$ rpki-client -vvf repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.mft File: E07F0E8DE2572DC7B8137EC0679F42645D695A54.mft (raw, json) Hash identifier: qizmq5jwf3ImpxCA+oZY+doyLCAvaTQiIbDJZknybHw= Subject key identifier: A7:56:A3:7E:6F:95:E7:E6:08:85:EB:DC:D8:4F:4E:1F:BB:1A:02:FF Authority key identifier: E0:7F:0E:8D:E2:57:2D:C7:B8:13:7E:C0:67:9F:42:64:5D:69:5A:54 Certificate issuer: /CN=E07F0E8DE2572DC7B8137EC0679F42645D695A54 Certificate serial: 0D0E61F5C013084DDB090ECBFCA7107C8E473A0D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07F0E8DE2572DC7B8137EC0679F42645D695A54.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.mft Manifest number: 85 Signing time: Wed 30 Apr 2025 02:00:40 +0000 Manifest this update: Wed 30 Apr 2025 01:55:40 +0000 Manifest next update: Sat 03 May 2025 09:03:40 +0000 Files and hashes: 1: 323030313a6466333a666434303a3a2f34382d3438203d3e20313532303535.roa (hash: nBBEGh+oaNLr5YZQXqRSHq+1nDB2GaD5U/bkpjIsrWc=) 2: E07F0E8DE2572DC7B8137EC0679F42645D695A54.crl (hash: 3tzcqY2Dck4UBO/wawqDZ67uJGWFqT6is2GBl4C4vxw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.crl rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07F0E8DE2572DC7B8137EC0679F42645D695A54.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 09:03:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:0e:61:f5:c0:13:08:4d:db:09:0e:cb:fc:a7:10:7c:8e:47:3a:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E07F0E8DE2572DC7B8137EC0679F42645D695A54 Validity Not Before: Apr 30 01:55:40 2025 GMT Not After : May 3 09:03:40 2025 GMT Subject: CN=A756A37E6F95E7E60885EBDCD84F4E1FBB1A02FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4a:b5:ef:58:55:42:c2:63:91:10:db:4d:e8: 93:1f:fc:a9:2b:4b:8e:38:27:a6:10:d0:ac:eb:5e: e9:9c:5a:55:b1:d6:70:2d:b2:1e:4c:6e:17:b7:5b: 14:cf:f7:23:a2:2b:3e:60:ac:64:bb:98:51:fe:47: b2:c5:7a:3f:a7:40:95:c3:61:3b:32:65:dc:9e:0a: c2:20:08:3f:03:37:e1:8c:02:8c:ad:7f:89:ac:f4: 6c:a7:22:25:d2:ad:6d:21:bb:09:b0:dd:34:27:82: 9d:b5:34:ee:40:a4:fa:bd:be:e3:70:0b:e0:8d:58: 4d:7f:fe:55:7a:c3:60:c7:ce:2b:ef:84:5c:f6:91: c3:43:fe:43:43:c1:70:81:95:37:59:f9:0b:6f:2c: f0:3c:e0:27:07:c0:3d:5c:59:9a:1b:7b:1a:43:07: 21:f7:12:95:52:0b:ef:73:e6:1f:ee:44:3c:ff:36: 1b:b4:9a:24:4d:1c:40:95:54:12:58:a7:20:09:55: bf:91:4e:8d:ec:67:89:1d:bd:28:01:d3:21:1c:ab: 9e:c0:89:0e:36:79:04:b4:43:3d:3a:7b:e4:f0:c9: 44:27:7a:3b:ee:68:84:56:0f:06:32:1b:ee:81:24: 20:b6:3d:21:1e:39:ef:70:35:78:77:a5:a9:d1:f3: d2:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A7:56:A3:7E:6F:95:E7:E6:08:85:EB:DC:D8:4F:4E:1F:BB:1A:02:FF X509v3 Authority Key Identifier: keyid:E0:7F:0E:8D:E2:57:2D:C7:B8:13:7E:C0:67:9F:42:64:5D:69:5A:54 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E07F0E8DE2572DC7B8137EC0679F42645D695A54.