$ rpki-client -vvf repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft File: C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft (raw, json) Hash identifier: FNmg6QejKjgR1D6gWYLRLYMbCQrxa7Hmuq5BZM1211k= Subject key identifier: 78:D4:EC:2E:62:7D:C4:5E:DE:0D:D7:3E:D4:A9:20:76:65:AE:4C:40 Authority key identifier: C0:7F:5A:E2:D9:DC:99:D0:AF:28:B6:B1:54:21:0C:91:1E:FB:1D:8A Certificate issuer: /CN=C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A Certificate serial: 5B2CDBC1F83816D092EE8060D6BB74FDCA06BACA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft Manifest number: 9A Signing time: Sun 29 Jun 2025 03:31:56 +0000 Manifest this update: Sun 29 Jun 2025 03:26:56 +0000 Manifest next update: Wed 02 Jul 2025 15:07:56 +0000 Files and hashes: 1: 323030313a6466343a6363303a3a2f34382d3438203d3e20313532383431.roa (hash: 67keM1hQfIucwuWQhvzKk8YthRoib+6jHGmIeaRFOqs=) 2: C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.crl (hash: QVTdxYmIcX5T4poDRSJt3M8YKp0/1s6QzIj8ZphC0ro=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.crl rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:2c:db:c1:f8:38:16:d0:92:ee:80:60:d6:bb:74:fd:ca:06:ba:ca Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A Validity Not Before: Jun 29 03:26:56 2025 GMT Not After : Jul 2 15:07:56 2025 GMT Subject: CN=78D4EC2E627DC45EDE0DD73ED4A9207665AE4C40 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:fe:bd:50:c3:af:e5:e6:cf:38:3d:87:8e:dc: 02:60:3e:28:54:db:8e:45:2f:ec:7e:0b:32:09:2d: d8:10:1b:8e:f0:c7:41:47:53:25:ac:00:e2:71:52: a0:48:1d:8e:64:a4:40:a9:b1:0b:4a:d0:ff:9e:4d: 41:1a:2a:df:81:46:b8:79:4c:89:f5:ef:4c:b7:b9: fd:5a:4b:11:a5:a0:45:44:6f:88:5a:b7:a2:bc:83: 2d:df:29:3c:81:0b:2d:71:46:7f:a5:81:0b:b0:e3: db:6f:71:ad:5c:f9:89:7d:39:ac:76:55:95:1b:df: 1a:88:24:2b:38:85:e2:ef:b5:0b:26:79:78:f9:87: 9b:c3:38:28:30:49:03:65:08:cb:00:60:f5:a7:eb: 62:a5:6c:6f:3f:46:7b:15:4f:e1:98:62:5a:12:e4: cf:86:65:f9:01:55:f3:c8:19:12:00:d8:4b:2e:18: 2a:02:b1:38:f0:78:b7:a1:dc:9f:7f:0f:0e:ed:7d: ae:90:e2:ea:b6:52:d1:0d:a0:5a:8a:f4:01:5d:82: 1d:02:37:e4:b8:31:09:2a:fc:ba:53:dc:e5:37:81: 2f:38:78:0b:32:32:6b:1e:ca:e1:6a:79:48:44:39: 49:e0:44:18:44:f9:23:29:e3:3f:dd:5a:4c:72:eb: c6:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:D4:EC:2E:62:7D:C4:5E:DE:0D:D7:3E:D4:A9:20:76:65:AE:4C:40 X509v3 Authority Key Identifier: keyid:C0:7F:5A:E2:D9:DC:99:D0:AF:28:B6:B1:54:21:0C:91:1E:FB:1D:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:1f:51:9e:61:03:0a:f7:87:8f:30:a7:e9:99:c7:79:30:7f: