$ rpki-client -vvf repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.mft File: 79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.mft (raw, json) Hash identifier: QSkhwd29W/VCD+XnAy8v3D6tbhD8kyl/UugZqjatAEg= Subject key identifier: D9:DE:F1:A9:64:2C:83:56:50:B6:3F:55:9C:88:E3:18:2C:89:D2:2D Authority key identifier: 79:BD:07:5D:1B:C4:BD:8A:E0:C2:6E:FD:2D:37:22:CC:F6:EF:F6:5E Certificate issuer: /CN=79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E Certificate serial: 61E33D02E33EE5DD84D0EB5256F78E0B90FA52 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.mft Manifest number: E9 Signing time: Tue 29 Apr 2025 16:22:04 +0000 Manifest this update: Tue 29 Apr 2025 16:17:04 +0000 Manifest next update: Fri 02 May 2025 17:50:04 +0000 Files and hashes: 1: 3230322e34372e3138382e302f32332d3234203d3e20313339333831.roa (hash: tN8NkSCug0bPTsksPXpdsMz/L4Lku2L5HCPREpY8i/M=) 2: 3230322e34372e3138382e302f32332d3234203d3e203435333035.roa (hash: uGhhNW19tGYzbcTLuvLURoZvztF1sLL4YLt+jQcIXcs=) 3: 79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.crl (hash: blwBV7Iw34Zr66tSj72VZDkdP0INkDQnxjSuaFbygR0=) 4: 3230322e34372e3138382e302f32342d3234203d3e203435333035.roa (hash: ftA4o32NvXoboDnZK2labLq7FU+esbWgoj7179Wmb94=) 5: 3230322e34372e3138382e302f32342d3234203d3e20313339333831.roa (hash: SlIodNo+0Jy6QzQYVlHodcFOXk7t+zYJNa4DOQOaN/g=) 6: 3230322e34372e3138392e302f32342d3234203d3e20313339333831.roa (hash: L+5nKPIHtrqQU25zi6/ZfiLqBlQj18bLM6sqLz+nsS4=) 7: 3230322e34372e3138392e302f32342d3234203d3e203435333035.roa (hash: viE08DL5fFk1bogLaoHfmzCByxNbHXkxctzPEjnVqjA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.crl rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 17:50:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:e3:3d:02:e3:3e:e5:dd:84:d0:eb:52:56:f7:8e:0b:90:fa:52 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E Validity Not Before: Apr 29 16:17:04 2025 GMT Not After : May 2 17:50:04 2025 GMT Subject: CN=D9DEF1A9642C835650B63F559C88E3182C89D22D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:71:6b:9e:75:3a:66:8d:09:2b:ff:e7:a7:77: 39:fb:3a:9e:a3:c3:67:ff:b7:96:93:45:b4:45:73: 40:74:d8:4a:22:13:f3:51:d4:2d:0a:d0:02:7d:d8: 51:af:bd:bc:e3:fd:b6:7b:e1:5c:0e:82:d5:0c:87: d8:6d:1e:8f:1a:72:94:a7:49:34:cf:21:52:c0:a1: 87:13:a5:47:76:5d:03:af:09:13:9e:53:89:01:4a: ae:c7:77:40:21:6d:3f:7c:61:96:88:6d:b8:e0:1e: c6:5b:8c:fd:f6:a5:c9:37:eb:34:11:70:3f:bc:d9: e8:b2:36:7e:27:7e:b4:89:77:41:99:79:a1:2d:13: be:27:f4:96:7c:28:e4:ba:6b:1d:a1:64:41:d2:93: ed:68:2f:ea:07:01:d1:05:d8:63:30:d1:08:55:a5: 1f:67:f0:30:e0:32:d1:ce:0b:11:67:ca:bf:da:6a: 84:04:f6:30:a2:57:12:39:db:b1:cc:df:e7:78:3f: 99:0f:f9:b4:90:82:6f:51:d4:72:3d:e6:8f:5a:05: 10:96:ec:06:2b:f9:e9:e5:2f:81:ba:a3:70:fe:53: c9:7e:06:16:da:8c:30:9b:69:44:b5:d6:7f:99:96: 7e:0d:a3:44:69:17:a6:73:f7:37:9b:66:1e:4c:44: f4:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:DE:F1:A9:64:2C:83:56:50:B6:3F:55:9C:88:E3:18:2C:89:D2:2D