$ rpki-client -vvf repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft File: C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft (raw, json) Hash identifier: 4gW/M8K5Nic59RFJc1Gvam8tRCg2D4T/OtFcC1Vd/uI= Subject key identifier: 30:E3:86:81:36:07:35:A8:51:A9:5D:F3:01:2C:09:F9:B3:B4:25:E1 Authority key identifier: C0:7F:5A:E2:D9:DC:99:D0:AF:28:B6:B1:54:21:0C:91:1E:FB:1D:8A Certificate issuer: /CN=C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A Certificate serial: 5084FD3BD9EAE3E501D4B7642E2F42AF233A6A49 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft Manifest number: 7D Signing time: Sun 27 Apr 2025 00:41:53 +0000 Manifest this update: Sun 27 Apr 2025 00:36:53 +0000 Manifest next update: Wed 30 Apr 2025 02:04:53 +0000 Files and hashes: 1: 323030313a6466343a6363303a3a2f34382d3438203d3e20313532383431.roa (hash: Jn99cL4fgcEPbh24njIDYKuvldMIr2jNGSja0e4Hk1s=) 2: C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.crl (hash: THEsviyBjvCbBKujAciM2CflZ/2XbTxddsamB0HVK2A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.crl rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 02:04:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:84:fd:3b:d9:ea:e3:e5:01:d4:b7:64:2e:2f:42:af:23:3a:6a:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A Validity Not Before: Apr 27 00:36:53 2025 GMT Not After : Apr 30 02:04:53 2025 GMT Subject: CN=30E38681360735A851A95DF3012C09F9B3B425E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:b5:c3:8c:1b:7e:3e:09:02:fc:b1:fe:82:9f: 9a:35:17:4f:ab:aa:11:f0:b8:6b:a2:38:43:ec:8b: d0:79:7f:dd:5d:2a:c7:83:a8:5a:c0:99:1e:a4:ca: e7:60:21:8f:5b:b0:97:21:b8:53:40:6e:02:d7:0e: 41:a7:3d:1c:ae:38:99:c6:2f:f4:37:1c:10:dc:ce: 2c:01:3a:64:36:c0:d7:f1:f3:f0:e5:79:e1:99:ea: ca:fd:b0:ae:0c:82:ba:46:5f:e4:75:c9:fe:6a:d1: 22:27:de:c2:2f:88:84:18:45:97:c3:3c:4b:a0:c0: a1:d7:06:2a:1c:28:12:98:f3:a5:da:90:1a:ed:4f: 0d:17:d9:e0:9c:b0:d5:52:db:f5:64:e2:d3:26:28: b7:1f:c4:25:4e:19:95:a1:65:e8:48:fb:17:73:3e: e3:44:ba:7c:d5:e9:8b:a1:06:a2:48:b4:9d:ab:b6: e1:76:b3:5c:39:44:66:65:fb:36:6e:3d:24:11:33: 8c:5d:bc:04:3f:04:ac:db:ea:19:d2:e7:01:9b:24: 04:4e:15:c0:cd:9b:c4:ea:03:f9:55:93:36:a6:a5: 45:bd:f3:0a:57:86:ae:82:b1:05:16:12:d6:42:e7: ef:bb:00:f9:29:63:21:2f:68:ce:02:a1:a9:9c:73: d5:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:E3:86:81:36:07:35:A8:51:A9:5D:F3:01:2C:09:F9:B3:B4:25:E1 X509v3 Authority Key Identifier: keyid:C0:7F:5A:E2:D9:DC:99:D0:AF:28:B6:B1:54:21:0C:91:1E:FB:1D:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ce7d738e-2cc7-4bd2-bb28-9142e1baa0ba/1/C07F5AE2D9DC99D0AF28B6B154210C911EFB1D8A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0f:c7:53:6a:95:ff:45:12:a0:7c:29:d0:a9:ca:d5:71:92:f9: