$ rpki-client -vvf repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft File: 7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft (raw, json) Hash identifier: 05Cac/7ieAOXbBq0QyJ4jVsrHoMQFEWNdh/B+dMxXUM= Subject key identifier: 6C:1F:64:46:03:2C:15:6B:EC:2E:4F:B4:3F:61:A2:B4:9A:67:DB:15 Authority key identifier: 7E:8D:E1:54:9E:89:D4:B4:80:B5:56:69:5C:AB:E9:CE:7F:DF:5F:24 Certificate issuer: /CN=7E8DE1549E89D4B480B556695CABE9CE7FDF5F24 Certificate serial: 2BC83C638395D58806D4AAC0B415D09C8E2CF8D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft Manifest number: 48 Signing time: Sat 10 May 2025 12:11:00 +0000 Manifest this update: Sat 10 May 2025 12:06:00 +0000 Manifest next update: Tue 13 May 2025 23:21:00 +0000 Files and hashes: 1: 7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.crl (hash: A7bnyNEjmujFnFAcKWT3LEZydVIOZ1OkAKROnzeeUSc=) 2: 323030313a6466343a396134303a3a2f34382d3438203d3e20313533313439.roa (hash: TtLF2mCHfSEfxKosRTbgY2pYRo+Ox0NN2gzHDI6VY/0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.crl rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 23:21:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:c8:3c:63:83:95:d5:88:06:d4:aa:c0:b4:15:d0:9c:8e:2c:f8:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7E8DE1549E89D4B480B556695CABE9CE7FDF5F24 Validity Not Before: May 10 12:06:00 2025 GMT Not After : May 13 23:21:00 2025 GMT Subject: CN=6C1F6446032C156BEC2E4FB43F61A2B49A67DB15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:00:b3:11:b2:77:bb:17:5d:c8:5f:c2:8a:88: 8f:a7:b4:ab:35:4e:72:12:d2:7a:79:01:a7:08:d9: da:5f:a0:d3:f6:15:5c:47:44:e3:5c:c0:13:9e:41: 5f:63:5b:07:58:69:ce:d4:ef:1c:94:ae:12:6c:46: b3:f2:29:e5:d7:91:8b:36:0f:83:20:01:bb:d9:a1: cf:bb:66:2d:02:c4:4f:14:70:4f:41:1c:c2:82:09: 5c:ec:d9:6f:27:95:55:7b:0d:68:9c:6f:3b:e3:2d: 0f:b2:d3:f4:bc:19:6d:5d:af:e9:96:35:d6:cf:ac: bb:f2:f0:82:dd:02:7e:6c:43:ad:d5:c9:ae:48:7f: 96:be:c2:9f:54:48:48:e3:6d:fd:63:cd:08:d2:d0: ef:2d:33:ff:a0:c3:af:df:96:67:19:59:ed:62:df: 91:69:21:e5:13:37:b1:fc:d2:d2:79:89:40:11:d9: b4:2b:83:c7:83:91:52:6f:0f:52:aa:7b:f5:ed:a7: d0:e4:31:df:7f:eb:cb:2c:9d:a3:14:8f:91:57:c4: 44:a2:e5:3a:28:df:10:35:ba:d8:f2:a5:53:47:7c: 06:72:fa:af:e0:03:e7:96:c3:09:95:2e:0f:0c:4e: 07:c2:db:27:52:c2:15:3a:54:ed:88:46:51:10:a2: ec:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:1F:64:46:03:2C:15:6B:EC:2E:4F:B4:3F:61:A2:B4:9A:67:DB:15 X509v3 Authority Key Identifier: keyid:7E:8D:E1:54:9E:89:D4:B4:80:B5:56:69:5C:AB:E9:CE:7F:DF:5F:24 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33dc034f-3823-48af-953d-aaa873b0fb6a/1/7E8DE1549E89D4B480B556695CABE9CE7FDF5F24.