$ rpki-client -vvf repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft File: C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft (raw, json) Hash identifier: dbLLcf787SRIfObgiAb+SghcmNagtWrfWBp/eke+CEs= Subject key identifier: 5E:AB:CA:E3:BD:82:3A:BF:94:0E:78:FD:41:DD:49:04:A9:0C:B1:44 Authority key identifier: C7:F5:AA:72:DB:87:0E:16:1B:62:AC:A9:25:0A:D9:8A:A1:10:A0:14 Certificate issuer: /CN=C7F5AA72DB870E161B62ACA9250AD98AA110A014 Certificate serial: 65D1745B440D312A2BC48B16DE933AF6B7112ABA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F5AA72DB870E161B62ACA9250AD98AA110A014.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft Manifest number: 0267 Signing time: Mon 05 May 2025 04:31:53 +0000 Manifest this update: Mon 05 May 2025 04:26:53 +0000 Manifest next update: Thu 08 May 2025 16:05:53 +0000 Files and hashes: 1: C7F5AA72DB870E161B62ACA9250AD98AA110A014.crl (hash: T4Luu/JPgLREsVikPS0bBT2sU97qJIzRpqzNfrdEK5s=) 2: 3130332e3230372e3233382e302f32342d3234203d3e20313338303936.roa (hash: kqyShD8grMzsW8WAD+q93A9hYlzfgDARjSsqGTZiG54=) 3: 3130332e3230372e3233362e302f32332d3234203d3e20313334363434.roa (hash: FuTP+olekR94POOQRMWB2DM9MZrHgp1r/imUNhheQk0=) 4: 3130332e3230372e3233392e302f32342d3234203d3e20313338303936.roa (hash: bCN0BjFIkGXQoNiGlR2Rw4pyaw/6SRLkI5yDk6Jonrg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.crl rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F5AA72DB870E161B62ACA9250AD98AA110A014.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 14:41:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:d1:74:5b:44:0d:31:2a:2b:c4:8b:16:de:93:3a:f6:b7:11:2a:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7F5AA72DB870E161B62ACA9250AD98AA110A014 Validity Not Before: May 5 04:26:53 2025 GMT Not After : May 8 16:05:53 2025 GMT Subject: CN=5EABCAE3BD823ABF940E78FD41DD4904A90CB144 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c2:84:4d:84:dd:db:63:29:18:02:de:ac:33: 79:f4:17:49:02:94:ff:ad:22:dc:a5:c5:3c:6c:0f: ea:a7:22:a0:71:d4:a1:d6:cb:f4:ce:96:60:7c:f3: e0:b5:83:5b:ee:64:5d:c7:de:31:1f:07:3b:c1:8d: fb:5b:a7:2d:f7:8b:4a:22:44:f9:be:de:1d:a2:a2: 47:79:54:7e:f7:a9:b5:0c:c6:07:d1:b9:82:0c:35: c5:45:85:e0:ee:aa:9e:b7:dd:40:8e:7d:de:f5:73: 36:ca:7b:0c:78:28:87:c6:3f:9c:01:c3:80:ab:59: f9:30:57:8f:ff:7d:f2:c3:2b:a6:69:27:13:9e:f7: 87:58:6e:42:1a:3e:10:7c:9a:7b:51:38:e8:b0:87: c2:88:52:46:c7:eb:da:81:e0:39:42:d1:71:6f:41: 90:5c:ef:a4:99:ef:9b:f4:de:94:34:ef:bf:cb:87: d0:ee:05:98:61:60:17:ec:33:dc:f6:df:f6:55:2d: dd:6e:26:74:d6:7b:37:a5:b8:62:3f:7f:90:54:fd: 15:0d:db:7e:87:94:9c:4f:51:ea:e7:4f:92:03:d6: 19:82:3d:1c:1a:57:6a:db:bb:19:66:8d:fa:ea:99: 7a:ab:1a:e6:c7:d8:5c:0c:5d:f0:e1:76:fb:a6:dd: 90:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5E:AB:CA:E3:BD:82:3A:BF:94:0E:78:FD:41:DD:49:04:A9:0C:B1:44 X509v3 Authority Key Identifier: keyid:C7:F5:AA:72:DB:87:0E:16:1B:62:AC:A9:25:0A:D9:8A:A1:10:A0:14 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F5AA72DB870E161B62ACA9250AD98AA110A014.