$ rpki-client -vvf repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft File: 7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft (raw, json) Hash identifier: vmvhi5GEhatLaUrCH641kijKLR+aZXPUJFMK3UEJ/Ow= Subject key identifier: BB:14:D4:02:8F:A4:7C:E5:A8:80:B0:E1:1B:0F:44:29:EC:97:52:D6 Authority key identifier: 7E:F8:9B:45:69:2D:93:E9:CA:15:DA:4C:F9:D4:39:30:06:32:EF:D4 Certificate issuer: /CN=7EF89B45692D93E9CA15DA4CF9D439300632EFD4 Certificate serial: 0A4751D490D899EF662B0C1204CEA22BE42F1C10 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft Manifest number: 01EE Signing time: Sat 26 Apr 2025 06:10:02 +0000 Manifest this update: Sat 26 Apr 2025 06:05:02 +0000 Manifest next update: Tue 29 Apr 2025 13:14:02 +0000 Files and hashes: 1: 3130332e3138302e35392e302f32342d3234203d3e2039333431.roa (hash: i2rSOVglupsSuL0ZoSXVd/tHmiF7pW8+dps3wslED5c=) 2: 7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl (hash: HID/UEaArIJK3t7/nBP6aMGJvj0JGLsKTL/0mXg79bE=) 3: 3130332e3138302e35382e302f32342d3234203d3e2039333431.roa (hash: FdloWvzwT5E7bV0h2MrBbwdyadkn1oI1JIyg7UwS1zQ=) 4: 3130332e3138302e35382e302f32332d3233203d3e2039333431.roa (hash: lr7nUWH/7raRlFDZhAD65ANTChYQYYLQIg/z8dK94J4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 13:14:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:47:51:d4:90:d8:99:ef:66:2b:0c:12:04:ce:a2:2b:e4:2f:1c:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EF89B45692D93E9CA15DA4CF9D439300632EFD4 Validity Not Before: Apr 26 06:05:02 2025 GMT Not After : Apr 29 13:14:02 2025 GMT Subject: CN=BB14D4028FA47CE5A880B0E11B0F4429EC9752D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:ed:dc:a2:2a:0d:63:84:0e:c8:49:13:ec:28: e6:25:a4:59:54:ef:8b:70:7f:f8:bf:d8:3f:a2:f2: e4:48:9e:96:31:ea:0c:db:28:1f:89:88:95:2a:0a: fd:aa:43:64:c6:49:cb:ae:d8:d4:35:aa:6b:0e:e1: a5:0d:24:15:4d:8d:63:2f:32:ca:e3:4f:f1:a5:96: 04:9c:3a:cb:16:e2:e4:38:10:a3:bb:3e:0b:ed:2b: 01:87:ff:9d:fc:6a:28:ea:87:f0:09:1c:f3:04:e5: 74:4c:0c:8e:db:37:f9:36:0e:34:83:68:2a:8a:14: b7:c3:44:15:59:e1:ca:f9:82:91:c1:50:ee:f5:8f: 4c:fb:b6:50:ac:56:e0:10:bd:9a:46:3b:34:34:95: 35:c9:f3:0e:08:06:99:df:36:03:7c:c4:1d:5f:16: 62:3e:e4:bf:c2:de:d0:21:e7:7b:05:c5:7f:33:b6: dc:69:11:65:f9:3b:53:99:31:07:00:28:87:02:d8: e8:bc:c5:0f:24:be:21:20:26:d4:07:13:64:78:7d: 40:79:7d:35:1e:10:5f:e3:ef:dd:d1:50:15:d9:1f: 22:19:b5:d4:b2:c6:00:10:b6:2a:c2:2c:af:61:6a: e1:74:85:94:db:bf:df:fa:e0:3a:02:2d:94:52:da: 41:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:14:D4:02:8F:A4:7C:E5:A8:80:B0:E1:1B:0F:44:29:EC:97:52:D6 X509v3 Authority Key Identifier: keyid:7E:F8:9B:45:69:2D:93:E9:CA:15:DA:4C:F9:D4:39:30:06:32:EF:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:c0:e0:aa:cb:e2:a8:7c:ae:da:f6:cd:02:3d:a3:c3:04:8d: f3:33:4a:27:f0:71:20:74:7f:72:3c:05:c1:ee:b6:7b:85:df: 5f:5d:de:09:48:b2:29:76:cc:08:e9:e0:3a:a9:35:62:6c:41: 22:e5:62:22:6f:0d:9f:8b:58:ab:61:70:0d:24:dc:95:63:53: 0e:78:90:9d:59:f3:d4:c3:99:e5:9c:a1:cc:25:b3:1f:08:9d: ae:b2:0b:e4:88:5a:f1:e9:04:9c:19:01:8d:65:0c:11:6a:52: cf:22:06:f3:7d:bf:bb:59:43:8e:c0:cb:2a:ce:d6:3a:e4:0e: a0:4f:79:94:43:d5:5e:95:03:be:54:b9:48:20:38:67:a2:da: 21:a8:18:17:7a:34:08:23:79:b6:c2:cc:d3:26:4f:22:f9:8d: 8e:ce:69:6b:99:3f:51:78:9b:e7:11:0b:90:c1:0b:6d:69:4f: 5d:58:fc:76:da:32:6f:d9:83:64:a2:a2:b4:bc:e5:fb:5e:f0: 73:00:df:0c:21:eb:2f:1f:98:10:53:03:17:de:5f:71:32:92: 32:3e:02:4d:08:33:6d:68:f4:80:a1:26:22:5f:79:91:1f:42: 92:d1:d8:67:78:75:52:ac:21:f3:58:c3:c8:5a:20:1f:fd:2d: 53:49:e9:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCkdR1JDYme9mKwwSBM6iK+QvHBAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VGODlCNDU2OTJEOTNFOUNBMTVEQTRDRjlENDM5MzAw NjMyRUZENDAeFw0yNTA0MjYwNjA1MDJaFw0yNTA0MjkxMzE0MDJaMDMxMTAvBgNV BAMTKEJCMTRENDAyOEZBNDdDRTVBODgwQjBFMTFCMEY0NDI5RUM5NzUyRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDk7dyiKg1jhA7ISRPsKOYlpFlU 74twf/i/2D+i8uRInpYx6gzbKB+JiJUqCv2qQ2TGScuu2NQ1qmsO4aUNJBVNjWMv MsrjT/GllgScOssW4uQ4EKO7PgvtKwGH/538aijqh/AJHPME5XRMDI7bN/k2DjSD aCqKFLfDRBVZ4cr5gpHBUO71j0z7tlCsVuAQvZpGOzQ0lTXJ8w4IBpnfNgN8xB1f FmI+5L/C3tAh53sFxX8zttxpEWX5O1OZMQcAKIcC2Oi8xQ8kviEgJtQHE2R4fUB5 fTUeEF/j793RUBXZHyIZtdSyxgAQtirCLK9hauF0hZTbv9/64DoCLZRS2kGbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuxTUAo+kfOWogLDhGw9EKeyXUtYwHwYDVR0j BBgwFoAUfvibRWktk+nKFdpM+dQ5MAYy79QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NzFhODQ3ZC0yNTMxLTRkN2YtOTI0MS05Nzc3ODUwNjA1ZDYvMC83RUY4OUI0NTY5 MkQ5M0U5Q0ExNURBNENGOUQ0MzkzMDA2MzJFRkQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0VGODlCNDU2OTJEOTNFOUNBMTVEQTRDRjlENDM5MzAwNjMy RUZENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTcxYTg0N2QtMjUzMS00ZDdmLTky NDEtOTc3Nzg1MDYwNWQ2LzAvN0VGODlCNDU2OTJEOTNFOUNBMTVEQTRDRjlENDM5 MzAwNjMyRUZENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHbA4KrL4qh8rtr2zQI9o8MEjfMzSifwcSB0 f3I8BcHutnuF319d3glIsil2zAjp4DqpNWJsQSLlYiJvDZ+LWKthcA0k3JVjUw54 kJ1Z89TDmeWcocwlsx8Ina6yC+SIWvHpBJwZAY1lDBFqUs8iBvN9v7tZQ47AyyrO 1jrkDqBPeZRD1V6VA75UuUggOGei2iGoGBd6NAgjebbCzNMmTyL5jY7OaWuZP1F4 m+cRC5DBC21pT11Y/HbaMm/Zg2SiorS85fte8HMA3wwh6y8fmBBTAxfeX3EykjI+ Ak0IM21o9IChJiJfeZEfQpLR2Gd4dVKsIfNYw8haIB/9LVNJ6Ss= -----END CERTIFICATE-----Generated at Sat Apr 26 19:27:12 2025 by rpki-client