$ rpki-client -vvf repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/07AD580AB5CD76B94856F9AC742EDD757E7880B0.mft File: 07AD580AB5CD76B94856F9AC742EDD757E7880B0.mft (raw, json) Hash identifier: HtiRgvWPkSG3G8mcSBejDcAjiNUU8oFOgAfRpuGSDUk= Subject key identifier: 1E:5D:E3:CF:AC:3C:EB:55:78:2D:10:D7:13:00:A6:41:1E:19:3A:2C Authority key identifier: 07:AD:58:0A:B5:CD:76:B9:48:56:F9:AC:74:2E:DD:75:7E:78:80:B0 Certificate issuer: /CN=07AD580AB5CD76B94856F9AC742EDD757E7880B0 Certificate serial: 2304BACCC1984464DFA31EAFF70615A04D6CFD2D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/07AD580AB5CD76B94856F9AC742EDD757E7880B0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/07AD580AB5CD76B94856F9AC742EDD757E7880B0.mft Manifest number: A4 Signing time: Sun 29 Jun 2025 09:51:20 +0000 Manifest this update: Sun 29 Jun 2025 09:46:20 +0000 Manifest next update: Wed 02 Jul 2025 20:57:20 +0000 Files and hashes: 1: 3136302e32322e32342e302f32342d3234203d3e20313532383030.roa (hash: uFyUwDp7HftGLg0g84ngD2vF4KM8TeTAH6ZOZ5/X7R0=) 2: 3136302e32322e32352e302f32342d3234203d3e20313532383030.roa (hash: 2Vf9dnfwxWJU32Hy8iKNhEgZIr2NXcazWOlIdCFgYLI=) 3: 07AD580AB5CD76B94856F9AC742EDD757E7880B0.crl (hash: g1RGqdIMtgSkJrB+JW7yscGF46ADx9ajjDO3XJADXgc=) 4: 3136302e32322e32342e302f32332d3233203d3e20313532383030.roa (hash: NxfUk896HyTOfrSpP12vAOga4gJLt6+kmfvZ86uKz+o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/07AD580AB5CD76B94856F9AC742EDD757E7880B0.crl rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/07AD580AB5CD76B94856F9AC742EDD757E7880B0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/07AD580AB5CD76B94856F9AC742EDD757E7880B0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 20:57:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:04:ba:cc:c1:98:44:64:df:a3:1e:af:f7:06:15:a0:4d:6c:fd:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07AD580AB5CD76B94856F9AC742EDD757E7880B0 Validity Not Before: Jun 29 09:46:20 2025 GMT Not After : Jul 2 20:57:20 2025 GMT Subject: CN=1E5DE3CFAC3CEB55782D10D71300A6411E193A2C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:69:f8:12:e6:73:97:de:f6:aa:27:2f:28:04: ad:68:08:47:d0:59:e5:1d:48:d0:3d:88:0b:14:59: 8c:2f:22:51:1d:d6:4b:9a:8e:23:ad:fb:25:49:7b: 6c:82:90:5e:48:a1:46:80:82:cd:0a:9d:36:46:74: 3b:ea:aa:18:15:67:ab:f1:57:81:95:c6:fc:7f:bd: 08:45:2d:d8:cd:2a:84:ba:ef:53:64:4b:8f:10:ec: fc:bc:71:03:60:4a:73:4c:f3:ac:79:cf:5a:20:39: 1d:1f:69:d6:7c:aa:71:cb:d2:f0:5f:ff:ad:cd:ab: 11:77:c1:47:eb:94:3a:c7:bf:e3:23:e5:9c:a1:c9: 1f:d5:0a:9f:a8:7e:6b:37:63:83:7a:8d:9e:a4:73: da:6c:49:52:ec:d8:50:bd:6b:a3:00:3f:46:0f:c6: 4e:c2:ce:1b:a9:96:48:35:34:72:b8:5e:09:32:33: e5:b5:aa:73:6e:bb:7e:73:16:47:04:a1:d0:ca:fb: 77:75:47:ee:41:99:f3:50:c8:17:e4:e9:bc:e6:92: 60:09:80:da:f6:70:48:5b:2d:b2:3a:d1:86:61:d9: b8:5f:c6:09:9c:11:59:a1:4c:c5:cc:a7:9e:a3:ab: 44:de:0d:8c:c8:4a:8d:cd:54:62:fa:62:a1:21:8e: b0:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:5D:E3:CF:AC:3C:EB:55:78:2D:10:D7:13:00:A6:41:1E:19:3A:2C