$ rpki-client -vvf repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.mft File: 07087494011A8BD71E0AB56E4A29820B0C265D45.mft (raw, json) Hash identifier: N5DZtqzvLpmVUkvUZ1kkh4AQXDBCA65/VjXGEfLyA6k= Subject key identifier: 45:6D:9E:45:C9:0E:A8:64:2B:41:F6:EB:5A:33:0D:E0:49:E8:ED:95 Authority key identifier: 07:08:74:94:01:1A:8B:D7:1E:0A:B5:6E:4A:29:82:0B:0C:26:5D:45 Certificate issuer: /CN=07087494011A8BD71E0AB56E4A29820B0C265D45 Certificate serial: 169B374AE7A11563C9CAD7096FFF0E86BA7E9A87 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07087494011A8BD71E0AB56E4A29820B0C265D45.cer Subject info access: rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.mft Manifest number: 22 Signing time: Fri 09 May 2025 05:01:18 +0000 Manifest this update: Fri 09 May 2025 04:56:18 +0000 Manifest next update: Mon 12 May 2025 14:53:18 +0000 Files and hashes: 1: 323030313a6466303a633330303a3a2f34382d3438203d3e20313336303939.roa (hash: 7vK5kAAznF/vtGtOCVNcNBhvktxpMswh2ctIXuNsU5A=) 2: 3130332e38392e3234382e302f32342d3234203d3e20313336303939.roa (hash: nJDk2moXVJKOcLf/s2ENaD41Lvuu7Wv1fbgDq/e+7rk=) 3: 07087494011A8BD71E0AB56E4A29820B0C265D45.crl (hash: 9CTSxRADVYLoFKTM7Vjdki2j8BigWM9nEsCtgVjrCHk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.crl rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07087494011A8BD71E0AB56E4A29820B0C265D45.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 14:53:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:9b:37:4a:e7:a1:15:63:c9:ca:d7:09:6f:ff:0e:86:ba:7e:9a:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07087494011A8BD71E0AB56E4A29820B0C265D45 Validity Not Before: May 9 04:56:18 2025 GMT Not After : May 12 14:53:18 2025 GMT Subject: CN=456D9E45C90EA8642B41F6EB5A330DE049E8ED95 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e6:f0:97:2f:35:91:45:10:8b:b8:59:c7:ae: d9:c4:23:fa:96:ed:25:f8:23:a0:84:1f:81:e0:3b: 1e:3e:68:75:bd:6a:4c:2d:cc:ac:e1:bc:98:d1:b5: 83:12:bf:ac:6a:0c:1b:0c:d3:cb:9b:bb:c6:8c:b0: 62:17:7e:20:60:c1:8f:42:55:85:8a:08:85:e3:9b: b1:30:61:b5:9e:d0:a9:47:17:b1:41:e7:97:28:6f: 6e:12:69:be:72:02:0f:ec:59:e0:1e:b5:62:7d:c2: 03:55:de:90:df:82:c0:aa:8e:ac:99:e8:50:2c:d3: 13:6d:2d:f9:c1:05:b5:ac:d2:fa:55:30:ea:db:14: 1e:2a:8f:94:40:c0:43:70:f0:9d:68:f5:07:68:64: 2e:35:82:47:78:ea:c8:b5:1a:98:9b:5c:d8:ab:a0: 44:0e:fd:f7:8e:5d:e8:15:4a:a1:ce:0b:ce:37:3b: 59:b5:a6:c9:a0:d9:cf:85:10:53:81:53:88:99:05: ea:dc:83:77:ce:62:75:c7:3f:b5:ad:b6:9e:db:39: d6:0c:53:b6:3f:5b:82:e8:f0:51:da:24:3d:b7:e0: 67:13:6e:83:1d:67:64:fc:25:f1:58:14:a9:71:8a: ad:9a:46:62:3a:a4:f4:f7:bc:f9:2e:bb:ca:6b:5f: be:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:6D:9E:45:C9:0E:A8:64:2B:41:F6:EB:5A:33:0D:E0:49:E8:ED:95 X509v3 Authority Key Identifier: keyid:07:08:74:94:01:1A:8B:D7:1E:0A:B5:6E:4A:29:82:0B:0C:26:5D:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07087494011A8BD71E0AB56E4A29820B0C265D45.