$ rpki-client -vvf repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft File: 7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft (raw, json) Hash identifier: maQrxRV8Xv6fdxoo4uL0f4Z0TmlvJeLVrv1YLh7w2C4= Subject key identifier: B9:E8:1C:9A:8D:AB:DC:BF:91:D5:4B:5C:7E:67:D0:FB:BD:2D:3E:1D Authority key identifier: 7F:EF:6B:F5:3F:A3:12:2A:0F:09:CE:F4:B4:08:E1:37:92:A1:45:45 Certificate issuer: /CN=7FEF6BF53FA3122A0F09CEF4B408E13792A14545 Certificate serial: 10D446EB4D5FAEFBD6E756D3B541BD59D6F39CB4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.cer Subject info access: rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft Manifest number: 01D4 Signing time: Tue 13 May 2025 22:21:31 +0000 Manifest this update: Tue 13 May 2025 22:16:31 +0000 Manifest next update: Sat 17 May 2025 08:33:31 +0000 Files and hashes: 1: 3130332e3136372e3130352e302f32342d3234203d3e203338333230.roa (hash: t5DmPirQU+jLx9aHjmb/pgwv+a8S0p8w/q4YuXRMJQI=) 2: 7FEF6BF53FA3122A0F09CEF4B408E13792A14545.crl (hash: eUU98Mi+zopJDbrTdhZf9x7mUvwwAs6inBhkT8qyOMM=) 3: 3130332e3136372e3130342e302f32342d3234203d3e20313339343130.roa (hash: cilQSsMRfqwA9LOmx5CPo41uuLBHWQ7Qq5S49MHRn2E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.crl rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 17 May 2025 08:33:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:d4:46:eb:4d:5f:ae:fb:d6:e7:56:d3:b5:41:bd:59:d6:f3:9c:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7FEF6BF53FA3122A0F09CEF4B408E13792A14545 Validity Not Before: May 13 22:16:31 2025 GMT Not After : May 17 08:33:31 2025 GMT Subject: CN=B9E81C9A8DABDCBF91D54B5C7E67D0FBBD2D3E1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cb:13:15:19:68:68:6f:2b:df:fe:c1:06:87: df:20:dd:4b:97:36:5d:fc:d1:57:20:ae:44:08:f6: a7:80:07:b6:8a:5c:06:b2:06:e3:66:e0:86:1f:89: f4:91:be:13:95:ce:28:d9:a9:b2:99:70:a4:76:55: a7:e8:0f:bb:a4:b2:3b:c1:53:9f:b4:2e:9a:b9:cf: f0:b5:f1:0a:ff:24:ee:2f:c3:30:89:c9:84:c9:53: fb:2d:6b:fb:3e:1c:c6:e9:0f:e8:f7:c3:ca:1d:7c: 59:19:91:da:77:f4:98:35:f1:04:bf:0a:6c:c5:9a: af:56:95:a3:5b:6d:7e:a0:c9:d0:53:6d:9f:d2:f1: 24:a3:a3:8c:3a:6c:53:09:29:36:7a:0c:3a:9a:b1: de:49:47:00:39:54:12:8e:e3:f8:cf:ad:13:3e:f1: c3:80:8c:54:42:c8:c9:f5:1d:dd:79:d2:58:0f:95: 03:2a:6f:ac:c4:48:2e:c7:3b:2a:ac:95:b5:e0:1a: 4f:4c:20:b3:96:a9:93:c1:56:0a:63:47:6d:6e:45: ae:3e:8e:1a:98:53:b6:7a:1d:05:4b:a5:7b:0f:18: ea:df:61:86:b0:23:bc:22:c3:3e:68:85:3a:b5:46: d4:09:07:da:be:da:25:fb:3d:4b:37:33:7f:50:77: 1a:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:E8:1C:9A:8D:AB:DC:BF:91:D5:4B:5C:7E:67:D0:FB:BD:2D:3E:1D X509v3 Authority Key Identifier: keyid:7F:EF:6B:F5:3F:A3:12:2A:0F:09:CE:F4:B4:08:E1:37:92:A1:45:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:1b:46:15:a2:13:0a:8c:43:d4:fc:0d:36:54:e6:65:28:af: 78:c0:2f:59:a8:58:28:0a:d0:e2:b8:72:e5:cb:60:a8:96:b9: 13:b2:0e:94:45:a7:a7:be:59:5f:1b:56:0c:3a:69:8e:36:14: 3b:b9:b2:05:7a:e7:a6:9f:0f:7a:3b:5d:4f:89:db:00:ea:3f: dd:1f:e2:18:d2:2f:f7:aa:fc:2a:2a:45:25:41:79:50:22:db: 76:55:ba:96:9d:e4:bb:ec:8f:12:bc:8a:b5:73:14:21:10:7e: ed:1d:c2:7b:99:48:c0:4e:48:dd:8c:1d:3b:37:0f:64:ec:1b: 6a:18:76:f9:99:e7:64:94:82:14:83:c1:9c:25:86:7b:69:61: 9a:9d:fc:4f:77:67:72:3f:e6:41:58:70:e7:c9:49:5b:41:11: 56:e8:8c:9d:80:29:44:d2:81:99:27:47:76:2f:9a:7b:5a:ec: cd:c0:7c:c5:d8:c9:46:b5:09:28:ea:b8:2e:2b:9a:3d:f1:42: fc:69:dc:f3:e2:ac:51:2d:85:c1:00:68:da:a0:44:d8:f4:c7: 48:f8:3c:b6:d5:86:da:2c:f7:59:90:2f:56:c9:02:22:42:29: 3d:6e:19:de:e6:71:08:24:10:bf:47:42:d4:88:94:d8:c0:75: 0e:bd:f6:d1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUENRG601frvvW51bTtUG9WdbznLQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ZFRjZCRjUzRkEzMTIyQTBGMDlDRUY0QjQwOEUxMzc5 MkExNDU0NTAeFw0yNTA1MTMyMjE2MzFaFw0yNTA1MTcwODMzMzFaMDMxMTAvBgNV BAMTKEI5RTgxQzlBOERBQkRDQkY5MUQ1NEI1QzdFNjdEMEZCQkQyRDNFMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2yxMVGWhobyvf/sEGh98g3UuX Nl380VcgrkQI9qeAB7aKXAayBuNm4IYfifSRvhOVzijZqbKZcKR2VafoD7uksjvB U5+0Lpq5z/C18Qr/JO4vwzCJyYTJU/sta/s+HMbpD+j3w8odfFkZkdp39Jg18QS/ CmzFmq9WlaNbbX6gydBTbZ/S8SSjo4w6bFMJKTZ6DDqasd5JRwA5VBKO4/jPrRM+ 8cOAjFRCyMn1Hd150lgPlQMqb6zESC7HOyqslbXgGk9MILOWqZPBVgpjR21uRa4+ jhqYU7Z6HQVLpXsPGOrfYYawI7wiwz5ohTq1RtQJB9q+2iX7PUs3M39QdxodAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuegcmo2r3L+R1UtcfmfQ+70tPh0wHwYDVR0j BBgwFoAUf+9r9T+jEioPCc70tAjhN5KhRUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MDNlYmFiYi05OTlmLTRmM2UtODRjMS1iZjI3OWJmZTE3ODcvMC83RkVGNkJGNTNG QTMxMjJBMEYwOUNFRjRCNDA4RTEzNzkyQTE0NTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0ZFRjZCRjUzRkEzMTIyQTBGMDlDRUY0QjQwOEUxMzc5MkEx NDU0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzAzZWJhYmItOTk5Zi00ZjNlLTg0 YzEtYmYyNzliZmUxNzg3LzAvN0ZFRjZCRjUzRkEzMTIyQTBGMDlDRUY0QjQwOEUx Mzc5MkExNDU0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJEbRhWiEwqMQ9T8DTZU5mUor3jAL1moWCgK 0OK4cuXLYKiWuROyDpRFp6e+WV8bVgw6aY42FDu5sgV656afD3o7XU+J2wDqP90f 4hjSL/eq/CoqRSVBeVAi23ZVupad5LvsjxK8irVzFCEQfu0dwnuZSMBOSN2MHTs3 D2TsG2oYdvmZ52SUghSDwZwlhntpYZqd/E93Z3I/5kFYcOfJSVtBEVbojJ2AKUTS gZknR3Yvmnta7M3AfMXYyUa1CSjquC4rmj3xQvxp3PPirFEthcEAaNqgRNj0x0j4 PLbVhtos91mQL1bJAiJCKT1uGd7mcQgkEL9HQtSIlNjAdQ699tE= -----END CERTIFICATE-----Generated at Wed May 14 16:20:52 2025 by rpki-client