$ rpki-client -vvf repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft File: D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft (raw, json) Hash identifier: A2Td4uiL/2vayz7QYz/6gFjVTgZxKYc0yjoVgZj+k5w= Subject key identifier: 63:FC:D4:2F:A0:49:52:40:16:42:3E:CF:AB:14:F6:64:9C:58:FE:55 Authority key identifier: D7:85:2A:F0:5D:FB:B9:7A:CD:46:A3:73:99:F2:0D:EA:19:C2:EF:2C Certificate issuer: /CN=D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C Certificate serial: 4BF1CA1F806783A0B266014A319773C89BD52069 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft Manifest number: 02D7 Signing time: Mon 28 Apr 2025 20:41:57 +0000 Manifest this update: Mon 28 Apr 2025 20:36:57 +0000 Manifest next update: Fri 02 May 2025 05:53:57 +0000 Files and hashes: 1: 3130332e3136342e3137322e302f32342d3234203d3e20313338313331.roa (hash: IMm6CCSm6745f06rpuxAhuRN6fVIJUbPiGSK0gcfms4=) 2: 3130332e3136342e3137332e302f32342d3234203d3e20313338313331.roa (hash: CSWgjUvsmFAUoxn+c8cQjQuQW7eYcbWtJrqUbfz/Tn4=) 3: D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.crl (hash: MSpjiMmijCRhNTx+X9ZzJCSYMSzRSW1upbj1cLwzDQQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.crl rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 05:53:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:f1:ca:1f:80:67:83:a0:b2:66:01:4a:31:97:73:c8:9b:d5:20:69 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C Validity Not Before: Apr 28 20:36:57 2025 GMT Not After : May 2 05:53:57 2025 GMT Subject: CN=63FCD42FA049524016423ECFAB14F6649C58FE55 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:4c:e9:c4:05:9b:cd:25:5f:30:07:2a:e0:80: 62:98:07:91:30:d4:ff:ab:23:98:7c:c9:63:f0:18: 12:b4:9b:c5:34:80:c9:5e:35:fd:e0:02:27:3e:99: 8b:84:5f:ad:38:60:b1:5a:76:82:28:6f:89:cb:db: d3:2f:75:ec:59:9a:c6:62:99:c9:a8:e0:2e:02:d7: 47:e5:44:3f:e6:96:76:80:e0:64:7b:d1:5d:7e:7d: dc:8a:49:ce:aa:0e:fa:34:26:b3:09:64:44:76:38: 74:52:ca:31:3c:7d:89:d4:71:42:75:8c:6f:4d:16: 6c:55:a8:c8:96:dc:55:9a:d1:f4:78:34:0b:d4:cd: 35:e9:45:9f:78:53:d1:bb:7c:b5:c0:83:73:4a:64: 26:b6:07:18:0b:cd:3a:84:ab:65:5f:d8:54:d8:7e: 5f:3b:37:a7:83:97:07:d0:83:fa:f7:49:0d:1c:5c: 20:ef:27:c4:ac:ab:de:65:d3:47:35:16:cd:ce:0d: 4e:ab:c0:44:86:23:74:f8:fa:cd:1c:c0:cf:be:70: cc:d5:b7:7c:78:c2:7c:66:50:cb:bd:73:4e:ec:a3: d8:80:b5:99:10:05:1e:2c:6f:e3:3b:4a:1d:3b:ea: 79:2e:3a:51:c6:8a:7b:e3:ed:3e:0a:e4:81:0b:a4: 7b:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:FC:D4:2F:A0:49:52:40:16:42:3E:CF:AB:14:F6:64:9C:58:FE:55 X509v3 Authority Key Identifier: keyid:D7:85:2A:F0:5D:FB:B9:7A:CD:46:A3:73:99:F2:0D:EA:19:C2:EF:2C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:9b:b0:44:4b:38:d7:78:b8:a3:52:23:60:2e:04:ef:cf:87: f4:95:a1:9b:6a:f4:ae:75:6b:4b:e7:76:22:ff:3f:21:0c:0b: 96:46:d4:f5:35:e3:3f:42:1a:4d:47:c9:af:b2:21:0a:94:2a: af:36:41:46:0e:64:85:7c:5a:a4:61:77:60:f2:4a:cc:ea:8f: c7:10:62:73:c8:aa:01:e1:bf:22:ce:52:57:18:02:c2:3d:66: e9:bd:a9:8b:ff:20:ce:f2:12:7e:2d:44:5c:46:eb:b7:59:00: 10:1b:18:df:4c:be:08:18:3b:8f:65:bb:27:c9:0f:b4:23:1f: 93:d0:ac:05:ed:23:e9:d3:52:92:3f:4c:0a:c7:7c:c4:50:cc: d1:3b:80:5b:06:9d:b9:aa:d8:ef:6a:13:0e:60:2f:ce:6d:63: 18:2b:42:3f:b0:d9:2f:9d:24:cf:87:7b:06:d3:4d:ee:60:9b: 3f:f7:40:f3:35:52:9d:41:5e:4f:f1:e3:27:f1:5f:f7:36:33: 44:f7:b1:50:a2:ad:2f:39:ba:4f:ed:ed:58:1f:9f:b5:c6:e1: c6:1b:0e:bf:71:3a:c7:43:92:f6:75:9f:33:50:99:7e:38:5e: f4:e0:b1:28:d8:44:a9:58:77:76:5f:14:93:04:e9:ba:3c:0a: 00:64:f9:6b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS/HKH4Bng6CyZgFKMZdzyJvVIGkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc4NTJBRjA1REZCQjk3QUNENDZBMzczOTlGMjBERUEx OUMyRUYyQzAeFw0yNTA0MjgyMDM2NTdaFw0yNTA1MDIwNTUzNTdaMDMxMTAvBgNV BAMTKDYzRkNENDJGQTA0OTUyNDAxNjQyM0VDRkFCMTRGNjY0OUM1OEZFNTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfTOnEBZvNJV8wByrggGKYB5Ew 1P+rI5h8yWPwGBK0m8U0gMleNf3gAic+mYuEX604YLFadoIob4nL29MvdexZmsZi mcmo4C4C10flRD/mlnaA4GR70V1+fdyKSc6qDvo0JrMJZER2OHRSyjE8fYnUcUJ1 jG9NFmxVqMiW3FWa0fR4NAvUzTXpRZ94U9G7fLXAg3NKZCa2BxgLzTqEq2Vf2FTY fl87N6eDlwfQg/r3SQ0cXCDvJ8Ssq95l00c1Fs3ODU6rwESGI3T4+s0cwM++cMzV t3x4wnxmUMu9c07so9iAtZkQBR4sb+M7Sh076nkuOlHGinvj7T4K5IELpHvvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUY/zUL6BJUkAWQj7PqxT2ZJxY/lUwHwYDVR0j BBgwFoAU14Uq8F37uXrNRqNzmfIN6hnC7ywwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZTg5ZjFiNC1lZjYzLTQ1MzktODQ1NS05OGM2NzE5OTVjY2YvMC9ENzg1MkFGMDVE RkJCOTdBQ0Q0NkEzNzM5OUYyMERFQTE5QzJFRjJDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDc4NTJBRjA1REZCQjk3QUNENDZBMzczOTlGMjBERUExOUMy RUYyQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWU4OWYxYjQtZWY2My00NTM5LTg0 NTUtOThjNjcxOTk1Y2NmLzAvRDc4NTJBRjA1REZCQjk3QUNENDZBMzczOTlGMjBE RUExOUMyRUYyQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJabsERLONd4uKNSI2AuBO/Ph/SVoZtq9K51 a0vndiL/PyEMC5ZG1PU14z9CGk1Hya+yIQqUKq82QUYOZIV8WqRhd2DySszqj8cQ YnPIqgHhvyLOUlcYAsI9Zum9qYv/IM7yEn4tRFxG67dZABAbGN9MvggYO49luyfJ D7QjH5PQrAXtI+nTUpI/TArHfMRQzNE7gFsGnbmq2O9qEw5gL85tYxgrQj+w2S+d JM+HewbTTe5gmz/3QPM1Up1BXk/x4yfxX/c2M0T3sVCirS85uk/t7Vgfn7XG4cYb Dr9xOsdDkvZ1nzNQmX44XvTgsSjYRKlYd3ZfFJME6bo8CgBk+Ws= -----END CERTIFICATE-----Generated at Thu May 1 03:58:13 2025 by rpki-client