$ rpki-client -vvf repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft File: C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft (raw, json) Hash identifier: nSE6x3+IACXHpwMslpbBvTuQuSiJ2hfnQGAlsW0Gpew= Subject key identifier: 5F:DC:D3:EE:FA:27:39:6C:BF:93:68:2E:78:67:21:6F:F2:D5:B4:E6 Authority key identifier: C7:83:94:27:F4:4C:8E:D8:9E:6C:27:20:F1:9C:CF:27:92:70:FD:2A Certificate issuer: /CN=C7839427F44C8ED89E6C2720F19CCF279270FD2A Certificate serial: 1DDC645E93F19C6C59393040C7EE902842F2BAA8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C7839427F44C8ED89E6C2720F19CCF279270FD2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft Manifest number: 60 Signing time: Mon 28 Apr 2025 16:41:02 +0000 Manifest this update: Mon 28 Apr 2025 16:36:02 +0000 Manifest next update: Fri 02 May 2025 04:40:02 +0000 Files and hashes: 1: 3135372e32302e3233382e302f32332d3233203d3e20313532343239.roa (hash: 47XUtIsbPhvEMu3eZ7qPRDeVpw2v8OOWFwMXf8PZG1I=) 2: C7839427F44C8ED89E6C2720F19CCF279270FD2A.crl (hash: Re8cHzjZcfL7o4eHWt0EKFfnLrlQP6xhWcwdw0ZQlNw=) 3: 3135372e32302e3233382e302f32342d3234203d3e20313532343239.roa (hash: YUfWeO4Zp71JGwLmW0ExOlIuGUiX5R5EB5q+WHM4Ews=) 4: 3135372e32302e3233392e302f32342d3234203d3e20313532343239.roa (hash: +vgEkqNs4IZ18TGSuIZbEqxX1A4966mLzeBSJvGF+d0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.crl rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C7839427F44C8ED89E6C2720F19CCF279270FD2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 04:40:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:dc:64:5e:93:f1:9c:6c:59:39:30:40:c7:ee:90:28:42:f2:ba:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7839427F44C8ED89E6C2720F19CCF279270FD2A Validity Not Before: Apr 28 16:36:02 2025 GMT Not After : May 2 04:40:02 2025 GMT Subject: CN=5FDCD3EEFA27396CBF93682E7867216FF2D5B4E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:04:c7:c9:3e:a8:04:ae:e2:ee:1b:62:74:b4: 95:0f:74:79:84:6a:ea:0d:e5:43:b6:31:4d:38:d5: 60:60:02:45:25:fd:27:62:f5:bc:27:4a:eb:b3:56: 78:4b:2b:ab:1a:e9:5d:43:6e:ed:8b:56:79:7b:e3: b2:2d:9d:68:48:8a:cf:2e:d8:41:42:a5:98:19:42: bf:f9:98:aa:cf:e8:a8:6a:16:80:4e:3b:b3:4b:b4: 41:b1:11:f9:0e:29:40:10:00:43:7b:af:4a:ea:05: bb:a4:5e:aa:ff:f9:69:a7:0e:79:25:36:ec:9c:1e: 7e:e9:5c:2c:7d:58:85:37:19:b1:3f:0f:41:b7:aa: 3f:81:b7:63:e7:2a:b2:84:6e:b1:1e:88:7c:a8:dc: 64:19:b1:e5:2c:f4:bb:3a:44:d8:c5:bf:69:2b:61: e1:2a:d6:9f:94:74:40:59:08:b6:db:e2:e3:4c:b2: e0:52:80:81:13:c9:57:cd:73:5c:8c:55:33:b6:48: ce:97:81:17:d2:5d:c9:c4:05:27:5a:38:ac:84:01: 0b:65:71:f5:62:03:de:51:e5:90:62:1a:f4:e4:98: d1:4c:38:df:3c:65:e3:b9:e4:24:b3:46:15:a8:7c: 81:96:7d:80:41:e3:c7:86:ad:e4:15:a5:28:bf:a6: c3:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:DC:D3:EE:FA:27:39:6C:BF:93:68:2E:78:67:21:6F:F2:D5:B4:E6 