$ rpki-client -vvf repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.mft File: 0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.mft (raw, json) Hash identifier: /bMAIVu9qbVGr620MZ93jfwdol6Krm1UEp2gW4LcpmU= Subject key identifier: 8A:2D:5B:FD:E0:D4:73:DA:B5:39:BC:84:EF:0F:0E:98:65:72:23:B9 Authority key identifier: 01:00:A7:F6:C4:D5:8C:38:67:F9:CE:D7:E7:D4:6D:CE:D0:A5:78:04 Certificate issuer: /CN=0100A7F6C4D58C3867F9CED7E7D46DCED0A57804 Certificate serial: 46B9F5F46D5B22F098D94F327048603550585F58 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.cer Subject info access: rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.mft Manifest number: 018F Signing time: Fri 09 May 2025 10:30:50 +0000 Manifest this update: Fri 09 May 2025 10:25:50 +0000 Manifest next update: Mon 12 May 2025 12:54:50 +0000 Files and hashes: 1: 0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.crl (hash: fhEQZzeHD3wCHEaVYBrLYbLO/GyXwui74cCnMFKPkcE=) 2: 3130332e33352e3135322e302f32332d3233203d3e2039333431.roa (hash: 2htdgS+1Or0wZzJh4jZYW5oaI6hoP4/N0BvY1mQLhMA=) 3: 3130332e33352e3135322e302f32342d3234203d3e2039333431.roa (hash: ywb3a8C62BA/PMdGKSYbEqNH95chMJkQIqcJmusbD0s=) 4: 3130332e33352e3135332e302f32342d3234203d3e2039333431.roa (hash: OiTIcbauaRQZkoh05qWm9giYFtWGDu1XoyHAojKPf2g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.crl rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 12:54:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:b9:f5:f4:6d:5b:22:f0:98:d9:4f:32:70:48:60:35:50:58:5f:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0100A7F6C4D58C3867F9CED7E7D46DCED0A57804 Validity Not Before: May 9 10:25:50 2025 GMT Not After : May 12 12:54:50 2025 GMT Subject: CN=8A2D5BFDE0D473DAB539BC84EF0F0E98657223B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:31:3d:ae:b2:05:3c:da:6c:73:dd:69:33:54: 8a:15:88:37:da:3a:01:81:fc:f9:b1:9b:8a:15:f9: ca:e9:9c:fd:bb:64:bd:38:a9:e0:08:6e:7f:22:83: 9a:30:5d:45:80:85:41:02:03:ff:2d:44:0b:49:b8: 48:52:25:9b:a6:0a:2c:8c:cd:81:bb:c7:74:78:e4: 00:68:21:b5:00:e9:06:24:31:f3:1c:29:29:bf:05: a8:41:1a:5d:92:d1:3c:11:7b:c6:ba:29:ef:f7:c4: ea:5c:4f:14:98:e7:06:5c:a5:e6:1b:93:fb:5d:af: 57:ac:99:55:5e:77:b2:1d:89:ca:d3:c4:c1:bc:60: 0f:e8:2f:d0:88:03:96:f2:ba:d9:6e:ed:54:11:b0: c3:5f:f8:5f:5e:6c:9d:38:a8:75:43:2b:6c:a4:ca: 6b:09:62:e4:11:a8:fb:e4:69:23:a5:af:95:2d:15: 8f:78:6b:87:f9:03:f4:9d:01:04:8c:d1:26:61:c3: 5e:e6:92:a5:d7:54:75:4d:76:d4:54:42:c4:69:8d: 7d:86:f5:18:e7:76:6f:2d:fd:99:7c:35:96:14:14: 5d:5e:32:72:cd:01:83:9d:1f:1e:12:f4:21:5b:56: 21:77:81:64:2f:70:f5:15:3b:7f:c8:3e:5d:a5:56: 58:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:2D:5B:FD:E0:D4:73:DA:B5:39:BC:84:EF:0F:0E:98:65:72:23:B9 X509v3 Authority Key Identifier: keyid:01:00:A7:F6:C4:D5:8C:38:67:F9:CE:D7:E7:D4:6D:CE:D0:A5:78:04 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/14885525-cb0f-46a0-8253-042d7d7aff38/0/0100A7F6C4D58C3867F9CED7E7D46DCED0A57804.