$ rpki-client -vvf repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft File: 7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft (raw, json) Hash identifier: ItYuNjOsiuq9JDFortDCI6wPiVbuWxD1RiWtgT+vJFw= Subject key identifier: 1D:14:AE:F2:7C:FB:FA:FB:EB:61:AD:9F:E1:87:76:D5:96:B8:17:50 Authority key identifier: 7D:5A:E0:85:96:8D:C7:CB:31:10:23:F7:EB:E0:BF:8E:12:67:06:E4 Certificate issuer: /CN=7D5AE085968DC7CB311023F7EBE0BF8E126706E4 Certificate serial: 0504E97E55303338CFC27EB921DBF74BDB730ABD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft Manifest number: 4D Signing time: Wed 30 Apr 2025 00:12:18 +0000 Manifest this update: Wed 30 Apr 2025 00:07:18 +0000 Manifest next update: Sat 03 May 2025 04:10:18 +0000 Files and hashes: 1: 3130332e38372e3139392e302f32342d3234203d3e20313336303837.roa (hash: H2vMbusg9cc7KJr3RTfXCg88poNhf1lCs+Xogw0psfI=) 2: 3130332e38372e3139382e302f32342d3234203d3e20313336303837.roa (hash: V4UBKbCeji0pbV7a6XBtcRsd6l6kzHNKhpG08xb4pYs=) 3: 3130332e38372e3139362e302f32342d3234203d3e20313336303837.roa (hash: PKJay4YTUMIamculUnWc/1iHvOFg1R7DDFoaRZ7eMb0=) 4: 7D5AE085968DC7CB311023F7EBE0BF8E126706E4.crl (hash: JsGm9dN6wRxfi09j8yE2wV/cUfpw7tOmmK9dKQRR2IA=) 5: 3130332e38372e3139372e302f32342d3234203d3e20313336303837.roa (hash: QdxrdH7DJeQ01d2yPs/0LNDYNMsAKR57bx9AHeSr82o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.crl rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 04:10:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:04:e9:7e:55:30:33:38:cf:c2:7e:b9:21:db:f7:4b:db:73:0a:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D5AE085968DC7CB311023F7EBE0BF8E126706E4 Validity Not Before: Apr 30 00:07:18 2025 GMT Not After : May 3 04:10:18 2025 GMT Subject: CN=1D14AEF27CFBFAFBEB61AD9FE18776D596B81750 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:a8:80:63:6f:da:4e:49:c5:fd:a0:04:e1:d1: 1f:b4:e0:e5:da:ee:32:e1:41:96:ff:71:3e:3f:bc: 9d:1f:5d:72:01:77:8c:29:55:6b:8e:66:8f:32:ec: 98:64:c6:88:0b:b2:80:98:1b:60:c5:69:c0:f1:52: 0a:29:5c:26:b7:ce:e8:c8:c0:f0:19:bf:4b:78:51: 9b:03:e0:bf:0a:89:30:9d:08:a6:53:b4:d9:dd:e8: 87:a6:17:38:5f:1c:c0:eb:c6:12:f7:c6:d8:6d:23: db:fd:5b:77:54:16:28:6d:23:84:28:bf:03:1d:71: b3:12:d6:85:cf:f7:e7:9c:44:76:45:f3:db:2a:c0: ac:a6:57:c9:e4:47:cf:74:5f:07:25:de:7b:bd:18: 06:53:57:56:4a:c0:f5:70:4d:44:16:eb:89:3f:14: 19:ab:34:fa:00:d1:ce:b2:37:57:59:4e:bf:95:e2: 5c:7f:52:60:bf:b3:af:21:71:1b:49:df:15:01:17: ba:34:53:a4:92:1e:4c:2b:28:a8:45:13:4a:f1:1c: 43:3a:51:74:0c:7e:b6:cb:4e:c3:7c:a1:a9:fc:08: 17:54:1f:1b:81:76:d2:ab:8c:ca:83:4e:20:5c:a9: 12:f9:dd:48:75:be:9a:a6:61:66:c0:db:7d:38:57: 3b:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:14:AE:F2:7C:FB:FA:FB:EB:61:AD:9F:E1:87:76:D5:96:B8:17:50 X509v3 Authority Key Identifier: