$ rpki-client -vvf repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/1678F34665D7A5281AECD895B892F07EA136CF72.mft File: 1678F34665D7A5281AECD895B892F07EA136CF72.mft (raw, json) Hash identifier: i+zgRv8PyHg+VMKe7y3D4Bikobftmog03d5/2Ung0F4= Subject key identifier: 36:27:F1:AC:C0:57:CF:41:47:EE:3C:E0:B6:16:ED:C6:68:F1:CF:20 Authority key identifier: 16:78:F3:46:65:D7:A5:28:1A:EC:D8:95:B8:92:F0:7E:A1:36:CF:72 Certificate issuer: /CN=1678F34665D7A5281AECD895B892F07EA136CF72 Certificate serial: 7A6D7AD9E2DE551201437039F186102F4E0643E2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678F34665D7A5281AECD895B892F07EA136CF72.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/1678F34665D7A5281AECD895B892F07EA136CF72.mft Manifest number: 04CF Signing time: Sat 10 May 2025 14:31:15 +0000 Manifest this update: Sat 10 May 2025 14:26:15 +0000 Manifest next update: Tue 13 May 2025 17:19:15 +0000 Files and hashes: 1: 3230322e3132392e3232342e302f32322d3234203d3e203338373831.roa (hash: ASTP/Ns/ArmugM2J+rWvnVdL7xU8qGXnTiOu43cw3NQ=) 2: 1678F34665D7A5281AECD895B892F07EA136CF72.crl (hash: ZmOf09VROfFEEDza4XaQsVPWZXhbZJEq2oO2CQhWrVw=) 3: 323030313a6466333a653630303a3a2f34382d3438203d3e203338373831.roa (hash: q/aSw8dNXjF6GDG+KHGBg9PKXH4YVjAUk1ld0FDlmcg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/1678F34665D7A5281AECD895B892F07EA136CF72.crl rsync://repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/1678F34665D7A5281AECD895B892F07EA136CF72.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678F34665D7A5281AECD895B892F07EA136CF72.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 17:19:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7a:6d:7a:d9:e2:de:55:12:01:43:70:39:f1:86:10:2f:4e:06:43:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1678F34665D7A5281AECD895B892F07EA136CF72 Validity Not Before: May 10 14:26:15 2025 GMT Not After : May 13 17:19:15 2025 GMT Subject: CN=3627F1ACC057CF4147EE3CE0B616EDC668F1CF20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:aa:58:ed:65:8e:b8:4f:8d:d7:3d:07:47:f4: 58:54:53:2e:5a:ca:98:6a:c6:7c:39:52:0c:4f:05: 24:a3:6b:bf:72:ac:2a:e1:14:bf:7d:db:a1:25:07: b4:f9:ba:42:97:66:e2:ab:66:e0:f2:ca:9a:f8:20: 92:9e:0f:5d:b6:70:c1:89:5c:72:57:2f:92:8d:0b: 28:98:25:28:e9:ec:ea:0f:ce:c7:10:27:ea:ac:72: 87:e2:29:96:fe:42:0e:66:ce:88:de:65:bd:8b:26: 61:0d:ee:b6:00:b7:e0:b5:37:d2:97:ae:e1:21:51: af:b2:80:5c:2d:48:93:e5:3c:d7:e5:6f:4c:4f:36: 9f:cb:03:23:5f:6b:55:34:05:41:2d:72:86:bb:f0: 44:f8:ae:a5:d3:5c:12:f3:21:76:51:0f:89:7f:4c: 3a:38:c1:56:d2:93:0f:e1:c2:d3:24:98:7c:47:43: 57:bc:55:47:3b:82:92:bc:84:b9:bd:aa:d7:23:d6: fe:13:8a:a9:2e:0e:5d:6e:ac:36:9b:44:d7:f6:46: fb:df:a5:e5:86:9f:e8:1d:1b:24:94:2c:9a:c7:57: f5:6b:4f:3e:b1:cf:bd:63:64:30:ac:ff:d0:34:d4: 8a:20:e6:a5:eb:e6:da:a2:12:bf:21:b7:2d:e5:13: a0:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:27:F1:AC:C0:57:CF:41:47:EE:3C:E0:B6:16:ED:C6:68:F1:CF:20 X509v3 Authority Key Identifier: keyid:16:78:F3:46:65:D7:A5:28:1A:EC:D8:95:B8:92:F0:7E:A1:36:CF:72 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/1678F34665D7A5281AECD895B892F07EA136CF72.