$ rpki-client -vvf repo-rpki.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/7ABD31DD828DD58C9D91180021903EA04D8EB58E.mft File: 7ABD31DD828DD58C9D91180021903EA04D8EB58E.mft (raw, json) Hash identifier: EbKAXy3gn9EATeJQv8ukT0eie3L744fEU5uK/o4Kjtc= Subject key identifier: 60:E1:D3:9E:7E:FC:AC:06:73:51:8F:0F:7B:83:05:F7:F5:FA:32:38 Authority key identifier: 7A:BD:31:DD:82:8D:D5:8C:9D:91:18:00:21:90:3E:A0:4D:8E:B5:8E Certificate issuer: /CN=7ABD31DD828DD58C9D91180021903EA04D8EB58E Certificate serial: 1DE26E543C8DCF29A20807BA1DC547EEBE6A063C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7ABD31DD828DD58C9D91180021903EA04D8EB58E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/7ABD31DD828DD58C9D91180021903EA04D8EB58E.mft Manifest number: 88 Signing time: Sun 27 Apr 2025 13:31:29 +0000 Manifest this update: Sun 27 Apr 2025 13:26:29 +0000 Manifest next update: Wed 30 Apr 2025 16:57:29 +0000 Files and hashes: 1: 7ABD31DD828DD58C9D91180021903EA04D8EB58E.crl (hash: zqT31lyCjM4328sAWkVNs+/eHG/3q+Qtk3G1Xab+TMA=) 2: 3135372e36362e32312e302f32342d3234203d3e20313431353932.roa (hash: pBKU6AL4LZRuHnO1o7lghVbyP/DLM7+Jfq4NlAZORn0=) 3: 3135372e36362e32302e302f32342d3234203d3e20313337333439.roa (hash: YLdMeUVjsAiCmcczsPRsKSDe/Z3Dvs/FVEyEvmAnsG0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/7ABD31DD828DD58C9D91180021903EA04D8EB58E.crl rsync://repo-rpki.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/7ABD31DD828DD58C9D91180021903EA04D8EB58E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7ABD31DD828DD58C9D91180021903EA04D8EB58E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 16:57:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:e2:6e:54:3c:8d:cf:29:a2:08:07:ba:1d:c5:47:ee:be:6a:06:3c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ABD31DD828DD58C9D91180021903EA04D8EB58E Validity Not Before: Apr 27 13:26:29 2025 GMT Not After : Apr 30 16:57:29 2025 GMT Subject: CN=60E1D39E7EFCAC0673518F0F7B8305F7F5FA3238 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:3a:c9:f7:1b:0d:54:f8:6e:09:d8:c7:bc:5f: 04:6d:63:4a:4d:d5:2d:fc:97:43:eb:92:d2:33:2d: de:02:94:2a:88:c2:53:17:04:c6:d1:9b:eb:c8:30: 2d:da:f8:cb:b8:ef:d6:6f:59:fb:09:67:d1:b6:e8: e1:6a:60:a0:b0:e2:86:fa:9a:65:74:9d:c6:e0:b4: 6a:72:6b:96:7c:5e:7d:5f:20:68:7f:69:8c:7e:0f: 85:6d:03:99:68:c5:2f:21:28:04:d5:11:0d:b8:8d: 99:94:17:eb:26:d3:e7:0b:47:ee:fa:10:54:4f:77: 20:32:46:b1:a0:1c:e7:fc:a5:b4:8e:d4:aa:4a:b2: 9b:6e:41:da:0c:32:df:51:7c:0a:74:8b:ee:1c:f9: 25:9b:8c:84:7a:44:7a:d9:19:49:12:af:f4:4d:8d: 81:0a:a8:18:c9:49:d4:81:0f:f3:95:06:b7:10:c1: 40:2e:19:51:e4:99:e4:95:7e:a7:b4:78:0a:63:6f: ad:55:7c:9a:2b:c2:e2:78:a8:2a:cb:16:a9:46:99: 3e:a3:cf:8b:6c:ca:d2:97:48:23:f1:12:54:81:63: b1:74:d5:9e:91:ab:df:03:69:43:b3:6a:66:e1:98: 38:e5:cb:a6:96:50:44:7e:b9:85:1f:5c:8a:49:e6: 20:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:E1:D3:9E:7E:FC:AC:06:73:51:8F:0F:7B:83:05:F7:F5:FA:32:38 X509v3 Authority Key Identifier: keyid:7A:BD:31:DD:82:8D:D5:8C:9D:91:18:00:21:90:3E:A0:4D:8E:B5:8E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/7ABD31DD828DD58C9D91180021903EA04D8EB58E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7ABD31DD828DD58C9D91180021903EA04D8EB58E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f5f5ef18-6ffa-4d69-8c0c-3518cfa8758e/0/7ABD31DD828DD58C9D91180021903EA04D8EB58E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 98:a2:f2:0c:83:18:57:68:f3:e9:f5:94:34:38:cc:6a:bb:25: 9e:64:41:51:8f:9c:c8:2e:a2:ef:6c:8a:1a:79:cc:3e:8f:38: 25:4e:73:33:6e:7a:83:d6:c1:05:1b:51:b3:c3:ea:44:54:f6: a4:0e:07:06:5f:d4:41:66:77:37:6b:60:a9:da:e6:44:cc:6c: 29:09:65:54:3e:ac:32:ff:99:3b:0a:74:37:a7:37:cb:4f:64: 6b:b4:e8:f0:15:21:f1:94:b1:25:cf:ba:5b:d2:37:1d:c3:5f: e6:48:56:17:13:82:06:b5:92:56:30:70:58:39:5a:34:4e:91: 1e:12:8d:8e:75:6c:08:dc:17:d2:fa:75:0f:29:47:d3:16:0e: fc:16:13:35:06:9b:7b:58:79:86:68:a7:55:41:78:ba:81:2f: fe:46:82:f1:f8:c6:dc:38:48:63:4e:a0:f3:a8:bb:49:67:82: 99:e2:53:9b:cc:b4:1e:31:b4:4f:0d:e0:36:39:bf:a4:90:0d: 96:27:b2:f6:fc:e1:4a:87:4f:62:36:13:56:63:bc:b3:f7:a9: 32:70:d2:62:a1:41:6c:19:85:f2:3b:04:4b:ab:9d:89:96:5f: 4f:fc:17:5a:cc:af:65:21:e8:87:71:c0:37:22:f0:ba:03:8d: 0e:05:2b:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHeJuVDyNzymiCAe6HcVH7r5qBjwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0FCRDMxREQ4MjhERDU4QzlEOTExODAwMjE5MDNFQTA0 RDhFQjU4RTAeFw0yNTA0MjcxMzI2MjlaFw0yNTA0MzAxNjU3MjlaMDMxMTAvBgNV BAMTKDYwRTFEMzlFN0VGQ0FDMDY3MzUxOEYwRjdCODMwNUY3RjVGQTMyMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaOsn3Gw1U+G4J2Me8XwRtY0pN 1S38l0PrktIzLd4ClCqIwlMXBMbRm+vIMC3a+Mu479ZvWfsJZ9G26OFqYKCw4ob6 mmV0ncbgtGpya5Z8Xn1fIGh/aYx+D4VtA5loxS8hKATVEQ24jZmUF+sm0+cLR+76 EFRPdyAyRrGgHOf8pbSO1KpKsptuQdoMMt9RfAp0i+4c+SWbjIR6RHrZGUkSr/RN jYEKqBjJSdSBD/OVBrcQwUAuGVHkmeSVfqe0eApjb61VfJorwuJ4qCrLFqlGmT6j z4tsytKXSCPxElSBY7F01Z6Rq98DaUOzambhmDjly6aWUER+uYUfXIpJ5iATAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYOHTnn78rAZzUY8Pe4MF9/X6MjgwHwYDVR0j BBgwFoAUer0x3YKN1YydkRgAIZA+oE2OtY4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m NWY1ZWYxOC02ZmZhLTRkNjktOGMwYy0zNTE4Y2ZhODc1OGUvMC83QUJEMzFERDgy OERENThDOUQ5MTE4MDAyMTkwM0VBMDREOEVCNThFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0FCRDMxREQ4MjhERDU4QzlEOTExODAwMjE5MDNFQTA0RDhF QjU4RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjVmNWVmMTgtNmZmYS00ZDY5LThj MGMtMzUxOGNmYTg3NThlLzAvN0FCRDMxREQ4MjhERDU4QzlEOTExODAwMjE5MDNF QTA0RDhFQjU4RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJii8gyDGFdo8+n1lDQ4zGq7JZ5kQVGPnMgu ou9sihp5zD6POCVOczNueoPWwQUbUbPD6kRU9qQOBwZf1EFmdzdrYKna5kTMbCkJ ZVQ+rDL/mTsKdDenN8tPZGu06PAVIfGUsSXPulvSNx3DX+ZIVhcTgga1klYwcFg5 WjROkR4SjY51bAjcF9L6dQ8pR9MWDvwWEzUGm3tYeYZop1VBeLqBL/5GgvH4xtw4 SGNOoPOou0lngpniU5vMtB4xtE8N4DY5v6SQDZYnsvb84UqHT2I2E1ZjvLP3qTJw 0mKhQWwZhfI7BEurnYmWX0/8F1rMr2Uh6IdxwDci8LoDjQ4FK4A= -----END CERTIFICATE-----Generated at Tue Apr 29 14:33:32 2025 by rpki-client