$ rpki-client -vvf repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.mft File: 79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.mft (raw, json) Hash identifier: 7KAJEzzEF1Bc1vix7vDoffvAm+tf3+HXAQs+dyUGCkg= Subject key identifier: 6E:FF:F2:B6:DD:93:5E:76:AF:83:FC:EC:78:2D:C6:ED:03:2E:EC:E9 Authority key identifier: 79:BD:07:5D:1B:C4:BD:8A:E0:C2:6E:FD:2D:37:22:CC:F6:EF:F6:5E Certificate issuer: /CN=79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E Certificate serial: 67926EE5EF51AAE9CC1E37B08EFB4CEA86133D28 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.mft Manifest number: F3 Signing time: Wed 07 May 2025 03:03:21 +0000 Manifest this update: Wed 07 May 2025 02:58:21 +0000 Manifest next update: Sat 10 May 2025 07:52:21 +0000 Files and hashes: 1: 79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.crl (hash: FE49ijeaj9DHRhK2Zs89PkCYxosOXonl/q+0S+ZgfNo=) 2: 3230322e34372e3138382e302f32332d3234203d3e203435333035.roa (hash: 8JuZ2ebsqDLgMKPt7Z/5NJCA9Jrmu98pAz1BifgGHCc=) 3: 3230322e34372e3138392e302f32342d3234203d3e203435333035.roa (hash: viE08DL5fFk1bogLaoHfmzCByxNbHXkxctzPEjnVqjA=) 4: 3230322e34372e3138382e302f32342d3234203d3e203435333035.roa (hash: ombGnLwPgLQ/TaOmQHPipXlZkRsWxFVGNy0cRXRDrpI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.crl rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 07:52:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:92:6e:e5:ef:51:aa:e9:cc:1e:37:b0:8e:fb:4c:ea:86:13:3d:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E Validity Not Before: May 7 02:58:21 2025 GMT Not After : May 10 07:52:21 2025 GMT Subject: CN=6EFFF2B6DD935E76AF83FCEC782DC6ED032EECE9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:ce:a8:8b:72:37:0d:cd:66:ae:8b:b5:27:22: 85:46:3c:8a:d9:5b:57:46:81:d0:90:2c:96:56:97: f9:ab:c7:39:28:91:9a:5a:1f:49:6c:59:0a:69:27: 84:fd:58:12:50:fe:53:67:ec:9c:d2:75:34:bc:06: 72:9c:af:97:a2:30:38:2d:d1:10:31:ef:81:14:5e: c4:f8:e4:6e:bc:29:06:1d:05:7d:bf:1b:e3:4d:fc: e6:48:5b:fc:55:90:6b:bf:b8:b6:c4:74:1d:3d:f6: d0:8f:2d:ab:19:b3:ed:62:a0:3d:e3:31:d6:0f:bb: 91:45:1b:27:5d:0a:32:6f:e7:40:e2:b3:b5:d9:0d: 68:5d:c2:0d:db:e4:22:4a:e9:45:b8:64:2e:3c:7e: 57:3f:b5:b8:a0:e8:99:3b:b3:e0:69:6e:da:c6:ca: fe:00:7a:47:8a:ce:aa:e0:d9:a1:51:0b:96:3e:89: 5f:1d:92:12:47:5c:df:ca:5c:e0:44:80:93:79:c2: 30:8e:bd:cf:53:12:b3:23:8e:7b:6d:25:2d:5b:e0: fd:fb:ef:81:af:cf:62:0d:dc:ac:bc:92:ef:99:77: b0:1d:17:0d:de:ad:5f:ee:c6:62:0c:fb:92:b0:ab: a1:bb:15:77:ac:e3:5c:a0:da:33:cf:d6:c8:2a:59: 85:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:FF:F2:B6:DD:93:5E:76:AF:83:FC:EC:78:2D:C6:ED:03:2E:EC:E9 X509v3 Authority Key Identifier: keyid:79:BD:07:5D:1B:C4:BD:8A:E0:C2:6E:FD:2D:37:22:CC:F6:EF:F6:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1ee94014-87fa-4bc2-b1c6-7fd2a89476f3/0/79BD075D1BC4BD8AE0C26EFD2D3722CCF6EFF65E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:47:f3:8e:19:65:f8:e9:74:36:40:e0:64:f2:3c:d0:3e:c5: b7:e1:1b:ae:a6:4d:2c:b7:05:fc:12:f3:bf:03:59:af:b9:c3: 5f:9d:8b:80:93:d7:df:cb:70:b3:61:21:c0:50:69:1a:e1:dd: 61:0f:99:bb:0c:f4:43:a2:de:ff:13:40:da:e3:c3:ba:b0:90: c3:1a:b4:36:8a:cd:3c:9d:97:43:e6:97:ee:26:b6:f6:0d:50: 3d:ab:aa:0c:da:b6:8c:da:c3:0e:4a:62:2e:30:a1:28:51:a3: 13:9c:3d:1d:e1:ce:a1:d1:5e:8a:a3:88:51:ee:38:50:2d:8c: e0:0e:30:53:0f:fe:5e:e7:35:71:26:34:e5:24:4b:50:59:ae: 54:67:a9:4f:0c:2a:73:f8:c8:f0:ea:7b:db:10:4d:e7:b6:e8: 34:45:b2:f5:cb:a1:76:69:ca:fc:92:63:f2:de:07:07:33:1f: 4b:2d:c5:9e:d2:d4:e7:67:49:27:67:ec:2b:02:71:d1:81:c2: 45:52:3e:6f:b3:54:05:29:40:a8:53:61:09:fb:8b:19:19:35: 4d:fa:3a:b5:66:77:09:8b:91:6f:3a:c0:a6:07:4c:c1:10:fb: e5:b0:06:48:47:66:e9:4b:89:4e:86:59:3d:6f:ea:21:93:b7: dc:72:3b:68 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ5Ju5e9RqunMHjewjvtM6oYTPSgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzlCRDA3NUQxQkM0QkQ4QUUwQzI2RUZEMkQzNzIyQ0NG NkVGRjY1RTAeFw0yNTA1MDcwMjU4MjFaFw0yNTA1MTAwNzUyMjFaMDMxMTAvBgNV BAMTKDZFRkZGMkI2REQ5MzVFNzZBRjgzRkNFQzc4MkRDNkVEMDMyRUVDRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUzqiLcjcNzWaui7UnIoVGPIrZ W1dGgdCQLJZWl/mrxzkokZpaH0lsWQppJ4T9WBJQ/lNn7JzSdTS8BnKcr5eiMDgt 0RAx74EUXsT45G68KQYdBX2/G+NN/OZIW/xVkGu/uLbEdB099tCPLasZs+1ioD3j MdYPu5FFGyddCjJv50Dis7XZDWhdwg3b5CJK6UW4ZC48flc/tbig6Jk7s+BpbtrG yv4AekeKzqrg2aFRC5Y+iV8dkhJHXN/KXOBEgJN5wjCOvc9TErMjjnttJS1b4P37 74Gvz2IN3Ky8ku+Zd7AdFw3erV/uxmIM+5Kwq6G7FXes41yg2jPP1sgqWYW9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbv/ytt2TXnavg/zseC3G7QMu7OkwHwYDVR0j BBgwFoAUeb0HXRvEvYrgwm79LTcizPbv9l4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZWU5NDAxNC04N2ZhLTRiYzItYjFjNi03ZmQyYTg5NDc2ZjMvMC83OUJEMDc1RDFC QzRCRDhBRTBDMjZFRkQyRDM3MjJDQ0Y2RUZGNjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzlCRDA3NUQxQkM0QkQ4QUUwQzI2RUZEMkQzNzIyQ0NGNkVG RjY1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWVlOTQwMTQtODdmYS00YmMyLWIx YzYtN2ZkMmE4OTQ3NmYzLzAvNzlCRDA3NUQxQkM0QkQ4QUUwQzI2RUZEMkQzNzIy Q0NGNkVGRjY1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEdH844ZZfjpdDZA4GTyPNA+xbfhG66mTSy3 BfwS878DWa+5w1+di4CT19/LcLNhIcBQaRrh3WEPmbsM9EOi3v8TQNrjw7qwkMMa tDaKzTydl0Pml+4mtvYNUD2rqgzatozaww5KYi4woShRoxOcPR3hzqHRXoqjiFHu OFAtjOAOMFMP/l7nNXEmNOUkS1BZrlRnqU8MKnP4yPDqe9sQTee26DRFsvXLoXZp yvySY/LeBwczH0stxZ7S1OdnSSdn7CsCcdGBwkVSPm+zVAUpQKhTYQn7ixkZNU36 OrVmdwmLkW86wKYHTMEQ++WwBkhHZulLiU6GWT1v6iGTt9xyO2g= -----END CERTIFICATE-----Generated at Thu May 8 23:08:14 2025 by rpki-client