$ rpki-client -vvf repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft File: 407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft (raw, json) Hash identifier: o9YZH28I19FVrLkE8jc4JFrjkMD7VFnTRTM6UhiFpS0= Subject key identifier: 2B:DF:FC:D5:B4:CA:B0:F4:1B:8A:26:42:72:03:7B:85:04:0E:8A:C5 Authority key identifier: 40:7B:7C:7E:E0:9E:DB:AA:0A:35:25:E2:09:FF:8E:93:E4:86:53:C8 Certificate issuer: /CN=407B7C7EE09EDBAA0A3525E209FF8E93E48653C8 Certificate serial: 2F84167B4D09287B36B3B2534CB1B048C4014F1E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft Manifest number: 80 Signing time: Sun 11 May 2025 12:32:18 +0000 Manifest this update: Sun 11 May 2025 12:27:18 +0000 Manifest next update: Wed 14 May 2025 18:14:18 +0000 Files and hashes: 1: 323030313a6466313a366263303a3a2f34382d3438203d3e20313431363036.roa (hash: ELx/Mo51D3GSaEDSyBhL7pvfhZmjCeLx8uPSmWVwFVo=) 2: 3130332e3136302e3230322e302f32342d3234203d3e20313431363036.roa (hash: haTibr3tt22zSchSW2+rcU9iqZLSDGd/xcHfzqqfZOo=) 3: 3130332e3136302e3230332e302f32342d3234203d3e20313431363036.roa (hash: 2o2Ekkt+3oPedQ6t7WSvFM6gdfyWmdr+vQqMDBCvSgE=) 4: 407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.crl (hash: 4jQL55YsyZNnRSJuhlvt6LqDBnsfa+4E/Hss7YpTVDM=) 5: 3130332e3136302e3230322e302f32332d3233203d3e20313431363036.roa (hash: Gj+dL3k6BLOV8ougeJn8Z24XkFylft6ZOL9dKAW0YtU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.crl rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 18:14:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:84:16:7b:4d:09:28:7b:36:b3:b2:53:4c:b1:b0:48:c4:01:4f:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=407B7C7EE09EDBAA0A3525E209FF8E93E48653C8 Validity Not Before: May 11 12:27:18 2025 GMT Not After : May 14 18:14:18 2025 GMT Subject: CN=2BDFFCD5B4CAB0F41B8A264272037B85040E8AC5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:9d:8f:36:08:c2:f4:c5:99:3e:e3:46:55:d6: 30:b0:7a:f5:03:ff:5a:07:49:47:76:58:ef:40:b6: 32:e2:1d:1b:e1:0e:2a:89:f9:ca:be:d5:d6:33:10: 00:ef:2b:b7:c8:15:ff:9e:8d:2f:d6:86:dc:03:67: f7:22:c8:66:b4:93:bc:a5:a2:1b:2c:7d:47:c1:72: 0d:1f:39:f8:84:e7:a9:ac:9d:56:0b:c0:fe:47:b7: 55:90:b2:0a:07:fa:e4:86:8e:74:ed:1a:92:af:99: ce:c8:d4:13:b1:06:46:88:24:4a:43:01:e2:56:ff: b8:3f:10:fb:7b:18:80:8d:79:07:1e:54:94:50:98: 83:1a:76:dc:f1:d4:72:3c:70:51:49:ac:97:57:af: ed:9e:64:75:4e:3a:f3:82:87:fa:07:5a:06:f5:d3: cd:15:23:81:d2:ae:00:03:5e:82:45:66:82:1e:64: d2:28:97:b5:0e:57:54:b8:8d:fa:14:d1:1c:1d:03: 9e:fb:3e:0e:7e:93:88:96:7c:f1:b8:6d:33:40:59: a7:5d:75:55:f7:88:c6:69:7e:35:17:7e:de:8a:4c: 84:9f:c0:0f:4d:c5:60:da:9d:4c:96:2b:fb:8b:33: aa:60:a1:ed:d9:34:6b:72:2f:cb:55:f8:c7:14:aa: f4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:DF:FC:D5:B4:CA:B0:F4:1B:8A:26:42:72:03:7B:85:04:0E:8A:C5 