$ rpki-client -vvf repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft File: B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft (raw, json) Hash identifier: vaORS3/rsXq7IAtNYoa6aVxVB15nF7k2ij2Frd45odM= Subject key identifier: 8E:F1:B1:C8:7C:94:99:A7:D9:B8:79:22:8C:80:59:56:95:10:F5:AF Authority key identifier: B7:A3:DE:01:7F:B3:D7:40:B2:93:22:D8:18:D5:C6:A8:FE:6D:4C:30 Certificate issuer: /CN=B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30 Certificate serial: 04C5582BEFC996DC1810E8FBEA7103D53A7A7B4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft Manifest number: E1 Signing time: Sun 11 May 2025 07:21:16 +0000 Manifest this update: Sun 11 May 2025 07:16:16 +0000 Manifest next update: Wed 14 May 2025 19:10:16 +0000 Files and hashes: 1: 3130332e3231352e36302e302f32342d3234203d3e20313531353033.roa (hash: b0fuY1pKKFn/0Zi2JNlIa5wt7XKTYP6sji14ARgrEj0=) 2: 3130332e3231352e36312e302f32342d3234203d3e20313531353033.roa (hash: yI+x3QlccThUEQyL4aGgW81et+4syWgCbrFAnQNyq/g=) 3: B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.crl (hash: AsNH2HaOSLYNtmzEysvFWbHaLceULxqf+YyLFn9HcVY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.crl rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 19:10:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:c5:58:2b:ef:c9:96:dc:18:10:e8:fb:ea:71:03:d5:3a:7a:7b:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30 Validity Not Before: May 11 07:16:16 2025 GMT Not After : May 14 19:10:16 2025 GMT Subject: CN=8EF1B1C87C9499A7D9B879228C8059569510F5AF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:46:27:dd:81:ac:4a:56:a5:71:97:0c:8c:d1: 16:90:9f:a7:81:6d:3b:4d:fb:61:eb:f3:d4:87:e3: 1b:f7:d2:04:db:0d:44:48:57:5b:f9:2e:4a:c4:fb: 6f:d3:7c:33:81:ac:cb:6f:13:7b:95:7a:4c:6e:ae: 65:fb:95:d0:95:f1:88:55:94:77:43:96:48:0d:de: 12:6e:0e:31:83:84:d3:25:30:5a:4c:ee:4d:db:9b: 1a:aa:ce:e1:de:b2:a6:52:7e:f6:ba:96:2f:44:be: 83:a5:e6:ea:8b:f5:77:b7:db:45:8e:66:88:42:60: 28:51:cf:82:58:ef:72:39:fb:43:e9:72:b9:24:4c: 2d:7f:1a:0d:8e:d5:fd:a3:57:00:77:06:27:0e:29: 9d:62:a9:f9:ff:29:c4:31:0c:99:d0:81:63:49:be: 7d:12:76:39:c8:20:5e:99:2e:3b:ae:a0:84:42:47: ac:ed:50:a3:6f:b2:19:c7:8b:91:54:86:94:0a:14: 4f:21:cc:1f:76:f4:4d:2e:98:46:54:a0:bb:7a:fc: a4:e6:a8:be:06:d6:1d:3e:d5:e3:c6:14:15:c0:c3: 51:8c:cb:32:03:b4:03:d7:04:fe:a9:5e:56:05:b6: 8d:a2:f1:1a:22:0b:4d:d5:f4:26:bb:43:ee:80:01: a6:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:F1:B1:C8:7C:94:99:A7:D9:B8:79:22:8C:80:59:56:95:10:F5:AF X509v3 Authority Key Identifier: keyid:B7:A3:DE:01:7F:B3:D7:40:B2:93:22:D8:18:D5:C6:A8:FE:6D:4C:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d6:dd:5f:c3:0d:d3:0b:b7:50:59:e3:d3:c1:17:5c:fb:4f:32: 13:52:1d:84:5a:e1:a6:15:3a:12:65:11:04:bf:ec:ce:c3:46: 70:11:67:3c:ad:30:1d:98:fc:bf:23:70:ea:dc:7e:f6:4c:53: 8d:9a:25:32:7f:c2:a6:53:0f:ea:ba:01:a0:0b:15:30:69:4f: 28:c1:06:db:de:f9:0e:75:85:fd:ef:ff:14:c2:93:8f:5b:9b: 68:c6:74:ff:83:be:d9:2d:3d:d0:4a:ab:e7:51:26:20:8a:5e: b8:59:5e:11:09:c6:67:bc:4b:fa:bd:82:b3:89:84:20:f3:91: e3:73:af:a0:da:6b:9b:f1:ce:1a:ec:f3:35:e6:23:1b:13:2c: a0:6a:9a:ba:a6:cf:83:db:76:8c:25:d2:4d:c5:01:be:7b:16: 97:46:b2:ed:a5:a1:76:d5:3f:d7:e1:0b:56:4d:7a:cf:5c:0f: e9:74:d8:a2:0e:81:97:a2:88:37:65:c4:19:09:ae:1b:40:d1: 72:6d:16:1b:5d:a4:85:ed:b8:c5:95:db:f0:32:1e:82:55:c6: c7:2a:3d:9c:e8:8a:8d:2f:1c:57:b7:4b:a4:47:90:83:18:85: 9b:10:9d:3a:7f:bc:98:f5:cf:3e:c8:87:94:ed:90:14:b0:45: f0:66:a8:cd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBMVYK+/JltwYEOj76nED1Tp6e00wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdBM0RFMDE3RkIzRDc0MEIyOTMyMkQ4MThENUM2QThG RTZENEMzMDAeFw0yNTA1MTEwNzE2MTZaFw0yNTA1MTQxOTEwMTZaMDMxMTAvBgNV BAMTKDhFRjFCMUM4N0M5NDk5QTdEOUI4NzkyMjhDODA1OTU2OTUxMEY1QUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkRifdgaxKVqVxlwyM0RaQn6eB bTtN+2Hr89SH4xv30gTbDURIV1v5LkrE+2/TfDOBrMtvE3uVekxurmX7ldCV8YhV lHdDlkgN3hJuDjGDhNMlMFpM7k3bmxqqzuHesqZSfva6li9EvoOl5uqL9Xe320WO ZohCYChRz4JY73I5+0PpcrkkTC1/Gg2O1f2jVwB3BicOKZ1iqfn/KcQxDJnQgWNJ vn0SdjnIIF6ZLjuuoIRCR6ztUKNvshnHi5FUhpQKFE8hzB929E0umEZUoLt6/KTm qL4G1h0+1ePGFBXAw1GMyzIDtAPXBP6pXlYFto2i8RoiC03V9Ca7Q+6AAaY/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjvGxyHyUmafZuHkijIBZVpUQ9a8wHwYDVR0j BBgwFoAUt6PeAX+z10CykyLYGNXGqP5tTDAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjE2YzA0ZC1kOWUwLTRjMWYtOGExNC1lMjNiZjI3NDQ1OTIvMC9CN0EzREUwMTdG QjNENzQwQjI5MzIyRDgxOEQ1QzZBOEZFNkQ0QzMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjdBM0RFMDE3RkIzRDc0MEIyOTMyMkQ4MThENUM2QThGRTZE NEMzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYxNmMwNGQtZDllMC00YzFmLThh MTQtZTIzYmYyNzQ0NTkyLzAvQjdBM0RFMDE3RkIzRDc0MEIyOTMyMkQ4MThENUM2 QThGRTZENEMzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANbdX8MN0wu3UFnj08EXXPtPMhNSHYRa4aYV OhJlEQS/7M7DRnARZzytMB2Y/L8jcOrcfvZMU42aJTJ/wqZTD+q6AaALFTBpTyjB Btve+Q51hf3v/xTCk49bm2jGdP+DvtktPdBKq+dRJiCKXrhZXhEJxme8S/q9grOJ hCDzkeNzr6Daa5vxzhrs8zXmIxsTLKBqmrqmz4Pbdowl0k3FAb57FpdGsu2loXbV P9fhC1ZNes9cD+l02KIOgZeiiDdlxBkJrhtA0XJtFhtdpIXtuMWV2/AyHoJVxscq PZzoio0vHFe3S6RHkIMYhZsQnTp/vJj1zz7Ih5TtkBSwRfBmqM0= -----END CERTIFICATE-----Generated at Mon May 12 02:20:50 2025 by rpki-client