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/41405545-c35d-4de1-9618-44b5f417a303/0/07087494011A8BD71E0AB56E4A29820B0C265D45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:67:d6:bb:c7:e3:a2:fc:68:c5:bc:52:92:7a:7b:b1:a4:91: b5:20:6c:90:a0:60:17:ee:5b:58:02:f6:8a:df:57:92:2f:06: 93:95:7f:a4:41:e0:4a:c9:70:e3:fa:9f:b5:1a:9c:b7:fb:08: f6:7b:72:59:2e:39:25:3d:ff:4a:53:87:24:a7:41:8a:5e:f2: a1:0b:eb:f5:29:34:c4:70:80:e4:5b:12:7c:52:ea:aa:04:4e: 44:ef:53:3b:7f:1a:b5:ea:93:72:25:29:07:89:75:e3:1e:ec: 81:d0:21:97:58:10:3d:8e:d1:00:c9:a7:4d:34:8f:95:bf:d5: 6d:c8:27:38:f7:e1:fc:a4:04:0d:a0:14:52:41:5b:ab:d0:02: 42:e5:d0:c8:d1:d5:90:45:ba:1e:ad:4c:e1:ad:13:e9:21:b7: 21:8e:17:d6:c5:8f:57:c8:0e:5f:cd:2c:85:ad:5a:c6:76:a1: 5c:0a:40:a5:fe:78:d2:26:92:26:cd:99:ff:e5:5e:a2:f2:ae: ee:de:ed:be:fc:59:51:ed:b9:4e:ea:4b:dd:4b:49:4e:2b:f4: df:82:13:d5:6c:c4:73:4e:7b:fb:05:9f:a2:c3:77:db:3f:3f: 59:99:cc:8e:14:9b:ba:8c:0d:df:69:71:50:b1:ad:8d:5a:b0: d2:7f:02:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFps3SuehFWPJytcJb/8Ohrp+mocwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDcwODc0OTQwMTFBOEJENzFFMEFCNTZFNEEyOTgyMEIw QzI2NUQ0NTAeFw0yNTA1MDkwNDU2MThaFw0yNTA1MTIxNDUzMThaMDMxMTAvBgNV BAMTKDQ1NkQ5RTQ1QzkwRUE4NjQyQjQxRjZFQjVBMzMwREUwNDlFOEVEOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF5vCXLzWRRRCLuFnHrtnEI/qW 7SX4I6CEH4HgOx4+aHW9akwtzKzhvJjRtYMSv6xqDBsM08ubu8aMsGIXfiBgwY9C VYWKCIXjm7EwYbWe0KlHF7FB55cob24Sab5yAg/sWeAetWJ9wgNV3pDfgsCqjqyZ 6FAs0xNtLfnBBbWs0vpVMOrbFB4qj5RAwENw8J1o9QdoZC41gkd46si1GpibXNir oEQO/feOXegVSqHOC843O1m1psmg2c+FEFOBU4iZBercg3fOYnXHP7Wttp7bOdYM U7Y/W4Lo8FHaJD234GcTboMdZ2T8JfFYFKlxiq2aRmI6pPT3vPkuu8prX75vAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURW2eRckOqGQrQfbrWjMN4Eno7ZUwHwYDVR0j BBgwFoAUBwh0lAEai9ceCrVuSimCCwwmXUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MTQwNTU0NS1jMzVkLTRkZTEtOTYxOC00NGI1ZjQxN2EzMDMvMC8wNzA4NzQ5NDAx MUE4QkQ3MUUwQUI1NkU0QTI5ODIwQjBDMjY1RDQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDcwODc0OTQwMTFBOEJENzFFMEFCNTZFNEEyOTgyMEIwQzI2 NUQ0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDE0MDU1NDUtYzM1ZC00ZGUxLTk2 MTgtNDRiNWY0MTdhMzAzLzAvMDcwODc0OTQwMTFBOEJENzFFMEFCNTZFNEEyOTgy MEIwQzI2NUQ0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE5n1rvH46L8aMW8UpJ6e7GkkbUgbJCgYBfu W1gC9orfV5IvBpOVf6RB4ErJcOP6n7UanLf7CPZ7clkuOSU9/0pThySnQYpe8qEL 6/UpNMRwgORbEnxS6qoETkTvUzt/GrXqk3IlKQeJdeMe7IHQIZdYED2O0QDJp000 j5W/1W3IJzj34fykBA2gFFJBW6vQAkLl0MjR1ZBFuh6tTOGtE+khtyGOF9bFj1fI Dl/NLIWtWsZ2oVwKQKX+eNImkibNmf/lXqLyru7e7b78WVHtuU7qS91LSU4r9N+C E9VsxHNOe/sFn6LDd9s/P1mZzI4Um7qMDd9pcVCxrY1asNJ/AjE= -----END CERTIFICATE-----Generated at Sun May 11 12:40:52 2025 by rpki-client