$ rpki-client -vvf repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft File: A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft (raw, json) Hash identifier: y23ud/QrOH50os5e/t+7wR5tewHmM5a5IxFFSpTwWbo= Subject key identifier: 0D:9D:0D:06:46:E3:AA:A2:25:C9:D2:6B:87:54:D7:56:A0:F6:78:84 Authority key identifier: A7:D1:BD:82:11:3C:D7:20:C5:72:AF:99:A8:FB:29:40:61:0A:EC:49 Certificate issuer: /CN=A7D1BD82113CD720C572AF99A8FB2940610AEC49 Certificate serial: 4402EEB3D0F1EECF6397F05A8FDFEAEF60C3F590 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer Subject info access: rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft Manifest number: 014C Signing time: Tue 29 Apr 2025 00:21:14 +0000 Manifest this update: Tue 29 Apr 2025 00:16:14 +0000 Manifest next update: Fri 02 May 2025 05:01:14 +0000 Files and hashes: 1: 3130332e37372e3230342e302f32332d3233203d3e203634323937.roa (hash: cOnqdPMFYbqbFi/FA6Q7dA8kJTzM3+iE0W1mSgXK4nI=) 2: 3130332e37372e3230362e302f32342d3234203d3e203634323937.roa (hash: qm6Wx8HHdMprTN2Xs+s/pxVtuwdrhpPAL17E7ApccPM=) 3: 3130332e37372e3230342e302f32322d3232203d3e203634323937.roa (hash: DfpI3sfZfOso5gGyoS07WtJ/Jycy9ggknC4EuCpUXOM=) 4: 3130332e37372e3230352e302f32342d3234203d3e203634323937.roa (hash: NZ3zgpSngsIOBUBuxKD8qjF4IFrIt5WPsm16vJBokXQ=) 5: 3130332e37372e3230342e302f32342d3234203d3e203634323937.roa (hash: BXSq9b95eC9MSwvxuZ/AcJL572zXX4pRx3/J1qctsOw=) 6: 323430373a396538303a3a2f33322d3332203d3e203634323937.roa (hash: MKuGnpZ60DSK/b5WEF/hr8uWY44ucZ99U8eaS+KudvM=) 7: 3130332e37372e3230372e302f32342d3234203d3e203634323937.roa (hash: Ldzq0WjI5kxA0xwZ9j/+HkbFA7bRhcVP8vfijlAcxEw=) 8: A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl (hash: khYW0KkpNDcJUItwnhLIDVtEmD84DIj5CbjOiJ6SQkc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:01:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:02:ee:b3:d0:f1:ee:cf:63:97:f0:5a:8f:df:ea:ef:60:c3:f5:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7D1BD82113CD720C572AF99A8FB2940610AEC49 Validity Not Before: Apr 29 00:16:14 2025 GMT Not After : May 2 05:01:14 2025 GMT Subject: CN=0D9D0D0646E3AAA225C9D26B8754D756A0F67884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:91:c8:12:4f:79:ac:11:48:e0:4d:81:ab:f5: 57:db:3d:5b:0d:5f:1c:bb:1d:cc:83:84:66:ad:f2: 8d:3d:b2:fa:5e:95:47:32:af:94:fe:2e:63:ff:54: 0c:68:5d:25:41:02:aa:50:93:04:36:bd:fd:47:78: cb:df:91:c5:c5:36:c1:1b:7b:07:5c:81:09:04:b6: 06:bf:ce:b2:be:6c:3b:d2:b9:e3:ea:4d:d5:08:95: 0f:73:36:2d:fb:76:60:d5:d1:62:2c:6a:56:7b:85: af:0f:0c:da:5e:25:66:f7:cd:83:17:b3:fd:7b:cd: ff:e9:69:89:ee:50:00:e6:51:51:a7:dc:9a:a6:63: fb:f0:96:e4:ec:97:51:7e:a5:0a:d7:fb:65:99:c7: 88:11:3b:32:6e:0e:51:96:d2:15:05:2e:a6:96:13: 8c:d3:82:5b:8f:c6:6d:99:ee:29:2d:1f:7b:54:61: 05:a0:c5:0a:ea:84:79:0b:3f:e6:9a:37:20:f7:e2: 32:fb:f9:dc:4b:7d:4d:7d:b0:ae:03:60:86:f1:42: 18:49:e3:87:aa:f2:8e:c0:4e:01:6c:c5:a2:bc:66: b9:4c:5c:21:d3:ec:a8:d7:f6:e8:71:f8:cd:c1:b9: 09:7e:0d:7a:15:7b:ad:e1:de:d8:e4:74:53:73:4b: 67:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:9D:0D:06:46:E3:AA:A2:25:C9:D2:6B:87:54:D7:56:A0:F6:78:84 X509v3 Authority Key Identifier: keyid:A7:D1:BD:82:11:3C:D7:20:C5:72:AF:99:A8:FB:29:40:61:0A:EC:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D1BD82113CD720C572AF99A8FB2940610AEC49.