$ rpki-client -vvf repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.mft File: 7DA5F7B42931EE3A414B9A5B7996703DF70BD897.mft (raw, json) Hash identifier: IDVQ/Oso/bvVF0LIxhL/7w/2HzJC8cX3y19RwqGdBO8= Subject key identifier: F9:80:6C:3C:25:34:C3:98:60:E5:C3:D9:A0:C5:6F:C9:5F:2C:A3:FB Authority key identifier: 7D:A5:F7:B4:29:31:EE:3A:41:4B:9A:5B:79:96:70:3D:F7:0B:D8:97 Certificate issuer: /CN=7DA5F7B42931EE3A414B9A5B7996703DF70BD897 Certificate serial: 6FBA9C8599F95D44DD4945C1A67D1696D0A770B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.mft Manifest number: 0195 Signing time: Thu 08 May 2025 17:50:47 +0000 Manifest this update: Thu 08 May 2025 17:45:47 +0000 Manifest next update: Sun 11 May 2025 21:08:47 +0000 Files and hashes: 1: 3130332e32372e3139332e302f32342d3234203d3e20313530323632.roa (hash: DIKWNEryKaLoYGYF33QjHgw88mY9IHI7dTm6jY/RF2g=) 2: 7DA5F7B42931EE3A414B9A5B7996703DF70BD897.crl (hash: pFmX+hHYk6LydrMkWl3vhvg1Dk3G6+gLv4+p+Ws1uTA=) 3: 3130332e32372e3139322e302f32332d3233203d3e20313530323632.roa (hash: BnJZN8kM3S7TwdBig6pEraKaEILe1NjioWa2vU9OOYk=) 4: 3130332e32372e3139322e302f32342d3234203d3e20313530323632.roa (hash: +MyXIra1tEzUh3Bqp100pCTB+NpiC7GT2NfbRpY5B8s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.crl rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 15:40:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:ba:9c:85:99:f9:5d:44:dd:49:45:c1:a6:7d:16:96:d0:a7:70:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7DA5F7B42931EE3A414B9A5B7996703DF70BD897 Validity Not Before: May 8 17:45:47 2025 GMT Not After : May 11 21:08:47 2025 GMT Subject: CN=F9806C3C2534C39860E5C3D9A0C56FC95F2CA3FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:4f:9d:9c:ba:ae:73:64:bc:a0:84:a9:b0:e7: 19:74:64:54:01:4b:62:49:84:83:d2:b1:4d:f0:23: 23:df:f3:bb:df:a9:45:e1:93:62:b6:eb:28:b7:57: ea:bc:cc:3a:82:14:4c:7b:ef:db:bd:a4:b1:6d:c4: 98:da:84:b0:de:d5:c2:d4:d7:cd:da:fb:e1:24:db: 97:94:97:5a:dd:8e:78:15:93:72:c1:e5:5e:07:93: bf:42:21:0b:34:3e:98:7e:e5:e7:19:fa:46:4a:2e: 7e:1d:93:34:2e:98:bc:59:01:b6:5f:62:2d:a6:38: db:21:98:ba:d9:41:6a:c2:98:d4:d8:9e:15:1f:cd: fe:ae:c1:da:d9:04:5f:23:fa:cd:aa:a9:2e:d8:d6: 92:1c:be:af:24:e3:3e:1a:96:80:c0:c3:4e:6f:4e: c9:50:6d:21:83:41:9d:12:ef:36:d0:7b:a5:67:2d: 24:03:6d:a6:8b:f0:40:c5:8b:a1:bb:0f:a0:b9:81: 3b:dc:94:52:27:6c:63:e0:3d:c8:b9:86:59:62:21: ae:a3:02:5f:68:f3:6c:39:93:30:4c:b3:7c:ec:b0: ee:d5:16:46:95:1f:45:9f:4b:39:0c:80:4a:7a:00: 94:b9:52:1b:a3:73:52:8e:2e:9e:ae:a0:ec:c6:9b: 50:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:80:6C:3C:25:34:C3:98:60:E5:C3:D9:A0:C5:6F:C9:5F:2C:A3:FB X509v3 Authority Key Identifier: keyid:7D:A5:F7:B4:29:31:EE:3A:41:4B:9A:5B:79:96:70:3D:F7:0B:D8:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4227b176-4c17-4244-badf-f496bcb15e20/0/7DA5F7B42931EE3A414B9A5B7996703DF70BD897.