgLuAED46zFpQBaqLsvvEiv7xGtW44bE=) 3: 3130332e3136332e3233302e302f32342d3234203d3e20313431393037.roa (hash: BplHdHRvA1GeP43VsiSGj8a+Gmuq6dP6VgR2vhuZ0uU=) 4: 3130332e3136332e3233312e302f32342d3234203d3e20313431393037.roa (hash: yg4jobWhxttigVY/iZoK6bsKdtykwi2az+8aCa0nyW4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 11:45:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:a4:ba:85:9e:dc:87:22:c2:a1:33:a1:28:91:8d:8d:c9:3d:f3:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ECF7DFB09FB3B5C21DDE661150B95768B6BD319 Validity Not Before: Jun 29 08:36:21 2025 GMT Not After : Jul 2 11:45:21 2025 GMT Subject: CN=842509A406716BB5BF0F0549AF12BAEE8C6A30D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:db:4e:d0:3b:7b:dc:b7:b9:51:a8:10:a2:e4: d7:11:f7:7b:c8:97:8a:32:fc:44:db:2b:06:1f:66: 4e:96:85:6e:07:d8:80:f0:3c:84:f3:a0:ef:15:e4: 17:dc:7b:db:5f:6c:d2:3e:17:8c:23:42:8b:23:c4: b9:a5:1c:2a:4d:fa:c8:ea:fc:6c:a6:00:c6:3a:77: a1:36:e0:63:5a:d6:7b:58:41:14:8d:b9:f5:29:7b: 2e:da:d8:2c:31:df:bf:b6:90:00:1c:54:a1:19:d4: cb:ae:4f:7f:0c:a7:65:2f:2b:30:30:f7:c2:da:e3: bc:6b:78:41:76:c3:f5:92:9f:ac:74:03:5e:d9:0a: d4:ad:8b:e8:60:c6:ff:bb:45:5d:00:d4:bb:ff:3d: ad:4c:48:bd:82:73:83:2b:58:ec:85:c3:7f:86:07: f0:db:76:d1:42:34:61:c8:c4:03:d2:4a:57:c5:d9: db:be:36:6a:7a:51:f1:0e:c3:84:80:fc:33:a6:7f: e4:1a:02:7f:95:e2:33:21:37:63:6f:1b:e3:75:8b: d7:60:69:72:b0:e9:d5:52:09:93:9f:3a:b3:8d:a9: 8c:5e:36:a9:00:a7:4f:dd:45:ce:52:b4:99:e2:cd: fc:5e:9d:81:1e:fc:ad:4f:80:ec:f2:fb:00:19:ce: 53:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:25:09:A4:06:71:6B:B5:BF:0F:05:49:AF:12:BA:EE:8C:6A:30:D0 X509v3 Authority Key Identifier: keyid:4E:CF:7D:FB:09:FB:3B:5C:21:DD:E6:61:15:0B:95:76:8B:6B:D3:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:cc:f2:6c:e7:bd:fe:cc:a2:90:60:a1:91:5a:97:4d:3d:a0: 9e:c6:f2:38:b4:1a:5d:22:29:e7:04:d0:36:77:48:bf:84:c1: f5:34:d1:0b:19:1e:4a:e5:da:e3:85:ca:29:e3:4c:df:bb:18: 31:40:0b:25:5c:29:67:0a:71:49:3e:fb:b7:67:aa:fd:a6:26: 4c:0b:68:bd:0c:f7:26:97:5a:85:5c:7d:ee:99:a5:2a:fe:9c: 62:dc:a2:f4:61:41:62:b8:80:27:81:f6:77:1a:e9:32:ef:61: 76:2f:7e:1f:43:8b:1c:6f:e0:9f:02:20:c8:19:d4:eb:fb:03: 72:0e:d7:4d:cd:f1:b5:bf:0e:a8:4b:ef:cd:fd:d4:cd:5c:93: b5:9a:1d:03:fa:40:7d:37:b4:06:aa:9b:44:24:d8:6c:34:29: af:83:e4:d8:d8:b3:b4:79:7d:22:9a:ee:aa:b7:25:bf:dd:7b: 7e:4e:7b:d6:5f:df:86:d3:e8:a1:40:9d:29:6d:e9:7d:74:32: d5:ff:26:4a:6f:ac:b4:3a:b6:6f:ce:90:13:a3:74:3b:db:20: 28:91:a0:75:67:4d:29:24:77:99:c2:04:ff:3b:e5:15:8e:ff: 70:f3:40:a9:77:1e:c7:f0:06:9b:29:d6:7b:ff:42:6e:87:71: 71:52:e2:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCaS6hZ7chyLCoTOhKJGNjck98/kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVDRjdERkIwOUZCM0I1QzIxRERFNjYxMTUwQjk1NzY4 QjZCRDMxOTAeFw0yNTA2MjkwODM2MjFaFw0yNTA3MDIxMTQ1MjFaMDMxMTAvBgNV BAMTKDg0MjUwOUE0MDY3MTZCQjVCRjBGMDU0OUFGMTJCQUVFOEM2QTMwRDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF207QO3vct7lRqBCi5NcR93vI l4oy/ETbKwYfZk6WhW4H2IDwPITzoO8V5Bfce9tfbNI+F4wjQosjxLmlHCpN+sjq /GymAMY6d6E24GNa1ntYQRSNufUpey7a2Cwx37+2kAAcVKEZ1MuuT38Mp2UvKzAw 98La47xreEF2w/WSn6x0A17ZCtSti+hgxv+7RV0A1Lv/Pa1MSL2Cc4MrWOyFw3+G B/DbdtFCNGHIxAPSSlfF2du+Nmp6UfEOw4SA/DOmf+QaAn+V4jMhN2NvG+N1i9dg aXKw6dVSCZOfOrONqYxeNqkAp0/dRc5StJnizfxenYEe/K1PgOzy+wAZzlMtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhCUJpAZxa7W/DwVJrxK67oxqMNAwHwYDVR0j BBgwFoAUTs99+wn7O1wh3eZhFQuVdotr0xkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDAzNWIzYi1lNmM1LTQ3ZjgtOTliNC0xY2IwMzI2ZWRhZTUvMC80RUNGN0RGQjA5 RkIzQjVDMjFEREU2NjExNTBCOTU3NjhCNkJEMzE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEVDRjdERkIwOUZCM0I1QzIxRERFNjYxMTUwQjk1NzY4QjZC RDMxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2QwMzViM2ItZTZjNS00N2Y4LTk5 YjQtMWNiMDMyNmVkYWU1LzAvNEVDRjdERkIwOUZCM0I1QzIxRERFNjYxMTUwQjk1 NzY4QjZCRDMxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAXM8mznvf7MopBgoZFal009oJ7G8ji0Gl0i KecE0DZ3SL+EwfU00QsZHkrl2uOFyinjTN+7GDFACyVcKWcKcUk++7dnqv2mJkwL aL0M9yaXWoVcfe6ZpSr+nGLcovRhQWK4gCeB9nca6TLvYXYvfh9Dixxv4J8CIMgZ 1Ov7A3IO103N8bW/DqhL78391M1ck7WaHQP6QH03tAaqm0Qk2Gw0Ka+D5NjYs7R5 fSKa7qq3Jb/de35Oe9Zf34bT6KFAnSlt6X10MtX/JkpvrLQ6tm/OkBOjdDvbICiR oHVnTSkkd5nCBP875RWO/3DzQKl3HsfwBpsp1nv/Qm6HcXFS4m8= -----END CERTIFICATE-----Generated at Mon Jun 30 21:55:25 2025 by rpki-client