d4:13:81:70:40:fc:44:a9:17:a9:b3:1c:e4:4d:f8:04:54:83: 73:e6:4c:39:7c:f0:39:98:0b:83:44:93:29:1d:b3:4d:cb:ca: 88:a1:b7:cf:b4:96:e9:25:0b:dd:85:65:31:7f:db:79:54:79: ad:01:b7:cb:71:7f:42:ee:82:8c:bf:4c:90:46:04:62:fd:8c: d0:75:35:bb:df:70:42:63:d9:3d:41:c8:c7:7f:63:34:9f:1c: 1f:06:31:4b:87:2b:e5:0e:23:48:fb:90:d8:29:ed:56:32:1f: b3:1b:1c:69:fa:52:90:0e:70:77:d9:49:19:da:08:72:3c:4b: ed:7a:34:88:b1:8a:3b:94:e3:b0:aa:b5:40:38:c1:a3:e3:ec: 45:45:c0:c5:6f:0d:a8:8b:ca:8d:d4:cc:8e:f3:7a:e5:4b:13: 80:c2:11:c3:4f:30:f6:4d:dd:3f:da:f2:90:a3:38:8a:7b:ca: d0:70:b4:f8:18:0b:74:41:12:fc:c1:86:bd:ca:5d:49:fd:62: 35:fd:0f:6f:3d:5e:e1:fd:bc:bd:a2:b4:e3:bc:f1:17:ba:e1: b7:0f:c1:d1:f7:61:e8:61:ef:70:06:b4:4a:57:df:37:9e:a4: c1:a8:29:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWyzbwfg4FtCS7oBg1rt0/coGusowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA3RjVBRTJEOURDOTlEMEFGMjhCNkIxNTQyMTBDOTEx RUZCMUQ4QTAeFw0yNTA2MjkwMzI2NTZaFw0yNTA3MDIxNTA3NTZaMDMxMTAvBgNV BAMTKDc4RDRFQzJFNjI3REM0NUVERTBERDczRUQ0QTkyMDc2NjVBRTRDNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8/r1Qw6/l5s84PYeO3AJgPihU 245FL+x+CzIJLdgQG47wx0FHUyWsAOJxUqBIHY5kpECpsQtK0P+eTUEaKt+BRrh5 TIn170y3uf1aSxGloEVEb4hat6K8gy3fKTyBCy1xRn+lgQuw49tvca1c+Yl9Oax2 VZUb3xqIJCs4heLvtQsmeXj5h5vDOCgwSQNlCMsAYPWn62KlbG8/RnsVT+GYYloS 5M+GZfkBVfPIGRIA2EsuGCoCsTjweLeh3J9/Dw7tfa6Q4uq2UtENoFqK9AFdgh0C N+S4MQkq/LpT3OU3gS84eAsyMmseyuFqeUhEOUngRBhE+SMp4z/dWkxy68azAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeNTsLmJ9xF7eDdc+1KkgdmWuTEAwHwYDVR0j BBgwFoAUwH9a4tncmdCvKLaxVCEMkR77HYowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZTdkNzM4ZS0yY2M3LTRiZDItYmIyOC05MTQyZTFiYWEwYmEvMS9DMDdGNUFFMkQ5 REM5OUQwQUYyOEI2QjE1NDIxMEM5MTFFRkIxRDhBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzA3RjVBRTJEOURDOTlEMEFGMjhCNkIxNTQyMTBDOTExRUZC MUQ4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2U3ZDczOGUtMmNjNy00YmQyLWJi MjgtOTE0MmUxYmFhMGJhLzEvQzA3RjVBRTJEOURDOTlEMEFGMjhCNkIxNTQyMTBD OTExRUZCMUQ4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIUfUZ5hAwr3h48wp+mZx3kwf9QTgXBA/ESp F6mzHORN+ARUg3PmTDl88DmYC4NEkykds03Lyoiht8+0luklC92FZTF/23lUea0B t8txf0Lugoy/TJBGBGL9jNB1NbvfcEJj2T1ByMd/YzSfHB8GMUuHK+UOI0j7kNgp 7VYyH7MbHGn6UpAOcHfZSRnaCHI8S+16NIixijuU47CqtUA4waPj7EVFwMVvDaiL yo3UzI7zeuVLE4DCEcNPMPZN3T/a8pCjOIp7ytBwtPgYC3RBEvzBhr3KXUn9YjX9 D289XuH9vL2itOO88Re64bcPwdH3Yehh73AGtEpX3zeepMGoKUI= -----END CERTIFICATE-----Generated at Sun Jun 29 18:51:43 2025 by rpki-client