X509v3 Authority Key Identifier: keyid:07:AD:58:0A:B5:CD:76:B9:48:56:F9:AC:74:2E:DD:75:7E:78:80:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/07AD580AB5CD76B94856F9AC742EDD757E7880B0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/07AD580AB5CD76B94856F9AC742EDD757E7880B0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e256bbba-1826-4d86-b873-2f6dd6325771/0/07AD580AB5CD76B94856F9AC742EDD757E7880B0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a3:0a:ce:b8:3b:da:f1:01:9b:e6:fb:15:36:ba:e2:77:2b:ea: f9:93:d4:f8:30:ff:c3:5b:76:c7:1f:e3:34:a4:41:60:e4:06: 35:5d:23:ba:d1:40:b7:a4:e9:83:dd:f3:44:93:d0:13:14:4d: 92:53:a1:0b:c9:c8:00:c7:e5:44:55:4c:ee:a6:65:7b:ae:9d: 10:15:eb:6e:00:0a:22:f0:48:56:4f:95:07:6b:b6:f2:7a:19: ad:d7:da:9e:6a:7b:ba:ab:2b:c9:7b:4c:48:5e:28:5a:b5:6a: 2e:5c:d6:98:e2:85:0a:bc:b1:e0:a8:3b:85:1c:b7:d9:72:92: f0:9a:90:95:17:71:05:cb:47:e4:12:b6:9b:75:a3:5d:1c:ba: ea:63:a5:f3:4d:07:2f:61:1d:4d:9c:71:2c:65:56:97:25:8c: cd:5e:f2:1f:f1:60:0f:83:4c:17:57:82:c6:eb:48:df:1d:4f: 4a:ce:4e:ae:57:07:40:da:e1:41:c1:aa:44:bd:dc:f5:65:6c: 8c:c8:39:57:48:66:a4:2b:e5:d8:8f:45:47:4b:e4:3d:85:02: 47:d7:0d:fa:b4:4f:a8:88:bf:d8:e3:56:1a:5e:89:f9:82:b7: a8:24:02:40:46:1c:77:3c:70:33:b2:11:9e:b3:a6:67:0e:6c: dc:ce:83:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIwS6zMGYRGTfox6v9wYVoE1s/S0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDdBRDU4MEFCNUNENzZCOTQ4NTZGOUFDNzQyRURENzU3 RTc4ODBCMDAeFw0yNTA2MjkwOTQ2MjBaFw0yNTA3MDIyMDU3MjBaMDMxMTAvBgNV BAMTKDFFNURFM0NGQUMzQ0VCNTU3ODJEMTBENzEzMDBBNjQxMUUxOTNBMkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvafgS5nOX3vaqJy8oBK1oCEfQ WeUdSNA9iAsUWYwvIlEd1kuajiOt+yVJe2yCkF5IoUaAgs0KnTZGdDvqqhgVZ6vx V4GVxvx/vQhFLdjNKoS671NkS48Q7Py8cQNgSnNM86x5z1ogOR0fadZ8qnHL0vBf /63NqxF3wUfrlDrHv+Mj5ZyhyR/VCp+ofms3Y4N6jZ6kc9psSVLs2FC9a6MAP0YP xk7Czhuplkg1NHK4XgkyM+W1qnNuu35zFkcEodDK+3d1R+5BmfNQyBfk6bzmkmAJ gNr2cEhbLbI60YZh2bhfxgmcEVmhTMXMp56jq0TeDYzISo3NVGL6YqEhjrDrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHl3jz6w861V4LRDXEwCmQR4ZOiwwHwYDVR0j BBgwFoAUB61YCrXNdrlIVvmsdC7ddX54gLAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MjU2YmJiYS0xODI2LTRkODYtYjg3My0yZjZkZDYzMjU3NzEvMC8wN0FENTgwQUI1 Q0Q3NkI5NDg1NkY5QUM3NDJFREQ3NTdFNzg4MEIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMDdBRDU4MEFCNUNENzZCOTQ4NTZGOUFDNzQyRURENzU3RTc4 ODBCMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTI1NmJiYmEtMTgyNi00ZDg2LWI4 NzMtMmY2ZGQ2MzI1NzcxLzAvMDdBRDU4MEFCNUNENzZCOTQ4NTZGOUFDNzQyRURE NzU3RTc4ODBCMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKMKzrg72vEBm+b7FTa64ncr6vmT1Pgw/8Nb dscf4zSkQWDkBjVdI7rRQLek6YPd80ST0BMUTZJToQvJyADH5URVTO6mZXuunRAV 624ACiLwSFZPlQdrtvJ6Ga3X2p5qe7qrK8l7TEheKFq1ai5c1pjihQq8seCoO4Uc t9lykvCakJUXcQXLR+QStpt1o10cuupjpfNNBy9hHU2ccSxlVpcljM1e8h/xYA+D TBdXgsbrSN8dT0rOTq5XB0Da4UHBqkS93PVlbIzIOVdIZqQr5diPRUdL5D2FAkfX Dfq0T6iIv9jjVhpeifmCt6gkAkBGHHc8cDOyEZ6zpmcObNzOg3M= -----END CERTIFICATE-----Generated at Mon Jun 30 05:19:59 2025 by rpki-client