$ rpki-client -vvf repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.mft File: 0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.mft (raw, json) Hash identifier: uDyWT45WakuwfwyXKEDc/37vRcH4DPcZcNHoCak8ImE= Subject key identifier: 8B:0B:41:F6:CD:C5:A3:A5:42:3A:7C:80:06:F8:F9:A9:D6:71:E5:52 Authority key identifier: 01:00:A7:F6:C4:D5:8C:38:67:F9:CE:D7:E7:D4:6D:CE:D0:A5:78:04 Certificate issuer: /CN=0100A7F6C4D58C3867F9CED7E7D46DCED0A57804 Certificate serial: 4F8AEAAB7B2704E9123A9BA75A66D70253A1D2F1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.cer Subject info access: rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.mft Manifest number: 0189 Signing time: Fri 25 Apr 2025 23:30:49 +0000 Manifest this update: Fri 25 Apr 2025 23:25:49 +0000 Manifest next update: Tue 29 Apr 2025 05:25:49 +0000 Files and hashes: 1: 3130332e33352e3135332e302f32342d3234203d3e2039333431.roa (hash: OiTIcbauaRQZkoh05qWm9giYFtWGDu1XoyHAojKPf2g=) 2: 0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.crl (hash: ruTE/ZtXRT28Mmbx5rWxQGcJ2xGiFFSEZjwQyXheM78=) 3: 3130332e33352e3135322e302f32342d3234203d3e2039333431.roa (hash: ywb3a8C62BA/PMdGKSYbEqNH95chMJkQIqcJmusbD0s=) 4: 3130332e33352e3135322e302f32332d3233203d3e2039333431.roa (hash: 2htdgS+1Or0wZzJh4jZYW5oaI6hoP4/N0BvY1mQLhMA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.crl rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 05:25:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:8a:ea:ab:7b:27:04:e9:12:3a:9b:a7:5a:66:d7:02:53:a1:d2:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0100A7F6C4D58C3867F9CED7E7D46DCED0A57804 Validity Not Before: Apr 25 23:25:49 2025 GMT Not After : Apr 29 05:25:49 2025 GMT Subject: CN=8B0B41F6CDC5A3A5423A7C8006F8F9A9D671E552 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:6f:f7:4c:ba:9e:46:d4:3c:12:57:8f:47:fc: 5c:59:46:16:05:fc:01:13:92:e5:b9:49:1e:bf:54: cf:bc:35:e2:7a:07:4e:c6:25:cb:ac:88:8e:da:26: eb:6c:ba:73:b4:63:9b:d8:32:03:43:24:13:3b:12: dc:13:2b:a2:d2:44:34:e3:d0:d1:a8:93:1c:a1:70: 3e:8b:0e:36:76:d2:a9:db:f9:ba:13:b4:41:12:31: 24:33:fb:0a:56:ba:4e:a8:4e:46:16:de:c7:c9:21: cc:72:91:fb:ff:f8:92:4b:cb:73:44:3b:7e:67:50: f0:4b:4d:eb:6e:53:94:ae:ad:14:a2:7d:26:4a:7d: 46:f1:8d:5e:50:18:92:91:37:b3:99:eb:03:5d:13: 23:af:b6:33:cf:cb:e8:75:ec:ea:41:3d:09:61:a9: e2:27:12:60:5c:cd:0e:8c:94:a7:42:67:27:e1:c7: f7:e8:44:d3:21:83:e6:5d:ae:53:6a:6b:66:fc:7a: 59:c6:86:0e:c2:52:07:99:69:ce:97:65:f7:34:11: bd:41:19:4d:6f:b4:c0:2a:5b:0f:37:b4:5e:5f:17: 1b:d7:3c:23:30:8b:8a:dd:b3:8b:a5:3b:2f:94:79: 15:80:b0:85:bb:74:a9:1e:00:4e:c0:ec:7a:e3:5d: 6a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:0B:41:F6:CD:C5:A3:A5:42:3A:7C:80:06:F8:F9:A9:D6:71:E5:52 