ea:ef:01:69:c9:c6:56:3c:83:ab:21:fe:ec:cc:93:7a:f3:a5: 97:05:d3:e2:ea:91:07:0d:b5:ff:a6:04:c7:b3:9d:0d:b4:cb: 47:5c:30:25:1e:24:b1:f5:01:1c:4f:08:9c:c7:04:7b:40:6e: e5:8c:f5:f9:7d:d6:9d:c9:dd:d4:50:1c:78:f0:17:24:50:4b: 8d:06:ef:ab:10:76:d8:d7:15:84:e1:72:0f:84:30:52:4a:83: 6e:65:78:a8:c1:ca:9f:5e:cb:0b:41:5a:17:74:a3:28:ae:20: c9:81:9c:8c:7d:e7:de:fb:e7:58:04:31:4c:1f:04:ba:52:33: 36:fd:7a:6f:4b:99:f5:de:25:f6:1f:87:18:b2:85:80:28:a9: fb:47:b8:eb:08:48:35:b6:98:e4:6a:d3:4c:af:90:e0:8d:f0: 02:2d:fa:c5:d1:d4:de:f7:dc:61:bc:06:91:23:07:d5:2f:c7: 57:c9:8c:38:9a:f5:88:55:3f:cd:97:a9:7f:52:3d:57:f6:47: 46:df:66:c0:b0:89:41:9e:85:95:7e:42:88:75:43:ce:0d:c5: 7a:4f:b4:1c:3c:5e:a1:41:cf:64:84:02:2b:09:15:0b:53:2f: c7:0f:f9:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUIT9O9nq4+UB1LdkLi9CryM6akkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzA3RjVBRTJEOURDOTlEMEFGMjhCNkIxNTQyMTBDOTEx RUZCMUQ4QTAeFw0yNTA0MjcwMDM2NTNaFw0yNTA0MzAwMjA0NTNaMDMxMTAvBgNV BAMTKDMwRTM4NjgxMzYwNzM1QTg1MUE5NURGMzAxMkMwOUY5QjNCNDI1RTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYtcOMG34+CQL8sf6Cn5o1F0+r qhHwuGuiOEPsi9B5f91dKseDqFrAmR6kyudgIY9bsJchuFNAbgLXDkGnPRyuOJnG L/Q3HBDcziwBOmQ2wNfx8/DleeGZ6sr9sK4MgrpGX+R1yf5q0SIn3sIviIQYRZfD PEugwKHXBiocKBKY86XakBrtTw0X2eCcsNVS2/Vk4tMmKLcfxCVOGZWhZehI+xdz PuNEunzV6YuhBqJItJ2rtuF2s1w5RGZl+zZuPSQRM4xdvAQ/BKzb6hnS5wGbJARO FcDNm8TqA/lVkzampUW98wpXhq6CsQUWEtZC5++7APkpYyEvaM4Coamcc9UBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMOOGgTYHNahRqV3zASwJ+bO0JeEwHwYDVR0j BBgwFoAUwH9a4tncmdCvKLaxVCEMkR77HYowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j ZTdkNzM4ZS0yY2M3LTRiZDItYmIyOC05MTQyZTFiYWEwYmEvMS9DMDdGNUFFMkQ5 REM5OUQwQUYyOEI2QjE1NDIxMEM5MTFFRkIxRDhBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzA3RjVBRTJEOURDOTlEMEFGMjhCNkIxNTQyMTBDOTExRUZC MUQ4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vY2U3ZDczOGUtMmNjNy00YmQyLWJi MjgtOTE0MmUxYmFhMGJhLzEvQzA3RjVBRTJEOURDOTlEMEFGMjhCNkIxNTQyMTBD OTExRUZCMUQ4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA/HU2qV/0USoHwp0KnK1XGS+ervAWnJxlY8 g6sh/uzMk3rzpZcF0+LqkQcNtf+mBMeznQ20y0dcMCUeJLH1ARxPCJzHBHtAbuWM 9fl91p3J3dRQHHjwFyRQS40G76sQdtjXFYThcg+EMFJKg25leKjByp9eywtBWhd0 oyiuIMmBnIx9597751gEMUwfBLpSMzb9em9LmfXeJfYfhxiyhYAoqftHuOsISDW2 mORq00yvkOCN8AIt+sXR1N733GG8BpEjB9Uvx1fJjDia9YhVP82XqX9SPVf2R0bf ZsCwiUGehZV+Qoh1Q84NxXpPtBw8XqFBz2SEAisJFQtTL8cP+SA= -----END CERTIFICATE-----Generated at Mon Apr 28 20:18:22 2025 by rpki-client