$ rpki-client -vvf repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft File: 0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft (raw, json) Hash identifier: 1VBLJzd8nPwDV/djJYGmp0ePSMaxnqdHWE1Pr27Innk= Subject key identifier: 1E:43:DD:60:C7:A9:EF:75:53:FE:51:CC:00:FA:61:7F:3B:BE:19:D2 Authority key identifier: 0A:7E:22:2F:0C:3C:89:14:35:14:04:FC:05:DB:0F:DD:9C:D4:EB:20 Certificate issuer: /CN=0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20 Certificate serial: 3D00E5EA2E0010CC17A75888C06ACF07DD3C7AA7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft Manifest number: D5 Signing time: Wed 07 May 2025 14:30:59 +0000 Manifest this update: Wed 07 May 2025 14:25:59 +0000 Manifest next update: Sat 10 May 2025 19:37:59 +0000 Files and hashes: 1: 0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl (hash: /YCImcYJlhp4O5VDdTrrGFQVMfB3vdaZ1w1J1ywFJak=) 2: 3130332e3136352e3135342e302f32342d3234203d3e20313431393635.roa (hash: 8OwVADfDElltpILpTKCgIU3iWPks4hxCwKGTSEJQw8w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 19:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:00:e5:ea:2e:00:10:cc:17:a7:58:88:c0:6a:cf:07:dd:3c:7a:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20 Validity Not Before: May 7 14:25:59 2025 GMT Not After : May 10 19:37:59 2025 GMT Subject: CN=1E43DD60C7A9EF7553FE51CC00FA617F3BBE19D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9c:07:d8:41:a9:33:57:c6:6d:44:52:e2:13: e3:e2:96:8b:7e:b1:ff:3e:d3:57:0d:09:09:6f:2f: 8a:ff:fd:92:af:67:7f:a4:1d:5d:ec:b8:45:4d:59: 53:b7:be:88:62:5e:2f:90:2a:e5:06:86:1c:21:20: 08:a7:63:57:c8:d5:b4:a9:a1:a1:1c:83:51:c5:29: ef:5b:f0:f0:d8:2a:62:6c:a4:45:4a:a4:7b:86:42: 34:e0:f0:38:47:4d:91:3f:10:5a:f7:7b:2d:e2:70: f9:2f:8a:65:c7:f9:f9:98:6a:df:12:f2:c4:61:f3: 83:9e:9a:ab:25:e6:a1:a2:2e:9d:6d:3f:e8:05:13: d9:a9:f3:75:01:cb:40:06:6c:87:75:14:c9:49:a3: 81:00:fc:db:2d:c5:27:90:81:e0:6d:b1:4f:4a:96: 53:e9:cb:81:8f:d9:bd:d3:f8:9b:65:03:69:69:c4: 9b:1f:1a:80:df:7c:b0:d5:73:5e:0c:a5:35:08:e7: 8c:cc:b6:1a:cf:ba:cb:ac:7b:b2:c1:9c:e0:e2:d4: 13:d2:f8:b6:07:c1:19:59:6b:ad:93:9e:fa:5a:f3: 77:8d:0e:be:eb:d7:3e:3f:a2:4c:7c:9b:42:f1:dc: 7b:ac:34:73:1b:c5:81:7f:99:0e:5f:b9:a1:d9:9f: ee:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:43:DD:60:C7:A9:EF:75:53:FE:51:CC:00:FA:61:7F:3B:BE:19:D2 X509v3 Authority Key Identifier: keyid:0A:7E:22:2F:0C:3C:89:14:35:14:04:FC:05:DB:0F:DD:9C:D4:EB:20 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2cf35a47-2cce-487f-aa27-c9e9de635bec/0/0A7E222F0C3C8914351404FC05DB0FDD9CD4EB20.