$ rpki-client -vvf repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft File: 7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft (raw, json) Hash identifier: t+NeBQXNrSCt85/qz4xt4ac8zaXcVP6erf3f62rqsH8= Subject key identifier: 30:3F:8C:56:58:9D:21:E5:83:D3:F7:D9:B1:57:88:70:29:8C:8D:3F Authority key identifier: 7C:4D:FD:78:91:4D:C1:F6:61:30:F2:56:AE:69:D9:FA:84:39:48:DC Certificate issuer: /CN=7C4DFD78914DC1F66130F256AE69D9FA843948DC Certificate serial: 42A10D3187C2F109C798407192BA2CA9A8E4619F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4DFD78914DC1F66130F256AE69D9FA843948DC.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft Manifest number: 54 Signing time: Thu 08 May 2025 08:21:10 +0000 Manifest this update: Thu 08 May 2025 08:16:10 +0000 Manifest next update: Sun 11 May 2025 15:06:10 +0000 Files and hashes: 1: 7C4DFD78914DC1F66130F256AE69D9FA843948DC.crl (hash: igBzcOf0vua710RqmpZR/1RohJ3pcYfIUQCyk6pjwZQ=) 2: 3136302e3138372e3133362e302f32342d3234203d3e20313533313233.roa (hash: MrL5ngdoehaZ0S9ZzYnojIzhLodzexCxemBrK2FNZbg=) 3: 3136302e3138372e3133372e302f32342d3234203d3e20313533313233.roa (hash: K2vhrHfup1k3rD7yPF7cwMjAiR3G2VX1cn+X8HiRdG0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.crl rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4DFD78914DC1F66130F256AE69D9FA843948DC.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 15:06:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:a1:0d:31:87:c2:f1:09:c7:98:40:71:92:ba:2c:a9:a8:e4:61:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C4DFD78914DC1F66130F256AE69D9FA843948DC Validity Not Before: May 8 08:16:10 2025 GMT Not After : May 11 15:06:10 2025 GMT Subject: CN=303F8C56589D21E583D3F7D9B1578870298C8D3F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:cd:8f:b2:c3:68:04:d2:b0:e6:41:c3:35:29: e3:b0:92:6d:13:05:b5:e3:71:c2:47:09:7b:f4:65: 94:72:30:be:4b:7e:66:eb:b6:aa:ef:f7:29:b2:76: 2f:27:c5:65:e9:56:99:e7:08:0f:ad:8a:e0:0c:74: 3a:19:ed:13:3b:d9:1d:f2:a7:2d:7c:ee:e6:b1:9f: a5:3e:d5:31:cb:1f:ae:9b:e4:b6:66:ac:d9:dd:7d: d4:30:86:3b:f9:d0:2e:77:a8:79:3e:ac:b6:41:3c: f3:20:a9:80:ef:f6:73:c0:12:2a:24:51:1b:0d:61: 6d:45:1f:af:66:0d:93:10:a5:2d:39:04:92:36:21: 30:9b:26:5b:b4:85:7f:49:78:be:56:fc:46:3f:62: 01:b3:ae:19:3c:bf:37:26:bd:ae:fd:33:bc:05:62: 9a:03:2b:f4:50:7f:f8:c0:e0:b5:ab:9b:76:d9:2b: 68:bf:4b:a6:58:7c:10:d7:86:67:94:27:0d:ac:7a: 7a:2e:3f:23:da:42:10:75:77:40:18:eb:f5:57:90: 06:4a:2c:21:d2:33:ee:b4:0d:00:a0:23:23:ef:18: b8:7d:27:b8:54:b2:90:d0:29:47:cc:15:83:6a:cf: c6:54:93:95:f4:f1:e5:1d:2b:3f:97:3d:3e:3b:01: 5c:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:3F:8C:56:58:9D:21:E5:83:D3:F7:D9:B1:57:88:70:29:8C:8D:3F X509v3 Authority Key Identifier: keyid:7C:4D:FD:78:91:4D:C1:F6:61:30:F2:56:AE:69:D9:FA:84:39:48:DC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4DFD78914DC1F66130F256AE69D9FA843948DC.