$ rpki-client -vvf repo-rpki.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.mft File: 142A78CA51D88042BA512A1BB46D6DF44F63BBD7.mft (raw, json) Hash identifier: kiE+l1VgNAZBvmjONXR2uJZhGsTxBRTtEZXYrNN89GI= Subject key identifier: FC:F2:D0:9B:16:0F:E7:2E:73:1C:60:6F:73:EA:37:6A:64:78:82:7D Authority key identifier: 14:2A:78:CA:51:D8:80:42:BA:51:2A:1B:B4:6D:6D:F4:4F:63:BB:D7 Certificate issuer: /CN=142A78CA51D88042BA512A1BB46D6DF44F63BBD7 Certificate serial: 06FF97DD97322417F2484C84D5745C3100FAD717 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.mft Manifest number: 7C Signing time: Mon 28 Apr 2025 18:10:35 +0000 Manifest this update: Mon 28 Apr 2025 18:05:35 +0000 Manifest next update: Fri 02 May 2025 00:50:35 +0000 Files and hashes: 1: 142A78CA51D88042BA512A1BB46D6DF44F63BBD7.crl (hash: kpNIJCYJZoKefHW03nQky9uPaMYfUh/oNFPoyMjKHcE=) 2: 3136302e32302e3234302e302f32342d3234203d3e20313532383035.roa (hash: j4rqvpCQiLF+pEFMZmXH9k9jEc3UXa+qBLPNLtNJ5rQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.crl rsync://repo-rpki.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 17:48:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:ff:97:dd:97:32:24:17:f2:48:4c:84:d5:74:5c:31:00:fa:d7:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=142A78CA51D88042BA512A1BB46D6DF44F63BBD7 Validity Not Before: Apr 28 18:05:35 2025 GMT Not After : May 2 00:50:35 2025 GMT Subject: CN=FCF2D09B160FE72E731C606F73EA376A6478827D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1b:bd:13:77:ed:26:85:fc:93:5d:2c:77:cd: 66:56:c6:23:23:f4:e9:6a:98:9a:ff:21:24:84:c1: 44:4f:30:61:1c:02:87:05:d8:a2:b8:96:8e:dc:2d: 15:6a:31:43:71:c8:46:75:8b:d9:66:18:59:2d:8d: 38:24:79:d6:72:30:6b:49:ce:5c:31:97:1c:eb:66: 0d:4c:bc:2e:91:7c:9c:87:00:fc:01:7f:00:38:fd: e0:9f:2d:9c:72:70:2e:99:93:be:8a:fd:3f:93:0b: fa:0b:e4:ee:cd:fe:06:65:01:3e:f3:ee:f2:ca:1c: 91:28:86:4c:92:45:f3:ef:99:f9:bd:18:32:ec:5d: 9d:6b:42:ec:9e:2d:a1:35:f6:4e:c1:37:32:e0:0e: f3:30:58:78:ab:70:5e:9d:a9:76:f2:ba:e9:7b:50: e0:dc:b1:d9:fb:b2:ed:fa:9d:ab:18:ef:d5:a2:b1: 31:3e:43:9d:8e:5a:ff:76:6b:3e:6a:47:60:1f:be: 4c:fd:4b:8e:0c:45:53:c9:f6:d0:90:49:9c:a3:a5: dd:9d:6e:c2:2a:34:30:5f:88:4c:45:92:6d:ca:b5: a0:90:56:ee:d5:23:a8:19:c8:df:b9:c8:e3:c7:fc: a1:11:71:d8:c0:ea:35:25:60:6f:40:17:8c:1f:eb: e2:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:F2:D0:9B:16:0F:E7:2E:73:1C:60:6F:73:EA:37:6A:64:78:82:7D X509v3 Authority Key Identifier: keyid:14:2A:78:CA:51:D8:80:42:BA:51:2A:1B:B4:6D:6D:F4:4F:63:BB:D7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7fc5a1cc-cc5e-4e58-8df4-f886718313aa/0/142A78CA51D88042BA512A1BB46D6DF44F63BBD7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:45:52:7f:1c:93:1b:d0:63:c7:bc:e4:aa:8c:0c:eb:1a:96: 