$ rpki-client -vvf repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft File: D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft (raw, json) Hash identifier: Atqh39mD0OvCY5Vdc4uti001K6NYoB38gaq9M/sBNT4= Subject key identifier: C6:8B:7E:3C:90:E8:93:AA:82:CF:58:61:BA:62:CF:37:54:7D:36:E3 Authority key identifier: D7:C7:C6:E5:33:C4:1C:36:D9:23:CD:C5:9F:FC:1B:04:36:C3:9F:AF Certificate issuer: /CN=D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF Certificate serial: 3F99DEBB87BC8DC473ABA81673094730E9BEB963 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft Manifest number: 022B Signing time: Fri 09 May 2025 16:41:38 +0000 Manifest this update: Fri 09 May 2025 16:36:38 +0000 Manifest next update: Tue 13 May 2025 04:39:38 +0000 Files and hashes: 1: D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.crl (hash: lYoLDALKMcI/4AmVc/H0ayScnGUjPx5ikw4z7IuL6lU=) 2: 3130332e3130322e3137362e302f32342d3234203d3e20313335343634.roa (hash: /nnnpT4J0Tuu/cwXNYMkIuOZtyJHbw8wTsT308/p5rw=) 3: 3130332e3130322e3136372e302f32342d3234203d3e20313335343634.roa (hash: G2Aj1Erzi22dbwXIe5ZKOYeLnX3IptEzXgXL9BU+vU0=) 4: 3130332e37302e36382e302f32342d3234203d3e20313335343634.roa (hash: 2CoQGk4NMRfUrYnvT/UZsUPUuE84h2TZeseeJ7TfgPk=) 5: 3130332e3130322e3137372e302f32342d3234203d3e20313335343634.roa (hash: oHkNyUxZ+91xlNVhfeWI9Dc0rmMp8x6qN96DcYOObkU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.crl rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 04:39:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:99:de:bb:87:bc:8d:c4:73:ab:a8:16:73:09:47:30:e9:be:b9:63 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF Validity Not Before: May 9 16:36:38 2025 GMT Not After : May 13 04:39:38 2025 GMT Subject: CN=C68B7E3C90E893AA82CF5861BA62CF37547D36E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:26:8c:f7:65:79:71:4a:95:a2:fc:48:08:04: 02:ae:ea:a7:d6:d5:6f:31:50:5f:ef:15:8b:24:93: fe:50:4c:3d:d4:1e:f2:b0:0f:3b:36:d2:ed:15:0d: ff:22:11:0d:8c:c1:50:1d:9c:a0:44:37:c8:16:1a: bc:3e:f9:2e:dc:85:54:42:ec:34:17:46:44:cc:b4: f8:50:f0:c1:d5:8f:2c:01:5c:ad:9a:87:c7:cf:36: 7c:83:96:f7:d2:15:b0:06:1f:ca:c9:2a:d5:e8:68: 18:e5:75:7e:ef:fb:5b:0b:5d:71:bd:15:0d:af:12: c8:d4:e0:a0:84:00:23:1b:48:19:71:23:9c:75:c4: 4a:d0:ed:66:a7:4c:88:68:31:11:42:52:7f:3c:e7: 7a:7d:98:2d:05:14:08:f2:f4:02:04:1e:fd:70:f9: a5:ce:f6:2e:51:07:66:e5:d2:9c:1d:14:fc:95:82: 6f:72:57:b6:b5:43:fe:27:05:81:2b:c5:7b:e4:d8: 72:2b:24:8b:d7:ee:4d:2b:97:9c:90:49:4e:e5:1c: d4:f8:83:8d:41:28:8d:65:8a:c7:f0:2d:2c:57:9a: e5:32:76:b5:b9:2e:44:7b:85:2f:b9:d1:be:6b:13: 08:77:23:d7:e6:e5:6c:3c:8d:ad:40:df:19:5d:32: cc:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:8B:7E:3C:90:E8:93:AA:82:CF:58:61:BA:62:CF:37:54:7D:36:E3 