keyid:7D:5A:E0:85:96:8D:C7:CB:31:10:23:F7:EB:E0:BF:8E:12:67:06:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/56e63cd2-fb3c-41b2-b96b-ab234420a211/0/7D5AE085968DC7CB311023F7EBE0BF8E126706E4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:9f:04:4c:67:f3:ec:af:bb:8f:0c:35:48:31:9d:d0:f7:4d: c2:f5:6d:c9:3d:99:ad:9a:4f:82:49:02:c7:9c:78:64:5e:7a: b8:9f:b3:5b:7c:9a:91:58:ce:a9:95:25:82:fd:b9:15:c7:d6: 14:c7:3e:59:c5:ea:9f:a9:e2:bb:78:b5:ad:a1:eb:38:c4:60: f3:60:83:b5:65:69:e0:6c:6d:d1:bf:3d:37:80:9f:85:eb:b4: cf:00:34:fd:1b:7c:60:f7:af:8e:27:dc:e9:fd:69:f0:82:2c: ec:2e:b5:ae:e8:07:1d:05:ec:05:27:19:60:e3:c2:2e:42:1a: 45:f0:df:27:98:b7:49:1f:7d:8f:35:76:ef:30:4e:e4:a4:13: f9:4c:1c:14:e6:c3:e6:b3:10:b4:de:be:e1:bd:93:b3:e2:8d: b0:90:4e:3c:e2:c6:55:c6:1a:1d:3b:e6:91:7a:b1:96:58:1f: c2:26:1f:0c:15:fb:64:7a:ca:56:24:69:24:8e:a0:92:c7:9f: 8c:ae:aa:b2:31:bd:54:99:24:8c:7f:f4:d9:6b:5d:76:75:de: cb:aa:87:ab:fe:09:77:4f:7f:60:ef:e1:f4:3a:c5:9c:3f:c4: bd:6d:7e:2c:fd:a8:2f:d9:05:6f:47:21:3d:7b:33:b8:16:5a: 6e:b7:75:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBQTpflUwMzjPwn65Idv3S9tzCr0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q1QUUwODU5NjhEQzdDQjMxMTAyM0Y3RUJFMEJGOEUx MjY3MDZFNDAeFw0yNTA0MzAwMDA3MThaFw0yNTA1MDMwNDEwMThaMDMxMTAvBgNV BAMTKDFEMTRBRUYyN0NGQkZBRkJFQjYxQUQ5RkUxODc3NkQ1OTZCODE3NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/qIBjb9pOScX9oATh0R+04OXa 7jLhQZb/cT4/vJ0fXXIBd4wpVWuOZo8y7JhkxogLsoCYG2DFacDxUgopXCa3zujI wPAZv0t4UZsD4L8KiTCdCKZTtNnd6IemFzhfHMDrxhL3xthtI9v9W3dUFihtI4Qo vwMdcbMS1oXP9+ecRHZF89sqwKymV8nkR890Xwcl3nu9GAZTV1ZKwPVwTUQW64k/ FBmrNPoA0c6yN1dZTr+V4lx/UmC/s68hcRtJ3xUBF7o0U6SSHkwrKKhFE0rxHEM6 UXQMfrbLTsN8oan8CBdUHxuBdtKrjMqDTiBcqRL53Uh1vpqmYWbA2304VztPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHRSu8nz7+vvrYa2f4Yd21Za4F1AwHwYDVR0j BBgwFoAUfVrghZaNx8sxECP36+C/jhJnBuQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NmU2M2NkMi1mYjNjLTQxYjItYjk2Yi1hYjIzNDQyMGEyMTEvMC83RDVBRTA4NTk2 OERDN0NCMzExMDIzRjdFQkUwQkY4RTEyNjcwNkU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q1QUUwODU5NjhEQzdDQjMxMTAyM0Y3RUJFMEJGOEUxMjY3 MDZFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTZlNjNjZDItZmIzYy00MWIyLWI5 NmItYWIyMzQ0MjBhMjExLzAvN0Q1QUUwODU5NjhEQzdDQjMxMTAyM0Y3RUJFMEJG OEUxMjY3MDZFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACKfBExn8+yvu48MNUgxndD3TcL1bck9ma2a T4JJAseceGReerifs1t8mpFYzqmVJYL9uRXH1hTHPlnF6p+p4rt4ta2h6zjEYPNg g7VlaeBsbdG/PTeAn4XrtM8ANP0bfGD3r44n3On9afCCLOwuta7oBx0F7AUnGWDj wi5CGkXw3yeYt0kffY81du8wTuSkE/lMHBTmw+azELTevuG9k7PijbCQTjzixlXG Gh075pF6sZZYH8ImHwwV+2R6ylYkaSSOoJLHn4yuqrIxvVSZJIx/9NlrXXZ13suq h6v+CXdPf2Dv4fQ6xZw/xL1tfiz9qC/ZBW9HIT17M7gWWm63dR4= -----END CERTIFICATE-----Generated at Wed Apr 30 16:21:16 2025 by rpki-client