$ rpki-client -vvf repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.mft File: 722FE79638E6D14E4794815122247CBEC27B8505.mft (raw, json) Hash identifier: aSuBOnEIAR91pl9C3CIFbFCPdoOnAskX+fvsi0OILX8= Subject key identifier: 9D:D6:80:D8:4B:7F:4F:B2:00:36:FD:E4:A9:A1:5F:42:14:3C:9D:46 Authority key identifier: 72:2F:E7:96:38:E6:D1:4E:47:94:81:51:22:24:7C:BE:C2:7B:85:05 Certificate issuer: /CN=722FE79638E6D14E4794815122247CBEC27B8505 Certificate serial: 479C3E0FB92167F50F9412E7A03A47A2CFCDFF12 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722FE79638E6D14E4794815122247CBEC27B8505.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.mft Manifest number: 0383 Signing time: Wed 07 May 2025 18:50:38 +0000 Manifest this update: Wed 07 May 2025 18:45:38 +0000 Manifest next update: Sun 11 May 2025 03:43:38 +0000 Files and hashes: 1: 3130332e3136372e3136362e302f32332d3233203d3e20313431393834.roa (hash: uMhuVVCWV6KJ9BoKOLCiDb7P+XJG3YcMCjnNadUtMPc=) 2: 3130332e3136372e3136372e302f32342d3234203d3e20313431393834.roa (hash: mcmmT8pT8SsuE0p1UknEAcW7BeTtM+31BJ7lasnlFWU=) 3: 722FE79638E6D14E4794815122247CBEC27B8505.crl (hash: GFnseZZqM1N0tFKAvfpht0CxX3VTG/MPkbaF2FUd0Gw=) 4: 3130332e3136372e3136362e302f32342d3234203d3e20313431393834.roa (hash: Lha8Dc5V7yxaccwl2cB1wpI7D9zABdY3uxyScLd254Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.crl rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722FE79638E6D14E4794815122247CBEC27B8505.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 03:43:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:9c:3e:0f:b9:21:67:f5:0f:94:12:e7:a0:3a:47:a2:cf:cd:ff:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=722FE79638E6D14E4794815122247CBEC27B8505 Validity Not Before: May 7 18:45:38 2025 GMT Not After : May 11 03:43:38 2025 GMT Subject: CN=9DD680D84B7F4FB20036FDE4A9A15F42143C9D46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:84:c7:12:fb:d4:e7:79:f2:19:70:35:76:e7: 9f:30:4d:26:d3:60:4a:b7:fd:55:00:6a:94:f2:ab: ac:d1:92:79:32:23:77:36:50:b4:4d:dc:95:ef:20: 10:11:5b:da:ef:e5:cd:46:63:db:5c:9b:0b:e4:cf: 68:90:5f:21:f0:50:9b:01:34:76:8a:aa:65:e6:75: 5e:ed:6c:e2:e7:67:3e:50:85:d3:a6:22:d3:d9:43: fd:24:ad:9e:c2:60:25:c8:85:70:d6:cb:43:04:50: 10:ba:ed:8b:df:b1:c7:d5:28:95:0e:11:66:89:36: f8:a3:84:e2:a4:3c:58:b4:22:bd:20:ed:38:67:7a: fd:e3:59:78:ce:7d:00:1b:0d:50:67:62:7f:63:21: a5:11:26:b1:fe:84:1b:86:6a:80:1d:e0:3f:b1:4e: b7:a5:27:80:44:64:13:37:5a:68:0d:8f:51:f0:44: 7b:79:41:c7:c7:fa:12:ba:83:19:14:87:7e:38:a4: f0:bd:d2:ff:d8:33:46:d3:df:22:d7:cb:71:fd:ca: b0:87:b2:c6:f3:78:41:ef:36:a2:94:d5:87:5a:42: 00:e2:01:f8:21:3a:59:ca:da:ed:e7:5e:9f:15:08: 92:51:65:a1:7d:a4:b7:f6:a9:0c:f6:4d:22:fb:33: 4d:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:D6:80:D8:4B:7F:4F:B2:00:36:FD:E4:A9:A1:5F:42:14:3C:9D:46 X509v3 Authority Key Identifier: keyid:72:2F:E7:96:38:E6:D1:4E:47:94:81:51:22:24:7C:BE:C2:7B:85:05 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/722FE79638E6D14E4794815122247CBEC27B8505.