$ rpki-client -vvf repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft File: C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft (raw, json) Hash identifier: Tc6Mdde+WiQGf36HYM8C8sjHWXUIJisJYTDT9PpfcrA= Subject key identifier: C9:D9:70:04:0D:15:61:5A:A0:73:72:56:CF:31:A2:04:C3:0E:BE:45 Authority key identifier: C7:F3:F7:AC:64:8C:60:73:C7:FE:73:62:71:A1:A8:E7:27:79:62:B7 Certificate issuer: /CN=C7F3F7AC648C6073C7FE736271A1A8E7277962B7 Certificate serial: 239115C5B886D356A82F12EF3DC3F6E6E3DA51E3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft Manifest number: 010B Signing time: Fri 27 Jun 2025 16:41:27 +0000 Manifest this update: Fri 27 Jun 2025 16:36:27 +0000 Manifest next update: Mon 30 Jun 2025 19:05:27 +0000 Files and hashes: 1: 3130332e3134342e3132382e302f32332d3233203d3e20313339343333.roa (hash: fPtFW64rMVWWTfe0idTINB3BUS2Ju2ivrfcwXSv84rI=) 2: C7F3F7AC648C6073C7FE736271A1A8E7277962B7.crl (hash: ZtbzqlWC6hF7sCsYLz6qwqztrCP1t4/C5wSfhGFOglU=) 3: 3130332e3134342e3132382e302f32342d3234203d3e20313339343333.roa (hash: n0wSfYokNi/npNPzftcDmS3sdBSeLLSMYOoHz/p9hrE=) 4: 3130332e3134342e3132392e302f32342d3234203d3e20313339343333.roa (hash: RIPwkwrtUM/4ffKNW9yUN28LgPyDGB1P3EsXYFO7WUY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.crl rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 30 Jun 2025 19:05:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:91:15:c5:b8:86:d3:56:a8:2f:12:ef:3d:c3:f6:e6:e3:da:51:e3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7F3F7AC648C6073C7FE736271A1A8E7277962B7 Validity Not Before: Jun 27 16:36:27 2025 GMT Not After : Jun 30 19:05:27 2025 GMT Subject: CN=C9D970040D15615AA0737256CF31A204C30EBE45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ce:49:da:8e:80:51:81:6e:0c:a7:e1:e3:c1: 38:29:f9:25:fd:3f:17:fe:d7:79:85:6c:e6:4e:5b: 66:96:1f:e0:0a:24:c9:16:d3:2f:cd:ec:f9:54:05: 53:b2:d2:b2:d0:1d:57:4f:68:f0:36:ab:ac:d9:bd: 2f:39:27:ee:9f:0e:11:af:ed:57:c9:85:08:10:ba: d1:d9:43:7f:47:11:af:55:e9:01:50:2f:eb:66:24: 9d:09:06:0f:34:96:1f:77:2d:d8:ce:7f:7b:7d:3d: e6:77:0b:89:07:74:24:a3:2f:87:e0:96:63:30:aa: e4:34:c8:01:3f:ea:bf:0d:8f:ca:b0:41:a2:23:a6: 88:d1:8e:fe:7b:7e:07:b9:a7:23:94:2b:fb:e2:84: 4e:f8:7b:6e:0c:bd:3d:cb:3d:15:9e:b1:b9:1b:79: 4b:c2:07:11:c6:21:32:7a:21:81:6e:90:2a:8b:4c: 98:0c:f4:cd:bf:66:7b:9d:7c:16:8e:e2:96:bd:9b: d6:1f:d0:38:59:db:a0:29:f8:cb:8d:3b:2b:61:20: 4a:12:9e:1c:df:a5:70:93:ba:bc:50:71:f3:9c:bd: 9b:18:6b:41:0e:93:67:e5:44:db:4d:c9:dd:3a:94: 3e:f1:cf:d2:50:d4:3d:ec:e3:2c:73:a9:e2:57:91: 51:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:D9:70:04:0D:15:61:5A:A0:73:72:56:CF:31:A2:04:C3:0E:BE:45 X509v3 Authority