$ rpki-client -vvf repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft File: 7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft (raw, json) Hash identifier: l/pnowMAqZecKFQ2hILcQZRW2xZh470mEzmZzRFxRjY= Subject key identifier: F7:EF:05:A8:EA:60:22:6B:0C:A8:DE:28:0E:97:4D:6A:A2:F0:0B:5D Authority key identifier: 7A:21:6F:23:D8:A2:28:FB:B8:F5:63:EC:15:DF:76:FD:50:32:31:B3 Certificate issuer: /CN=7A216F23D8A228FBB8F563EC15DF76FD503231B3 Certificate serial: 070A01F3FB1935E044F9BE629CE02A6F0662399C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A216F23D8A228FBB8F563EC15DF76FD503231B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft Manifest number: 01B7 Signing time: Thu 01 May 2025 16:22:07 +0000 Manifest this update: Thu 01 May 2025 16:17:07 +0000 Manifest next update: Mon 05 May 2025 03:49:07 +0000 Files and hashes: 1: 3130332e32302e3130382e302f32342d3234203d3e20313439373037.roa (hash: l72fTVO4iPS3td7y6iJ6FZ6Iq9uNFhg1kwCppW10yoE=) 2: 3130332e32302e3130382e302f32332d3234203d3e20313439373037.roa (hash: YUh1E1cCB+Tam8Lv4+/c622A6XvCbyDIufb9eqoPvMQ=) 3: 7A216F23D8A228FBB8F563EC15DF76FD503231B3.crl (hash: 1LQeK+Lb3aOOPLAmfG5kMtW+Yvhkgma8f49+QJ7VC0o=) 4: 3130332e32302e3130392e302f32342d3234203d3e20313439373037.roa (hash: rOc9IS1yKanFrzj6lHEyVZN9K3Au8qIy9aCKaCdjEsw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.crl rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A216F23D8A228FBB8F563EC15DF76FD503231B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 05 May 2025 02:11:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:0a:01:f3:fb:19:35:e0:44:f9:be:62:9c:e0:2a:6f:06:62:39:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A216F23D8A228FBB8F563EC15DF76FD503231B3 Validity Not Before: May 1 16:17:07 2025 GMT Not After : May 5 03:49:07 2025 GMT Subject: CN=F7EF05A8EA60226B0CA8DE280E974D6AA2F00B5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:b1:31:20:e0:a6:8b:90:14:d2:70:8a:a9:ec: 00:8b:64:50:62:62:2a:ab:0b:d5:82:56:b9:8e:02: bb:a9:0f:f8:35:97:ea:cd:11:4c:07:56:ad:d7:09: e4:d5:cb:7b:8e:8f:3c:7c:9a:76:34:93:ab:ea:ba: 0f:16:a2:71:f9:99:77:3b:d5:90:8a:e7:e1:93:11: be:46:79:13:ef:e2:82:5a:3e:af:ce:ff:09:25:34: 60:e6:ce:0a:72:ab:8b:5c:da:66:b5:55:9d:73:26: 08:06:86:ac:39:86:3d:a7:72:c1:01:0f:3b:c5:bb: e4:a7:cf:7a:1c:b6:32:e2:f6:c1:e0:70:c7:03:c1: 31:87:6e:b8:55:26:05:9e:06:be:1d:26:32:3e:7d: 65:4d:c8:db:24:dd:fe:17:a9:5c:61:d6:2d:28:e8: e6:d8:23:06:50:bf:c7:c4:de:4b:b0:45:bd:8a:27: 65:62:01:0f:4c:6d:bf:ca:f7:17:fb:95:1d:e0:c4: cc:e9:93:9a:54:24:f4:1f:ae:b6:0b:a0:ed:3b:52: 0f:f0:b2:d9:ef:6f:e6:c1:3f:f6:fd:9e:c8:e3:79: d3:11:f7:21:1d:98:a7:94:59:c6:29:a4:0a:de:0a: dc:5d:d0:12:70:07:59:07:84:c4:44:cb:6f:fe:a2: 64:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:EF:05:A8:EA:60:22:6B:0C:A8:DE:28:0E:97:4D:6A:A2:F0:0B:5D