$ rpki-client -vvf repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft File: 7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft (raw, json) Hash identifier: z4oeNkhwQAf7gS0QvARK4SB9r8/nE2bjPj9voUJV9HY= Subject key identifier: 21:56:57:86:69:B8:3B:DA:97:B1:6B:16:C9:33:06:8E:72:71:A7:16 Authority key identifier: 7C:4D:FD:78:91:4D:C1:F6:61:30:F2:56:AE:69:D9:FA:84:39:48:DC Certificate issuer: /CN=7C4DFD78914DC1F66130F256AE69D9FA843948DC Certificate serial: 18474A2054182125A150CBE47769312FC557B93D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4DFD78914DC1F66130F256AE69D9FA843948DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft Manifest number: 4E Signing time: Sun 27 Apr 2025 13:52:21 +0000 Manifest this update: Sun 27 Apr 2025 13:47:21 +0000 Manifest next update: Wed 30 Apr 2025 14:20:21 +0000 Files and hashes: 1: 3136302e3138372e3133362e302f32342d3234203d3e20313533313233.roa (hash: MrL5ngdoehaZ0S9ZzYnojIzhLodzexCxemBrK2FNZbg=) 2: 7C4DFD78914DC1F66130F256AE69D9FA843948DC.crl (hash: k+LxHjhQr1GHkOcIBDE5VsH/zGXG+KNWuykRNlzexe8=) 3: 3136302e3138372e3133372e302f32342d3234203d3e20313533313233.roa (hash: yeveJKWr9gZnjmI6JwEp7gdo4W0LH0j/SVdLDDhEfsg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.crl rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4DFD78914DC1F66130F256AE69D9FA843948DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 14:20:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:47:4a:20:54:18:21:25:a1:50:cb:e4:77:69:31:2f:c5:57:b9:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C4DFD78914DC1F66130F256AE69D9FA843948DC Validity Not Before: Apr 27 13:47:21 2025 GMT Not After : Apr 30 14:20:21 2025 GMT Subject: CN=2156578669B83BDA97B16B16C933068E7271A716 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:da:2d:c9:dc:e8:e7:38:b2:8c:7d:b8:c5:02: 54:60:b6:ba:60:cf:b6:08:fb:ac:bd:c6:dd:84:98: 55:85:0f:01:9d:e5:8d:3b:23:ad:7b:b1:eb:4d:12: 22:6f:da:7e:6b:85:a1:64:02:7a:87:5f:9d:eb:b9: 35:9d:94:91:a8:fc:1e:82:f4:4f:5c:ec:3e:29:05: d3:30:4b:c9:69:3d:a3:68:63:1a:91:50:4a:7f:80: ff:bb:ed:f9:ad:f8:e4:77:ab:12:73:ee:94:5f:fc: a5:e0:a6:33:84:ba:de:03:34:b3:78:16:c8:51:a0: a2:4b:dc:d1:3c:b5:b7:77:41:8a:06:57:02:18:a2: d2:3c:a9:5e:b5:1e:c3:5d:24:8e:c9:e0:ed:24:17: ee:79:18:06:1e:0c:e8:d9:be:ae:5b:71:2a:31:db: 0a:bd:50:e8:ce:49:70:1a:a9:51:64:a8:fe:82:ad: 87:ac:bc:04:87:86:1f:ae:3a:d8:a4:af:42:c4:52: 31:42:40:48:fb:7f:11:90:ba:89:5d:55:37:15:c2: da:64:5c:94:fd:c3:6d:78:36:32:d8:2a:e9:7e:4d: bb:95:05:11:02:e5:79:7d:c4:e9:cb:be:2b:75:8f: b4:ea:75:8f:49:21:78:12:01:ce:7c:65:4e:2a:f7: 3c:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 21:56:57:86:69:B8:3B:DA:97:B1:6B:16:C9:33:06:8E:72:71:A7:16 X509v3 Authority Key Identifier: keyid:7C:4D:FD:78:91:4D:C1:F6:61:30:F2:56:AE:69:D9:FA:84:39:48:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4DFD78914DC1F66130F256AE69D9FA843948DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:d2:66:8c:4b:d2:8c:4a:0b:bf:46:05:06:0f:1e:4f:0d:4e: e2:73:72:87:2b:7f:16:f1:6d:09:b1:a2:aa:f9:6b:d5:29:fc: 36:90:a3:3b:ec:03:12:d5:8e:44:e7:32:86:dd:8a:90:db:c1: 66:3c:68:d0:e2:bb:ce:b6:d5:6f:47:e3:db:ce:a6:d2:56:a7: f5:3d:b5:ff:c3:13:80:c4:6c:f1:be:49:7f:ec:c2:66:cc:72: 1e:e0:80:1f:d1:e2:60:ca:23:b0:db:e0:2b:7c:6f:e2:dd:2c: 41:f8:ea:a6:eb:f7:35:0b:a5:4c:17:f1:b0:4e:e4:dd:ca:36: c9:75:3e:c7:f4:be:90:5e:8a:0c:d7:c3:46:bb:aa:ff:bd:6d: eb:aa:08:88:18:20:d3:84:88:24:ca:f3:79:40:8e:25:f9:10: a0:5a:c1:2b:37:4b:65:f4:e1:a1:ea:e0:72:c0:43:74:1c:5a: 6d:14:54:e1:52:27:6e:02:9b:0e:24:8a:86:dd:2f:05:ff:e8: 4b:5a:75:e5:71:19:38:06:3a:4e:c2:ea:72:b1:48:99:03:9a: e4:1f:2e:4b:fc:91:64:64:81:49:e6:86:38:97:52:fd:df:f4: 7f:1b:fa:3c:06:48:5e:fe:37:9c:bd:07:38:41:b7:f5:6f:fc: 65:d1:25:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGEdKIFQYISWhUMvkd2kxL8VXuT0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M0REZENzg5MTREQzFGNjYxMzBGMjU2QUU2OUQ5RkE4 NDM5NDhEQzAeFw0yNTA0MjcxMzQ3MjFaFw0yNTA0MzAxNDIwMjFaMDMxMTAvBgNV BAMTKDIxNTY1Nzg2NjlCODNCREE5N0IxNkIxNkM5MzMwNjhFNzI3MUE3MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI2i3J3OjnOLKMfbjFAlRgtrpg z7YI+6y9xt2EmFWFDwGd5Y07I617setNEiJv2n5rhaFkAnqHX53ruTWdlJGo/B6C 9E9c7D4pBdMwS8lpPaNoYxqRUEp/gP+77fmt+OR3qxJz7pRf/KXgpjOEut4DNLN4 FshRoKJL3NE8tbd3QYoGVwIYotI8qV61HsNdJI7J4O0kF+55GAYeDOjZvq5bcSox 2wq9UOjOSXAaqVFkqP6CrYesvASHhh+uOtikr0LEUjFCQEj7fxGQuoldVTcVwtpk XJT9w214NjLYKul+TbuVBREC5Xl9xOnLvit1j7TqdY9JIXgSAc58ZU4q9zx7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIVZXhmm4O9qXsWsWyTMGjnJxpxYwHwYDVR0j BBgwFoAUfE39eJFNwfZhMPJWrmnZ+oQ5SNwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTkyMzM5Ny04Y2Y4LTRjZWYtODg1Ni0wZDI2OGQ3M2VkYjEvMC83QzRERkQ3ODkx NERDMUY2NjEzMEYyNTZBRTY5RDlGQTg0Mzk0OERDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0M0REZENzg5MTREQzFGNjYxMzBGMjU2QUU2OUQ5RkE4NDM5 NDhEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2E5MjMzOTctOGNmOC00Y2VmLTg4 NTYtMGQyNjhkNzNlZGIxLzAvN0M0REZENzg5MTREQzFGNjYxMzBGMjU2QUU2OUQ5 RkE4NDM5NDhEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAXSZoxL0oxKC79GBQYPHk8NTuJzcocrfxbx bQmxoqr5a9Up/DaQozvsAxLVjkTnMobdipDbwWY8aNDiu8621W9H49vOptJWp/U9 tf/DE4DEbPG+SX/swmbMch7ggB/R4mDKI7Db4Ct8b+LdLEH46qbr9zULpUwX8bBO 5N3KNsl1Psf0vpBeigzXw0a7qv+9beuqCIgYINOEiCTK83lAjiX5EKBawSs3S2X0 4aHq4HLAQ3QcWm0UVOFSJ24Cmw4kiobdLwX/6EtadeVxGTgGOk7C6nKxSJkDmuQf Lkv8kWRkgUnmhjiXUv3f9H8b+jwGSF7+N5y9BzhBt/Vv/GXRJc8= -----END CERTIFICATE-----Generated at Sun Apr 27 22:55:36 2025 by rpki-client