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1678F34665D7A5281AECD895B892F07EA136CF72.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4793686b-3384-4412-8e7c-e9d1b852aa1e/0/1678F34665D7A5281AECD895B892F07EA136CF72.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:ce:80:58:2f:e8:ad:61:f8:fe:ed:a1:c7:36:6b:77:39:a1: e5:82:09:a6:08:13:55:18:6c:ec:99:bb:9a:f8:48:3c:fd:99: ee:af:3f:21:2f:09:06:1d:0d:7b:50:3a:39:df:7a:81:9c:7f: 53:5d:40:53:79:ab:27:81:67:5d:24:ec:70:c7:2c:70:18:b3: 10:52:11:71:96:64:ad:18:2a:29:ac:b9:92:84:e9:e4:f2:73: 22:a5:36:46:21:d6:5c:60:da:6e:96:c4:6b:f8:f6:ba:a6:83: bf:43:0b:0a:33:7b:01:46:93:d5:72:c4:f2:5c:b8:e3:dc:eb: 42:2c:e9:73:ba:b3:26:c2:1b:b8:1a:4c:29:55:8f:5f:6c:14: 7f:24:06:1f:2d:0e:45:f7:23:99:e4:58:ec:bc:b9:33:bf:57: c8:1f:f3:e9:90:22:af:5f:f3:20:45:ee:39:36:e1:12:8b:6b: db:a8:a7:07:d6:93:f7:11:cd:30:a4:dc:00:8d:e7:63:dd:e7: 96:02:aa:15:b2:85:58:45:2d:a4:13:45:09:a8:63:29:59:fc: 64:0a:40:2c:b5:00:f8:d4:49:3a:3d:41:42:be:ca:24:0e:5c: 5e:b4:ed:bd:00:d6:ff:66:b1:8f:5f:93:ed:c4:21:3b:e8:1b: 7b:c9:15:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUem162eLeVRIBQ3A58YYQL04GQ+IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY3OEYzNDY2NUQ3QTUyODFBRUNEODk1Qjg5MkYwN0VB MTM2Q0Y3MjAeFw0yNTA1MTAxNDI2MTVaFw0yNTA1MTMxNzE5MTVaMDMxMTAvBgNV BAMTKDM2MjdGMUFDQzA1N0NGNDE0N0VFM0NFMEI2MTZFREM2NjhGMUNGMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9qljtZY64T43XPQdH9FhUUy5a yphqxnw5UgxPBSSja79yrCrhFL9926ElB7T5ukKXZuKrZuDyypr4IJKeD122cMGJ XHJXL5KNCyiYJSjp7OoPzscQJ+qscofiKZb+Qg5mzojeZb2LJmEN7rYAt+C1N9KX ruEhUa+ygFwtSJPlPNflb0xPNp/LAyNfa1U0BUEtcoa78ET4rqXTXBLzIXZRD4l/ TDo4wVbSkw/hwtMkmHxHQ1e8VUc7gpK8hLm9qtcj1v4TiqkuDl1urDabRNf2Rvvf peWGn+gdGySULJrHV/VrTz6xz71jZDCs/9A01Iog5qXr5tqiEr8hty3lE6CDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNifxrMBXz0FH7jzgthbtxmjxzyAwHwYDVR0j BBgwFoAUFnjzRmXXpSga7NiVuJLwfqE2z3IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NzkzNjg2Yi0zMzg0LTQ0MTItOGU3Yy1lOWQxYjg1MmFhMWUvMC8xNjc4RjM0NjY1 RDdBNTI4MUFFQ0Q4OTVCODkyRjA3RUExMzZDRjcyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTY3OEYzNDY2NUQ3QTUyODFBRUNEODk1Qjg5MkYwN0VBMTM2 Q0Y3Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDc5MzY4NmItMzM4NC00NDEyLThl N2MtZTlkMWI4NTJhYTFlLzAvMTY3OEYzNDY2NUQ3QTUyODFBRUNEODk1Qjg5MkYw N0VBMTM2Q0Y3Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIvOgFgv6K1h+P7tocc2a3c5oeWCCaYIE1UY bOyZu5r4SDz9me6vPyEvCQYdDXtQOjnfeoGcf1NdQFN5qyeBZ10k7HDHLHAYsxBS EXGWZK0YKimsuZKE6eTycyKlNkYh1lxg2m6WxGv49rqmg79DCwozewFGk9VyxPJc uOPc60Is6XO6sybCG7gaTClVj19sFH8kBh8tDkX3I5nkWOy8uTO/V8gf8+mQIq9f 8yBF7jk24RKLa9uopwfWk/cRzTCk3ACN52Pd55YCqhWyhVhFLaQTRQmoYylZ/GQK QCy1APjUSTo9QUK+yiQOXF607b0A1v9msY9fk+3EITvoG3vJFUM= -----END CERTIFICATE-----Generated at Sun May 11 20:05:09 2025 by rpki-client