X509v3 Authority Key Identifier: keyid:7A:21:6F:23:D8:A2:28:FB:B8:F5:63:EC:15:DF:76:FD:50:32:31:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A216F23D8A228FBB8F563EC15DF76FD503231B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:5f:45:4a:35:38:28:06:80:9d:02:ea:34:8e:02:07:e0:81: 3b:a9:64:f4:45:58:95:61:b5:1c:fa:49:59:c3:13:02:a9:85: 51:42:61:a5:92:21:94:d1:91:c1:c4:90:1e:a1:3e:24:01:94: 5c:33:58:a8:0e:12:a0:c4:75:6a:d2:62:f1:f1:08:40:e6:05: 08:8f:cc:51:7a:66:89:c8:1b:35:7b:23:5e:4d:27:3f:6e:ba: 66:78:1d:f4:98:28:96:44:48:65:15:30:a6:ba:28:c9:0f:af: 4e:04:94:31:e9:8b:3f:7f:85:b9:98:13:b3:55:b9:84:f3:c0: 24:87:96:06:8d:84:b3:ff:98:ac:77:33:18:67:74:fd:29:81: 91:5b:a6:e1:1c:7e:8b:6e:71:df:ae:a6:d6:08:1f:bb:e4:c3: 72:cf:0f:a6:5c:b4:03:67:4b:82:dc:fd:6b:aa:48:03:a3:f4: 4a:18:ab:b6:4e:ad:09:bc:80:72:8f:55:0b:ff:f3:58:6b:e6: af:61:2e:0d:19:60:f9:3c:7a:35:17:96:7e:42:a8:16:32:03: 5b:8d:bd:2e:2b:30:a7:94:99:ea:ad:df:11:78:2f:c9:23:d9: ff:78:52:04:32:49:d1:1b:17:46:33:83:47:9d:ee:cb:45:8f: 03:14:b1:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBwoB8/sZNeBE+b5inOAqbwZiOZwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0EyMTZGMjNEOEEyMjhGQkI4RjU2M0VDMTVERjc2RkQ1 MDMyMzFCMzAeFw0yNTA1MDExNjE3MDdaFw0yNTA1MDUwMzQ5MDdaMDMxMTAvBgNV BAMTKEY3RUYwNUE4RUE2MDIyNkIwQ0E4REUyODBFOTc0RDZBQTJGMDBCNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpsTEg4KaLkBTScIqp7ACLZFBi YiqrC9WCVrmOArupD/g1l+rNEUwHVq3XCeTVy3uOjzx8mnY0k6vqug8WonH5mXc7 1ZCK5+GTEb5GeRPv4oJaPq/O/wklNGDmzgpyq4tc2ma1VZ1zJggGhqw5hj2ncsEB DzvFu+Snz3octjLi9sHgcMcDwTGHbrhVJgWeBr4dJjI+fWVNyNsk3f4XqVxh1i0o 6ObYIwZQv8fE3kuwRb2KJ2ViAQ9Mbb/K9xf7lR3gxMzpk5pUJPQfrrYLoO07Ug/w stnvb+bBP/b9nsjjedMR9yEdmKeUWcYppAreCtxd0BJwB1kHhMREy2/+omQXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9+8FqOpgImsMqN4oDpdNaqLwC10wHwYDVR0j BBgwFoAUeiFvI9iiKPu49WPsFd92/VAyMbMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Y2M2YmQ3My1mOWJkLTRmNWEtOWM1OS1mYmVhMWJkODM0NzMvMC83QTIxNkYyM0Q4 QTIyOEZCQjhGNTYzRUMxNURGNzZGRDUwMzIzMUIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0EyMTZGMjNEOEEyMjhGQkI4RjU2M0VDMTVERjc2RkQ1MDMy MzFCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWNjNmJkNzMtZjliZC00ZjVhLTlj NTktZmJlYTFiZDgzNDczLzAvN0EyMTZGMjNEOEEyMjhGQkI4RjU2M0VDMTVERjc2 RkQ1MDMyMzFCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ1fRUo1OCgGgJ0C6jSOAgfggTupZPRFWJVh tRz6SVnDEwKphVFCYaWSIZTRkcHEkB6hPiQBlFwzWKgOEqDEdWrSYvHxCEDmBQiP zFF6ZonIGzV7I15NJz9uumZ4HfSYKJZESGUVMKa6KMkPr04ElDHpiz9/hbmYE7NV uYTzwCSHlgaNhLP/mKx3MxhndP0pgZFbpuEcfotucd+uptYIH7vkw3LPD6ZctANn S4Lc/WuqSAOj9EoYq7ZOrQm8gHKPVQv/81hr5q9hLg0ZYPk8ejUXln5CqBYyA1uN vS4rMKeUmeqt3xF4L8kj2f94UgQySdEbF0Yzg0ed7stFjwMUsZc= -----END CERTIFICATE-----Generated at Fri May 2 00:50:19 2025 by rpki-client