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:fa:10:bd:2c:8d:50:41:7a:60:a4:e1:7f:b3:f2:43:94:94: 2e:e2:23:44:97:2b:fc:5b:92:98:b5:29:26:d3:9d:58:d1:cf: ce:e3:c7:39:69:63:6e:48:cc:f8:21:b6:12:47:66:8b:d7:fa: 28:9a:bd:7d:f1:de:fd:07:eb:cc:35:f0:38:74:27:0f:f5:a5: 06:cb:56:25:04:1e:5f:cf:a8:47:35:cf:b0:79:5e:0b:d9:8a: 66:91:8d:99:2f:d2:ab:43:77:68:50:b0:df:01:52:16:3f:e1: b5:db:8f:e2:63:a1:1b:b1:44:f8:63:1f:8b:13:77:84:4f:c2: f7:0c:77:d8:f5:18:a7:5d:bc:d2:58:92:92:11:c6:a4:e9:1c: f4:b3:01:00:37:9b:4c:c3:0e:35:21:55:e7:b0:97:3a:a5:db: 50:ec:28:27:95:59:71:5f:6b:db:b3:ef:f7:6f:ff:3f:3e:2f: b1:c5:48:6d:9c:75:af:9c:fe:5b:b3:68:e5:25:ab:b4:4a:ae: 3e:23:10:28:31:4f:ad:30:bb:ea:37:73:0c:54:aa:13:fc:f1: 7c:f9:fd:70:24:3a:dd:2f:30:a5:23:eb:8c:ab:a1:c2:b8:b7: 5b:bd:5a:de:3d:0b:ad:3d:f6:f0:21:c6:72:18:63:f6:49:06: 8a:39:59:84 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPQDl6i4AEMwXp1iIwGrPB908eqcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE3RTIyMkYwQzNDODkxNDM1MTQwNEZDMDVEQjBGREQ5 Q0Q0RUIyMDAeFw0yNTA1MDcxNDI1NTlaFw0yNTA1MTAxOTM3NTlaMDMxMTAvBgNV BAMTKDFFNDNERDYwQzdBOUVGNzU1M0ZFNTFDQzAwRkE2MTdGM0JCRTE5RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7nAfYQakzV8ZtRFLiE+Pilot+ sf8+01cNCQlvL4r//ZKvZ3+kHV3suEVNWVO3vohiXi+QKuUGhhwhIAinY1fI1bSp oaEcg1HFKe9b8PDYKmJspEVKpHuGQjTg8DhHTZE/EFr3ey3icPkvimXH+fmYat8S 8sRh84Oemqsl5qGiLp1tP+gFE9mp83UBy0AGbId1FMlJo4EA/NstxSeQgeBtsU9K llPpy4GP2b3T+JtlA2lpxJsfGoDffLDVc14MpTUI54zMthrPususe7LBnODi1BPS +LYHwRlZa62Tnvpa83eNDr7r1z4/okx8m0Lx3HusNHMbxYF/mQ5fuaHZn+4vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHkPdYMep73VT/lHMAPphfzu+GdIwHwYDVR0j BBgwFoAUCn4iLww8iRQ1FAT8BdsP3ZzU6yAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y Y2YzNWE0Ny0yY2NlLTQ4N2YtYWEyNy1jOWU5ZGU2MzViZWMvMC8wQTdFMjIyRjBD M0M4OTE0MzUxNDA0RkMwNURCMEZERDlDRDRFQjIwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMEE3RTIyMkYwQzNDODkxNDM1MTQwNEZDMDVEQjBGREQ5Q0Q0 RUIyMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmNmMzVhNDctMmNjZS00ODdmLWFh MjctYzllOWRlNjM1YmVjLzAvMEE3RTIyMkYwQzNDODkxNDM1MTQwNEZDMDVEQjBG REQ5Q0Q0RUIyMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALz6EL0sjVBBemCk4X+z8kOUlC7iI0SXK/xb kpi1KSbTnVjRz87jxzlpY25IzPghthJHZovX+iiavX3x3v0H68w18Dh0Jw/1pQbL ViUEHl/PqEc1z7B5XgvZimaRjZkv0qtDd2hQsN8BUhY/4bXbj+JjoRuxRPhjH4sT d4RPwvcMd9j1GKddvNJYkpIRxqTpHPSzAQA3m0zDDjUhVeewlzql21DsKCeVWXFf a9uz7/dv/z8+L7HFSG2cda+c/luzaOUlq7RKrj4jECgxT60wu+o3cwxUqhP88Xz5 /XAkOt0vMKUj64yrocK4t1u9Wt49C6099vAhxnIYY/ZJBoo5WYQ= -----END CERTIFICATE-----Generated at Thu May 8 01:15:29 2025 by rpki-client