$ rpki-client -vvf repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.mft File: 07043FF6B66099F2CBFBBB64672822F3014937E8.mft (raw, json) Hash identifier: ZEfd6onPfZokiKeu+xGmKTCOuyh2WCaJSvZBvuzcA/Y= Subject key identifier: E6:14:1B:17:D0:26:CE:40:D8:EC:58:40:CF:A8:21:34:91:F3:E6:2D Authority key identifier: 07:04:3F:F6:B6:60:99:F2:CB:FB:BB:64:67:28:22:F3:01:49:37:E8 Certificate issuer: /CN=07043FF6B66099F2CBFBBB64672822F3014937E8 Certificate serial: 5A02D349A78CCD9E3C7C1B548EE4C1471E1E895F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07043FF6B66099F2CBFBBB64672822F3014937E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.mft Manifest number: 01B3 Signing time: Tue 06 May 2025 21:21:38 +0000 Manifest this update: Tue 06 May 2025 21:16:38 +0000 Manifest next update: Sat 10 May 2025 03:37:38 +0000 Files and hashes: 1: 3130332e3132352e31342e302f32342d3234203d3e20313335363336.roa (hash: LDE8MHvWr7ClJaD2b6MGzIMO0HFW7Xb1cGyTVwE6YBs=) 2: 3130332e3132352e31352e302f32342d3234203d3e20313335363336.roa (hash: jfBPikwcOXfyCAw2T4LtcRftqdJoZDQGQR3Ub10AvuI=) 3: 3130332e3132352e31322e302f32342d3234203d3e20313533333137.roa (hash: 1xo0DjDSXvXZUNtwZdd+vDQQvBq4jlF/Yl9f8y0lmbA=) 4: 3130332e3132352e31332e302f32342d3234203d3e20313335363336.roa (hash: h/JHGAZA+XMm5GRiDBuDE93tuKC3bgB9VcHqmJ9NiB8=) 5: 07043FF6B66099F2CBFBBB64672822F3014937E8.crl (hash: wjjXDnRT/gElrbDNb5CaDdN7/dpZBAB0DlyHdk6xd94=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.crl rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07043FF6B66099F2CBFBBB64672822F3014937E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 03:37:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:02:d3:49:a7:8c:cd:9e:3c:7c:1b:54:8e:e4:c1:47:1e:1e:89:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07043FF6B66099F2CBFBBB64672822F3014937E8 Validity Not Before: May 6 21:16:38 2025 GMT Not After : May 10 03:37:38 2025 GMT Subject: CN=E6141B17D026CE40D8EC5840CFA8213491F3E62D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:1e:c7:71:5b:d0:6d:d2:47:5b:bf:77:6d:00: 55:e5:a8:7d:5f:84:c3:02:fc:55:10:d9:f1:4e:cc: 70:88:74:57:2e:eb:22:6e:a8:36:af:7e:71:f7:8e: 6d:30:7d:ce:cd:39:e7:c5:c9:d9:d4:ee:b7:fe:23: 3d:55:fe:72:d2:83:9d:95:d5:c7:58:b7:31:de:c4: d3:7f:23:5c:db:47:7a:61:d4:a1:f1:de:bb:14:c5: 27:f4:1a:85:d0:2d:e0:ff:af:e7:fe:0b:5d:ff:d7: f4:e0:96:f1:62:68:cf:b0:9a:29:c4:17:63:77:2b: e2:dd:2e:94:c0:0a:c7:9d:0e:ac:e7:4f:e5:8b:65: e7:f5:68:22:74:e7:ae:fb:f6:58:f1:3e:2c:a8:71: d8:7c:fc:7e:7c:29:b5:aa:d3:c6:74:9a:07:8b:5b: 3c:4b:c1:3f:8f:c1:d6:51:62:ff:63:ff:39:0d:dd: 27:b2:b8:ff:b5:3c:54:2a:a1:50:99:19:eb:1b:fe: 28:91:22:79:16:25:6c:f1:d0:59:5d:2a:a2:a8:46: e6:4f:01:f9:f9:b9:33:55:f0:8f:ea:04:21:59:a0: 31:64:cd:03:6c:69:fb:ec:a8:5c:bb:2c:93:36:07: da:73:c2:06:b8:c4:77:a0:6a:6c:29:e9:09:dd:6a: ae:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:14:1B:17:D0:26:CE:40:D8:EC:58:40:CF:A8:21:34:91:F3:E6:2D