$ rpki-client -vvf repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/7ED69B0DB232E419E90D72766374EA03E6F18F73.mft File: 7ED69B0DB232E419E90D72766374EA03E6F18F73.mft (raw, json) Hash identifier: fFt/42eeYaMfzBcRrIDEK85oVFHCEbPwDpqUkdDkk7c= Subject key identifier: 6E:E4:4C:1D:3A:23:E1:CE:A4:1D:87:D1:C4:4C:84:13:2D:6A:66:6E Authority key identifier: 7E:D6:9B:0D:B2:32:E4:19:E9:0D:72:76:63:74:EA:03:E6:F1:8F:73 Certificate issuer: /CN=7ED69B0DB232E419E90D72766374EA03E6F18F73 Certificate serial: 38A7DFF9DC0B3281E0A3B83AD54C672F0FA5C795 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7ED69B0DB232E419E90D72766374EA03E6F18F73.cer Subject info access: rsync://repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/7ED69B0DB232E419E90D72766374EA03E6F18F73.mft Manifest number: A8 Signing time: Sun 11 May 2025 11:21:20 +0000 Manifest this update: Sun 11 May 2025 11:16:20 +0000 Manifest next update: Wed 14 May 2025 17:18:20 +0000 Files and hashes: 1: 7ED69B0DB232E419E90D72766374EA03E6F18F73.crl (hash: mTJMMenDI2T3hD0adC3t7SeGV1LLwr+9dYNiNjtVzCQ=) 2: 3135372e32302e39342e302f32342d3234203d3e20313532343039.roa (hash: yeQYlb5D5MRjJOZy3icwpq+Xda5AxDKy2LKlKgiIVJg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/7ED69B0DB232E419E90D72766374EA03E6F18F73.crl rsync://repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/7ED69B0DB232E419E90D72766374EA03E6F18F73.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7ED69B0DB232E419E90D72766374EA03E6F18F73.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 17:18:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:a7:df:f9:dc:0b:32:81:e0:a3:b8:3a:d5:4c:67:2f:0f:a5:c7:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ED69B0DB232E419E90D72766374EA03E6F18F73 Validity Not Before: May 11 11:16:20 2025 GMT Not After : May 14 17:18:20 2025 GMT Subject: CN=6EE44C1D3A23E1CEA41D87D1C44C84132D6A666E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:aa:25:01:81:a5:d7:3d:35:20:60:d2:96:67: 93:fe:ea:ab:8e:5e:79:db:bf:1c:80:7b:0c:7f:6c: bd:01:73:2e:6a:f2:2f:eb:d3:86:b3:4d:58:f3:9e: 21:ec:9d:6c:a2:19:db:65:02:eb:4a:ba:9a:ba:43: 0d:b0:0f:f6:d3:dd:9f:ba:2d:bf:c9:c7:51:c8:8e: e3:14:20:95:25:15:1c:94:fd:27:22:3d:76:83:77: 44:2f:4b:29:b7:2c:cb:90:b0:63:af:ac:87:03:21: 42:e6:5e:a8:b1:f5:39:12:f0:8c:00:a5:c1:bf:e7: cf:0d:01:89:97:9f:da:b1:70:21:1d:22:a7:12:82: 9a:ec:62:b5:b3:83:9e:97:46:03:dc:97:7d:b6:b8: 9a:3b:96:98:91:88:5a:d0:91:3d:ac:69:dd:bb:7b: 1e:6b:fd:5d:cd:2c:1c:6d:2d:d4:a5:2f:f0:06:fd: 4f:97:56:c9:b2:89:c7:d7:cd:95:28:0c:1f:b7:e8: 40:d9:11:c9:89:6b:e0:5f:1f:25:5e:4c:f8:99:91: 73:47:ba:d8:6e:10:ad:d7:83:1b:18:ba:89:9c:40: 04:e0:05:6a:b7:b0:24:e2:52:b1:0b:43:08:e9:6f: a4:29:36:87:85:42:5f:d9:cd:d7:7d:d2:58:6d:77: b1:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:E4:4C:1D:3A:23:E1:CE:A4:1D:87:D1:C4:4C:84:13:2D:6A:66:6E X509v3 Authority Key Identifier: keyid:7E:D6:9B:0D:B2:32:E4:19:E9:0D:72:76:63:74:EA:03:E6:F1:8F:73 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/7ED69B0DB232E419E90D72766374EA03E6F18F73.