$ rpki-client -vvf repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft File: 7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft (raw, json) Hash identifier: 7S/eq19o6JqttPKpOopDCnmZhhBK99wE6AusrqGIQC8= Subject key identifier: 1E:94:57:C3:20:A1:ED:13:9F:89:6F:AF:EF:4C:D2:83:D7:09:CC:F3 Authority key identifier: 7C:D5:24:05:24:67:F2:2D:D8:E5:7E:02:A1:C9:9E:DE:5A:8C:F2:49 Certificate issuer: /CN=7CD524052467F22DD8E57E02A1C99EDE5A8CF249 Certificate serial: 5841543923A72752B35861F449347D0ED59881A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.cer Subject info access: rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft Manifest number: 04BC Signing time: Thu 08 May 2025 11:40:36 +0000 Manifest this update: Thu 08 May 2025 11:35:36 +0000 Manifest next update: Sun 11 May 2025 22:47:36 +0000 Files and hashes: 1: 3130332e3135302e34342e302f32332d3234203d3e20313430333838.roa (hash: ABeIW/RnclM54yqYnSoHY71c2QImQGA3EZXQf2h/ofE=) 2: 7CD524052467F22DD8E57E02A1C99EDE5A8CF249.crl (hash: Or7hgZzhSthubkKQJOB4rUmxj/hsvlkBwqpkGnQbDuA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.crl rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 15:40:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:41:54:39:23:a7:27:52:b3:58:61:f4:49:34:7d:0e:d5:98:81:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7CD524052467F22DD8E57E02A1C99EDE5A8CF249 Validity Not Before: May 8 11:35:36 2025 GMT Not After : May 11 22:47:36 2025 GMT Subject: CN=1E9457C320A1ED139F896FAFEF4CD283D709CCF3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:e8:d9:2f:9c:11:77:a1:25:2c:fa:0c:0c:92: 8e:96:98:6f:68:3b:41:57:5b:8e:ec:2a:6e:c1:44: 5f:4d:64:0f:8a:bc:9c:c4:ff:7e:9b:bd:1d:c1:bb: df:cb:ac:d8:4b:00:ad:08:95:e2:19:e2:c3:e3:06: 1a:5d:0b:7f:a4:dd:cf:73:f1:8c:cc:c2:bb:d1:dc: 18:58:4b:8e:25:a8:5c:aa:f0:e7:4c:3a:17:a8:8f: 44:36:af:c9:e5:3e:8c:8a:bb:f4:ac:a2:89:64:87: f2:ca:a4:96:74:31:a2:fd:c1:6f:dd:12:76:6b:df: 33:19:a6:52:fe:bc:d4:ef:d7:11:02:7e:45:a2:0e: d2:b8:d1:51:73:ec:5b:f9:7e:01:a4:9e:f5:90:d1: a5:b4:9c:91:a6:f6:96:dd:d6:64:df:b8:b7:e4:e0: 09:47:15:61:63:e3:40:9c:b3:ad:19:50:b2:1d:3d: cf:69:83:fb:01:ae:50:eb:22:0f:0c:21:e4:a7:05: 9f:b1:6f:ec:4b:39:2c:62:3b:e1:3f:bd:57:73:10: 38:e2:a4:4d:13:f8:95:09:d6:59:ca:da:d3:3d:cc: 28:07:0b:ec:30:e6:85:ee:5f:71:ea:57:d4:f0:bf: 55:e4:8c:7c:9d:34:96:73:66:3f:42:ac:4f:ea:a6: 33:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:94:57:C3:20:A1:ED:13:9F:89:6F:AF:EF:4C:D2:83:D7:09:CC:F3 X509v3 Authority Key Identifier: keyid:7C:D5:24:05:24:67:F2:2D:D8:E5:7E:02:A1:C9:9E:DE:5A:8C:F2:49 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/44eb6edd-f13b-49f0-ad87-6b8ee614dc8f/0/7CD524052467F22DD8E57E02A1C99EDE5A8CF249.