$ rpki-client -vvf repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.mft File: 07043FF6B66099F2CBFBBB64672822F3014937E8.mft (raw, json) Hash identifier: Psy5mgPaw7Q3m+si9iaVT+maA5Tj4SuITXLByGOEKhQ= Subject key identifier: 31:70:4F:50:BA:28:60:A5:91:C1:3F:4C:36:4D:52:E2:5D:59:E5:0E Authority key identifier: 07:04:3F:F6:B6:60:99:F2:CB:FB:BB:64:67:28:22:F3:01:49:37:E8 Certificate issuer: /CN=07043FF6B66099F2CBFBBB64672822F3014937E8 Certificate serial: 0E8D20832C5B568919B710F0F8250D42B7765B14 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07043FF6B66099F2CBFBBB64672822F3014937E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.mft Manifest number: 01AF Signing time: Sun 27 Apr 2025 18:21:37 +0000 Manifest this update: Sun 27 Apr 2025 18:16:37 +0000 Manifest next update: Thu 01 May 2025 00:28:37 +0000 Files and hashes: 1: 3130332e3132352e31342e302f32342d3234203d3e20313335363336.roa (hash: LDE8MHvWr7ClJaD2b6MGzIMO0HFW7Xb1cGyTVwE6YBs=) 2: 3130332e3132352e31332e302f32342d3234203d3e20313335363336.roa (hash: h/JHGAZA+XMm5GRiDBuDE93tuKC3bgB9VcHqmJ9NiB8=) 3: 07043FF6B66099F2CBFBBB64672822F3014937E8.crl (hash: 8SpQROHB6My+NzwaXH/rv9ivro0/EFBW5zBvS6Yub/s=) 4: 3130332e3132352e31352e302f32342d3234203d3e20313335363336.roa (hash: jfBPikwcOXfyCAw2T4LtcRftqdJoZDQGQR3Ub10AvuI=) 5: 3130332e3132352e31322e302f32342d3234203d3e20313533333137.roa (hash: 1xo0DjDSXvXZUNtwZdd+vDQQvBq4jlF/Yl9f8y0lmbA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.crl rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07043FF6B66099F2CBFBBB64672822F3014937E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 00:28:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:8d:20:83:2c:5b:56:89:19:b7:10:f0:f8:25:0d:42:b7:76:5b:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07043FF6B66099F2CBFBBB64672822F3014937E8 Validity Not Before: Apr 27 18:16:37 2025 GMT Not After : May 1 00:28:37 2025 GMT Subject: CN=31704F50BA2860A591C13F4C364D52E25D59E50E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:6f:0e:08:84:7a:61:96:41:69:1b:25:27:3c: 72:82:61:cc:18:f9:63:2f:ca:e2:75:1c:26:eb:c7: b5:f2:fd:50:c7:c5:02:e9:8d:30:4d:51:e3:4b:60: 25:fb:0f:a2:88:53:38:5a:40:ee:56:d2:51:c3:ef: 10:43:db:37:92:ac:75:df:01:d2:99:bd:ad:da:54: d5:02:00:58:98:20:34:83:5f:8f:0e:5a:97:6c:fa: 09:15:4b:9c:bd:4a:a7:56:de:f8:6f:1e:fe:df:ee: 41:1b:18:dc:0d:e9:1e:aa:08:a4:2b:5a:2a:41:77: e2:4f:81:4d:06:4e:e1:5e:6c:fd:50:67:46:db:56: 9a:01:64:a7:31:6f:af:9d:d9:97:3c:45:c7:71:62: 74:b2:e6:9d:8e:fd:61:d1:76:cf:b3:56:0b:9c:ad: 4d:e8:5b:d8:75:01:d4:49:e1:4c:23:87:c6:67:3c: dd:02:4d:bf:8b:58:9a:20:a7:ea:32:29:aa:3b:d0: c5:fd:a3:c9:f5:e5:f6:14:8a:1b:48:08:8a:4c:6c: fe:5c:0f:ac:cf:60:71:0e:66:26:14:c3:b0:49:b1: fe:6c:7c:44:77:68:ba:06:a1:69:12:0b:fb:74:eb: 57:8c:f3:65:9b:15:38:ff:0f:d6:8c:17:24:10:a3: b5:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:70:4F:50:BA:28:60:A5:91:C1:3F:4C:36:4D:52:E2:5D:59:E5:0E X509v3 Authority Key Identifier: keyid:07:04:3F:F6:B6:60:99:F2:CB:FB:BB:64:67:28:22:F3:01:49:37:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07043FF6B66099F2CBFBBB64672822F3014937E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:a8:2c:7e:ba:73:4a:76:dd:10:09:8f:89:18:91:7c:28:49: 09:fc:1c:80:f5:46:52:9f:30:f7:cd:6b:29:aa:52:3c:81:d0: 57:9f:56:2f:9c:d8:18:06:87:40:1e:33:7c:cd:c5:ee:36:29: 63:9c:5d:e8:f6:ad:da:e9:7d:af:35:6b:4e:5c:29:bf:e5:0c: 98:9c:f4:db:1b:d4:c8:89:0b:7d:2f:a9:e6:da:df:85:94:31: 5e:5a:d5:7d:12:e8:eb:6b:7f:66:d3:28:18:14:ca:ce:7a:30: 05:eb:ae:9b:f9:e2:65:85:27:da:14:12:db:27:07:c8:17:35: 58:9f:53:03:4d:0e:40:80:88:41:82:37:78:65:db:b0:62:d2: 91:86:f2:24:39:f9:c2:fb:68:05:04:35:6e:7e:b9:43:4b:01: 2c:ac:39:97:dc:33:96:d7:e1:02:d5:b5:d4:0d:ce:3c:18:c9: ac:fe:90:67:29:3e:86:ce:62:e4:fa:2b:dc:38:7f:c6:4d:a0: 09:6e:1d:b5:d6:24:a1:db:c7:f2:95:10:38:61:6d:62:ec:05: 3b:78:74:bf:62:53:36:0e:c4:a5:e6:1b:2f:35:e3:61:70:53: f2:50:f6:f4:a0:90:3e:e2:67:5e:60:29:d6:c7:3f:31:b7:3b: 92:2b:92:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDo0ggyxbVokZtxDw+CUNQrd2WxQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDcwNDNGRjZCNjYwOTlGMkNCRkJCQjY0NjcyODIyRjMw MTQ5MzdFODAeFw0yNTA0MjcxODE2MzdaFw0yNTA1MDEwMDI4MzdaMDMxMTAvBgNV BAMTKDMxNzA0RjUwQkEyODYwQTU5MUMxM0Y0QzM2NEQ1MkUyNUQ1OUU1MEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7bw4IhHphlkFpGyUnPHKCYcwY +WMvyuJ1HCbrx7Xy/VDHxQLpjTBNUeNLYCX7D6KIUzhaQO5W0lHD7xBD2zeSrHXf AdKZva3aVNUCAFiYIDSDX48OWpds+gkVS5y9SqdW3vhvHv7f7kEbGNwN6R6qCKQr WipBd+JPgU0GTuFebP1QZ0bbVpoBZKcxb6+d2Zc8RcdxYnSy5p2O/WHRds+zVguc rU3oW9h1AdRJ4Uwjh8ZnPN0CTb+LWJogp+oyKao70MX9o8n15fYUihtICIpMbP5c D6zPYHEOZiYUw7BJsf5sfER3aLoGoWkSC/t061eM82WbFTj/D9aMFyQQo7VlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMXBPULooYKWRwT9MNk1S4l1Z5Q4wHwYDVR0j BBgwFoAUBwQ/9rZgmfLL+7tkZygi8wFJN+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzU0YmU5YS05YjVkLTRjNjQtYjRlOC02MWM3NGU5ZWNlZGMvMC8wNzA0M0ZGNkI2 NjA5OUYyQ0JGQkJCNjQ2NzI4MjJGMzAxNDkzN0U4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDcwNDNGRjZCNjYwOTlGMkNCRkJCQjY0NjcyODIyRjMwMTQ5 MzdFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGM1NGJlOWEtOWI1ZC00YzY0LWI0 ZTgtNjFjNzRlOWVjZWRjLzAvMDcwNDNGRjZCNjYwOTlGMkNCRkJCQjY0NjcyODIy RjMwMTQ5MzdFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJioLH66c0p23RAJj4kYkXwoSQn8HID1RlKf MPfNaymqUjyB0FefVi+c2BgGh0AeM3zNxe42KWOcXej2rdrpfa81a05cKb/lDJic 9Nsb1MiJC30vqeba34WUMV5a1X0S6Otrf2bTKBgUys56MAXrrpv54mWFJ9oUEtsn B8gXNVifUwNNDkCAiEGCN3hl27Bi0pGG8iQ5+cL7aAUENW5+uUNLASysOZfcM5bX 4QLVtdQNzjwYyaz+kGcpPobOYuT6K9w4f8ZNoAluHbXWJKHbx/KVEDhhbWLsBTt4 dL9iUzYOxKXmGy8142FwU/JQ9vSgkD7iZ15gKdbHPzG3O5Irkvs= -----END CERTIFICATE-----Generated at Wed Apr 30 00:15:52 2025 by rpki-client