$ rpki-client -vvf repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.mft File: 7376922C93BF667FFBBDAF0735AE73D1451B08C2.mft (raw, json) Hash identifier: ZW+75elGo6STTkHrr1wK1fXWQHhlL+xXwzr5mraLAzI= Subject key identifier: 19:42:76:B9:BA:56:9C:36:48:4C:E7:E3:DA:C1:00:75:6A:C0:A0:35 Authority key identifier: 73:76:92:2C:93:BF:66:7F:FB:BD:AF:07:35:AE:73:D1:45:1B:08:C2 Certificate issuer: /CN=7376922C93BF667FFBBDAF0735AE73D1451B08C2 Certificate serial: 13888B2CA4CDB40D0704F8A549701019CE0640B9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7376922C93BF667FFBBDAF0735AE73D1451B08C2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.mft Manifest number: 04C0 Signing time: Thu 08 May 2025 19:00:56 +0000 Manifest this update: Thu 08 May 2025 18:55:56 +0000 Manifest next update: Sun 11 May 2025 23:23:56 +0000 Files and hashes: 1: 7376922C93BF667FFBBDAF0735AE73D1451B08C2.crl (hash: 3ZbNeK4FQr/PEgjOQWQZD4SwXeQyEMEG+VaMW4ClSMs=) 2: 3130332e38392e3135342e302f32342d3234203d3e20313333383030.roa (hash: 19hfbaESEw6CQnreLuKBlHH7tTyTFEttoS4e3oK+FXU=) 3: 3130332e38392e3136342e302f32342d3234203d3e20313333383030.roa (hash: dpYs/5Z9KsHYepGTVhl5BzN1VZTKmrw6nRTQCg2byOU=) 4: 3130332e38392e3136352e302f32342d3234203d3e20313333383030.roa (hash: VjVwemiupRPnh6lv9qYoBoox2vPe9u6RAkQP/Xmd1zs=) 5: 3130332e372e3137362e302f32342d3234203d3e20313336303830.roa (hash: 5bQOBxDOi955OtIyKnk52gsM4cgLB8m5rX4frdSdtuA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.crl rsync://repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7376922C93BF667FFBBDAF0735AE73D1451B08C2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 23:23:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:88:8b:2c:a4:cd:b4:0d:07:04:f8:a5:49:70:10:19:ce:06:40:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7376922C93BF667FFBBDAF0735AE73D1451B08C2 Validity Not Before: May 8 18:55:56 2025 GMT Not After : May 11 23:23:56 2025 GMT Subject: CN=194276B9BA569C36484CE7E3DAC100756AC0A035 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:b7:3f:11:0c:aa:d2:78:a2:f7:30:ed:08:64: bf:b9:f8:e9:02:f7:bc:80:14:0a:f3:8b:80:e8:68: ce:50:b1:9c:34:8a:a7:21:7c:04:14:2c:5e:51:df: ad:d5:d5:78:1b:44:18:3a:98:51:d8:fd:68:e0:01: 10:38:3c:ef:73:df:ba:e5:e8:81:25:70:fe:65:b7: 93:a2:58:7f:27:b9:24:39:ab:ff:dd:6c:45:87:5b: c5:23:61:20:c4:1d:7d:a6:7f:e1:94:e1:15:1a:a5: c3:b2:4b:20:03:5f:42:c8:86:3b:a8:9e:69:2f:46: d6:78:1d:ed:5a:29:46:bb:07:25:ff:3e:fd:70:69: fc:46:03:21:9d:1a:a1:b7:8a:b5:b2:ab:64:0c:6b: a4:b8:90:fd:0a:0b:bb:ec:25:7f:0a:b9:18:2b:e4: c0:b2:f4:79:1b:d4:05:2b:c4:d6:68:15:97:8f:f3: 05:f8:13:7b:28:c2:21:4f:29:2d:57:50:86:ab:1e: 93:78:91:cd:ca:0c:02:2e:fe:99:6d:f9:e0:fa:82: c9:71:a8:a8:90:d7:ba:9f:33:46:08:fb:aa:75:3d: 8f:ed:97:7b:64:69:eb:45:be:22:59:70:8e:6e:ed: e7:f7:2d:8c:5a:9e:ec:be:a4:5f:11:a8:88:61:43: e0:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:42:76:B9:BA:56:9C:36:48:4C:E7:E3:DA:C1:00:75:6A:C0:A0:35 