99:13:57:15:73:bd:4a:41:eb:b2:08:74:90:5e:fb:cf:f7:fb: df:a8:f2:70:08:81:12:65:d4:8f:11:82:a2:68:83:83:7f:68: 06:da:ae:1b:d3:88:3d:e2:0e:da:71:03:5a:39:07:59:09:ed: aa:80:e7:99:29:23:b5:9b:f0:8a:d1:2d:fd:26:fe:58:a3:7d: 39:f5:57:2b:82:61:7f:19:b3:18:d3:44:e9:8c:85:9e:38:b4: 5b:10:db:e2:2d:d2:24:f5:e4:25:f5:9e:fb:bc:d0:f5:a0:20: d5:d6:24:34:e3:62:51:05:3b:78:7d:95:b6:16:90:fd:19:4f: 41:3c:58:08:be:46:ef:1c:82:a4:b7:46:e3:04:40:81:25:02: 45:23:56:dd:df:82:a0:d7:18:56:6b:8c:0e:26:34:79:2a:35: 49:2d:d0:68:28:e0:56:07:23:b0:80:5f:01:6f:c2:43:c4:6b: de:79:1a:79:f4:ee:38:2c:60:ea:4c:36:90:1f:f7:ae:a2:e9: 4a:d9:35:75:f3:15:95:2c:66:25:5d:44:14:6e:3b:d7:94:be: 8c:80:7c:23:f1:cc:76:5b:1f:29:6a:6b:5d:3d:55:3c:56:da: 52:ab:6b:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBv+X3ZcyJBfySEyE1XRcMQD61xcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTQyQTc4Q0E1MUQ4ODA0MkJBNTEyQTFCQjQ2RDZERjQ0 RjYzQkJENzAeFw0yNTA0MjgxODA1MzVaFw0yNTA1MDIwMDUwMzVaMDMxMTAvBgNV BAMTKEZDRjJEMDlCMTYwRkU3MkU3MzFDNjA2RjczRUEzNzZBNjQ3ODgyN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwG70Td+0mhfyTXSx3zWZWxiMj 9OlqmJr/ISSEwURPMGEcAocF2KK4lo7cLRVqMUNxyEZ1i9lmGFktjTgkedZyMGtJ zlwxlxzrZg1MvC6RfJyHAPwBfwA4/eCfLZxycC6Zk76K/T+TC/oL5O7N/gZlAT7z 7vLKHJEohkySRfPvmfm9GDLsXZ1rQuyeLaE19k7BNzLgDvMwWHircF6dqXbyuul7 UODcsdn7su36nasY79WisTE+Q52OWv92az5qR2Afvkz9S44MRVPJ9tCQSZyjpd2d bsIqNDBfiExFkm3KtaCQVu7VI6gZyN+5yOPH/KERcdjA6jUlYG9AF4wf6+KVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/PLQmxYP5y5zHGBvc+o3amR4gn0wHwYDVR0j BBgwFoAUFCp4ylHYgEK6USobtG1t9E9ju9cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZmM1YTFjYy1jYzVlLTRlNTgtOGRmNC1mODg2NzE4MzEzYWEvMC8xNDJBNzhDQTUx RDg4MDQyQkE1MTJBMUJCNDZENkRGNDRGNjNCQkQ3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvMTQyQTc4Q0E1MUQ4ODA0MkJBNTEyQTFCQjQ2RDZERjQ0RjYz QkJENy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2ZjNWExY2MtY2M1ZS00ZTU4LThk ZjQtZjg4NjcxODMxM2FhLzAvMTQyQTc4Q0E1MUQ4ODA0MkJBNTEyQTFCQjQ2RDZE RjQ0RjYzQkJENy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABRFUn8ckxvQY8e85KqMDOsalpkTVxVzvUpB 67IIdJBe+8/3+9+o8nAIgRJl1I8RgqJog4N/aAbarhvTiD3iDtpxA1o5B1kJ7aqA 55kpI7Wb8IrRLf0m/lijfTn1VyuCYX8ZsxjTROmMhZ44tFsQ2+It0iT15CX1nvu8 0PWgINXWJDTjYlEFO3h9lbYWkP0ZT0E8WAi+Ru8cgqS3RuMEQIElAkUjVt3fgqDX GFZrjA4mNHkqNUkt0Ggo4FYHI7CAXwFvwkPEa955Gnn07jgsYOpMNpAf966i6UrZ NXXzFZUsZiVdRBRuO9eUvoyAfCPxzHZbHylqa109VTxW2lKra/E= -----END CERTIFICATE-----Generated at Tue Apr 29 13:32:51 2025 by rpki-client