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8f285ef-3453-4179-a553-f19597de9ded/0/E07F0E8DE2572DC7B8137EC0679F42645D695A54.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:0b:4b:42:06:64:4e:d0:36:c9:6d:b4:ad:e7:a3:93:c9:51: 85:ea:d0:d5:6b:e0:c8:6d:fc:70:fb:2a:b0:81:19:ba:9f:21: 28:71:a8:85:74:bd:3b:45:9d:22:5b:ee:0c:75:6e:0e:53:8b: 99:18:24:1b:ea:44:4e:90:d8:f0:21:56:f2:71:a5:bc:be:aa: 86:c8:b2:d4:70:3d:ef:8c:9e:d7:9c:d8:a2:13:7f:9d:51:c7: 94:94:0c:c7:e0:9a:c2:71:b4:9a:6b:8c:4c:f2:94:d2:0c:db: e3:2f:21:a5:9a:0b:0e:bd:d2:a6:7a:e3:d7:03:83:a2:9d:7c: b3:92:41:8c:02:6c:cf:aa:58:a1:4b:51:46:52:b0:14:83:85: ae:4f:e5:8a:ff:12:9c:ba:37:19:fb:90:38:34:cd:43:c2:98: 9c:ea:27:8c:34:ad:f2:54:60:84:d7:27:f6:60:b3:00:cc:55: 43:8e:87:5a:e5:c4:bc:c6:ac:d5:db:e6:d9:23:0e:86:fb:63: d4:3b:e5:d7:7f:00:0a:91:16:05:02:a7:85:11:f3:c3:90:ca: f4:b4:8b:70:09:65:c6:7f:d4:31:ea:d9:bb:c5:69:f6:72:fe: a5:4e:e7:99:a1:12:ed:88:f9:0b:01:7e:17:1d:7a:53:76:b9: 3c:6d:80:5d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDQ5h9cATCE3bCQ7L/KcQfI5HOg0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTA3RjBFOERFMjU3MkRDN0I4MTM3RUMwNjc5RjQyNjQ1 RDY5NUE1NDAeFw0yNTA0MzAwMTU1NDBaFw0yNTA1MDMwOTAzNDBaMDMxMTAvBgNV BAMTKEE3NTZBMzdFNkY5NUU3RTYwODg1RUJEQ0Q4NEY0RTFGQkIxQTAyRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3SrXvWFVCwmORENtN6JMf/Kkr S444J6YQ0KzrXumcWlWx1nAtsh5Mbhe3WxTP9yOiKz5grGS7mFH+R7LFej+nQJXD YTsyZdyeCsIgCD8DN+GMAoytf4ms9GynIiXSrW0huwmw3TQngp21NO5ApPq9vuNw C+CNWE1//lV6w2DHzivvhFz2kcND/kNDwXCBlTdZ+QtvLPA84CcHwD1cWZobexpD ByH3EpVSC+9z5h/uRDz/Nhu0miRNHECVVBJYpyAJVb+RTo3sZ4kdvSgB0yEcq57A iQ42eQS0Qz06e+TwyUQnejvuaIRWDwYyG+6BJCC2PSEeOe9wNXh3panR89LNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUp1ajfm+V5+YIhevc2E9OH7saAv8wHwYDVR0j BBgwFoAU4H8OjeJXLce4E37AZ59CZF1pWlQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h OGYyODVlZi0zNDUzLTQxNzktYTU1My1mMTk1OTdkZTlkZWQvMC9FMDdGMEU4REUy NTcyREM3QjgxMzdFQzA2NzlGNDI2NDVENjk1QTU0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTA3RjBFOERFMjU3MkRDN0I4MTM3RUMwNjc5RjQyNjQ1RDY5 NUE1NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYThmMjg1ZWYtMzQ1My00MTc5LWE1 NTMtZjE5NTk3ZGU5ZGVkLzAvRTA3RjBFOERFMjU3MkRDN0I4MTM3RUMwNjc5RjQy NjQ1RDY5NUE1NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABoLS0IGZE7QNslttK3no5PJUYXq0NVr4Mht /HD7KrCBGbqfIShxqIV0vTtFnSJb7gx1bg5Ti5kYJBvqRE6Q2PAhVvJxpby+qobI stRwPe+Mntec2KITf51Rx5SUDMfgmsJxtJprjEzylNIM2+MvIaWaCw690qZ649cD g6KdfLOSQYwCbM+qWKFLUUZSsBSDha5P5Yr/Epy6Nxn7kDg0zUPCmJzqJ4w0rfJU YITXJ/ZgswDMVUOOh1rlxLzGrNXb5tkjDob7Y9Q75dd/AAqRFgUCp4UR88OQyvS0 i3AJZcZ/1DHq2bvFafZy/qVO55mhEu2I+QsBfhcdelN2uTxtgF0= -----END CERTIFICATE-----Generated at Wed Apr 30 05:34:25 2025 by rpki-client