$ rpki-client -vvf repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.mft File: 7825A9C30D5AEA4144740E9B12A3C0BC60E73499.mft (raw, json) Hash identifier: 8SDwLkRNEBRmcQsJLB1N6I+HU/FxWtOssynXNAnQ6aw= Subject key identifier: CD:B7:24:1F:A5:2C:DB:90:A9:74:15:F0:37:13:FE:A4:3C:57:0D:84 Authority key identifier: 78:25:A9:C3:0D:5A:EA:41:44:74:0E:9B:12:A3:C0:BC:60:E7:34:99 Certificate issuer: /CN=7825A9C30D5AEA4144740E9B12A3C0BC60E73499 Certificate serial: 2C8CCECAC3E6262271C1EF31170940E88F0C4FC9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.mft Manifest number: 0105 Signing time: Mon 12 May 2025 21:21:40 +0000 Manifest this update: Mon 12 May 2025 21:16:40 +0000 Manifest next update: Fri 16 May 2025 05:29:40 +0000 Files and hashes: 1: 323030313a6466323a666534303a3a2f34382d3438203d3e20313531353836.roa (hash: goBdU2IBnHy9wcOLLQQ/OCQZydl32zY5z0yZl8PUzN4=) 2: 3130332e3131392e3233372e302f32342d3234203d3e20313531353836.roa (hash: 18Hkz/XR+bc2+4hLanlNPrrmjy5COqEUY7Uy7tOHT7Q=) 3: 7825A9C30D5AEA4144740E9B12A3C0BC60E73499.crl (hash: 8VcH6X3I6kMdVgeav2+iicg18v4xcodaFI+u6WnRhr0=) 4: 3130332e3131392e3233362e302f32342d3234203d3e20313531353836.roa (hash: smWnJtZ/R67U2ULFGK7Jk8VcGNSJ3hQ7lt79pWbaLFY=) 5: 3130332e3131392e3233362e302f32332d3233203d3e20313531353836.roa (hash: ORKr4ha8P6tv9X5zA4ht6mjFvslVRbnM+gzBN7aD/Sw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.crl rsync://repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 05:29:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:8c:ce:ca:c3:e6:26:22:71:c1:ef:31:17:09:40:e8:8f:0c:4f:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7825A9C30D5AEA4144740E9B12A3C0BC60E73499 Validity Not Before: May 12 21:16:40 2025 GMT Not After : May 16 05:29:40 2025 GMT Subject: CN=CDB7241FA52CDB90A97415F03713FEA43C570D84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:5e:67:30:cd:93:d3:b6:8d:92:e8:58:e0:54: 2b:d8:7f:4b:cc:ca:55:08:e0:40:a8:86:99:1b:6a: 8a:98:92:33:ab:15:6a:84:5f:a8:03:27:48:78:a6: 7d:e7:3e:51:0b:38:f1:14:00:74:ea:13:7f:60:ec: f8:13:ae:a2:0e:f1:9e:59:97:3a:5c:db:57:17:51: de:9e:6b:55:09:cf:c5:2d:ac:6b:ce:3b:fb:c4:27: e2:b8:ee:6f:7a:12:84:8e:cf:22:48:93:ac:e6:84: 3c:ce:ba:78:3a:bd:f2:77:66:98:ad:cf:4d:b7:d3: 05:f5:26:52:60:11:79:a9:e3:ba:7d:e4:5b:a7:ff: df:c3:a7:3c:09:77:c6:c9:d6:70:ee:55:56:b1:68: 41:e5:64:e2:80:af:33:4d:bf:f7:c8:ba:22:e5:e9: b0:bc:da:0e:24:f0:14:7c:9c:61:20:6a:53:34:e3: 55:e6:0c:8e:4d:9a:04:b5:97:2d:bf:c9:06:a6:77: 1a:7f:2d:80:65:f5:9c:5f:e1:ee:bf:02:20:b8:5f: 55:0b:99:b5:83:0e:e2:9c:94:67:d8:2f:d8:9a:28: f2:51:21:17:00:5e:c6:2c:e3:c3:6f:9d:d6:14:76: 14:47:ea:c1:60:95:74:28:e4:c3:a7:ef:09:04:ae: 45:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:B7:24:1F:A5:2C:DB:90:A9:74:15:F0:37:13:FE:A4:3C:57:0D:84 X509v3 Authority Key Identifier: keyid:78:25:A9:C3:0D:5A:EA:41:44:74:0E:9B:12:A3:C0:BC:60:E7:34:99 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0000b0c2-7efd-4278-98e4-d4f7c273eec2/0/7825A9C30D5AEA4144740E9B12A3C0BC60E73499.