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49da7b6a-4e1a-41ff-b8eb-8c364cd264b1/0/A7D1BD82113CD720C572AF99A8FB2940610AEC49.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:4d:9a:94:71:b3:b8:eb:e6:ac:c2:7a:3c:a3:23:d2:ef:21: ad:09:5f:7d:14:1a:46:4c:f4:14:b5:a9:a9:68:ea:75:a7:3d: f6:05:96:42:c1:50:a0:82:42:7f:56:52:7a:96:9b:31:71:84: 95:99:b1:d2:66:c9:52:7a:0c:f5:bd:72:23:b7:7b:38:96:bf: 6c:c3:bc:23:9c:df:79:35:d4:cb:ab:43:dd:36:02:d3:03:7f: 95:46:80:89:1e:4a:55:93:06:aa:62:d5:f1:10:86:7a:3e:5a: 7d:65:cd:67:23:c3:53:a9:84:dd:1d:6d:76:44:f6:b2:a7:f6: de:a3:14:2b:06:5a:ee:1f:53:79:8b:02:d2:ae:2b:1f:4c:6b: f4:90:ad:6d:d4:3c:36:06:2b:50:e6:47:cc:f5:a9:a1:0c:e1: 7f:e4:59:9a:b0:1f:d5:9c:bc:89:5b:19:00:5d:66:6a:62:c7: ab:da:fa:24:32:d2:95:5a:d7:9f:18:37:29:05:4c:cc:a2:28: 09:cb:a5:e3:74:86:7c:b2:73:0b:55:b0:ea:b0:bd:1f:6c:4a: 59:5b:16:78:29:9a:ed:38:95:34:26:2e:24:5d:55:0e:62:39: c7:d0:60:c5:d3:f0:fa:1b:e9:09:60:f7:57:d8:23:92:6d:d6: 69:6f:f3:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURALus9Dx7s9jl/Baj9/q72DD9ZAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdEMUJEODIxMTNDRDcyMEM1NzJBRjk5QThGQjI5NDA2 MTBBRUM0OTAeFw0yNTA0MjkwMDE2MTRaFw0yNTA1MDIwNTAxMTRaMDMxMTAvBgNV BAMTKDBEOUQwRDA2NDZFM0FBQTIyNUM5RDI2Qjg3NTRENzU2QTBGNjc4ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRkcgST3msEUjgTYGr9VfbPVsN Xxy7HcyDhGat8o09svpelUcyr5T+LmP/VAxoXSVBAqpQkwQ2vf1HeMvfkcXFNsEb ewdcgQkEtga/zrK+bDvSuePqTdUIlQ9zNi37dmDV0WIsalZ7ha8PDNpeJWb3zYMX s/17zf/paYnuUADmUVGn3JqmY/vwluTsl1F+pQrX+2WZx4gROzJuDlGW0hUFLqaW E4zTgluPxm2Z7iktH3tUYQWgxQrqhHkLP+aaNyD34jL7+dxLfU19sK4DYIbxQhhJ 44eq8o7ATgFsxaK8ZrlMXCHT7KjX9uhx+M3BuQl+DXoVe63h3tjkdFNzS2flAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDZ0NBkbjqqIlydJrh1TXVqD2eIQwHwYDVR0j BBgwFoAUp9G9ghE81yDFcq+ZqPspQGEK7EkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 OWRhN2I2YS00ZTFhLTQxZmYtYjhlYi04YzM2NGNkMjY0YjEvMC9BN0QxQkQ4MjEx M0NENzIwQzU3MkFGOTlBOEZCMjk0MDYxMEFFQzQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTdEMUJEODIxMTNDRDcyMEM1NzJBRjk5QThGQjI5NDA2MTBB RUM0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDlkYTdiNmEtNGUxYS00MWZmLWI4 ZWItOGMzNjRjZDI2NGIxLzAvQTdEMUJEODIxMTNDRDcyMEM1NzJBRjk5QThGQjI5 NDA2MTBBRUM0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAApNmpRxs7jr5qzCejyjI9LvIa0JX30UGkZM 9BS1qalo6nWnPfYFlkLBUKCCQn9WUnqWmzFxhJWZsdJmyVJ6DPW9ciO3eziWv2zD vCOc33k11MurQ902AtMDf5VGgIkeSlWTBqpi1fEQhno+Wn1lzWcjw1OphN0dbXZE 9rKn9t6jFCsGWu4fU3mLAtKuKx9Ma/SQrW3UPDYGK1DmR8z1qaEM4X/kWZqwH9Wc vIlbGQBdZmpix6va+iQy0pVa158YNykFTMyiKAnLpeN0hnyycwtVsOqwvR9sSllb Fngpmu04lTQmLiRdVQ5iOcfQYMXT8Pob6Qlg91fYI5Jt1mlv84U= -----END CERTIFICATE-----Generated at Tue Apr 29 23:27:38 2025 by rpki-client