X509v3 Authority Key Identifier: keyid:07:04:3F:F6:B6:60:99:F2:CB:FB:BB:64:67:28:22:F3:01:49:37:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07043FF6B66099F2CBFBBB64672822F3014937E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0c54be9a-9b5d-4c64-b4e8-61c74e9ecedc/0/07043FF6B66099F2CBFBBB64672822F3014937E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cd:5e:c6:20:5e:c7:a4:91:af:22:e4:64:a5:9e:ec:54:59:ff: 35:99:cf:a5:a8:ee:15:26:4c:0c:1b:c9:42:eb:1e:6e:81:1d: be:df:72:63:ea:f2:c4:65:97:7b:bb:f9:c2:81:e1:93:ec:83: cb:04:99:8b:06:be:d4:f1:c6:a5:ab:c2:4e:0c:3c:c2:53:01: 47:f6:22:ed:66:16:2f:6a:a4:46:54:56:a9:2d:8e:8e:26:b1: 0c:a6:dc:49:db:ad:44:bd:cc:4d:ba:61:ba:65:d1:d5:0b:1b: 91:0d:48:47:37:d5:6e:1a:ee:4e:b3:be:1e:2f:00:b5:b1:68: 69:78:97:60:ab:4f:5f:2f:c1:a9:f2:2a:a5:06:3b:67:0c:1c: 65:79:d8:27:00:5d:66:58:7d:f6:42:cf:d0:0a:a9:90:34:13: f3:85:c9:f8:77:35:26:3a:61:17:f1:58:a1:c4:d8:45:dc:3a: ce:d3:80:db:ec:74:9a:58:80:19:d4:e5:fe:fd:9e:19:fc:b7: 9e:5f:42:e0:01:30:64:1a:71:0a:fe:1b:89:b3:44:09:7b:af: 3a:c1:be:db:08:ee:3c:13:30:0f:db:7b:a1:dc:64:c4:71:5c: 72:cd:47:83:44:fa:96:aa:b4:3e:69:48:08:a1:70:3a:ed:d5: 6e:96:3b:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWgLTSaeMzZ48fBtUjuTBRx4eiV8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDcwNDNGRjZCNjYwOTlGMkNCRkJCQjY0NjcyODIyRjMw MTQ5MzdFODAeFw0yNTA1MDYyMTE2MzhaFw0yNTA1MTAwMzM3MzhaMDMxMTAvBgNV BAMTKEU2MTQxQjE3RDAyNkNFNDBEOEVDNTg0MENGQTgyMTM0OTFGM0U2MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwHsdxW9Bt0kdbv3dtAFXlqH1f hMMC/FUQ2fFOzHCIdFcu6yJuqDavfnH3jm0wfc7NOefFydnU7rf+Iz1V/nLSg52V 1cdYtzHexNN/I1zbR3ph1KHx3rsUxSf0GoXQLeD/r+f+C13/1/TglvFiaM+wminE F2N3K+LdLpTACsedDqznT+WLZef1aCJ056779ljxPiyocdh8/H58KbWq08Z0mgeL WzxLwT+PwdZRYv9j/zkN3SeyuP+1PFQqoVCZGesb/iiRInkWJWzx0FldKqKoRuZP Afn5uTNV8I/qBCFZoDFkzQNsafvsqFy7LJM2B9pzwga4xHegamwp6Qndaq7jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5hQbF9AmzkDY7FhAz6ghNJHz5i0wHwYDVR0j BBgwFoAUBwQ/9rZgmfLL+7tkZygi8wFJN+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YzU0YmU5YS05YjVkLTRjNjQtYjRlOC02MWM3NGU5ZWNlZGMvMC8wNzA0M0ZGNkI2 NjA5OUYyQ0JGQkJCNjQ2NzI4MjJGMzAxNDkzN0U4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDcwNDNGRjZCNjYwOTlGMkNCRkJCQjY0NjcyODIyRjMwMTQ5 MzdFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGM1NGJlOWEtOWI1ZC00YzY0LWI0 ZTgtNjFjNzRlOWVjZWRjLzAvMDcwNDNGRjZCNjYwOTlGMkNCRkJCQjY0NjcyODIy RjMwMTQ5MzdFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAM1exiBex6SRryLkZKWe7FRZ/zWZz6Wo7hUm TAwbyULrHm6BHb7fcmPq8sRll3u7+cKB4ZPsg8sEmYsGvtTxxqWrwk4MPMJTAUf2 Iu1mFi9qpEZUVqktjo4msQym3EnbrUS9zE26Ybpl0dULG5ENSEc31W4a7k6zvh4v ALWxaGl4l2CrT18vwanyKqUGO2cMHGV52CcAXWZYffZCz9AKqZA0E/OFyfh3NSY6 YRfxWKHE2EXcOs7TgNvsdJpYgBnU5f79nhn8t55fQuABMGQacQr+G4mzRAl7rzrB vtsI7jwTMA/be6HcZMRxXHLNR4NE+paqtD5pSAihcDrt1W6WO1Q= -----END CERTIFICATE-----Generated at Fri May 9 01:30:38 2025 by rpki-client