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a923397-8cf8-4cef-8856-0d268d73edb1/0/7C4DFD78914DC1F66130F256AE69D9FA843948DC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:e4:c3:0c:a9:05:d2:3c:15:2a:93:af:43:db:94:d5:0c:66: 8f:db:2c:20:db:23:70:5f:bd:60:2a:ea:ee:1d:fa:b0:be:15: 7d:11:3e:4f:51:7d:55:dd:3c:eb:cd:d4:0d:4e:e4:af:2c:69: 31:20:5c:7c:dc:c0:23:76:00:6e:f5:1a:89:5e:e1:d9:04:17: ad:a2:e1:e0:74:f4:76:5c:26:68:e7:a2:d7:b7:d1:80:47:c4: fb:a3:61:9a:8b:87:55:47:eb:90:aa:a3:18:9c:81:b9:ba:85: 34:c7:6c:c6:0f:59:b6:ab:02:7a:88:6a:29:0f:37:7e:44:36: 4d:46:72:c1:75:10:e7:98:3d:14:82:f7:a6:5a:f8:a2:ee:f2: a4:f0:80:4e:50:51:1e:c5:bb:74:c7:01:54:a3:5b:03:b6:99: ed:44:15:62:80:7f:dd:af:4e:94:11:cc:2d:ed:5c:ab:0d:06: 23:95:24:21:02:34:ac:44:97:02:a6:38:0a:02:12:d1:08:9b: 72:96:14:08:ed:4f:67:ba:f0:8b:b3:58:16:f7:39:52:da:d3: c0:de:20:c4:91:fb:fe:9c:a0:39:92:8e:cf:cd:37:7a:1d:74: 96:22:4e:2e:2d:9b:13:04:e4:9e:e0:05:6e:75:e8:07:86:06: 65:90:31:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQqENMYfC8QnHmEBxkrosqajkYZ8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M0REZENzg5MTREQzFGNjYxMzBGMjU2QUU2OUQ5RkE4 NDM5NDhEQzAeFw0yNTA1MDgwODE2MTBaFw0yNTA1MTExNTA2MTBaMDMxMTAvBgNV BAMTKDMwM0Y4QzU2NTg5RDIxRTU4M0QzRjdEOUIxNTc4ODcwMjk4QzhEM0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2zY+yw2gE0rDmQcM1KeOwkm0T BbXjccJHCXv0ZZRyML5Lfmbrtqrv9ymydi8nxWXpVpnnCA+tiuAMdDoZ7RM72R3y py187uaxn6U+1THLH66b5LZmrNndfdQwhjv50C53qHk+rLZBPPMgqYDv9nPAEiok URsNYW1FH69mDZMQpS05BJI2ITCbJlu0hX9JeL5W/EY/YgGzrhk8vzcmva79M7wF YpoDK/RQf/jA4LWrm3bZK2i/S6ZYfBDXhmeUJw2senouPyPaQhB1d0AY6/VXkAZK LCHSM+60DQCgIyPvGLh9J7hUspDQKUfMFYNqz8ZUk5X08eUdKz+XPT47AVx1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMD+MVlidIeWD0/fZsVeIcCmMjT8wHwYDVR0j BBgwFoAUfE39eJFNwfZhMPJWrmnZ+oQ5SNwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YTkyMzM5Ny04Y2Y4LTRjZWYtODg1Ni0wZDI2OGQ3M2VkYjEvMC83QzRERkQ3ODkx NERDMUY2NjEzMEYyNTZBRTY5RDlGQTg0Mzk0OERDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0M0REZENzg5MTREQzFGNjYxMzBGMjU2QUU2OUQ5RkE4NDM5 NDhEQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2E5MjMzOTctOGNmOC00Y2VmLTg4 NTYtMGQyNjhkNzNlZGIxLzAvN0M0REZENzg5MTREQzFGNjYxMzBGMjU2QUU2OUQ5 RkE4NDM5NDhEQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABfkwwypBdI8FSqTr0PblNUMZo/bLCDbI3Bf vWAq6u4d+rC+FX0RPk9RfVXdPOvN1A1O5K8saTEgXHzcwCN2AG71Gole4dkEF62i 4eB09HZcJmjnote30YBHxPujYZqLh1VH65Cqoxicgbm6hTTHbMYPWbarAnqIaikP N35ENk1GcsF1EOeYPRSC96Za+KLu8qTwgE5QUR7Fu3THAVSjWwO2me1EFWKAf92v TpQRzC3tXKsNBiOVJCECNKxElwKmOAoCEtEIm3KWFAjtT2e68IuzWBb3OVLa08De IMSR+/6coDmSjs/NN3oddJYiTi4tmxME5J7gBW516AeGBmWQMaU= -----END CERTIFICATE-----Generated at Fri May 9 16:59:06 2025 by rpki-client