X509v3 Authority Key Identifier: keyid:79:BD:07:5D:1B:C4:BD:8A:E0:C2:6E:FD:2D:37:22:CC:F6:EF:F6:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:86:36:2b:3a:35:39:3d:69:da:08:93:14:84:b6:1a:42:51: 33:3c:d2:c9:ac:ec:49:a0:48:31:99:01:bb:a5:9f:61:16:da: 7c:3f:3c:89:4c:98:44:d7:94:88:50:43:a4:dd:5b:92:f4:68: c1:34:e1:14:31:e1:26:ed:1b:5d:99:2c:57:94:ce:cb:e4:aa: 59:61:56:13:e7:e0:e9:10:24:23:5b:89:4b:dc:c0:07:8a:38: 77:ec:cc:00:6e:8a:b7:f1:7b:58:70:12:3b:f8:18:94:ff:30: be:a8:04:bc:ca:bc:1b:cb:7e:54:e7:ef:18:55:46:c2:58:6d: ea:48:a8:b6:36:b6:fa:db:5d:2d:48:b0:09:68:66:f0:99:af: 59:ef:3c:14:ed:83:89:c3:ba:43:6b:b5:a5:85:c7:14:85:5f: 11:fe:46:f5:41:fe:d5:e5:69:ff:8b:f6:b0:0f:64:17:cb:c4: 92:be:f7:24:9b:8a:7e:12:01:09:ff:e1:b9:17:2a:3c:f2:7c: 4f:7d:2e:e7:4e:cd:3d:34:9c:1d:1e:75:7d:c5:e2:3c:57:9d: fe:6a:3d:95:ed:4b:85:00:ad:0b:7e:b7:09:ef:43:cd:c3:16: 3b:f6:42:9f:81:bb:a8:91:89:e2:08:5a:12:a0:af:bf:4f:3a: 18:13:92:a1 -----BEGIN CERTIFICATE----- MIIFMTCCBBmgAwIBAgITYeM9AuM+5d2E0OtSVveOC5D6UjANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyg3OUJEMDc1RDFCQzRCRDhBRTBDMjZFRkQyRDM3MjJDQ0Y2 RUZGNjVFMB4XDTI1MDQyOTE2MTcwNFoXDTI1MDUwMjE3NTAwNFowMzExMC8GA1UE AxMoRDlERUYxQTk2NDJDODM1NjUwQjYzRjU1OUM4OEUzMTgyQzg5RDIyRDCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALdxa551OmaNCSv/56d3Ofs6nqPD Z/+3lpNFtEVzQHTYSiIT81HULQrQAn3YUa+9vOP9tnvhXA6C1QyH2G0ejxpylKdJ NM8hUsChhxOlR3ZdA68JE55TiQFKrsd3QCFtP3xhlohtuOAexluM/falyTfrNBFw P7zZ6LI2fid+tIl3QZl5oS0Tvif0lnwo5LprHaFkQdKT7Wgv6gcB0QXYYzDRCFWl H2fwMOAy0c4LEWfKv9pqhAT2MKJXEjnbsczf53g/mQ/5tJCCb1HUcj3mj1oFEJbs Biv56eUvgbqjcP5TyX4GFtqMMJtpRLXWf5mWfg2jRGkXpnP3N5tmHkxE9O0CAwEA AaOCAjwwggI4MB0GA1UdDgQWBBTZ3vGpZCyDVlC2P1WciOMYLInSLTAfBgNVHSME GDAWgBR5vQddG8S9iuDCbv0tNyLM9u/2XjAOBgNVHQ8BAf8EBAMCB4AwgYUGA1Ud HwR+MHwweqB4oHaGdHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzFl ZTk0MDE0LTg3ZmEtNGJjMi1iMWM2LTdmZDJhODk0NzZmMy8wLzc5QkQwNzVEMUJD NEJEOEFFMEMyNkVGRDJEMzcyMkNDRjZFRkY2NUUuY3JsMHQGCCsGAQUFBwEBBGgw ZjBkBggrBgEFBQcwAoZYcnN5bmM6Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8v SUROSUMtSUQvMi83OUJEMDc1RDFCQzRCRDhBRTBDMjZFRkQyRDM3MjJDQ0Y2RUZG NjVFLmNlcjCBkwYIKwYBBQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzov L3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8xZWU5NDAxNC04N2ZhLTRiYzItYjFj Ni03ZmQyYTg5NDc2ZjMvMC83OUJEMDc1RDFCQzRCRDhBRTBDMjZFRkQyRDM3MjJD Q0Y2RUZGNjVFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUF BwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADANBgkqhkiG9w0BAQsFAAOCAQEAHIY2Kzo1OT1p2giTFIS2GkJRMzzSyazsSaBI MZkBu6WfYRbafD88iUyYRNeUiFBDpN1bkvRowTThFDHhJu0bXZksV5TOy+SqWWFW E+fg6RAkI1uJS9zAB4o4d+zMAG6Kt/F7WHASO/gYlP8wvqgEvMq8G8t+VOfvGFVG wlht6kiotja2+ttdLUiwCWhm8JmvWe88FO2DicO6Q2u1pYXHFIVfEf5G9UH+1eVp /4v2sA9kF8vEkr73JJuKfhIBCf/huRcqPPJ8T30u507NPTScHR51fcXiPFed/mo9 le1LhQCtC363Ce9DzcMWO/ZCn4G7qJGJ4ghaEqCvv086GBOSoQ== -----END CERTIFICATE-----Generated at Wed Apr 30 08:21:31 2025 by rpki-client