X509v3 Authority Key Identifier: keyid:40:7B:7C:7E:E0:9E:DB:AA:0A:35:25:E2:09:FF:8E:93:E4:86:53:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e1:54:4a:2d:a7:af:d9:44:f4:78:e1:f3:35:b0:f7:4a:78:bd: 80:5d:9a:4b:48:7a:d8:9b:9b:77:3b:72:2a:d8:3b:6f:26:74: e2:10:fd:4a:1c:0e:09:f3:f4:03:80:13:f5:63:f5:61:ad:03: 0a:0c:f6:ce:46:89:6e:03:91:5c:00:bc:de:3c:44:fa:80:67: 51:4f:6b:4c:bc:a1:fd:bc:15:b5:0c:6e:88:b8:80:65:93:12: 5d:71:56:6e:41:3e:49:20:8c:35:00:df:40:b4:37:27:96:a9: ef:ae:30:c6:bf:9b:9c:a2:c4:bb:78:87:76:76:3d:44:2c:83: d5:b5:d2:94:d2:34:6d:35:3c:be:5e:b6:97:8b:ff:ad:32:92: 41:48:e4:09:98:3c:c6:ed:3f:9a:53:29:3f:93:75:c2:d2:fc: 00:ce:13:b2:2a:19:03:e0:21:2a:70:4c:8a:da:96:de:a5:a2: bf:02:99:db:c6:f0:a4:b1:bc:52:9b:e7:90:6f:6d:70:8e:fa: 19:09:dc:49:03:0d:8d:4d:4a:e1:73:81:e7:b3:76:e1:75:54: 57:3a:d1:49:00:43:ec:a3:55:b2:26:08:68:9c:cd:e2:31:e9: 2c:9e:f3:2d:4b:fd:3d:dd:20:e5:70:45:73:5a:53:df:06:02: 3e:bd:fb:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL4QWe00JKHs2s7JTTLGwSMQBTx4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA3QjdDN0VFMDlFREJBQTBBMzUyNUUyMDlGRjhFOTNF NDg2NTNDODAeFw0yNTA1MTExMjI3MThaFw0yNTA1MTQxODE0MThaMDMxMTAvBgNV BAMTKDJCREZGQ0Q1QjRDQUIwRjQxQjhBMjY0MjcyMDM3Qjg1MDQwRThBQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHnY82CML0xZk+40ZV1jCwevUD /1oHSUd2WO9AtjLiHRvhDiqJ+cq+1dYzEADvK7fIFf+ejS/WhtwDZ/ciyGa0k7yl ohssfUfBcg0fOfiE56msnVYLwP5Ht1WQsgoH+uSGjnTtGpKvmc7I1BOxBkaIJEpD AeJW/7g/EPt7GICNeQceVJRQmIMadtzx1HI8cFFJrJdXr+2eZHVOOvOCh/oHWgb1 080VI4HSrgADXoJFZoIeZNIol7UOV1S4jfoU0RwdA577Pg5+k4iWfPG4bTNAWadd dVX3iMZpfjUXft6KTISfwA9NxWDanUyWK/uLM6pgoe3ZNGtyL8tV+McUqvT/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK9/81bTKsPQbiiZCcgN7hQQOisUwHwYDVR0j BBgwFoAUQHt8fuCe26oKNSXiCf+Ok+SGU8gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDY0YmY2YS00MzAyLTQ2MGYtOTY2OS0wOWE1MGE3M2FmMWEvMC80MDdCN0M3RUUw OUVEQkFBMEEzNTI1RTIwOUZGOEU5M0U0ODY1M0M4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA3QjdDN0VFMDlFREJBQTBBMzUyNUUyMDlGRjhFOTNFNDg2 NTNDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ2NGJmNmEtNDMwMi00NjBmLTk2 NjktMDlhNTBhNzNhZjFhLzAvNDA3QjdDN0VFMDlFREJBQTBBMzUyNUUyMDlGRjhF OTNFNDg2NTNDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOFUSi2nr9lE9Hjh8zWw90p4vYBdmktIetib m3c7cirYO28mdOIQ/UocDgnz9AOAE/Vj9WGtAwoM9s5GiW4DkVwAvN48RPqAZ1FP a0y8of28FbUMboi4gGWTEl1xVm5BPkkgjDUA30C0NyeWqe+uMMa/m5yixLt4h3Z2 PUQsg9W10pTSNG01PL5etpeL/60ykkFI5AmYPMbtP5pTKT+TdcLS/ADOE7IqGQPg ISpwTIralt6lor8CmdvG8KSxvFKb55BvbXCO+hkJ3EkDDY1NSuFzgeezduF1VFc6 0UkAQ+yjVbImCGiczeIx6Sye8y1L/T3dIOVwRXNaU98GAj69+4s= -----END CERTIFICATE-----Generated at Mon May 12 11:15:56 2025 by rpki-client