$ rpki-client -vvf repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft File: 7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft (raw, json) Hash identifier: ph5tH0eNn9bRvhM6Us/+e+K2S9fgPOWawE05tSH9MiU= Subject key identifier: 0C:D3:47:5C:FB:84:E0:36:67:3F:73:31:A4:72:1F:87:35:8D:E7:85 Authority key identifier: 7D:6E:DF:DB:21:B8:B7:E6:A7:5A:99:0A:7B:EC:AD:85:E8:BE:B9:53 Certificate issuer: /CN=7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953 Certificate serial: 7B4F9EC86672E0E6F06ACCA9AAB9754DABB4E861 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft Manifest number: 0179 Signing time: Wed 07 May 2025 00:20:04 +0000 Manifest this update: Wed 07 May 2025 00:15:04 +0000 Manifest next update: Sat 10 May 2025 12:06:04 +0000 Files and hashes: 1: 7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.crl (hash: dy19YX+aKPWIJTmNmc3ZWDuKeDsBWCB5mTHen3CdMdE=) 2: 3130332e34362e342e302f32342d3234203d3e20313530343630.roa (hash: 70RFcRoz1w22nVDdjd8xwvOHx9oaAPRDsiAFJSjZRVk=) 3: 3130332e34362e352e302f32342d3234203d3e20313530343630.roa (hash: OiXuaCFeHNTNKTkxwDwZ/IJjAlYs+aZs7qWhd3mySzg=) 4: 3130332e34362e342e302f32332d3233203d3e20313530343630.roa (hash: NXHMc5cBUZitTQZ4ST9s7lp3tsPIg2LlkZ5yYQ7KPUA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.crl rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 12:06:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:4f:9e:c8:66:72:e0:e6:f0:6a:cc:a9:aa:b9:75:4d:ab:b4:e8:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953 Validity Not Before: May 7 00:15:04 2025 GMT Not After : May 10 12:06:04 2025 GMT Subject: CN=0CD3475CFB84E036673F7331A4721F87358DE785 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:90:46:a9:19:9b:f3:6f:b1:ea:ea:b9:da:dc: b3:59:4e:2b:ca:6f:9f:36:36:4e:fa:95:78:1c:9a: 5c:77:fe:07:37:e6:bf:8a:cf:a2:f2:a3:af:d2:eb: 10:7d:bb:ed:45:5c:c8:77:27:71:75:6b:32:76:73: cb:a8:14:62:04:0e:6a:30:2a:20:c3:9a:f6:59:bf: 2b:42:03:42:e8:d5:f1:d3:33:54:00:c3:9d:a1:1d: 3d:3c:68:41:3e:b0:22:99:47:8d:5c:13:20:fb:6b: b7:b8:ea:17:ed:3e:bd:dc:0c:7c:17:13:1a:8d:80: f4:77:e1:b6:22:82:e6:32:e1:29:af:e3:c4:1f:4c: f0:46:14:ed:ce:0d:40:14:90:01:34:96:8b:36:d6: e5:39:9b:30:b5:83:d4:6f:d8:f3:db:a7:e4:88:6a: 1a:8e:25:27:ef:fb:71:31:fd:49:b3:95:76:63:4d: 4b:f9:30:79:c7:43:8d:2c:e4:7c:a7:5f:ea:4e:74: e0:69:de:cf:aa:b8:cf:1b:b3:ae:8d:92:55:be:6b: e4:9c:d0:21:34:c8:fb:b1:6f:a5:c1:c4:6d:6a:47: 11:2e:0b:60:81:2a:e8:2d:c6:66:2f:bb:c2:0a:c8: 71:74:c0:4d:a0:29:da:a4:e7:93:dc:ec:7c:17:c6: 7a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:D3:47:5C:FB:84:E0:36:67:3F:73:31:A4:72:1F:87:35:8D:E7:85 X509v3 Authority Key Identifier: keyid:7D:6E:DF:DB:21:B8:B7:E6:A7:5A:99:0A:7B:EC:AD:85:E8:BE:B9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:80:82:5f:21:f3:67:5d:6f:a6:56:80:2d:58:b2:10:96:e5: a9:3f:e0:76:1e:fb:2c:a7:52:d0:44:57:b5:2a:e7:cc:35:f3: 8e:66:f3:36:8d:e3:22:2d:b7:86:31:da:13:61:d6:8e:21:99: 43:8d:09:6e:d6:ff:cc:11:fc:ef:ac:a3:97:41:80:53:88:2f: 51:f4:fb:3f:a1:84:c7:f2:26:ae:66:7e:02:89:f6:06:4d:53: 29:83:e2:17:20:f8:ef:fd:e2:47:83:91:60:9c:a2:d3:aa:db: ee:e5:e2:1a:ea:2d:9c:6b:07:28:60:95:73:b9:d4:0a:73:3e: 4e:15:9a:64:e8:6f:6c:d8:00:2c:d0:6e:03:ce:44:a1:68:a4: 9b:13:80:4e:e4:0b:6b:c1:0e:63:32:6a:1f:ad:e2:ea:99:b1: af:05:5e:38:e6:9e:80:06:a8:d4:fc:d6:f5:98:19:2e:48:6c: 14:13:18:8c:d9:ea:f7:d9:da:87:ca:b5:73:51:9c:82:51:ac: 6b:bc:4d:b4:72:fc:32:54:c8:1f:58:db:9b:e8:e5:87:13:e8: 9b:2d:03:33:3c:42:7e:bb:72:3d:b0:5e:4d:c7:37:fe:42:e5: 28:74:39:0a:db:ef:dd:ba:ed:6d:bf:f8:46:a7:f3:76:c8:47: 1d:1e:63:7c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe0+eyGZy4Obwasypqrl1Tau06GEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q2RURGREIyMUI4QjdFNkE3NUE5OTBBN0JFQ0FEODVF OEJFQjk1MzAeFw0yNTA1MDcwMDE1MDRaFw0yNTA1MTAxMjA2MDRaMDMxMTAvBgNV BAMTKDBDRDM0NzVDRkI4NEUwMzY2NzNGNzMzMUE0NzIxRjg3MzU4REU3ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2kEapGZvzb7Hq6rna3LNZTivK b582Nk76lXgcmlx3/gc35r+Kz6Lyo6/S6xB9u+1FXMh3J3F1azJ2c8uoFGIEDmow KiDDmvZZvytCA0Lo1fHTM1QAw52hHT08aEE+sCKZR41cEyD7a7e46hftPr3cDHwX ExqNgPR34bYiguYy4Smv48QfTPBGFO3ODUAUkAE0los21uU5mzC1g9Rv2PPbp+SI ahqOJSfv+3Ex/UmzlXZjTUv5MHnHQ40s5HynX+pOdOBp3s+quM8bs66NklW+a+Sc 0CE0yPuxb6XBxG1qRxEuC2CBKugtxmYvu8IKyHF0wE2gKdqk55Pc7HwXxno3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDNNHXPuE4DZnP3MxpHIfhzWN54UwHwYDVR0j BBgwFoAUfW7f2yG4t+anWpkKe+ythei+uVMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmM4Y2RhNS0zNDgzLTQyYjAtYjM4NS1mYzA3MDcxNmZiY2MvMC83RDZFREZEQjIx QjhCN0U2QTc1QTk5MEE3QkVDQUQ4NUU4QkVCOTUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q2RURGREIyMUI4QjdFNkE3NUE5OTBBN0JFQ0FEODVFOEJF Qjk1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJjOGNkYTUtMzQ4My00MmIwLWIz ODUtZmMwNzA3MTZmYmNjLzAvN0Q2RURGREIyMUI4QjdFNkE3NUE5OTBBN0JFQ0FE ODVFOEJFQjk1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAiAgl8h82ddb6ZWgC1YshCW5ak/4HYe+yyn UtBEV7Uq58w1845m8zaN4yItt4Yx2hNh1o4hmUONCW7W/8wR/O+so5dBgFOIL1H0 +z+hhMfyJq5mfgKJ9gZNUymD4hcg+O/94keDkWCcotOq2+7l4hrqLZxrByhglXO5 1ApzPk4VmmTob2zYACzQbgPORKFopJsTgE7kC2vBDmMyah+t4uqZsa8FXjjmnoAG qNT81vWYGS5IbBQTGIzZ6vfZ2ofKtXNRnIJRrGu8TbRy/DJUyB9Y25vo5YcT6Jst AzM8Qn67cj2wXk3HN/5C5Sh0OQrb79267W2/+Ean83bIRx0eY3w= -----END CERTIFICATE-----Generated at Fri May 9 02:54:13 2025 by rpki-client