$ rpki-client -vvf repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.mft File: CA978B7ACEF55A251B74721E04A034CA3601A88B.mft (raw, json) Hash identifier: vDDUUKGwpLSZUdtnHraTyIZDRcVwcqaRofGAeUNKFrQ= Subject key identifier: A6:88:B2:E8:0C:8C:D7:D8:C9:DC:14:F8:45:F0:BE:14:0F:FA:1C:22 Authority key identifier: CA:97:8B:7A:CE:F5:5A:25:1B:74:72:1E:04:A0:34:CA:36:01:A8:8B Certificate issuer: /CN=CA978B7ACEF55A251B74721E04A034CA3601A88B Certificate serial: 1761A120559FF4B10F2CA545397BF4910FA0E1CE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA978B7ACEF55A251B74721E04A034CA3601A88B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.mft Manifest number: E7 Signing time: Mon 28 Apr 2025 02:21:22 +0000 Manifest this update: Mon 28 Apr 2025 02:16:22 +0000 Manifest next update: Thu 01 May 2025 13:21:22 +0000 Files and hashes: 1: 3130332e38332e3233372e302f32342d3234203d3e20313530353430.roa (hash: qSzxrfqd29Pg9HOqmUjPO7crmnWP/zs2luJUdYRC76s=) 2: 3130332e38332e3233362e302f32342d3234203d3e20313530353430.roa (hash: IHqcErbm/jh+8G9ITpkeHubYhwRm77oQuURliUYMdFs=) 3: CA978B7ACEF55A251B74721E04A034CA3601A88B.crl (hash: mCmdZHFsMYLp/n4R76uxlmL2/PijeJFiF0TdXQAYT7w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.crl rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA978B7ACEF55A251B74721E04A034CA3601A88B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 13:21:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:61:a1:20:55:9f:f4:b1:0f:2c:a5:45:39:7b:f4:91:0f:a0:e1:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CA978B7ACEF55A251B74721E04A034CA3601A88B Validity Not Before: Apr 28 02:16:22 2025 GMT Not After : May 1 13:21:22 2025 GMT Subject: CN=A688B2E80C8CD7D8C9DC14F845F0BE140FFA1C22 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e1:9c:6d:e1:58:d5:3f:7e:7a:71:5a:29:de: cf:b8:59:76:14:86:39:cf:ee:97:f7:c0:d7:6c:f6: d8:b1:4b:7d:24:f1:54:fa:87:07:d8:13:de:62:ec: f9:e5:65:a5:bd:a3:4f:cb:86:13:d8:e5:09:4e:41: e7:58:26:26:77:f8:ba:c7:20:7c:29:7e:77:cd:2e: ab:f9:27:e7:79:50:65:ac:42:46:4c:7b:ad:a3:ca: e8:42:25:6a:4d:93:ea:83:b5:54:48:20:c9:a2:6e: a1:bf:12:fe:5b:06:d3:71:d2:57:42:78:c0:39:2c: c2:37:3c:67:f6:aa:c2:ec:8c:58:fa:09:ad:5a:22: 74:fd:0b:c3:ba:1a:0c:7c:64:a2:9d:92:52:55:0a: 49:06:11:07:7d:fc:37:5f:49:00:26:92:a7:7c:3b: 2f:f6:16:ad:74:b1:55:e6:fc:f4:b5:91:1a:26:cd: 4e:fa:e6:92:be:84:57:1f:fc:c1:14:15:b6:4a:98: 18:c6:74:73:22:bd:a4:87:34:f1:4e:50:73:0e:01: 84:49:e2:13:ce:c9:d2:01:e4:e0:9a:c0:a5:48:0c: 95:0f:aa:bf:52:f3:e0:aa:c9:85:3d:6f:14:7a:a9: b4:81:ce:4c:9f:9e:ff:84:4e:91:75:7e:c1:26:0a: 07:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:88:B2:E8:0C:8C:D7:D8:C9:DC:14:F8:45:F0:BE:14:0F:FA:1C:22 X509v3 Authority Key Identifier: keyid:CA:97:8B:7A:CE:F5:5A:25:1B:74:72:1E:04:A0:34:CA:36:01:A8:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA978B7ACEF55A251B74721E04A034CA3601A88B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bfa3cff7-2aa1-44df-914c-f19184f6f3b1/0/CA978B7ACEF55A251B74721E04A034CA3601A88B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:f2:d1:4a:c0:cb:ab:98:6f:28:63:48:ed:cc:02:1a:47:af: ef:69:b1:73:7f:58:87:07:96:a8:9a:7a:78:40:27:59:91:8d: ab:64:a7:19:77:ef:55:46:cc:18:28:3f:b0:ad:c0:84:56:de: c9:16:9a:3f:44:c2:dc:4c:df:57:d0:09:25:a3:8c:4b:22:2a: d2:e6:3d:60:03:f8:e3:34:aa:ad:02:74:37:6e:1f:5b:60:e2: 5c:a3:da:b4:1b:fb:eb:ae:15:a8:e6:85:53:27:47:01:8f:05: 4d:80:45:38:b8:3b:7d:22:de:2c:2d:44:c3:0c:78:39:51:42: 96:dd:be:4d:df:c7:1d:67:70:40:4a:0e:14:a5:a0:6e:fd:2b: c8:f0:93:71:2c:2b:49:13:97:46:a4:76:2f:c5:45:30:3e:a6: b8:aa:c4:5a:20:62:2f:f4:33:8e:ab:66:fc:14:38:3a:87:51: 17:dd:09:93:80:e1:4a:0c:2a:d9:dd:ce:49:44:a5:f4:97:65: a6:25:26:e7:cb:69:75:c9:4d:df:e8:6f:65:b4:d9:e8:08:cb: 63:9c:44:f9:9f:cb:ea:a9:dd:c6:94:f0:de:63:ec:e1:2c:e7: 80:de:70:e8:2a:44:f9:ea:11:bd:6c:b8:46:f0:27:a9:92:1d: ba:89:4c:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUF2GhIFWf9LEPLKVFOXv0kQ+g4c4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0E5NzhCN0FDRUY1NUEyNTFCNzQ3MjFFMDRBMDM0Q0Ez NjAxQTg4QjAeFw0yNTA0MjgwMjE2MjJaFw0yNTA1MDExMzIxMjJaMDMxMTAvBgNV BAMTKEE2ODhCMkU4MEM4Q0Q3RDhDOURDMTRGODQ1RjBCRTE0MEZGQTFDMjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC74Zxt4VjVP356cVop3s+4WXYU hjnP7pf3wNds9tixS30k8VT6hwfYE95i7PnlZaW9o0/LhhPY5QlOQedYJiZ3+LrH IHwpfnfNLqv5J+d5UGWsQkZMe62jyuhCJWpNk+qDtVRIIMmibqG/Ev5bBtNx0ldC eMA5LMI3PGf2qsLsjFj6Ca1aInT9C8O6Ggx8ZKKdklJVCkkGEQd9/DdfSQAmkqd8 Oy/2Fq10sVXm/PS1kRomzU765pK+hFcf/MEUFbZKmBjGdHMivaSHNPFOUHMOAYRJ 4hPOydIB5OCawKVIDJUPqr9S8+CqyYU9bxR6qbSBzkyfnv+ETpF1fsEmCgdVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpoiy6AyM19jJ3BT4RfC+FA/6HCIwHwYDVR0j BBgwFoAUypeLes71WiUbdHIeBKA0yjYBqIswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZmEzY2ZmNy0yYWExLTQ0ZGYtOTE0Yy1mMTkxODRmNmYzYjEvMC9DQTk3OEI3QUNF RjU1QTI1MUI3NDcyMUUwNEEwMzRDQTM2MDFBODhCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQ0E5NzhCN0FDRUY1NUEyNTFCNzQ3MjFFMDRBMDM0Q0EzNjAx QTg4Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmZhM2NmZjctMmFhMS00NGRmLTkx NGMtZjE5MTg0ZjZmM2IxLzAvQ0E5NzhCN0FDRUY1NUEyNTFCNzQ3MjFFMDRBMDM0 Q0EzNjAxQTg4Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABPy0UrAy6uYbyhjSO3MAhpHr+9psXN/WIcH lqiaenhAJ1mRjatkpxl371VGzBgoP7CtwIRW3skWmj9EwtxM31fQCSWjjEsiKtLm PWAD+OM0qq0CdDduH1tg4lyj2rQb++uuFajmhVMnRwGPBU2ARTi4O30i3iwtRMMM eDlRQpbdvk3fxx1ncEBKDhSloG79K8jwk3EsK0kTl0akdi/FRTA+priqxFogYi/0 M46rZvwUODqHURfdCZOA4UoMKtndzklEpfSXZaYlJufLaXXJTd/ob2W02egIy2Oc RPmfy+qp3caU8N5j7OEs54DecOgqRPnqEb1suEbwJ6mSHbqJTMk= -----END CERTIFICATE-----Generated at Wed Apr 30 12:37:27 2025 by rpki-client