$ rpki-client -vvf repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.mft File: 7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.mft (raw, json) Hash identifier: HFHRfJ/C/kIuZXMpw1nlx9cKlQIORayjGvhe4C3dtcI= Subject key identifier: 80:8A:DF:F7:1B:42:83:90:83:55:F9:52:12:1C:91:0B:7D:08:1A:99 Authority key identifier: 7C:4E:AC:B6:A8:C8:C7:27:6D:4C:EB:86:DC:DC:A3:E7:F4:68:A7:93 Certificate issuer: /CN=7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793 Certificate serial: 7944C60E501F3AFBFFDDE2D7AFF1D5EB587AAA47 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.mft Manifest number: C8 Signing time: Fri 27 Jun 2025 20:10:50 +0000 Manifest this update: Fri 27 Jun 2025 20:05:50 +0000 Manifest next update: Tue 01 Jul 2025 08:03:50 +0000 Files and hashes: 1: 3135372e32302e3231322e302f32332d3234203d3e20313532343135.roa (hash: rbjJyAwc8hNNHHozNUZcHui2yrJ3XRP3MxmsmjgubzQ=) 2: 7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.crl (hash: rXi/gfbODWPmGrVKg19PSlh86jsaqArwyujVMPCnpj0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.crl rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 08:03:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:44:c6:0e:50:1f:3a:fb:ff:dd:e2:d7:af:f1:d5:eb:58:7a:aa:47 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793 Validity Not Before: Jun 27 20:05:50 2025 GMT Not After : Jul 1 08:03:50 2025 GMT Subject: CN=808ADFF71B4283908355F952121C910B7D081A99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:0e:82:36:21:da:4f:74:1a:a2:d4:12:52:66: 00:69:7a:dd:19:8b:d9:94:5e:8d:5f:66:0a:47:19: a1:49:a9:f5:42:6a:05:4c:de:e8:11:41:b4:bc:39: 7d:98:be:7f:1e:fe:af:fc:08:ca:01:bf:bd:ed:16: 40:a2:4c:a6:88:fe:8e:9c:55:b2:f0:5c:97:97:55: e7:89:3e:a1:d5:4e:f9:99:6a:b2:7f:e4:dc:43:87: 73:21:54:2c:67:47:66:63:c6:81:7f:d2:1c:48:2c: c6:e0:55:03:c8:3c:d2:90:da:fa:41:76:6c:b6:a9: 89:94:b8:6a:bf:3b:ff:52:c5:99:f7:88:df:c1:e0: 5a:fc:c1:f1:da:2a:30:96:54:41:82:1f:7b:61:95: e0:b7:58:4a:f8:43:13:81:83:57:8f:0f:8b:ca:8d: 23:8b:3b:5d:d7:42:0f:b5:0c:ec:8c:fb:87:b5:74: 4a:d1:c4:b9:8e:48:2a:16:de:a2:18:90:83:78:35: e9:c2:89:3e:60:a2:93:04:9f:7f:c5:51:80:30:9a: bf:f3:80:33:aa:32:b9:59:f6:ae:d7:9c:d7:f8:7b: 08:f9:f7:84:ad:4a:d2:b0:30:6f:e0:69:6f:83:22: 64:15:ea:32:2d:57:53:1e:03:91:a4:74:37:96:c9: c3:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 80:8A:DF:F7:1B:42:83:90:83:55:F9:52:12:1C:91:0B:7D:08:1A:99 X509v3 Authority Key Identifier: keyid:7C:4E:AC:B6:A8:C8:C7:27:6D:4C:EB:86:DC:DC:A3:E7:F4:68:A7:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:30:f7:35:11:74:99:b0:1e:09:29:8c:c8:16:dc:9b:f5:78: be:b5:7c:ab:ca:2f:26:3c:b2:d2:59:b5:24:9d:ca:b2:7c:4b: ac:ba:3f:c7:5f:a0:3a:36:ad:b9:ff:cb:7d:2e:e7:b6:4a:45: 4e:c7:75:d7:58:7d:3e:e7:b6:9d:c8:8e:ae:95:bd:6a:4c:45: 03:cd:32:a4:49:2c:51:69:3b:9d:a1:4e:55:25:04:03:68:1c: 4f:43:ae:a7:17:20:df:76:a6:72:b4:d1:4b:ec:f1:ef:d6:0f: 5c:e0:4c:ce:61:37:06:86:3e:0d:9f:05:5c:13:97:ce:60:47: 61:86:6f:74:12:1e:84:90:a5:dc:b4:25:81:77:d2:5e:70:b2: 88:57:cf:a3:73:3c:53:b1:76:9d:b5:7a:eb:a5:84:a4:13:ea: ed:22:88:1a:4e:83:82:48:f2:89:fb:e8:90:42:8d:89:bb:6d: 99:a3:63:bf:48:bf:26:cb:5e:10:3c:fd:4a:35:69:ca:f6:03: 1c:5f:c6:18:bf:09:ab:87:7a:ac:54:77:c8:93:10:ae:77:65: f5:a8:a9:b0:80:28:13:f0:2e:c4:48:9a:fa:d3:87:c8:c2:8d: 81:4a:7e:1f:bf:5a:49:fa:eb:77:3a:48:35:da:20:20:b4:23: 3f:f8:dd:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeUTGDlAfOvv/3eLXr/HV61h6qkcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M0RUFDQjZBOEM4QzcyNzZENENFQjg2RENEQ0EzRTdG NDY4QTc5MzAeFw0yNTA2MjcyMDA1NTBaFw0yNTA3MDEwODAzNTBaMDMxMTAvBgNV BAMTKDgwOEFERkY3MUI0MjgzOTA4MzU1Rjk1MjEyMUM5MTBCN0QwODFBOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7DoI2IdpPdBqi1BJSZgBpet0Z i9mUXo1fZgpHGaFJqfVCagVM3ugRQbS8OX2Yvn8e/q/8CMoBv73tFkCiTKaI/o6c VbLwXJeXVeeJPqHVTvmZarJ/5NxDh3MhVCxnR2ZjxoF/0hxILMbgVQPIPNKQ2vpB dmy2qYmUuGq/O/9SxZn3iN/B4Fr8wfHaKjCWVEGCH3thleC3WEr4QxOBg1ePD4vK jSOLO13XQg+1DOyM+4e1dErRxLmOSCoW3qIYkIN4NenCiT5gopMEn3/FUYAwmr/z gDOqMrlZ9q7XnNf4ewj594StStKwMG/gaW+DImQV6jItV1MeA5GkdDeWycOdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgIrf9xtCg5CDVflSEhyRC30IGpkwHwYDVR0j BBgwFoAUfE6stqjIxydtTOuG3Nyj5/Rop5MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2I0N2FiNi1kMWYxLTRkMmUtOWNmYy04MDg0YTRiYWNmMGIvMC83QzRFQUNCNkE4 QzhDNzI3NkQ0Q0VCODZEQ0RDQTNFN0Y0NjhBNzkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0M0RUFDQjZBOEM4QzcyNzZENENFQjg2RENEQ0EzRTdGNDY4 QTc5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNiNDdhYjYtZDFmMS00ZDJlLTlj ZmMtODA4NGE0YmFjZjBiLzAvN0M0RUFDQjZBOEM4QzcyNzZENENFQjg2RENEQ0Ez RTdGNDY4QTc5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJkw9zURdJmwHgkpjMgW3Jv1eL61fKvKLyY8 stJZtSSdyrJ8S6y6P8dfoDo2rbn/y30u57ZKRU7HdddYfT7ntp3Ijq6VvWpMRQPN MqRJLFFpO52hTlUlBANoHE9DrqcXIN92pnK00Uvs8e/WD1zgTM5hNwaGPg2fBVwT l85gR2GGb3QSHoSQpdy0JYF30l5wsohXz6NzPFOxdp21euulhKQT6u0iiBpOg4JI 8on76JBCjYm7bZmjY79IvybLXhA8/Uo1acr2Axxfxhi/CauHeqxUd8iTEK53ZfWo qbCAKBPwLsRImvrTh8jCjYFKfh+/Wkn663c6SDXaICC0Iz/43aY= -----END CERTIFICATE-----Generated at Mon Jun 30 03:40:50 2025 by rpki-client