$ rpki-client -vvf repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft File: B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft (raw, json) Hash identifier: 24kKR/dCQqp6UFUHueL6G4JBt4OkaCXG/CE9C2/HEaw= Subject key identifier: B7:0F:0A:45:93:6B:32:EB:FB:89:42:AB:F1:B4:DF:89:73:71:10:88 Authority key identifier: B1:D4:F5:49:5B:E4:F9:D9:95:EA:9C:15:45:46:9C:A2:B9:83:34:F1 Certificate issuer: /CN=B1D4F5495BE4F9D995EA9C1545469CA2B98334F1 Certificate serial: 32A7C945594A8A91D9A88D3FD9FFC912FE467EF5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft Manifest number: 0207 Signing time: Tue 29 Apr 2025 05:02:20 +0000 Manifest this update: Tue 29 Apr 2025 04:57:20 +0000 Manifest next update: Fri 02 May 2025 05:02:20 +0000 Files and hashes: 1: 3130332e3136382e3138352e302f32342d3234203d3e20313432333231.roa (hash: KAd16ldutYh48OLbDnroVNt1O/HTzAA/aCmbtAP1Odw=) 2: B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.crl (hash: aU7IQ8xdGU36JqD8zP3wGn7CjgfsqriAcBmrPR+ZCAM=) 3: 3130332e3136382e3138342e302f32342d3234203d3e20313432333231.roa (hash: YwiS5nlm2sACVNb5Xfq0EOTBtueDgKIv6RAnbgfUwRk=) 4: 3130332e3136382e3138342e302f32342d3234203d3e203438343635.roa (hash: as7KtFlD4iKysyXSKxxgu8y4XOhRCjKWFwK+lMzj6oQ=) 5: 3130332e3136382e3138342e302f32332d3233203d3e20313432333231.roa (hash: WwW9nUa1rmjUn7BCAW+1oX9KPadjU43XCXkkj1toOfQ=) 6: 3130332e3136382e3138352e302f32342d3234203d3e203438343635.roa (hash: yFLtXZhv4icStZGluIXSTKiVb7PeS6C1hGZnyhQ1yqo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.crl rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:02:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:a7:c9:45:59:4a:8a:91:d9:a8:8d:3f:d9:ff:c9:12:fe:46:7e:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B1D4F5495BE4F9D995EA9C1545469CA2B98334F1 Validity Not Before: Apr 29 04:57:20 2025 GMT Not After : May 2 05:02:20 2025 GMT Subject: CN=B70F0A45936B32EBFB8942ABF1B4DF8973711088 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e3:40:c0:8e:7a:fb:6c:8a:27:70:94:b3:7f: 03:ce:b3:68:1e:45:93:9e:1d:71:20:4f:66:60:70: 84:49:83:c2:9d:b3:78:e4:2a:b0:14:5c:4b:76:68: 09:ff:76:8e:6b:e1:6b:87:13:24:78:7a:86:8a:01: a1:0d:ea:50:1c:ce:e8:ed:cc:aa:3f:de:0f:57:88: 51:c1:e4:39:ee:10:56:6a:0c:17:43:79:8b:2f:7c: 89:6b:e0:87:71:01:58:e2:2d:30:4b:2e:29:d6:f7: 34:58:00:cd:af:fc:e6:9e:49:dd:60:5d:da:44:94: 9a:fc:de:cb:b7:0b:6b:86:b9:8c:55:f6:71:22:d3: 25:40:8b:81:41:ac:64:03:f4:d4:3b:4a:6e:99:c1: 65:f1:32:b9:17:58:c3:fe:a1:ed:db:fd:d7:6d:28: 67:fa:c6:73:65:11:19:7d:8f:9a:ef:5e:58:cf:73: 04:d7:ba:85:06:b7:f6:3d:dc:16:e2:59:f5:8a:66: 3e:d7:b8:3c:a6:70:c5:ec:02:b0:42:17:90:96:ce: 66:ad:58:29:b0:db:af:50:3d:a5:7d:70:e3:91:90: 56:99:8c:b2:21:15:d4:87:2a:a3:ab:3a:07:e6:aa: 90:a2:91:e8:1f:d4:a1:03:14:3d:8f:ff:ff:df:df: a8:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:0F:0A:45:93:6B:32:EB:FB:89:42:AB:F1:B4:DF:89:73:71:10:88 