X509v3 Authority Key Identifier: keyid:D7:C7:C6:E5:33:C4:1C:36:D9:23:CD:C5:9F:FC:1B:04:36:C3:9F:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:e1:61:52:5f:18:48:0a:65:5d:55:28:fd:13:83:58:05:eb: 3d:03:c7:23:e7:45:85:30:a4:93:7c:37:78:35:92:ab:9d:ab: 63:35:f3:37:30:c0:61:f3:22:32:ee:f5:c0:8b:d7:ef:97:48: c3:ea:04:93:58:02:4f:4a:37:c2:2d:98:a9:c2:77:2a:b4:9b: 7e:d4:94:86:07:97:c8:f6:fe:a9:a8:bd:9a:6b:38:75:80:37: 73:06:2a:67:72:96:98:8a:98:b9:44:7b:f7:f2:16:4e:bd:64: 30:73:fc:c7:68:8b:bf:86:0e:bc:d7:1f:f8:49:ad:d6:80:7a: f4:8c:59:24:e1:1c:be:e6:e9:11:80:dc:0d:b9:8f:89:b8:17: d9:a6:c6:3a:55:d8:f1:31:d0:79:af:bd:cd:bc:42:a6:f6:eb: 8e:b5:32:75:c1:17:23:1a:36:8b:61:00:62:4e:3d:f6:2c:b7: e2:5e:26:91:8a:8a:c3:8e:fe:0b:b9:cd:c4:dc:17:06:ef:a5: e8:ff:d9:09:9b:64:06:40:a4:65:3d:8f:b4:e0:fa:68:95:d5: bd:99:a4:83:42:f4:88:18:95:6d:85:09:90:57:81:20:ab:6c: 6b:15:ec:65:30:62:c5:8e:96:44:7a:f0:be:a5:9e:54:1b:1a: 6e:60:3d:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUP5neu4e8jcRzq6gWcwlHMOm+uWMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdDN0M2RTUzM0M0MUMzNkQ5MjNDREM1OUZGQzFCMDQz NkMzOUZBRjAeFw0yNTA1MDkxNjM2MzhaFw0yNTA1MTMwNDM5MzhaMDMxMTAvBgNV BAMTKEM2OEI3RTNDOTBFODkzQUE4MkNGNTg2MUJBNjJDRjM3NTQ3RDM2RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrJoz3ZXlxSpWi/EgIBAKu6qfW 1W8xUF/vFYskk/5QTD3UHvKwDzs20u0VDf8iEQ2MwVAdnKBEN8gWGrw++S7chVRC 7DQXRkTMtPhQ8MHVjywBXK2ah8fPNnyDlvfSFbAGH8rJKtXoaBjldX7v+1sLXXG9 FQ2vEsjU4KCEACMbSBlxI5x1xErQ7WanTIhoMRFCUn8853p9mC0FFAjy9AIEHv1w +aXO9i5RB2bl0pwdFPyVgm9yV7a1Q/4nBYErxXvk2HIrJIvX7k0rl5yQSU7lHNT4 g41BKI1lisfwLSxXmuUydrW5LkR7hS+50b5rEwh3I9fm5Ww8ja1A3xldMsxZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxot+PJDok6qCz1hhumLPN1R9NuMwHwYDVR0j BBgwFoAU18fG5TPEHDbZI83Fn/wbBDbDn68wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTlhODUzOC1kYTQzLTQxNTgtYWJjMi04ZTYzYThlNDA4OTkvMC9EN0M3QzZFNTMz QzQxQzM2RDkyM0NEQzU5RkZDMUIwNDM2QzM5RkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDdDN0M2RTUzM0M0MUMzNkQ5MjNDREM1OUZGQzFCMDQzNkMz OUZBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTE5YTg1MzgtZGE0My00MTU4LWFi YzItOGU2M2E4ZTQwODk5LzAvRDdDN0M2RTUzM0M0MUMzNkQ5MjNDREM1OUZGQzFC MDQzNkMzOUZBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHfhYVJfGEgKZV1VKP0Tg1gF6z0DxyPnRYUw pJN8N3g1kqudq2M18zcwwGHzIjLu9cCL1++XSMPqBJNYAk9KN8ItmKnCdyq0m37U lIYHl8j2/qmovZprOHWAN3MGKmdylpiKmLlEe/fyFk69ZDBz/Mdoi7+GDrzXH/hJ rdaAevSMWSThHL7m6RGA3A25j4m4F9mmxjpV2PEx0Hmvvc28Qqb26461MnXBFyMa NothAGJOPfYst+JeJpGKisOO/gu5zcTcFwbvpej/2QmbZAZApGU9j7Tg+miV1b2Z pINC9IgYlW2FCZBXgSCrbGsV7GUwYsWOlkR68L6lnlQbGm5gPcM= -----END CERTIFICATE-----Generated at Sun May 11 22:16:10 2025 by rpki-client