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7540cf80-9315-42c1-844e-bb03622a05c1/0/722FE79638E6D14E4794815122247CBEC27B8505.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:d4:d7:00:bb:61:19:d6:48:f6:c4:44:d8:aa:a7:fb:9c:5a: d5:43:50:85:dd:45:45:8a:42:39:7c:22:68:30:4b:41:48:df: 9e:f1:44:77:d3:52:72:05:92:00:62:2a:b9:64:aa:06:f3:fc: 63:f4:02:29:9c:c2:5a:3c:81:55:39:f9:f0:11:61:7f:e8:44: 2a:d5:ac:71:05:00:5d:c4:5d:34:06:bd:5e:57:bd:63:06:68: 24:1d:aa:94:e1:6b:f0:18:b6:40:20:79:c7:15:ca:40:20:ae: db:16:14:0c:4e:3c:ba:a1:4f:2e:6b:b7:39:21:b0:49:e7:f5: e5:0f:18:c5:e1:e3:0d:a5:90:c0:9e:a3:58:cc:d5:a0:a9:21: 1f:c8:ee:ee:61:7c:9e:0b:94:58:df:dc:b0:1a:4e:49:27:d6: 56:90:6e:ea:cb:69:3c:81:e4:39:b5:20:94:ad:34:2b:a8:5b: 34:27:db:a6:b2:f2:33:c8:f6:06:93:c3:26:5b:20:bf:75:35: b0:8f:99:cb:89:55:cd:49:d2:65:0c:90:5d:22:a3:7e:b6:8d: 9a:be:39:d8:1f:18:81:81:be:f5:65:cd:91:85:ae:71:34:ca: e0:5c:e1:d1:61:ba:e8:52:e0:4c:25:a9:47:a8:e1:1b:1e:e1: 29:06:c7:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR5w+D7khZ/UPlBLnoDpHos/N/xIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzIyRkU3OTYzOEU2RDE0RTQ3OTQ4MTUxMjIyNDdDQkVD MjdCODUwNTAeFw0yNTA1MDcxODQ1MzhaFw0yNTA1MTEwMzQzMzhaMDMxMTAvBgNV BAMTKDlERDY4MEQ4NEI3RjRGQjIwMDM2RkRFNEE5QTE1RjQyMTQzQzlENDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXhMcS+9TnefIZcDV2558wTSbT YEq3/VUAapTyq6zRknkyI3c2ULRN3JXvIBARW9rv5c1GY9tcmwvkz2iQXyHwUJsB NHaKqmXmdV7tbOLnZz5QhdOmItPZQ/0krZ7CYCXIhXDWy0MEUBC67YvfscfVKJUO EWaJNvijhOKkPFi0Ir0g7Thnev3jWXjOfQAbDVBnYn9jIaURJrH+hBuGaoAd4D+x TrelJ4BEZBM3WmgNj1HwRHt5QcfH+hK6gxkUh344pPC90v/YM0bT3yLXy3H9yrCH ssbzeEHvNqKU1YdaQgDiAfghOlnK2u3nXp8VCJJRZaF9pLf2qQz2TSL7M01ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUndaA2Et/T7IANv3kqaFfQhQ8nUYwHwYDVR0j BBgwFoAUci/nljjm0U5HlIFRIiR8vsJ7hQUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NTQwY2Y4MC05MzE1LTQyYzEtODQ0ZS1iYjAzNjIyYTA1YzEvMC83MjJGRTc5NjM4 RTZEMTRFNDc5NDgxNTEyMjI0N0NCRUMyN0I4NTA1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzIyRkU3OTYzOEU2RDE0RTQ3OTQ4MTUxMjIyNDdDQkVDMjdC ODUwNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzU0MGNmODAtOTMxNS00MmMxLTg0 NGUtYmIwMzYyMmEwNWMxLzAvNzIyRkU3OTYzOEU2RDE0RTQ3OTQ4MTUxMjIyNDdD QkVDMjdCODUwNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANLU1wC7YRnWSPbERNiqp/ucWtVDUIXdRUWK Qjl8ImgwS0FI357xRHfTUnIFkgBiKrlkqgbz/GP0Aimcwlo8gVU5+fARYX/oRCrV rHEFAF3EXTQGvV5XvWMGaCQdqpTha/AYtkAgeccVykAgrtsWFAxOPLqhTy5rtzkh sEnn9eUPGMXh4w2lkMCeo1jM1aCpIR/I7u5hfJ4LlFjf3LAaTkkn1laQburLaTyB 5Dm1IJStNCuoWzQn26ay8jPI9gaTwyZbIL91NbCPmcuJVc1J0mUMkF0io362jZq+ OdgfGIGBvvVlzZGFrnE0yuBc4dFhuuhS4EwlqUeo4Rse4SkGx1k= -----END CERTIFICATE-----Generated at Fri May 9 04:37:50 2025 by rpki-client