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:5a:b3:05:2c:27:47:38:93:d2:75:92:79:0c:d7:dd:19:2a: 0d:5b:18:67:fe:f3:33:59:43:56:f9:59:7e:36:70:5d:9d:59: b3:18:96:3d:ce:65:2d:3d:fd:24:7d:85:92:f8:34:3c:43:3c: 03:cf:92:cb:0e:5d:ed:62:ce:2a:6e:3a:c4:61:57:b7:08:16: 04:9b:d6:10:18:06:65:50:bf:e7:b7:d8:29:c2:ba:4c:05:9f: ef:8a:5d:fe:3e:0c:89:b1:42:a6:4f:c6:b1:d3:91:f2:23:d3: 4e:4c:0e:ad:b1:ed:39:f3:54:d8:c3:8a:ed:72:ed:42:11:93: 31:c7:93:73:d3:ca:6d:84:12:56:e3:c9:60:9c:d6:e0:76:0d: 3f:b7:4f:c3:9d:e2:18:bf:60:6e:78:63:12:75:53:09:78:ae: 01:20:9d:3d:27:6d:8e:59:24:00:bc:2c:52:ab:93:b3:08:13: f2:9b:6e:b6:a3:42:e5:b2:bc:6c:75:d5:9b:62:bf:74:b7:0d: c4:0c:63:14:e9:1a:5c:31:bc:4a:26:c7:f1:7c:e8:99:80:d1: c8:f7:3c:a6:1b:31:39:74:62:b7:5e:15:2f:d8:d2:01:cb:41: de:cb:f5:a4:f0:56:43:df:5d:95:2a:d8:62:77:4f:fd:50:31: 86:05:8f:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULIzOysPmJiJxwe8xFwlA6I8MT8kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzgyNUE5QzMwRDVBRUE0MTQ0NzQwRTlCMTJBM0MwQkM2 MEU3MzQ5OTAeFw0yNTA1MTIyMTE2NDBaFw0yNTA1MTYwNTI5NDBaMDMxMTAvBgNV BAMTKENEQjcyNDFGQTUyQ0RCOTBBOTc0MTVGMDM3MTNGRUE0M0M1NzBEODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5XmcwzZPTto2S6FjgVCvYf0vM ylUI4ECohpkbaoqYkjOrFWqEX6gDJ0h4pn3nPlELOPEUAHTqE39g7PgTrqIO8Z5Z lzpc21cXUd6ea1UJz8UtrGvOO/vEJ+K47m96EoSOzyJIk6zmhDzOung6vfJ3Zpit z0230wX1JlJgEXmp47p95Fun/9/DpzwJd8bJ1nDuVVaxaEHlZOKArzNNv/fIuiLl 6bC82g4k8BR8nGEgalM041XmDI5NmgS1ly2/yQamdxp/LYBl9Zxf4e6/AiC4X1UL mbWDDuKclGfYL9iaKPJRIRcAXsYs48NvndYUdhRH6sFglXQo5MOn7wkErkW1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzbckH6Us25CpdBXwNxP+pDxXDYQwHwYDVR0j BBgwFoAUeCWpww1a6kFEdA6bEqPAvGDnNJkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MDAwYjBjMi03ZWZkLTQyNzgtOThlNC1kNGY3YzI3M2VlYzIvMC83ODI1QTlDMzBE NUFFQTQxNDQ3NDBFOUIxMkEzQzBCQzYwRTczNDk5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzgyNUE5QzMwRDVBRUE0MTQ0NzQwRTlCMTJBM0MwQkM2MEU3 MzQ5OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDAwMGIwYzItN2VmZC00Mjc4LTk4 ZTQtZDRmN2MyNzNlZWMyLzAvNzgyNUE5QzMwRDVBRUE0MTQ0NzQwRTlCMTJBM0Mw QkM2MEU3MzQ5OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMNaswUsJ0c4k9J1knkM190ZKg1bGGf+8zNZ Q1b5WX42cF2dWbMYlj3OZS09/SR9hZL4NDxDPAPPkssOXe1izipuOsRhV7cIFgSb 1hAYBmVQv+e32CnCukwFn++KXf4+DImxQqZPxrHTkfIj005MDq2x7TnzVNjDiu1y 7UIRkzHHk3PTym2EElbjyWCc1uB2DT+3T8Od4hi/YG54YxJ1Uwl4rgEgnT0nbY5Z JAC8LFKrk7MIE/KbbrajQuWyvGx11Ztiv3S3DcQMYxTpGlwxvEomx/F86JmA0cj3 PKYbMTl0YrdeFS/Y0gHLQd7L9aTwVkPfXZUq2GJ3T/1QMYYFj/g= -----END CERTIFICATE-----Generated at Wed May 14 22:12:27 2025 by rpki-client