X509v3 Authority Key Identifier: keyid:B1:D4:F5:49:5B:E4:F9:D9:95:EA:9C:15:45:46:9C:A2:B9:83:34:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/78e78ee0-0002-4a67-a739-3033d5b5ba61/0/B1D4F5495BE4F9D995EA9C1545469CA2B98334F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:1f:9c:01:59:20:d5:24:21:cb:f3:91:6a:55:5b:76:f3:14: c1:7d:95:cb:8a:ce:85:94:d3:dd:e7:42:e2:77:f4:1c:44:a8: 07:b8:59:2f:fb:44:32:f7:d8:8a:3b:03:d4:66:c9:16:68:50: 2a:e5:15:87:2c:2d:26:a9:f2:11:f6:af:b6:83:f7:ca:b1:99: e0:17:0f:b5:51:12:5a:05:51:86:3c:92:97:ae:ef:56:59:a1: d4:ae:1e:48:9a:bc:7f:8f:f6:00:bd:e5:17:93:f4:36:3b:ac: e1:dd:ad:26:27:46:c6:40:aa:d0:c6:e0:39:68:82:a1:66:64: f5:c5:aa:d6:06:f8:a2:0a:f3:cf:40:c3:a7:e6:31:29:b6:6f: 61:26:97:d3:9f:75:04:2b:e7:9f:ac:a3:46:e1:1b:ac:0f:7a: ad:7c:02:40:af:63:4e:e2:99:3f:c8:f1:6a:d6:20:93:30:6c: 29:09:9a:2e:e7:ad:0a:18:35:6b:36:8c:c8:58:aa:74:86:6e: b0:7b:ef:a7:59:6e:75:af:62:2f:48:c4:d4:60:8c:bb:0d:6a: be:f9:7f:3b:b1:31:25:d2:c8:c9:42:15:97:f7:cc:70:b7:de: e0:a3:c6:ef:86:94:57:38:f3:45:d8:3c:dd:e6:a0:d5:86:e4: a5:72:f4:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMqfJRVlKipHZqI0/2f/JEv5GfvUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjFENEY1NDk1QkU0RjlEOTk1RUE5QzE1NDU0NjlDQTJC OTgzMzRGMTAeFw0yNTA0MjkwNDU3MjBaFw0yNTA1MDIwNTAyMjBaMDMxMTAvBgNV BAMTKEI3MEYwQTQ1OTM2QjMyRUJGQjg5NDJBQkYxQjRERjg5NzM3MTEwODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq40DAjnr7bIoncJSzfwPOs2ge RZOeHXEgT2ZgcIRJg8Kds3jkKrAUXEt2aAn/do5r4WuHEyR4eoaKAaEN6lAczujt zKo/3g9XiFHB5DnuEFZqDBdDeYsvfIlr4IdxAVjiLTBLLinW9zRYAM2v/OaeSd1g XdpElJr83su3C2uGuYxV9nEi0yVAi4FBrGQD9NQ7Sm6ZwWXxMrkXWMP+oe3b/ddt KGf6xnNlERl9j5rvXljPcwTXuoUGt/Y93BbiWfWKZj7XuDymcMXsArBCF5CWzmat WCmw269QPaV9cOORkFaZjLIhFdSHKqOrOgfmqpCikegf1KEDFD2P///f36hBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtw8KRZNrMuv7iUKr8bTfiXNxEIgwHwYDVR0j BBgwFoAUsdT1SVvk+dmV6pwVRUacormDNPEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OGU3OGVlMC0wMDAyLTRhNjctYTczOS0zMDMzZDViNWJhNjEvMC9CMUQ0RjU0OTVC RTRGOUQ5OTVFQTlDMTU0NTQ2OUNBMkI5ODMzNEYxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjFENEY1NDk1QkU0RjlEOTk1RUE5QzE1NDU0NjlDQTJCOTgz MzRGMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzhlNzhlZTAtMDAwMi00YTY3LWE3 MzktMzAzM2Q1YjViYTYxLzAvQjFENEY1NDk1QkU0RjlEOTk1RUE5QzE1NDU0NjlD QTJCOTgzMzRGMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANofnAFZINUkIcvzkWpVW3bzFMF9lcuKzoWU 093nQuJ39BxEqAe4WS/7RDL32Io7A9RmyRZoUCrlFYcsLSap8hH2r7aD98qxmeAX D7VREloFUYY8kpeu71ZZodSuHkiavH+P9gC95ReT9DY7rOHdrSYnRsZAqtDG4Dlo gqFmZPXFqtYG+KIK889Aw6fmMSm2b2Eml9OfdQQr55+so0bhG6wPeq18AkCvY07i mT/I8WrWIJMwbCkJmi7nrQoYNWs2jMhYqnSGbrB776dZbnWvYi9IxNRgjLsNar75 fzuxMSXSyMlCFZf3zHC33uCjxu+GlFc480XYPN3moNWG5KVy9Co= -----END CERTIFICATE-----Generated at Wed Apr 30 01:06:55 2025 by rpki-client