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ae:10:97:0c:d4:ee:e7:07:33:e7:28:f0:4e:b4:ab:2b:84:33: 3d:96:3d:ca:20:0a:25:09:89:99:b1:58:03:b9:99:95:19:59: f7:c3:68:89:0c:19:d9:a8:2d:2c:2b:b1:d2:44:1d:5d:6e:d6: b5:cf:66:07:8e:3a:f0:f0:65:40:e3:a4:c7:34:a6:1b:e4:cb: 82:ff:d2:12:96:df:6b:63:4c:16:eb:d9:3c:20:6a:cd:ff:b3: 7b:fc:f0:da:e8:c3:9c:26:de:b6:b8:8f:44:76:c6:e6:9b:6f: b6:92:3e:d0:d3:7e:de:ed:4c:a5:a9:e6:53:88:d8:71:fc:00: e8:c7:1f:4c:e5:9c:87:5e:6e:55:77:bd:2e:18:40:8f:b8:9e: dd:82:67:12:47:68:64:fc:b6:81:74:04:b6:54:cc:4c:7f:93: 09:40:c7:10:6b:dd:1b:21:c4:5b:ac:8b:a2:5b:db:b7:c0:05: 0e:e2:89:86:5e:4a:10:d2:4e:88:8a:ec:d9:ad:00:49:c0:95: 64:85:9d:c2:c6:e2:99:91:c4:80:fc:53:03:f8:30:33:b0:05: fc:01:17:1c:be:52:17:da:f1:f0:73:47:0d:b1:a8:9c:e4:e9: 2c:85:6c:47:a5:e1:36:85:b1:49:ac:14:a6:52:e6:6a:cc:aa: 9a:d2:82:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK8g8Y4OV1YgG1KrAtBXQnI4s+NUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0U4REUxNTQ5RTg5RDRCNDgwQjU1NjY5NUNBQkU5Q0U3 RkRGNUYyNDAeFw0yNTA1MTAxMjA2MDBaFw0yNTA1MTMyMzIxMDBaMDMxMTAvBgNV BAMTKDZDMUY2NDQ2MDMyQzE1NkJFQzJFNEZCNDNGNjFBMkI0OUE2N0RCMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTALMRsne7F13IX8KKiI+ntKs1 TnIS0np5AacI2dpfoNP2FVxHRONcwBOeQV9jWwdYac7U7xyUrhJsRrPyKeXXkYs2 D4MgAbvZoc+7Zi0CxE8UcE9BHMKCCVzs2W8nlVV7DWicbzvjLQ+y0/S8GW1dr+mW NdbPrLvy8ILdAn5sQ63Vya5If5a+wp9USEjjbf1jzQjS0O8tM/+gw6/flmcZWe1i 35FpIeUTN7H80tJ5iUAR2bQrg8eDkVJvD1Kqe/Xtp9DkMd9/68ssnaMUj5FXxESi 5Too3xA1utjypVNHfAZy+q/gA+eWwwmVLg8MTgfC2ydSwhU6VO2IRlEQouytAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbB9kRgMsFWvsLk+0P2GitJpn2xUwHwYDVR0j BBgwFoAUfo3hVJ6J1LSAtVZpXKvpzn/fXyQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2RjMDM0Zi0zODIzLTQ4YWYtOTUzZC1hYWE4NzNiMGZiNmEvMS83RThERTE1NDlF ODlENEI0ODBCNTU2Njk1Q0FCRTlDRTdGREY1RjI0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0U4REUxNTQ5RTg5RDRCNDgwQjU1NjY5NUNBQkU5Q0U3RkRG NUYyNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNkYzAzNGYtMzgyMy00OGFmLTk1 M2QtYWFhODczYjBmYjZhLzEvN0U4REUxNTQ5RTg5RDRCNDgwQjU1NjY5NUNBQkU5 Q0U3RkRGNUYyNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK4QlwzU7ucHM+co8E60qyuEMz2WPcogCiUJ iZmxWAO5mZUZWffDaIkMGdmoLSwrsdJEHV1u1rXPZgeOOvDwZUDjpMc0phvky4L/ 0hKW32tjTBbr2Twgas3/s3v88Nrow5wm3ra4j0R2xuabb7aSPtDTft7tTKWp5lOI 2HH8AOjHH0zlnIdeblV3vS4YQI+4nt2CZxJHaGT8toF0BLZUzEx/kwlAxxBr3Rsh xFusi6Jb27fABQ7iiYZeShDSToiK7NmtAEnAlWSFncLG4pmRxID8UwP4MDOwBfwB Fxy+Uhfa8fBzRw2xqJzk6SyFbEel4TaFsUmsFKZS5mrMqprSgoA= -----END CERTIFICATE-----Generated at Sun May 11 08:35:21 2025 by rpki-client