$ rpki-client -vvf repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.mft File: E7D91E7B841DB274E77E823084312F8B78A5C951.mft (raw, json) Hash identifier: yBsnl3eDyMmghyLBvsNwn/9FClFpcpRaj7ljYMWNMMs= Subject key identifier: F3:E4:8D:06:29:EE:EA:E6:BC:07:8E:F1:4D:3C:84:D1:93:66:61:3B Authority key identifier: E7:D9:1E:7B:84:1D:B2:74:E7:7E:82:30:84:31:2F:8B:78:A5:C9:51 Certificate issuer: /CN=E7D91E7B841DB274E77E823084312F8B78A5C951 Certificate serial: 4E8CD15BCCDAB054DEA07C82EA4D3E8C7D9344C7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7D91E7B841DB274E77E823084312F8B78A5C951.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.mft Manifest number: 0494 Signing time: Sat 10 May 2025 03:01:31 +0000 Manifest this update: Sat 10 May 2025 02:56:31 +0000 Manifest next update: Tue 13 May 2025 12:46:31 +0000 Files and hashes: 1: 323030313a6466313a316338303a3a2f34382d3438203d3e20313339333637.roa (hash: FFu9qqO0bSps/kj6fyv5I//5Hd+4wId09goi1uFGoE8=) 2: E7D91E7B841DB274E77E823084312F8B78A5C951.crl (hash: NKFgWAgND6Bkxf2CqZKIHOiWRh7LohOuGV70vW1+Wck=) 3: 3130332e3134312e3233382e302f32332d3234203d3e20313339333637.roa (hash: ptFcyErEiJ1JYS1a1G9a9k9pSg8MxBcsAnCveu1OYpY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.crl rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7D91E7B841DB274E77E823084312F8B78A5C951.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 03:08:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:8c:d1:5b:cc:da:b0:54:de:a0:7c:82:ea:4d:3e:8c:7d:93:44:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7D91E7B841DB274E77E823084312F8B78A5C951 Validity Not Before: May 10 02:56:31 2025 GMT Not After : May 13 12:46:31 2025 GMT Subject: CN=F3E48D0629EEEAE6BC078EF14D3C84D19366613B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:34:21:e7:2f:27:f1:80:67:78:de:23:01:53: 49:8f:a0:d5:54:a6:5e:40:01:8a:ce:19:fb:77:79: 8e:55:f3:e7:dc:2d:55:fb:f5:2e:f3:e8:21:1f:be: 78:ae:0a:ca:b0:74:e9:dd:30:eb:be:17:86:15:7f: 2a:1d:90:39:fc:b6:36:d5:60:bc:92:a4:79:24:04: c1:b5:7e:8c:d1:3b:f1:83:f6:4a:ac:92:94:97:54: c2:3f:4d:0b:03:1e:a1:8b:1b:b1:e1:71:88:5a:60: 3e:df:d6:f5:71:bf:93:76:f3:8d:13:8a:5d:17:c1: 53:e1:bc:eb:6f:01:89:40:64:08:37:9a:ee:84:81: 21:07:9b:bd:48:bb:fb:9d:2f:a3:83:30:af:f4:35: d9:a0:e8:17:b9:5f:6e:71:24:f6:25:68:53:e5:2e: c7:ac:3f:bc:a9:67:f7:92:3a:45:6c:4d:06:23:29: ed:19:42:68:72:c0:c7:0f:d8:ce:ac:83:c1:ec:5a: 25:9f:4b:95:99:e9:be:2c:08:e7:6b:ae:69:17:cd: 8f:43:b6:58:6c:22:25:c6:98:d1:26:37:a2:35:07: 14:a5:43:8e:3d:0c:c2:f8:f1:a3:c2:3f:8d:25:34: 05:2b:74:93:b8:ec:61:ae:ce:c9:e8:ea:6e:96:8d: b2:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:E4:8D:06:29:EE:EA:E6:BC:07:8E:F1:4D:3C:84:D1:93:66:61:3B X509v3 Authority Key Identifier: keyid:E7:D9:1E:7B:84:1D:B2:74:E7:7E:82:30:84:31:2F:8B:78:A5:C9:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7D91E7B841DB274E77E823084312F8B78A5C951.