$ rpki-client -vvf repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft File: 7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft (raw, json) Hash identifier: uLzoIGRJOIqOxQKS9dzYUR4l/rmrlC6zuXI2Jx/HZCU= Subject key identifier: 3A:93:FD:CA:A1:02:7C:4E:32:C6:19:03:6D:DF:4B:B3:BA:78:8D:47 Authority key identifier: 7F:EF:6B:F5:3F:A3:12:2A:0F:09:CE:F4:B4:08:E1:37:92:A1:45:45 Certificate issuer: /CN=7FEF6BF53FA3122A0F09CEF4B408E13792A14545 Certificate serial: 223A83FC00552810BE693504B413CB7A50437300 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.cer Subject info access: rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft Manifest number: 01CE Signing time: Wed 30 Apr 2025 04:21:32 +0000 Manifest this update: Wed 30 Apr 2025 04:16:32 +0000 Manifest next update: Sat 03 May 2025 10:25:32 +0000 Files and hashes: 1: 3130332e3136372e3130342e302f32342d3234203d3e20313339343130.roa (hash: cilQSsMRfqwA9LOmx5CPo41uuLBHWQ7Qq5S49MHRn2E=) 2: 7FEF6BF53FA3122A0F09CEF4B408E13792A14545.crl (hash: 0K2cL7dFTxMDJKoZorbRp/7oZK170RlGCC/1d/3+U50=) 3: 3130332e3136372e3130352e302f32342d3234203d3e203338333230.roa (hash: t5DmPirQU+jLx9aHjmb/pgwv+a8S0p8w/q4YuXRMJQI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.crl rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 10:25:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:3a:83:fc:00:55:28:10:be:69:35:04:b4:13:cb:7a:50:43:73:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7FEF6BF53FA3122A0F09CEF4B408E13792A14545 Validity Not Before: Apr 30 04:16:32 2025 GMT Not After : May 3 10:25:32 2025 GMT Subject: CN=3A93FDCAA1027C4E32C619036DDF4BB3BA788D47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:72:83:5c:19:2f:6e:02:46:89:a5:81:31:32: 71:93:01:55:04:65:71:8f:6a:08:4d:7b:db:32:bc: 75:ab:df:2e:8d:b1:85:6b:bb:41:d2:e1:98:f9:54: 56:38:e2:f2:e8:38:0b:31:41:d1:29:ea:e3:8a:c3: 4c:94:27:c5:e1:d8:a8:f0:09:d7:f4:78:6a:86:46: c6:72:9a:d5:79:0c:0f:db:91:21:6e:c2:e5:be:6d: 90:67:a4:28:db:84:39:89:51:64:21:fc:08:1a:41: bd:8e:99:b4:21:47:c3:d6:a6:f9:5f:23:f3:a7:e3: c4:74:d0:f2:37:cb:ff:f0:cf:c3:06:e0:63:c4:19: 0b:fb:21:04:cb:ad:58:99:23:46:82:9d:0e:98:7d: 63:37:65:70:d7:a9:4d:c4:63:96:2d:82:5b:28:01: a8:27:c0:bf:00:a4:30:8d:46:5f:6a:4d:4c:a4:66: 52:7c:fe:61:dd:e4:7c:1b:d9:3f:df:04:c0:86:d9: f1:5d:7f:4e:ed:c9:73:52:69:f1:63:29:2f:9e:c5: 13:84:24:ab:5f:56:de:50:f6:9d:3d:95:af:3f:74: d1:5c:03:e9:24:3f:63:18:d2:f1:5a:68:b8:4a:1b: 52:eb:7a:f5:10:fc:00:41:e9:14:9e:78:07:9d:d0: 6c:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:93:FD:CA:A1:02:7C:4E:32:C6:19:03:6D:DF:4B:B3:BA:78:8D:47 X509v3 Authority Key Identifier: keyid:7F:EF:6B:F5:3F:A3:12:2A:0F:09:CE:F4:B4:08:E1:37:92:A1:45:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b3:ad:a2:46:02:39:a8:ca:ae:6d:2b:16:ed:ba:3b:ba:09:97: 00:e6:5f:75:4f:f7:35:30:64:78:e4:02:0d:46:07:64:d2:76: c6:e5:9c:35:1f:83:83:01:11:12:4f:03:e0:2a:41:fb:8d:fa: 21:d1:1a:1f:23:d1:65:9b:43:28:48:9f:85:91:24:6a:6a:aa: 84:b1:0e:32:63:3f:a5:de:da:f8:5a:9b:03:87:05:21:fa:13: 4b:e1:ff:4a:07:3c:8b:dc:96:4e:8a:91:f1:8d:e0:5e:3a:0e: 7e:88:99:b3:8d:af:81:22:d8:6c:f2:3f:92:35:40:79:e0:15: d6:66:cd:6a:54:66:95:12:a2:90:e2:a5:57:dc:5b:66:80:65: 38:a5:d4:ce:f0:27:25:2a:26:f2:67:15:71:be:99:43:c9:d2: c6:e5:d6:c9:f4:4b:e2:1f:c6:74:5c:52:9b:28:d7:60:4f:9c: 7e:4b:7b:c1:aa:86:6d:e3:f1:09:c4:6b:4b:a4:af:21:62:c5: 69:ea:5f:3c:b1:ec:46:77:cd:6a:74:e5:0c:c9:e2:f1:2e:90: f1:70:12:d8:01:69:c6:4a:42:03:d8:12:6b:05:86:ab:24:59: 32:03:b8:29:3f:08:e5:6a:a3:35:07:6d:d4:75:6a:d7:ef:61: b8:03:fa:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIjqD/ABVKBC+aTUEtBPLelBDcwAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ZFRjZCRjUzRkEzMTIyQTBGMDlDRUY0QjQwOEUxMzc5 MkExNDU0NTAeFw0yNTA0MzAwNDE2MzJaFw0yNTA1MDMxMDI1MzJaMDMxMTAvBgNV BAMTKDNBOTNGRENBQTEwMjdDNEUzMkM2MTkwMzZEREY0QkIzQkE3ODhENDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD8coNcGS9uAkaJpYExMnGTAVUE ZXGPaghNe9syvHWr3y6NsYVru0HS4Zj5VFY44vLoOAsxQdEp6uOKw0yUJ8Xh2Kjw Cdf0eGqGRsZymtV5DA/bkSFuwuW+bZBnpCjbhDmJUWQh/AgaQb2OmbQhR8PWpvlf I/On48R00PI3y//wz8MG4GPEGQv7IQTLrViZI0aCnQ6YfWM3ZXDXqU3EY5Ytglso AagnwL8ApDCNRl9qTUykZlJ8/mHd5Hwb2T/fBMCG2fFdf07tyXNSafFjKS+exROE JKtfVt5Q9p09la8/dNFcA+kkP2MY0vFaaLhKG1LrevUQ/ABB6RSeeAed0Gy3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOpP9yqECfE4yxhkDbd9Ls7p4jUcwHwYDVR0j BBgwFoAUf+9r9T+jEioPCc70tAjhN5KhRUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MDNlYmFiYi05OTlmLTRmM2UtODRjMS1iZjI3OWJmZTE3ODcvMC83RkVGNkJGNTNG QTMxMjJBMEYwOUNFRjRCNDA4RTEzNzkyQTE0NTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0ZFRjZCRjUzRkEzMTIyQTBGMDlDRUY0QjQwOEUxMzc5MkEx NDU0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzAzZWJhYmItOTk5Zi00ZjNlLTg0 YzEtYmYyNzliZmUxNzg3LzAvN0ZFRjZCRjUzRkEzMTIyQTBGMDlDRUY0QjQwOEUx Mzc5MkExNDU0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALOtokYCOajKrm0rFu26O7oJlwDmX3VP9zUw ZHjkAg1GB2TSdsblnDUfg4MBERJPA+AqQfuN+iHRGh8j0WWbQyhIn4WRJGpqqoSx DjJjP6Xe2vhamwOHBSH6E0vh/0oHPIvclk6KkfGN4F46Dn6ImbONr4Ei2GzyP5I1 QHngFdZmzWpUZpUSopDipVfcW2aAZTil1M7wJyUqJvJnFXG+mUPJ0sbl1sn0S+If xnRcUpso12BPnH5Le8Gqhm3j8QnEa0ukryFixWnqXzyx7EZ3zWp05QzJ4vEukPFw EtgBacZKQgPYEmsFhqskWTIDuCk/COVqozUHbdR1atfvYbgD+iE= -----END CERTIFICATE-----Generated at Fri May 2 08:35:51 2025 by rpki-client