$ rpki-client -vvf repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft File: 7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft (raw, json) Hash identifier: ZL88TZdEWz01IL3Biwh+tJEN7tMAaeQFZ3BTj0vMEno= Subject key identifier: 48:37:61:23:70:09:57:A5:77:F9:FD:B0:9B:40:7F:91:0B:FC:4F:8D Authority key identifier: 7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67 Certificate issuer: /CN=7D64B8F4CFB687141137D10F9E73FFD0BAB93F67 Certificate serial: 4AE1CE165F66CFA9397E4B43A9549B48FE7B7881 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer Subject info access: rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft Manifest number: 0287 Signing time: Sun 27 Apr 2025 21:02:08 +0000 Manifest this update: Sun 27 Apr 2025 20:57:08 +0000 Manifest next update: Thu 01 May 2025 04:36:08 +0000 Files and hashes: 1: 323430313a383434303a3a2f33322d3332203d3e20313336313331.roa (hash: XjoAHco7m2PHrJkLw+g7kXYYTaQ359BKHQsXeKrypoE=) 2: 7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl (hash: mAGABQ8clE5Nv02mL+idx9WbKOA//pP+I6NLtsFMEQw=) 3: 323430313a383434303a3331313a3a2f34382d3438203d3e20313336313331.roa (hash: uNKV4J4iyB42iT7YiJbc/obq8TacFQRWwVPHqjYHdt4=) 4: 3130332e39372e37382e302f32342d3234203d3e20313336313331.roa (hash: gTWqsHLXGzmwOn5oUbLdKwsFxUOTG6JntDETCN1uoJg=) 5: 3130332e39372e37362e302f32342d3234203d3e20313336313331.roa (hash: sppd+EBGEaepceJfNxlZXMQLq/sqMLGJt/R8ADFWUfE=) 6: 323430313a383434303a3233313a3a2f34382d3438203d3e20313336313331.roa (hash: 9q0QjNfZ8ZidXQKSI35eyNIOpPTa4MZHY+H9XcdTGqQ=) 7: 3130332e39372e37392e302f32342d3234203d3e20313336313331.roa (hash: g7TDmW1J5jNMb6eLJToYzt8xdajrekh1Q+uRWpcwKv0=) 8: 323430313a383434303a3133313a3a2f34382d3438203d3e20313336313331.roa (hash: 7XF+7tNQBQV2Wy0AsX8lBCySJ+ATYXgli7NY4z4VmfM=) 9: 3130332e39372e37372e302f32342d3234203d3e20313336313331.roa (hash: rgwWhpicbIXeIE3pTFSF/nJgGhjsTFXordy0vbByPyc=) 10: 323430313a383434303a33313a3a2f34382d3438203d3e20313336313331.roa (hash: imoDv7fNxiS0ABFe1mnjo4w6QxU9zgowGM6VjXLrifM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 04:36:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:e1:ce:16:5f:66:cf:a9:39:7e:4b:43:a9:54:9b:48:fe:7b:78:81 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D64B8F4CFB687141137D10F9E73FFD0BAB93F67 Validity Not Before: Apr 27 20:57:08 2025 GMT Not After : May 1 04:36:08 2025 GMT Subject: CN=48376123700957A577F9FDB09B407F910BFC4F8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:51:95:b8:15:98:d0:b7:2c:49:c9:3d:48:5f: b3:6f:6f:8c:ba:29:a2:de:33:0e:32:fd:bf:f3:4f: 63:7a:5d:42:a5:e6:76:1a:f8:af:2e:1d:37:5e:2c: fa:6e:28:71:a6:6c:f7:55:b4:c7:0f:05:25:4d:d2: c4:40:f6:10:44:6b:5f:2a:45:1d:ff:a2:0b:6a:78: f5:ff:f7:25:25:f4:f3:bf:7f:10:4f:c7:a2:f3:d5: 64:db:0f:65:1e:ab:6b:bc:f9:a1:7e:d6:dd:d1:af: 9d:41:f7:0c:49:b6:96:24:7b:bd:63:42:bc:b8:13: 23:60:43:1a:96:8d:07:28:b1:b3:b3:47:73:e9:c1: 75:51:f5:ac:41:85:8e:d6:b5:f0:a7:73:91:29:52: c0:06:f1:9d:6a:54:d5:a4:cf:db:43:b4:31:45:32: a2:43:15:07:03:83:d3:4c:69:24:30:d9:0f:1a:ed: b6:82:06:3d:36:12:a3:2b:af:80:cd:1f:3d:2d:1e: 43:93:90:59:96:49:73:77:dc:17:14:9f:70:9c:66: 61:03:4b:b9:4a:d4:23:a7:5c:26:18:b3:cd:19:e0: 35:2c:83:83:27:7e:d2:68:fc:0c:08:75:09:a8:9d: 93:cd:13:c4:ce:28:c4:8f:5f:ad:07:51:27:a5:78: d1:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:37:61:23:70:09:57:A5:77:F9:FD:B0:9B:40:7F:91:0B:FC:4F:8D X509v3 Authority Key Identifier: keyid:7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:b0:ac:99:f4:b2:10:03:97:b2:e2:b8:f0:18:3e:1e:15:51: 00:ca:2f:11:67:42:ed:36:8e:a2:dd:a0:07:19:d2:d4:88:d8: 5b:fd:5a:90:1d:bd:1f:39:23:f5:14:fa:01:6e:6f:a3:6f:bc: 82:b8:48:86:6c:f7:f1:92:72:b6:d3:a2:ea:38:86:e4:1a:16: 2a:5e:3e:4f:8e:65:16:d7:69:3f:f4:20:9b:05:69:6e:0d:19: 80:e7:14:f3:7b:40:f6:4a:62:17:df:85:ff:a8:a4:2d:ed:c4: 40:a3:c2:2d:3d:d0:63:31:7d:2b:78:99:4b:52:0f:c0:68:2f: 0d:a4:3f:7a:41:6d:a2:af:fd:52:2e:eb:33:7b:3d:f9:23:82: 3c:d5:5d:0c:a2:f2:97:75:0e:bc:fc:a1:4a:a9:0f:db:73:a3: ae:ad:45:2d:2d:d9:da:8c:74:e1:3b:42:80:ab:7c:99:41:66: e7:7b:1a:2f:14:c9:70:71:f0:46:4c:4c:e2:e9:9b:18:00:8e: 0b:62:a3:30:60:c4:d5:4d:9d:7b:34:e9:76:32:3c:8d:22:0c: 54:36:0a:93:8b:e2:31:5a:5f:8c:83:34:fb:59:9d:d7:01:63: 70:7b:a0:7a:fc:ed:16:51:c9:c1:ca:9d:97:9c:34:73:4b:be: 72:2a:a6:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSuHOFl9mz6k5fktDqVSbSP57eIEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZGRDBC QUI5M0Y2NzAeFw0yNTA0MjcyMDU3MDhaFw0yNTA1MDEwNDM2MDhaMDMxMTAvBgNV BAMTKDQ4Mzc2MTIzNzAwOTU3QTU3N0Y5RkRCMDlCNDA3RjkxMEJGQzRGOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqUZW4FZjQtyxJyT1IX7Nvb4y6 KaLeMw4y/b/zT2N6XUKl5nYa+K8uHTdeLPpuKHGmbPdVtMcPBSVN0sRA9hBEa18q RR3/ogtqePX/9yUl9PO/fxBPx6Lz1WTbD2Ueq2u8+aF+1t3Rr51B9wxJtpYke71j Qry4EyNgQxqWjQcosbOzR3PpwXVR9axBhY7WtfCnc5EpUsAG8Z1qVNWkz9tDtDFF MqJDFQcDg9NMaSQw2Q8a7baCBj02EqMrr4DNHz0tHkOTkFmWSXN33BcUn3CcZmED S7lK1COnXCYYs80Z4DUsg4MnftJo/AwIdQmonZPNE8TOKMSPX60HUSeleNEjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSDdhI3AJV6V3+f2wm0B/kQv8T40wHwYDVR0j BBgwFoAUfWS49M+2hxQRN9EPnnP/0Lq5P2cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTdiMGQ3ZS1lYWRlLTQzMTgtYWIyMC04YzdmMmQ1YmU2OWYvMC83RDY0QjhGNENG QjY4NzE0MTEzN0QxMEY5RTczRkZEMEJBQjkzRjY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZGRDBCQUI5 M0Y2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTU3YjBkN2UtZWFkZS00MzE4LWFi MjAtOGM3ZjJkNWJlNjlmLzAvN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZG RDBCQUI5M0Y2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD2wrJn0shADl7LiuPAYPh4VUQDKLxFnQu02 jqLdoAcZ0tSI2Fv9WpAdvR85I/UU+gFub6NvvIK4SIZs9/GScrbTouo4huQaFipe Pk+OZRbXaT/0IJsFaW4NGYDnFPN7QPZKYhffhf+opC3txECjwi090GMxfSt4mUtS D8BoLw2kP3pBbaKv/VIu6zN7PfkjgjzVXQyi8pd1Drz8oUqpD9tzo66tRS0t2dqM dOE7QoCrfJlBZud7Gi8UyXBx8EZMTOLpmxgAjgtiozBgxNVNnXs06XYyPI0iDFQ2 CpOL4jFaX4yDNPtZndcBY3B7oHr87RZRycHKnZecNHNLvnIqpkM= -----END CERTIFICATE-----Generated at Tue Apr 29 16:17:00 2025 by rpki-client