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:82:d7:fa:77:0f:72:d6:d3:b9:3b:e0:e6:dd:36:a1:dc:50: dd:b6:4a:97:4d:32:38:b8:c4:88:68:38:2d:50:4b:fb:71:fd: 6b:34:bb:69:ff:ec:f3:6e:dc:56:ea:3f:0e:6e:33:a9:01:76: 91:06:39:6e:cf:d8:b7:89:77:1f:96:5a:81:b5:56:12:6e:f6: 5d:bb:cc:86:9b:19:9a:52:6b:dd:c8:5d:a1:16:60:ff:e7:ef: 94:d8:bc:aa:46:7e:47:93:3b:8c:4b:f8:35:cf:c9:19:54:47: d3:a5:4f:27:c6:7a:79:3f:d1:e9:e1:50:ab:50:43:db:d9:b9: 1a:e0:96:f6:24:c7:27:c4:d5:f9:77:96:93:90:b1:ba:f6:8f: 91:9a:e1:f4:1b:89:72:71:cb:e0:56:2a:97:4d:8d:a5:49:cd: 20:5b:2a:d9:95:b5:75:d4:cb:44:58:a8:56:db:1d:e1:e3:69: 25:5f:81:23:e4:b1:40:66:66:59:2a:6f:26:ab:ef:64:6d:af: 97:16:ff:fa:91:76:ec:09:55:ec:f7:8b:3a:d1:e9:db:6d:be: c2:d6:44:b0:7b:a5:83:34:9b:35:65:c6:f6:56:b4:c5:9a:95: d4:26:e3:4d:ab:46:f2:f1:ea:e5:61:15:95:07:fe:0c:1c:3c: 37:2d:5c:d3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTozRW8zasFTeoHyC6k0+jH2TRMcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTdEOTFFN0I4NDFEQjI3NEU3N0U4MjMwODQzMTJGOEI3 OEE1Qzk1MTAeFw0yNTA1MTAwMjU2MzFaFw0yNTA1MTMxMjQ2MzFaMDMxMTAvBgNV BAMTKEYzRTQ4RDA2MjlFRUVBRTZCQzA3OEVGMTREM0M4NEQxOTM2NjYxM0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKNCHnLyfxgGd43iMBU0mPoNVU pl5AAYrOGft3eY5V8+fcLVX79S7z6CEfvniuCsqwdOndMOu+F4YVfyodkDn8tjbV YLySpHkkBMG1fozRO/GD9kqskpSXVMI/TQsDHqGLG7HhcYhaYD7f1vVxv5N2840T il0XwVPhvOtvAYlAZAg3mu6EgSEHm71Iu/udL6ODMK/0Ndmg6Be5X25xJPYlaFPl LsesP7ypZ/eSOkVsTQYjKe0ZQmhywMcP2M6sg8HsWiWfS5WZ6b4sCOdrrmkXzY9D tlhsIiXGmNEmN6I1BxSlQ449DML48aPCP40lNAUrdJO47GGuzsno6m6WjbK5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8+SNBinu6ua8B47xTTyE0ZNmYTswHwYDVR0j BBgwFoAU59kee4QdsnTnfoIwhDEvi3ilyVEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTcwODNhYi0yNzBhLTRiMGEtOGU1NS1hNDVlMWNmMWFmZDUvMC9FN0Q5MUU3Qjg0 MURCMjc0RTc3RTgyMzA4NDMxMkY4Qjc4QTVDOTUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTdEOTFFN0I4NDFEQjI3NEU3N0U4MjMwODQzMTJGOEI3OEE1 Qzk1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE3MDgzYWItMjcwYS00YjBhLThl NTUtYTQ1ZTFjZjFhZmQ1LzAvRTdEOTFFN0I4NDFEQjI3NEU3N0U4MjMwODQzMTJG OEI3OEE1Qzk1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAiC1/p3D3LW07k74ObdNqHcUN22SpdNMji4 xIhoOC1QS/tx/Ws0u2n/7PNu3FbqPw5uM6kBdpEGOW7P2LeJdx+WWoG1VhJu9l27 zIabGZpSa93IXaEWYP/n75TYvKpGfkeTO4xL+DXPyRlUR9OlTyfGenk/0enhUKtQ Q9vZuRrglvYkxyfE1fl3lpOQsbr2j5Ga4fQbiXJxy+BWKpdNjaVJzSBbKtmVtXXU y0RYqFbbHeHjaSVfgSPksUBmZlkqbyar72Rtr5cW//qRduwJVez3izrR6dttvsLW RLB7pYM0mzVlxvZWtMWaldQm402rRvLx6uVhFZUH/gwcPDctXNM= -----END CERTIFICATE-----Generated at Sat May 10 04:44:28 2025 by rpki-client