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4b0e7f8e-c29f-4e6b-ad0a-9957fbd56953/0/C7F5AA72DB870E161B62ACA9250AD98AA110A014.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:9e:9a:51:d2:32:f9:c4:99:1b:89:c3:a5:70:c7:4d:be:b1: 58:b4:b6:9b:0d:65:51:c1:e4:de:0e:3f:73:02:2b:0f:cc:de: b9:36:ea:be:f8:bb:5a:4b:1b:f4:4c:bb:2f:97:87:79:32:e7: 0d:e9:ba:4a:c4:69:a7:cd:b8:8b:74:4b:f7:35:6d:53:dc:4d: fb:f3:b3:da:6e:45:b3:c1:d0:4e:65:dd:26:44:30:c0:ed:b2: ed:fa:1a:71:5b:34:53:52:f0:fd:ec:f6:ae:02:ad:29:4b:38: d4:8c:7a:15:fd:52:a1:f1:4b:e1:a2:21:2e:c3:23:aa:8e:b8: 57:77:c0:3b:fd:20:82:22:ea:96:2d:6a:65:4f:f8:c2:07:c6: 99:2a:50:a5:d1:54:d5:52:9c:c2:b2:a7:c7:4f:3b:1d:98:de: 0c:8b:14:e4:6d:98:22:55:d7:28:b2:c6:0c:5c:68:57:6c:bf: 30:f4:7a:88:1f:61:5b:e6:85:2a:25:4a:27:70:c0:ff:31:2e: 94:1a:32:fb:b5:25:56:a6:fb:9c:3b:85:4d:3b:f3:45:02:f0: 15:3a:03:da:ea:cc:b2:ec:64:60:28:2d:cd:59:10:72:fc:76: ab:9a:18:15:7f:1e:9a:c4:a4:5d:da:0a:f7:22:9b:44:16:b8: ea:59:de:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZdF0W0QNMSorxIsW3pM69rcRKrowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdGNUFBNzJEQjg3MEUxNjFCNjJBQ0E5MjUwQUQ5OEFB MTEwQTAxNDAeFw0yNTA1MDUwNDI2NTNaFw0yNTA1MDgxNjA1NTNaMDMxMTAvBgNV BAMTKDVFQUJDQUUzQkQ4MjNBQkY5NDBFNzhGRDQxREQ0OTA0QTkwQ0IxNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCwoRNhN3bYykYAt6sM3n0F0kC lP+tItylxTxsD+qnIqBx1KHWy/TOlmB88+C1g1vuZF3H3jEfBzvBjftbpy33i0oi RPm+3h2iokd5VH73qbUMxgfRuYIMNcVFheDuqp633UCOfd71czbKewx4KIfGP5wB w4CrWfkwV4//ffLDK6ZpJxOe94dYbkIaPhB8mntROOiwh8KIUkbH69qB4DlC0XFv QZBc76SZ75v03pQ077/Lh9DuBZhhYBfsM9z23/ZVLd1uJnTWezeluGI/f5BU/RUN 236HlJxPUernT5ID1hmCPRwaV2rbuxlmjfrqmXqrGubH2FwMXfDhdvum3ZDtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXqvK472COr+UDnj9Qd1JBKkMsUQwHwYDVR0j BBgwFoAUx/WqctuHDhYbYqypJQrZiqEQoBQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YjBlN2Y4ZS1jMjlmLTRlNmItYWQwYS05OTU3ZmJkNTY5NTMvMC9DN0Y1QUE3MkRC ODcwRTE2MUI2MkFDQTkyNTBBRDk4QUExMTBBMDE0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzdGNUFBNzJEQjg3MEUxNjFCNjJBQ0E5MjUwQUQ5OEFBMTEw QTAxNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGIwZTdmOGUtYzI5Zi00ZTZiLWFk MGEtOTk1N2ZiZDU2OTUzLzAvQzdGNUFBNzJEQjg3MEUxNjFCNjJBQ0E5MjUwQUQ5 OEFBMTEwQTAxNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFOemlHSMvnEmRuJw6Vwx02+sVi0tpsNZVHB 5N4OP3MCKw/M3rk26r74u1pLG/RMuy+Xh3ky5w3pukrEaafNuIt0S/c1bVPcTfvz s9puRbPB0E5l3SZEMMDtsu36GnFbNFNS8P3s9q4CrSlLONSMehX9UqHxS+GiIS7D I6qOuFd3wDv9IIIi6pYtamVP+MIHxpkqUKXRVNVSnMKyp8dPOx2Y3gyLFORtmCJV 1yiyxgxcaFdsvzD0eogfYVvmhSolSidwwP8xLpQaMvu1JVam+5w7hU0780UC8BU6 A9rqzLLsZGAoLc1ZEHL8dquaGBV/HprEpF3aCvcim0QWuOpZ3oc= -----END CERTIFICATE-----Generated at Wed May 7 02:27:40 2025 by rpki-client