$ rpki-client -vvf repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/7ED69B0DB232E419E90D72766374EA03E6F18F73.mft File: 7ED69B0DB232E419E90D72766374EA03E6F18F73.mft (raw, json) Hash identifier: SoITqhspVSzMqy8l3bpcReREsgMaX3ltPqUnAcqoDBk= Subject key identifier: 95:78:D3:A3:27:6D:F6:49:62:DA:AA:80:CA:F9:D9:05:B7:2B:9D:E5 Authority key identifier: 7E:D6:9B:0D:B2:32:E4:19:E9:0D:72:76:63:74:EA:03:E6:F1:8F:73 Certificate issuer: /CN=7ED69B0DB232E419E90D72766374EA03E6F18F73 Certificate serial: 05805CBEF8E854860F853557CDAF1083D19E78E4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7ED69B0DB232E419E90D72766374EA03E6F18F73.cer Subject info access: rsync://repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/7ED69B0DB232E419E90D72766374EA03E6F18F73.mft Manifest number: A3 Signing time: Wed 30 Apr 2025 03:21:20 +0000 Manifest this update: Wed 30 Apr 2025 03:16:20 +0000 Manifest next update: Sat 03 May 2025 13:00:20 +0000 Files and hashes: 1: 7ED69B0DB232E419E90D72766374EA03E6F18F73.crl (hash: iX3yZpVgM4bbgGspALaFacWGF2NL1uV9fxFxWZQt1Cs=) 2: 3135372e32302e39342e302f32342d3234203d3e20313532343039.roa (hash: yeQYlb5D5MRjJOZy3icwpq+Xda5AxDKy2LKlKgiIVJg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/7ED69B0DB232E419E90D72766374EA03E6F18F73.crl rsync://repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/7ED69B0DB232E419E90D72766374EA03E6F18F73.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7ED69B0DB232E419E90D72766374EA03E6F18F73.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 13:00:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:80:5c:be:f8:e8:54:86:0f:85:35:57:cd:af:10:83:d1:9e:78:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ED69B0DB232E419E90D72766374EA03E6F18F73 Validity Not Before: Apr 30 03:16:20 2025 GMT Not After : May 3 13:00:20 2025 GMT Subject: CN=9578D3A3276DF64962DAAA80CAF9D905B72B9DE5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:f9:60:ff:51:69:cd:11:54:42:f7:1f:1d:c7: b7:da:d2:ac:09:99:e5:f3:46:37:e8:f8:73:ca:16: 2b:2f:61:78:8c:2f:68:4a:65:0d:9c:de:00:a9:29: aa:54:57:69:e7:2c:e8:96:9d:1c:33:21:91:fb:56: 8b:ec:78:3d:8e:5a:db:c0:e7:a2:22:5f:8d:49:06: 41:e7:79:73:95:fb:66:57:9f:96:35:b0:29:48:ab: 1c:64:98:05:3f:84:3e:6e:0a:79:69:8b:58:a3:eb: aa:48:30:c1:a7:97:77:51:bc:27:58:b6:37:6f:75: aa:81:b9:65:03:80:7b:76:da:7a:21:c2:52:bc:a7: df:dd:93:0e:5b:81:83:8d:5d:d2:f6:b0:a0:98:98: ab:16:91:b1:97:c7:97:28:90:b4:4f:82:de:ea:83: 48:85:a3:76:b5:ed:b4:fb:81:ac:2d:ae:42:d5:3e: bc:11:9e:56:e0:4d:ac:9b:f8:4c:03:b5:25:c9:56: 26:1a:a8:95:2e:7f:74:38:2a:7a:49:f2:0f:08:72: 47:1d:22:d9:89:22:cf:56:79:63:b4:82:e9:0c:b0: 9d:a8:87:ef:a5:7d:02:58:bf:79:ae:3d:89:a2:55: 88:c3:75:49:1e:78:d2:a3:e6:3c:74:9e:2a:ce:e4: 51:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:78:D3:A3:27:6D:F6:49:62:DA:AA:80:CA:F9:D9:05:B7:2B:9D:E5 X509v3 Authority Key Identifier: keyid:7E:D6:9B:0D:B2:32:E4:19:E9:0D:72:76:63:74:EA:03:E6:F1:8F:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/7ED69B0DB232E419E90D72766374EA03E6F18F73.