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:70:d5:ed:ff:a6:41:6a:d8:0c:fe:38:83:28:23:28:59:dc: a2:4c:8f:9c:5c:be:0a:62:c7:d9:d8:f5:ad:c5:8f:e7:8f:83: 38:6b:b7:e9:0e:0f:b0:bb:2d:12:39:b1:12:dd:07:30:c2:29: 13:ce:d2:48:39:8b:27:06:ac:a4:13:ab:78:a3:25:f4:67:a3: 58:a6:3a:a7:ef:22:a9:bc:25:67:f4:8b:07:b4:11:5c:e9:68: 28:c2:02:94:73:63:58:06:0a:27:13:b4:bf:36:4f:72:c7:4e: 71:d3:82:aa:ea:dc:5b:90:d9:76:91:67:2c:50:66:4b:47:18: 60:2b:47:bd:d7:d1:bb:83:96:c0:0c:f5:3e:8d:ea:57:99:3f: 25:99:2c:d2:48:08:ff:2d:0b:85:0f:56:f5:4d:e8:b7:f9:94: f3:63:d4:0e:1a:f6:92:e9:64:20:a8:8a:59:6c:bd:0d:85:c1: 28:21:89:8f:6b:da:19:b4:84:8f:8f:55:36:29:53:22:b2:4c: a4:a2:0b:d6:0a:ff:03:e5:3f:df:dd:e9:5b:0e:3a:27:70:4a: 8d:5e:eb:94:32:6c:5c:54:70:41:72:52:80:a0:1f:27:12:2e: db:36:a7:e1:08:01:2b:87:e1:96:e1:62:ee:14:2c:0a:bb:f9: 8f:ac:dd:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWEFUOSOnJ1KzWGH0STR9DtWYgacwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0NENTI0MDUyNDY3RjIyREQ4RTU3RTAyQTFDOTlFREU1 QThDRjI0OTAeFw0yNTA1MDgxMTM1MzZaFw0yNTA1MTEyMjQ3MzZaMDMxMTAvBgNV BAMTKDFFOTQ1N0MzMjBBMUVEMTM5Rjg5NkZBRkVGNENEMjgzRDcwOUNDRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv6NkvnBF3oSUs+gwMko6WmG9o O0FXW47sKm7BRF9NZA+KvJzE/36bvR3Bu9/LrNhLAK0IleIZ4sPjBhpdC3+k3c9z 8YzMwrvR3BhYS44lqFyq8OdMOheoj0Q2r8nlPoyKu/Ssoolkh/LKpJZ0MaL9wW/d EnZr3zMZplL+vNTv1xECfkWiDtK40VFz7Fv5fgGknvWQ0aW0nJGm9pbd1mTfuLfk 4AlHFWFj40Ccs60ZULIdPc9pg/sBrlDrIg8MIeSnBZ+xb+xLOSxiO+E/vVdzEDji pE0T+JUJ1lnK2tM9zCgHC+ww5oXuX3HqV9Twv1XkjHydNJZzZj9CrE/qpjN1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHpRXwyCh7ROfiW+v70zSg9cJzPMwHwYDVR0j BBgwFoAUfNUkBSRn8i3Y5X4Cocme3lqM8kkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NGViNmVkZC1mMTNiLTQ5ZjAtYWQ4Ny02YjhlZTYxNGRjOGYvMC83Q0Q1MjQwNTI0 NjdGMjJERDhFNTdFMDJBMUM5OUVERTVBOENGMjQ5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0NENTI0MDUyNDY3RjIyREQ4RTU3RTAyQTFDOTlFREU1QThD RjI0OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDRlYjZlZGQtZjEzYi00OWYwLWFk ODctNmI4ZWU2MTRkYzhmLzAvN0NENTI0MDUyNDY3RjIyREQ4RTU3RTAyQTFDOTlF REU1QThDRjI0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAANw1e3/pkFq2Az+OIMoIyhZ3KJMj5xcvgpi x9nY9a3Fj+ePgzhrt+kOD7C7LRI5sRLdBzDCKRPO0kg5iycGrKQTq3ijJfRno1im OqfvIqm8JWf0iwe0EVzpaCjCApRzY1gGCicTtL82T3LHTnHTgqrq3FuQ2XaRZyxQ ZktHGGArR73X0buDlsAM9T6N6leZPyWZLNJICP8tC4UPVvVN6Lf5lPNj1A4a9pLp ZCCoillsvQ2FwSghiY9r2hm0hI+PVTYpUyKyTKSiC9YK/wPlP9/d6VsOOidwSo1e 65QybFxUcEFyUoCgHycSLts2p+EIASuH4ZbhYu4ULAq7+Y+s3ZE= -----END CERTIFICATE-----Generated at Thu May 8 17:04:12 2025 by rpki-client