X509v3 Authority Key Identifier: keyid:73:76:92:2C:93:BF:66:7F:FB:BD:AF:07:35:AE:73:D1:45:1B:08:C2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7376922C93BF667FFBBDAF0735AE73D1451B08C2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4d176ddd-a980-43d6-94a7-95eeda539665/0/7376922C93BF667FFBBDAF0735AE73D1451B08C2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:51:43:c6:65:dc:9f:67:c9:21:d4:ee:43:02:1e:fe:c8:84: d1:bf:ba:18:11:40:51:d2:27:bc:85:d7:fe:b9:af:78:43:0f: 8b:27:43:17:b3:8d:bd:c8:b5:47:54:b0:99:47:5d:33:40:f2: f8:75:5e:98:31:08:7b:97:0a:32:ad:c5:9e:41:39:12:d0:5d: 71:fa:48:94:5b:39:79:2d:d5:19:c3:a3:a8:d3:5c:86:57:fb: e9:a2:e2:88:b8:07:7a:9d:d0:29:e2:b9:57:1d:90:2d:0f:7a: 5a:7e:08:32:f8:18:b2:4e:7d:7e:b8:80:e9:48:19:87:9b:cb: 2e:be:5a:74:86:61:8c:4b:0d:64:61:ee:ed:9e:d7:a4:a3:88: 70:a7:96:ae:d0:79:f0:e6:2f:38:d9:f7:a6:78:60:66:28:7d: b9:a9:f0:06:1e:ab:a3:fd:ed:da:c2:56:88:55:ee:6f:14:b0: f9:1b:b9:59:38:b7:7f:8d:8a:3e:c0:7b:07:12:a4:ba:14:54: 2e:f8:8e:e4:6b:e2:92:05:cf:e4:86:81:59:e9:79:6d:3e:1f: 84:15:e6:3d:5b:7a:8c:b5:a0:e5:d5:84:0b:99:de:b8:e0:c7: a9:87:c4:6b:2d:c6:0a:bf:97:09:00:95:aa:7d:62:42:65:0d: 6d:0d:e8:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE4iLLKTNtA0HBPilSXAQGc4GQLkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzM3NjkyMkM5M0JGNjY3RkZCQkRBRjA3MzVBRTczRDE0 NTFCMDhDMjAeFw0yNTA1MDgxODU1NTZaFw0yNTA1MTEyMzIzNTZaMDMxMTAvBgNV BAMTKDE5NDI3NkI5QkE1NjlDMzY0ODRDRTdFM0RBQzEwMDc1NkFDMEEwMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjtz8RDKrSeKL3MO0IZL+5+OkC 97yAFArzi4DoaM5QsZw0iqchfAQULF5R363V1XgbRBg6mFHY/WjgARA4PO9z37rl 6IElcP5lt5OiWH8nuSQ5q//dbEWHW8UjYSDEHX2mf+GU4RUapcOySyADX0LIhjuo nmkvRtZ4He1aKUa7ByX/Pv1wafxGAyGdGqG3irWyq2QMa6S4kP0KC7vsJX8KuRgr 5MCy9Hkb1AUrxNZoFZeP8wX4E3sowiFPKS1XUIarHpN4kc3KDAIu/plt+eD6gslx qKiQ17qfM0YI+6p1PY/tl3tkaetFviJZcI5u7ef3LYxanuy+pF8RqIhhQ+DDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGUJ2ubpWnDZITOfj2sEAdWrAoDUwHwYDVR0j BBgwFoAUc3aSLJO/Zn/7va8HNa5z0UUbCMIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 ZDE3NmRkZC1hOTgwLTQzZDYtOTRhNy05NWVlZGE1Mzk2NjUvMC83Mzc2OTIyQzkz QkY2NjdGRkJCREFGMDczNUFFNzNEMTQ1MUIwOEMyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzM3NjkyMkM5M0JGNjY3RkZCQkRBRjA3MzVBRTczRDE0NTFC MDhDMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGQxNzZkZGQtYTk4MC00M2Q2LTk0 YTctOTVlZWRhNTM5NjY1LzAvNzM3NjkyMkM5M0JGNjY3RkZCQkRBRjA3MzVBRTcz RDE0NTFCMDhDMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJNRQ8Zl3J9nySHU7kMCHv7IhNG/uhgRQFHS J7yF1/65r3hDD4snQxezjb3ItUdUsJlHXTNA8vh1XpgxCHuXCjKtxZ5BORLQXXH6 SJRbOXkt1RnDo6jTXIZX++mi4oi4B3qd0CniuVcdkC0Pelp+CDL4GLJOfX64gOlI GYebyy6+WnSGYYxLDWRh7u2e16SjiHCnlq7QefDmLzjZ96Z4YGYofbmp8AYeq6P9 7drCVohV7m8UsPkbuVk4t3+Nij7AewcSpLoUVC74juRr4pIFz+SGgVnpeW0+H4QV 5j1beoy1oOXVhAuZ3rjgx6mHxGstxgq/lwkAlap9YkJlDW0N6Lk= -----END CERTIFICATE-----Generated at Fri May 9 17:35:45 2025 by rpki-client