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:dc:e1:52:e0:f0:5a:a6:6e:de:9c:32:5f:dc:89:20:9c:21: eb:c0:ac:00:c8:0b:a7:7a:52:a7:03:f3:bb:f1:6a:31:ae:39: a8:75:70:9b:c6:b2:6e:23:3a:69:52:b2:71:a9:e3:52:85:87: 27:36:3b:4b:e7:bb:b5:9f:c3:d5:2b:cf:8e:1b:3a:0e:47:bb: f0:18:9e:e6:80:95:cf:3d:43:64:d8:7b:9c:4a:29:66:e9:63: dd:7a:fd:a5:01:24:3c:e1:49:75:2c:a4:71:ad:eb:5c:56:2b: e9:f2:c2:a7:d7:0e:0c:aa:40:be:f3:73:ab:b4:a9:80:63:6b: 33:bb:5f:78:46:f4:fe:9b:07:64:d5:39:65:fd:e5:aa:f4:1d: 1a:f1:8d:17:bf:77:dc:26:88:a9:df:2f:a4:78:7e:86:f7:11: 11:d5:73:d0:5c:7b:4f:ea:db:3f:57:db:0d:83:0b:ae:ee:5b: 0d:d4:39:b9:f8:e6:98:41:dd:53:7c:66:b4:39:d2:2c:8a:c7: 1f:39:6b:3f:5e:8b:d4:b5:d5:a1:a2:d7:65:a6:c5:8b:c1:25: a3:7f:c5:e0:90:9d:70:5f:a5:3a:c6:51:92:0b:6c:5e:74:db: 05:ab:ee:8c:f8:0a:9a:4e:8c:ba:4b:af:58:2d:f5:08:16:36: 63:74:4b:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURrn19G1bIvCY2U8ycEhgNVBYX1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDEwMEE3RjZDNEQ1OEMzODY3RjlDRUQ3RTdENDZEQ0VE MEE1NzgwNDAeFw0yNTA1MDkxMDI1NTBaFw0yNTA1MTIxMjU0NTBaMDMxMTAvBgNV BAMTKDhBMkQ1QkZERTBENDczREFCNTM5QkM4NEVGMEYwRTk4NjU3MjIzQjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRMT2usgU82mxz3WkzVIoViDfa OgGB/Pmxm4oV+crpnP27ZL04qeAIbn8ig5owXUWAhUECA/8tRAtJuEhSJZumCiyM zYG7x3R45ABoIbUA6QYkMfMcKSm/BahBGl2S0TwRe8a6Ke/3xOpcTxSY5wZcpeYb k/tdr1esmVVed7IdicrTxMG8YA/oL9CIA5byutlu7VQRsMNf+F9ebJ04qHVDK2yk ymsJYuQRqPvkaSOlr5UtFY94a4f5A/SdAQSM0SZhw17mkqXXVHVNdtRUQsRpjX2G 9Rjndm8t/Zl8NZYUFF1eMnLNAYOdHx4S9CFbViF3gWQvcPUVO3/IPl2lVlgFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUii1b/eDUc9q1ObyE7w8OmGVyI7kwHwYDVR0j BBgwFoAUAQCn9sTVjDhn+c7X59RtztCleAQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NDg4NTUyNS1jYjBmLTQ2YTAtODI1My0wNDJkN2Q3YWZmMzgvMC8wMTAwQTdGNkM0 RDU4QzM4NjdGOUNFRDdFN0Q0NkRDRUQwQTU3ODA0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDEwMEE3RjZDNEQ1OEMzODY3RjlDRUQ3RTdENDZEQ0VEMEE1 NzgwNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTQ4ODU1MjUtY2IwZi00NmEwLTgy NTMtMDQyZDdkN2FmZjM4LzAvMDEwMEE3RjZDNEQ1OEMzODY3RjlDRUQ3RTdENDZE Q0VEMEE1NzgwNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHfc4VLg8Fqmbt6cMl/ciSCcIevArADIC6d6 UqcD87vxajGuOah1cJvGsm4jOmlSsnGp41KFhyc2O0vnu7Wfw9Urz44bOg5Hu/AY nuaAlc89Q2TYe5xKKWbpY916/aUBJDzhSXUspHGt61xWK+nywqfXDgyqQL7zc6u0 qYBjazO7X3hG9P6bB2TVOWX95ar0HRrxjRe/d9wmiKnfL6R4fob3ERHVc9Bce0/q 2z9X2w2DC67uWw3UObn45phB3VN8ZrQ50iyKxx85az9ei9S11aGi12WmxYvBJaN/ xeCQnXBfpTrGUZILbF502wWr7oz4CppOjLpLr1gt9QgWNmN0S1M= -----END CERTIFICATE-----Generated at Sun May 11 01:59:12 2025 by rpki-client