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7ED69B0DB232E419E90D72766374EA03E6F18F73.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/172d1752-4853-4c74-b574-994d3b124090/0/7ED69B0DB232E419E90D72766374EA03E6F18F73.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:b1:59:73:08:a9:45:e4:81:e6:4a:cd:e5:05:8b:88:e6:8a: 7b:63:f0:a1:0f:8b:0a:34:f8:92:80:cb:30:5c:e7:bb:81:f1: 37:77:66:7f:f5:60:8f:91:5d:62:2f:af:ea:e7:57:c4:af:c8: 59:98:bc:70:41:25:62:6a:0c:01:2b:91:20:eb:7a:5a:7a:94: eb:91:01:ef:b6:bc:0e:5c:2b:71:59:77:f8:c0:09:65:7f:be: ea:64:65:bd:6d:23:1b:23:5d:96:d9:ad:94:21:cf:0d:7c:67: f3:88:dd:62:e8:c2:28:62:95:e9:2e:8c:fd:af:ac:e0:a0:4e: bf:38:6e:3f:09:cc:1b:7d:d8:3c:61:73:01:02:b2:62:2a:7a: 57:90:ee:83:cc:1c:9f:f3:86:44:a7:79:5e:21:2c:7d:81:0a: ec:5a:05:95:5f:c1:c0:ce:cc:09:9a:bc:1d:1c:d0:33:b1:32: 62:13:cf:1c:fc:43:1e:f0:eb:39:ff:73:d9:ae:23:38:9a:0b: 90:17:df:1e:74:3c:bb:8c:4e:4a:f8:3e:12:cc:f8:1d:af:1f: 2c:12:d9:0e:ac:3d:12:52:57:61:79:93:5f:cb:76:98:3d:93: 53:ef:a1:53:d0:7e:45:04:42:6b:38:8a:43:aa:e4:81:c4:29: 21:df:c3:cf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOKff+dwLMoHgo7g61UxnLw+lx5UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VENjlCMERCMjMyRTQxOUU5MEQ3Mjc2NjM3NEVBMDNF NkYxOEY3MzAeFw0yNTA1MTExMTE2MjBaFw0yNTA1MTQxNzE4MjBaMDMxMTAvBgNV BAMTKDZFRTQ0QzFEM0EyM0UxQ0VBNDFEODdEMUM0NEM4NDEzMkQ2QTY2NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkqiUBgaXXPTUgYNKWZ5P+6quO XnnbvxyAewx/bL0Bcy5q8i/r04azTVjzniHsnWyiGdtlAutKupq6Qw2wD/bT3Z+6 Lb/Jx1HIjuMUIJUlFRyU/SciPXaDd0QvSym3LMuQsGOvrIcDIULmXqix9TkS8IwA pcG/588NAYmXn9qxcCEdIqcSgprsYrWzg56XRgPcl322uJo7lpiRiFrQkT2sad27 ex5r/V3NLBxtLdSlL/AG/U+XVsmyicfXzZUoDB+36EDZEcmJa+BfHyVeTPiZkXNH uthuEK3XgxsYuomcQATgBWq3sCTiUrELQwjpb6QpNoeFQl/Zzdd90lhtd7G7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbuRMHToj4c6kHYfRxEyEEy1qZm4wHwYDVR0j BBgwFoAUftabDbIy5BnpDXJ2Y3TqA+bxj3MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NzJkMTc1Mi00ODUzLTRjNzQtYjU3NC05OTRkM2IxMjQwOTAvMC83RUQ2OUIwREIy MzJFNDE5RTkwRDcyNzY2Mzc0RUEwM0U2RjE4RjczLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0VENjlCMERCMjMyRTQxOUU5MEQ3Mjc2NjM3NEVBMDNFNkYx OEY3My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTcyZDE3NTItNDg1My00Yzc0LWI1 NzQtOTk0ZDNiMTI0MDkwLzAvN0VENjlCMERCMjMyRTQxOUU5MEQ3Mjc2NjM3NEVB MDNFNkYxOEY3My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALKxWXMIqUXkgeZKzeUFi4jmintj8KEPiwo0 +JKAyzBc57uB8Td3Zn/1YI+RXWIvr+rnV8SvyFmYvHBBJWJqDAErkSDrelp6lOuR Ae+2vA5cK3FZd/jACWV/vupkZb1tIxsjXZbZrZQhzw18Z/OI3WLowihilekujP2v rOCgTr84bj8JzBt92DxhcwECsmIqeleQ7oPMHJ/zhkSneV4hLH2BCuxaBZVfwcDO zAmavB0c0DOxMmITzxz8Qx7w6zn/c9muIziaC5AX3x50PLuMTkr4PhLM+B2vHywS 2Q6sPRJSV2F5k1/Ldpg9k1PvoVPQfkUEQms4ikOq5IHEKSHfw88= -----END CERTIFICATE-----Generated at Mon May 12 21:53:29 2025 by rpki-client