$ rpki-client -vvf repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft File: 7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft (raw, json) Hash identifier: XNDpsdX7/v2n7WIdrynvzlvI6MUzPN/IUiuvn/s3Xtc= Subject key identifier: 69:43:85:9F:3B:9E:DE:89:14:08:73:C4:AD:01:6D:DB:01:BD:AF:25 Authority key identifier: 7E:FA:64:C1:15:73:C2:92:E1:92:C2:CD:EA:C4:D5:F8:B8:C2:1D:BD Certificate issuer: /CN=7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD Certificate serial: 5882D5576336AE8F6BC7D11C1E9DEC60D0FE704B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft Manifest number: 04CE Signing time: Sat 10 May 2025 14:12:20 +0000 Manifest this update: Sat 10 May 2025 14:07:20 +0000 Manifest next update: Tue 13 May 2025 19:39:20 +0000 Files and hashes: 1: 3130332e31392e35392e302f32342d3234203d3e20313332363337.roa (hash: JU0Fqn+bNHy7TO2FDGiu0v8Et06ozUzFP/f0/9F2tIA=) 2: 3130332e31392e35382e302f32342d3234203d3e20313332363337.roa (hash: Se+JQojVLCUto29ucN5SOimVnmTwAPvqyMOWkGKak7Q=) 3: 7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.crl (hash: qqIkkdYUgYj16HvcFFQEa6EYiSCMVmIf6I/5ZS/xSdY=) 4: 3130332e31392e35362e302f32342d3234203d3e20313332363337.roa (hash: 0SNOXJv5maedIGBL0Qm9Po7XI+eFbCTVR/NtX0bm6ts=) 5: 323430323a333263303a3a2f33322d3332203d3e20313332363337.roa (hash: alekTqBBNWqAI5oX1dPM5eFA94/uemvvhURj4TPNUr4=) 6: 3130332e31392e35372e302f32342d3234203d3e20313332363337.roa (hash: nvj4vFogJKPPYgFqYmFWvbmjSSvxwuNwrsXUM+va/jI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.crl rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 19:39:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:82:d5:57:63:36:ae:8f:6b:c7:d1:1c:1e:9d:ec:60:d0:fe:70:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD Validity Not Before: May 10 14:07:20 2025 GMT Not After : May 13 19:39:20 2025 GMT Subject: CN=6943859F3B9EDE89140873C4AD016DDB01BDAF25 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:02:be:3c:70:5a:74:b9:ff:1a:cd:ce:54:f4: e1:14:9e:77:1c:2d:9f:7e:18:00:15:be:4b:38:95: c1:84:18:2c:5b:f2:2d:57:e4:2a:32:2c:10:5a:6e: 32:0c:0d:db:97:82:7f:3e:93:94:c4:ee:15:26:c0: f7:5b:16:f8:59:bc:11:66:97:e4:1d:4c:32:60:05: f5:5f:9a:de:33:d0:80:01:e9:cf:36:56:5e:7d:e5: 29:9d:38:6a:b8:a0:0b:23:18:3c:27:17:b4:59:f9: 0b:5b:28:49:78:04:47:71:4e:5e:46:f3:d9:39:6e: 8c:65:54:49:d2:b1:eb:23:16:9c:99:09:49:58:b5: 6f:8e:ab:d0:2d:30:39:64:a9:f7:30:c0:89:9b:95: 66:57:9c:ec:97:1c:50:61:74:3e:c4:33:f8:0a:0b: a7:11:23:8c:6b:4c:0f:08:cf:d5:25:5d:3e:28:1d: 03:df:19:46:ef:8e:06:ca:48:a4:77:d3:41:e6:71: 3b:6d:e2:05:04:47:51:d7:d9:d9:f8:3d:8c:68:35: ad:8b:56:b0:5a:12:2f:dd:a5:36:4d:dd:cf:d7:dd: 38:7f:91:f8:96:d4:0d:50:2d:91:eb:8b:53:97:ea: c9:22:a6:6c:3b:d8:29:79:d5:43:00:89:b6:06:36: 