X509v3 Authority Key Identifier: keyid:C7:83:94:27:F4:4C:8E:D8:9E:6C:27:20:F1:9C:CF:27:92:70:FD:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C7839427F44C8ED89E6C2720F19CCF279270FD2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:e0:4a:ab:87:b8:98:0f:6d:35:36:bb:12:3b:06:3c:12:21: 85:04:c8:c5:2c:61:68:66:31:98:d8:ec:27:20:b6:c8:a7:30: d2:1c:89:df:07:28:88:b7:80:5e:25:ee:25:e5:ea:c2:7c:5a: ea:f6:b7:d0:58:e4:fb:47:1e:08:f7:d1:10:0a:32:02:04:f8: 1c:89:a7:a7:e3:a6:e2:52:05:fa:b0:82:95:95:3b:24:46:37: de:17:11:52:e1:91:17:60:57:94:cd:fd:ca:f2:53:9f:79:29: 67:7b:7c:93:9a:e5:7c:07:24:c3:2c:30:08:84:85:50:4b:fc: 38:b9:33:ad:db:6d:b8:ce:32:72:ca:47:e0:67:00:41:50:8b: a9:c0:c8:3b:69:b9:21:60:02:b7:d6:e8:ec:e7:3e:04:53:95: 49:e5:16:48:77:42:51:7e:db:2d:de:98:93:b2:9d:84:43:da: 72:a0:dd:78:e9:e9:91:19:86:86:db:f8:0c:8a:00:1a:ed:7a: 93:92:68:54:2a:02:68:9d:1d:06:d2:33:17:9d:00:f5:8f:c3: 82:5b:52:fe:21:e9:04:5f:86:d5:38:3a:7e:30:15:8d:f4:11: 20:2d:e7:1c:e0:bf:08:ac:cb:b0:30:c5:cf:07:f5:55:a6:5b: 03:a9:2b:4b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHdxkXpPxnGxZOTBAx+6QKELyuqgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc4Mzk0MjdGNDRDOEVEODlFNkMyNzIwRjE5Q0NGMjc5 MjcwRkQyQTAeFw0yNTA0MjgxNjM2MDJaFw0yNTA1MDIwNDQwMDJaMDMxMTAvBgNV BAMTKDVGRENEM0VFRkEyNzM5NkNCRjkzNjgyRTc4NjcyMTZGRjJENUI0RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNBMfJPqgEruLuG2J0tJUPdHmE auoN5UO2MU041WBgAkUl/Sdi9bwnSuuzVnhLK6sa6V1Dbu2LVnl747ItnWhIis8u 2EFCpZgZQr/5mKrP6KhqFoBOO7NLtEGxEfkOKUAQAEN7r0rqBbukXqr/+WmnDnkl NuycHn7pXCx9WIU3GbE/D0G3qj+Bt2PnKrKEbrEeiHyo3GQZseUs9Ls6RNjFv2kr YeEq1p+UdEBZCLbb4uNMsuBSgIETyVfNc1yMVTO2SM6XgRfSXcnEBSdaOKyEAQtl cfViA95R5ZBiGvTkmNFMON88ZeO55CSzRhWofIGWfYBB48eGreQVpSi/psOFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX9zT7vonOWy/k2gueGchb/LVtOYwHwYDVR0j BBgwFoAUx4OUJ/RMjtiebCcg8ZzPJ5Jw/SowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OGQxYzQ0OS05NzhjLTQ4NDUtYjgyMy1iNTkyNWE5MDU0MjcvMC9DNzgzOTQyN0Y0 NEM4RUQ4OUU2QzI3MjBGMTlDQ0YyNzkyNzBGRDJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzc4Mzk0MjdGNDRDOEVEODlFNkMyNzIwRjE5Q0NGMjc5Mjcw RkQyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMThkMWM0NDktOTc4Yy00ODQ1LWI4 MjMtYjU5MjVhOTA1NDI3LzAvQzc4Mzk0MjdGNDRDOEVEODlFNkMyNzIwRjE5Q0NG Mjc5MjcwRkQyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABjgSquHuJgPbTU2uxI7BjwSIYUEyMUsYWhm MZjY7CcgtsinMNIcid8HKIi3gF4l7iXl6sJ8Wur2t9BY5PtHHgj30RAKMgIE+ByJ p6fjpuJSBfqwgpWVOyRGN94XEVLhkRdgV5TN/cryU595KWd7fJOa5XwHJMMsMAiE hVBL/Di5M63bbbjOMnLKR+BnAEFQi6nAyDtpuSFgArfW6OznPgRTlUnlFkh3QlF+ 2y3emJOynYRD2nKg3Xjp6ZEZhobb+AyKABrtepOSaFQqAmidHQbSMxedAPWPw4Jb Uv4h6QRfhtU4On4wFY30ESAt5xzgvwisy7Awxc8H9VWmWwOpK0s= -----END CERTIFICATE-----Generated at Wed Apr 30 03:36:09 2025 by rpki-client