Key Identifier: keyid:C7:F3:F7:AC:64:8C:60:73:C7:FE:73:62:71:A1:A8:E7:27:79:62:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:e9:d1:29:7a:ca:10:7f:64:8b:ec:ce:f3:90:f5:6a:42:f3: bc:28:c0:a3:89:82:62:05:5d:ed:03:cc:a4:22:23:89:79:36: 17:de:30:62:9b:8e:70:0f:e0:f7:8e:ab:a4:45:f6:c3:49:ca: 59:49:d9:8b:2c:6c:03:66:3b:38:9b:78:e9:69:94:78:6e:58: 33:5b:f2:ea:7c:c8:9a:bb:a6:ca:fa:32:88:ea:c6:ea:ae:d8: fe:d8:00:72:ce:d2:f1:3d:1f:73:77:11:e9:5f:78:3f:60:58: 24:e6:18:e9:21:c8:2f:7f:e1:cd:8a:8f:0d:80:db:d2:b2:8f: 3a:0b:4a:1c:dd:dc:fa:fc:c5:3a:10:72:33:3c:82:0a:10:4a: 9f:3c:3a:6d:60:05:4b:4a:f7:56:43:01:16:2c:0e:02:62:97: 2f:6e:83:40:0c:11:3b:8d:54:4d:2e:31:9f:bb:1a:93:4f:4d: a0:80:42:28:38:99:a9:79:43:56:34:92:30:7f:7f:8a:1b:ca: 70:41:a4:96:bd:41:8a:68:d3:71:22:60:89:eb:a1:a8:b9:be: 96:17:6f:f8:ec:75:d5:d7:9a:ab:d9:5a:cc:44:b8:1d:d9:9c: 18:27:5f:c3:4a:5e:e3:34:35:03:d3:e9:5f:63:62:cf:85:df: d3:be:c1:f5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI5EVxbiG01aoLxLvPcP25uPaUeMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdGM0Y3QUM2NDhDNjA3M0M3RkU3MzYyNzFBMUE4RTcy Nzc5NjJCNzAeFw0yNTA2MjcxNjM2MjdaFw0yNTA2MzAxOTA1MjdaMDMxMTAvBgNV BAMTKEM5RDk3MDA0MEQxNTYxNUFBMDczNzI1NkNGMzFBMjA0QzMwRUJFNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOzknajoBRgW4Mp+HjwTgp+SX9 Pxf+13mFbOZOW2aWH+AKJMkW0y/N7PlUBVOy0rLQHVdPaPA2q6zZvS85J+6fDhGv 7VfJhQgQutHZQ39HEa9V6QFQL+tmJJ0JBg80lh93LdjOf3t9PeZ3C4kHdCSjL4fg lmMwquQ0yAE/6r8Nj8qwQaIjpojRjv57fge5pyOUK/vihE74e24MvT3LPRWesbkb eUvCBxHGITJ6IYFukCqLTJgM9M2/ZnudfBaO4pa9m9Yf0DhZ26Ap+MuNOythIEoS nhzfpXCTurxQcfOcvZsYa0EOk2flRNtNyd06lD7xz9JQ1D3s4yxzqeJXkVE/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUydlwBA0VYVqgc3JWzzGiBMMOvkUwHwYDVR0j BBgwFoAUx/P3rGSMYHPH/nNicaGo5yd5YrcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OWY1NzVkYi1jNzM4LTRiOGUtYjM2YS02YjAyMGM2Njg0OWQvMC9DN0YzRjdBQzY0 OEM2MDczQzdGRTczNjI3MUExQThFNzI3Nzk2MkI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzdGM0Y3QUM2NDhDNjA3M0M3RkU3MzYyNzFBMUE4RTcyNzc5 NjJCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTlmNTc1ZGItYzczOC00YjhlLWIz NmEtNmIwMjBjNjY4NDlkLzAvQzdGM0Y3QUM2NDhDNjA3M0M3RkU3MzYyNzFBMUE4 RTcyNzc5NjJCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEzp0Sl6yhB/ZIvszvOQ9WpC87wowKOJgmIF Xe0DzKQiI4l5NhfeMGKbjnAP4PeOq6RF9sNJyllJ2YssbANmOzibeOlplHhuWDNb 8up8yJq7psr6Mojqxuqu2P7YAHLO0vE9H3N3EelfeD9gWCTmGOkhyC9/4c2Kjw2A 29KyjzoLShzd3Pr8xToQcjM8ggoQSp88Om1gBUtK91ZDARYsDgJily9ug0AMETuN VE0uMZ+7GpNPTaCAQig4mal5Q1Y0kjB/f4obynBBpJa9QYpo03EiYInroai5vpYX b/jsddXXmqvZWsxEuB3ZnBgnX8NKXuM0NQPT6V9jYs+F39O+wfU= -----END CERTIFICATE-----Generated at Sun Jun 29 18:08:08 2025 by rpki-client