1d:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:43:85:9F:3B:9E:DE:89:14:08:73:C4:AD:01:6D:DB:01:BD:AF:25 X509v3 Authority Key Identifier: keyid:7E:FA:64:C1:15:73:C2:92:E1:92:C2:CD:EA:C4:D5:F8:B8:C2:1D:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:2e:6b:7d:60:68:1a:7c:a1:61:ff:a7:53:6a:61:db:9e:fc: 94:c2:50:08:4a:c7:8f:cb:97:01:cc:69:ae:31:17:3d:9f:e5: 99:4d:7b:b7:82:63:b3:07:78:c6:f7:4a:2c:d8:db:0b:5c:97: 4a:60:3e:8a:53:75:7e:da:64:be:14:b9:1a:84:4e:56:5d:93: 01:92:ac:3f:57:c6:94:ec:b6:98:3f:91:9a:5f:25:9d:4d:c7: ab:6f:32:13:26:f6:07:07:99:87:e2:84:85:a1:81:07:9d:16: 08:c9:25:98:0a:3a:b2:53:79:e3:4c:e9:c8:ac:44:a1:e0:79: 0b:21:c5:97:67:db:a4:70:5d:00:73:8f:96:7a:fd:c9:63:94: f2:31:91:05:56:c8:0a:ee:e3:68:ea:8e:5e:08:84:4f:14:88: 41:b0:c0:3d:af:18:0e:e0:7a:bd:91:86:f6:72:c0:a9:9f:47: 0d:08:27:77:01:07:cd:d0:bd:a7:79:81:3d:c4:ce:46:a6:e7: 35:2f:f1:ed:2d:c7:d0:48:02:c3:ab:dd:e2:e6:0f:da:bf:42: 49:f5:73:ce:b6:51:28:d0:32:99:bb:dc:8d:a8:13:6f:3a:56: 84:31:6f:c6:56:09:0a:a8:b4:7d:98:36:d3:bf:b8:99:1b:ab: 5f:48:61:e6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWILVV2M2ro9rx9EcHp3sYND+cEswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VGQTY0QzExNTczQzI5MkUxOTJDMkNERUFDNEQ1RjhC OEMyMURCRDAeFw0yNTA1MTAxNDA3MjBaFw0yNTA1MTMxOTM5MjBaMDMxMTAvBgNV BAMTKDY5NDM4NTlGM0I5RURFODkxNDA4NzNDNEFEMDE2RERCMDFCREFGMjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAAr48cFp0uf8azc5U9OEUnncc LZ9+GAAVvks4lcGEGCxb8i1X5CoyLBBabjIMDduXgn8+k5TE7hUmwPdbFvhZvBFm l+QdTDJgBfVfmt4z0IAB6c82Vl595SmdOGq4oAsjGDwnF7RZ+QtbKEl4BEdxTl5G 89k5boxlVEnSsesjFpyZCUlYtW+Oq9AtMDlkqfcwwImblWZXnOyXHFBhdD7EM/gK C6cRI4xrTA8Iz9UlXT4oHQPfGUbvjgbKSKR300HmcTtt4gUER1HX2dn4PYxoNa2L VrBaEi/dpTZN3c/X3Th/kfiW1A1QLZHri1OX6skipmw72Cl51UMAibYGNh1RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaUOFnzue3okUCHPErQFt2wG9ryUwHwYDVR0j BBgwFoAUfvpkwRVzwpLhksLN6sTV+LjCHb0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDA5MjdlNi04YTBhLTRmYTctODk2OS05ZmI5ZDY5NDM5N2MvMC83RUZBNjRDMTE1 NzNDMjkyRTE5MkMyQ0RFQUM0RDVGOEI4QzIxREJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0VGQTY0QzExNTczQzI5MkUxOTJDMkNERUFDNEQ1RjhCOEMy MURCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQwOTI3ZTYtOGEwYS00ZmE3LTg5 NjktOWZiOWQ2OTQzOTdjLzAvN0VGQTY0QzExNTczQzI5MkUxOTJDMkNERUFDNEQ1 RjhCOEMyMURCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKEua31gaBp8oWH/p1NqYdue/JTCUAhKx4/L lwHMaa4xFz2f5ZlNe7eCY7MHeMb3SizY2wtcl0pgPopTdX7aZL4UuRqETlZdkwGS rD9XxpTstpg/kZpfJZ1Nx6tvMhMm9gcHmYfihIWhgQedFgjJJZgKOrJTeeNM6cis RKHgeQshxZdn26RwXQBzj5Z6/cljlPIxkQVWyAru42jqjl4IhE8UiEGwwD2vGA7g er2RhvZywKmfRw0IJ3cBB83Qvad5gT3Ezkam5zUv8e0tx9BIAsOr3eLmD9q/Qkn1 c862USjQMpm73I2oE286VoQxb8ZWCQqotH2YNtO/uJkbq19IYeY= -----END CERTIFICATE-----Generated at Sun May 11 17:25:36 2025 by rpki-client