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:9a:99:00:25:85:84:f7:70:77:50:af:b6:11:43:75:45:7f: e6:0b:21:9d:63:8e:a8:c6:c0:56:7b:fd:c2:e5:9e:9a:b4:3b: 5e:68:f7:fa:c7:7c:20:8c:38:2d:52:28:65:f0:e3:c9:cf:65: 52:bf:6f:61:30:8b:9b:b9:74:58:f6:86:e2:20:3a:38:b0:cf: a0:db:76:25:c5:15:02:e5:8e:eb:9d:02:d9:53:fe:60:09:9a: 5c:ed:70:b7:89:bb:c1:e8:fa:30:2c:80:b4:bb:60:7f:77:2e: 71:d8:18:8a:9f:65:48:f8:29:d8:72:7e:e0:e8:7e:45:dd:e4: f3:ca:03:88:aa:50:28:94:a2:21:f1:1d:1c:60:70:92:a1:d7: 81:6f:a7:e0:f5:a3:7c:3c:9f:ba:26:4b:ff:ed:39:d8:78:a5: 3e:02:fe:18:e1:6b:de:fb:7b:30:e2:1f:15:82:96:59:c8:e7: 47:39:4d:0b:63:e1:c8:0d:0f:9d:10:4b:03:72:30:0d:ea:eb: 5a:2e:f3:51:c4:bd:24:21:ff:26:6f:de:ed:45:3b:da:86:fc: 3f:84:a3:6a:67:dd:db:18:dd:30:f6:2e:f5:c1:0c:4c:99:e2: 89:8f:bf:aa:32:40:7d:cc:13:07:31:7b:a1:83:8d:b9:8f:f1: 44:5a:c6:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb7qchZn5XUTdSUXBpn0WltCncLgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0RBNUY3QjQyOTMxRUUzQTQxNEI5QTVCNzk5NjcwM0RG NzBCRDg5NzAeFw0yNTA1MDgxNzQ1NDdaFw0yNTA1MTEyMTA4NDdaMDMxMTAvBgNV BAMTKEY5ODA2QzNDMjUzNEMzOTg2MEU1QzNEOUEwQzU2RkM5NUYyQ0EzRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeT52cuq5zZLyghKmw5xl0ZFQB S2JJhIPSsU3wIyPf87vfqUXhk2K26yi3V+q8zDqCFEx779u9pLFtxJjahLDe1cLU 183a++Ek25eUl1rdjngVk3LB5V4Hk79CIQs0Pph+5ecZ+kZKLn4dkzQumLxZAbZf Yi2mONshmLrZQWrCmNTYnhUfzf6uwdrZBF8j+s2qqS7Y1pIcvq8k4z4aloDAw05v TslQbSGDQZ0S7zbQe6VnLSQDbaaL8EDFi6G7D6C5gTvclFInbGPgPci5hlliIa6j Al9o82w5kzBMs3zssO7VFkaVH0WfSzkMgEp6AJS5Uhujc1KOLp6uoOzGm1DZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+YBsPCU0w5hg5cPZoMVvyV8so/swHwYDVR0j BBgwFoAUfaX3tCkx7jpBS5pbeZZwPfcL2JcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 MjI3YjE3Ni00YzE3LTQyNDQtYmFkZi1mNDk2YmNiMTVlMjAvMC83REE1RjdCNDI5 MzFFRTNBNDE0QjlBNUI3OTk2NzAzREY3MEJEODk3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0RBNUY3QjQyOTMxRUUzQTQxNEI5QTVCNzk5NjcwM0RGNzBC RDg5Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDIyN2IxNzYtNGMxNy00MjQ0LWJh ZGYtZjQ5NmJjYjE1ZTIwLzAvN0RBNUY3QjQyOTMxRUUzQTQxNEI5QTVCNzk5Njcw M0RGNzBCRDg5Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKGamQAlhYT3cHdQr7YRQ3VFf+YLIZ1jjqjG wFZ7/cLlnpq0O15o9/rHfCCMOC1SKGXw48nPZVK/b2Ewi5u5dFj2huIgOjiwz6Db diXFFQLljuudAtlT/mAJmlztcLeJu8Ho+jAsgLS7YH93LnHYGIqfZUj4KdhyfuDo fkXd5PPKA4iqUCiUoiHxHRxgcJKh14Fvp+D1o3w8n7omS//tOdh4pT4C/hjha977 ezDiHxWCllnI50c5TQtj4cgND50QSwNyMA3q61ou81HEvSQh/yZv3u1FO9qG/D+E o2pn3dsY3TD2LvXBDEyZ4omPv6oyQH3MEwcxe6GDjbmP8URaxv0= -----END CERTIFICATE-----Generated at Thu May 8 20:41:35 2025 by rpki-client