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7ED69B0DB232E419E90D72766374EA03E6F18F73.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/7ED69B0DB232E419E90D72766374EA03E6F18F73.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c5:d3:5a:e5:8c:f5:29:d2:c1:ee:63:d4:43:86:06:d8:7d:f7: 44:96:57:8e:7c:52:1b:fd:94:95:0b:38:03:02:e3:8a:63:e1: 74:5d:8d:24:cd:ee:5e:7f:3b:9c:6b:77:14:50:71:69:97:cc: 0b:bd:f2:50:0d:3c:4b:5f:b9:ae:94:11:a7:61:5c:e8:72:a3: 93:22:73:c3:79:1b:e2:01:1a:9d:a1:4c:10:4f:fa:da:73:48: 11:02:c7:3e:52:89:33:ee:90:6e:ae:05:67:61:6d:0e:d4:19: 64:c8:35:04:91:1b:16:d7:b3:7a:4b:0d:6c:e9:76:b4:e4:3e: 9a:93:28:cc:9a:ed:45:12:b0:b2:b3:c9:f0:6b:4c:b7:c4:31: e3:1a:25:80:8a:55:69:b6:b0:de:f5:25:61:00:7d:dc:4a:9b: bf:e8:71:47:36:d0:09:0e:2c:4e:48:84:05:2c:53:7a:b8:62: d8:2e:c6:84:09:2c:83:01:01:7a:04:fe:8f:bf:36:81:22:2d: 3f:d1:16:a9:8e:c5:39:66:2a:39:27:da:2e:e3:1c:c3:f7:68: 3c:f8:02:3f:1c:c8:62:c0:ee:ea:71:a6:9c:3b:5b:82:e8:4e: 4d:ff:bd:3e:75:24:b6:7e:22:74:5e:ec:fe:e4:eb:8f:d6:fe: 48:0e:b8:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBYBcvvjoVIYPhTVXza8Qg9GeeOQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VENjlCMERCMjMyRTQxOUU5MEQ3Mjc2NjM3NEVBMDNF NkYxOEY3MzAeFw0yNTA0MzAwMzE2MjBaFw0yNTA1MDMxMzAwMjBaMDMxMTAvBgNV BAMTKDk1NzhEM0EzMjc2REY2NDk2MkRBQUE4MENBRjlEOTA1QjcyQjlERTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa+WD/UWnNEVRC9x8dx7fa0qwJ meXzRjfo+HPKFisvYXiML2hKZQ2c3gCpKapUV2nnLOiWnRwzIZH7VovseD2OWtvA 56IiX41JBkHneXOV+2ZXn5Y1sClIqxxkmAU/hD5uCnlpi1ij66pIMMGnl3dRvCdY tjdvdaqBuWUDgHt22nohwlK8p9/dkw5bgYONXdL2sKCYmKsWkbGXx5cokLRPgt7q g0iFo3a17bT7gawtrkLVPrwRnlbgTayb+EwDtSXJViYaqJUuf3Q4KnpJ8g8Ickcd ItmJIs9WeWO0gukMsJ2oh++lfQJYv3muPYmiVYjDdUkeeNKj5jx0nirO5FG1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlXjToydt9kli2qqAyvnZBbcrneUwHwYDVR0j BBgwFoAUftabDbIy5BnpDXJ2Y3TqA+bxj3MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NzJkMTc1Mi00ODUzLTRjNzQtYjU3NC05OTRkM2IxMjQwOTAvMC83RUQ2OUIwREIy MzJFNDE5RTkwRDcyNzY2Mzc0RUEwM0U2RjE4RjczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0VENjlCMERCMjMyRTQxOUU5MEQ3Mjc2NjM3NEVBMDNFNkYx OEY3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTcyZDE3NTItNDg1My00Yzc0LWI1 NzQtOTk0ZDNiMTI0MDkwLzAvN0VENjlCMERCMjMyRTQxOUU5MEQ3Mjc2NjM3NEVB MDNFNkYxOEY3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMXTWuWM9SnSwe5j1EOGBth990SWV458Uhv9 lJULOAMC44pj4XRdjSTN7l5/O5xrdxRQcWmXzAu98lANPEtfua6UEadhXOhyo5Mi c8N5G+IBGp2hTBBP+tpzSBECxz5SiTPukG6uBWdhbQ7UGWTINQSRGxbXs3pLDWzp drTkPpqTKMya7UUSsLKzyfBrTLfEMeMaJYCKVWm2sN71JWEAfdxKm7/ocUc20AkO LE5IhAUsU3q4YtguxoQJLIMBAXoE/o+/NoEiLT/RFqmOxTlmKjkn2i7jHMP3aDz4 Aj8cyGLA7upxppw7W4LoTk3/vT51JLZ+InRe7P7k64/W/kgOuC4= -----END CERTIFICATE-----Generated at Thu May 1 07:24:11 2025 by rpki-client