X509v3 Authority Key Identifier: keyid:01:00:A7:F6:C4:D5:8C:38:67:F9:CE:D7:E7:D4:6D:CE:D0:A5:78:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:61:b2:8e:65:09:36:0c:aa:37:90:d4:cd:8f:79:0d:64:6b: 4d:81:39:69:2e:dc:0f:00:e4:e2:16:e4:3c:5c:58:28:93:5e: f7:41:21:32:c8:fa:e2:45:ec:60:c5:33:a8:c0:87:fa:21:b9: 07:92:e2:29:35:fb:bf:2d:26:3f:02:13:16:4f:29:6f:d7:fd: ab:e5:7a:a5:fb:25:24:94:84:0b:c4:45:a9:93:0a:83:ad:14: 07:3d:14:78:0a:7e:6d:3d:cd:36:17:3c:68:ae:f8:e2:5c:ab: 1b:1b:e3:68:4e:02:31:9e:7a:5b:ee:44:e2:86:cc:ec:ff:ac: 5f:e1:0d:58:20:37:35:46:db:59:f9:73:9d:e3:65:9d:1c:ed: 37:6b:f3:27:bc:45:f6:21:e0:68:64:a4:f6:21:13:23:23:fe: f7:f5:3b:39:c0:d3:b3:5b:cc:d3:78:21:a4:31:d5:e8:c0:1a: 5e:f9:f7:49:33:17:d4:86:03:14:72:bf:d7:42:56:b0:84:da: 56:26:19:ea:07:5c:bf:5a:d9:91:f5:3b:c1:5d:8c:8f:7b:4e: d4:52:46:01:18:a5:38:db:e8:cf:e3:af:3c:1f:6f:14:e3:2c: 5c:9d:f7:08:3c:42:5e:59:78:4e:f6:bf:6b:40:a6:1a:cf:29: df:de:53:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT4rqq3snBOkSOpunWmbXAlOh0vEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDEwMEE3RjZDNEQ1OEMzODY3RjlDRUQ3RTdENDZEQ0VE MEE1NzgwNDAeFw0yNTA0MjUyMzI1NDlaFw0yNTA0MjkwNTI1NDlaMDMxMTAvBgNV BAMTKDhCMEI0MUY2Q0RDNUEzQTU0MjNBN0M4MDA2RjhGOUE5RDY3MUU1NTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClb/dMup5G1DwSV49H/FxZRhYF /AETkuW5SR6/VM+8NeJ6B07GJcusiI7aJutsunO0Y5vYMgNDJBM7EtwTK6LSRDTj 0NGokxyhcD6LDjZ20qnb+boTtEESMSQz+wpWuk6oTkYW3sfJIcxykfv/+JJLy3NE O35nUPBLTetuU5SurRSifSZKfUbxjV5QGJKRN7OZ6wNdEyOvtjPPy+h17OpBPQlh qeInEmBczQ6MlKdCZyfhx/foRNMhg+ZdrlNqa2b8elnGhg7CUgeZac6XZfc0Eb1B GU1vtMAqWw83tF5fFxvXPCMwi4rds4ulOy+UeRWAsIW7dKkeAE7A7HrjXWoLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiwtB9s3Fo6VCOnyABvj5qdZx5VIwHwYDVR0j BBgwFoAUAQCn9sTVjDhn+c7X59RtztCleAQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDg4NTUyNS1jYjBmLTQ2YTAtODI1My0wNDJkN2Q3YWZmMzgvMC8wMTAwQTdGNkM0 RDU4QzM4NjdGOUNFRDdFN0Q0NkRDRUQwQTU3ODA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDEwMEE3RjZDNEQ1OEMzODY3RjlDRUQ3RTdENDZEQ0VEMEE1 NzgwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQ4ODU1MjUtY2IwZi00NmEwLTgy NTMtMDQyZDdkN2FmZjM4LzAvMDEwMEE3RjZDNEQ1OEMzODY3RjlDRUQ3RTdENDZE Q0VEMEE1NzgwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABdhso5lCTYMqjeQ1M2PeQ1ka02BOWku3A8A 5OIW5DxcWCiTXvdBITLI+uJF7GDFM6jAh/ohuQeS4ik1+78tJj8CExZPKW/X/avl eqX7JSSUhAvERamTCoOtFAc9FHgKfm09zTYXPGiu+OJcqxsb42hOAjGeelvuROKG zOz/rF/hDVggNzVG21n5c53jZZ0c7Tdr8ye8RfYh4GhkpPYhEyMj/vf1OznA07Nb zNN4IaQx1ejAGl7590kzF9SGAxRyv9dCVrCE2lYmGeoHXL9a2ZH1O8FdjI97TtRS RgEYpTjb6M/jrzwfbxTjLFyd9wg8Ql5ZeE72v2tAphrPKd/eUxM= -----END CERTIFICATE-----Generated at Sat Apr 26 19:27:55 2025 by rpki-client