$ rpki-client -vvf repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft File: A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft (raw, json) Hash identifier: ME9lid9+MoC7mfYNjDQJp1zB8PQQiUVipjz8y40fQ+0= Subject key identifier: 32:65:CA:B0:B2:F9:8F:EA:DD:BC:0A:89:19:85:EB:C1:32:00:1C:5D Authority key identifier: A7:D5:3E:B5:45:1E:AF:8A:CA:B6:38:48:7F:BD:EB:40:17:7A:0F:8A Certificate issuer: /CN=A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A Certificate serial: 4F472F00062ABAEF740527AA9A7916C362CD83D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft Manifest number: 0187 Signing time: Tue 13 May 2025 03:11:28 +0000 Manifest this update: Tue 13 May 2025 03:06:28 +0000 Manifest next update: Fri 16 May 2025 13:29:28 +0000 Files and hashes: 1: A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.crl (hash: KuVkGri+vIOs/NDbQWEtJQ8XZAUOcWQ6izjUlDC0j7c=) 2: 3130332e3139302e36322e302f32332d3234203d3e20313439383938.roa (hash: Cp2AGXmtWxhdOX8t8c9ZWl5s1GCXbA0uZVtL40w4/7g=) 3: 3130332e3139302e36332e302f32342d3234203d3e20313439383938.roa (hash: 2CVr+NqiEqGGwrJfck3G7ZB8HhulLnTSsHN6lGbSZ/c=) 4: 3130332e3139302e36322e302f32342d3234203d3e20313439383938.roa (hash: 2ja7FKvmu0FlqkDf7LuG1Z7B59LI4ArGIpEzwSMjxRg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.crl rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 16 May 2025 13:29:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:47:2f:00:06:2a:ba:ef:74:05:27:aa:9a:79:16:c3:62:cd:83:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A Validity Not Before: May 13 03:06:28 2025 GMT Not After : May 16 13:29:28 2025 GMT Subject: CN=3265CAB0B2F98FEADDBC0A891985EBC132001C5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c1:f7:f7:f5:f1:8c:f1:10:38:d6:ab:ba:3c: 5e:a5:5c:0b:b7:a2:b8:01:97:a7:c8:b0:4a:94:02: 4c:4b:d3:98:28:ca:8d:3c:c8:7a:32:2a:9d:8d:ca: 3c:74:81:f7:71:69:12:2d:ce:d2:14:e5:46:33:2b: a6:64:1e:a6:f6:41:d3:fc:37:33:83:24:b6:c7:34: cc:66:03:0d:b1:e8:16:41:cf:ff:58:89:29:a9:83: ea:17:05:68:e1:a0:38:c9:15:66:4c:ca:1f:bd:41: 3a:e0:8c:05:c7:08:d5:b8:37:ee:c2:d9:74:44:9d: 5d:2c:97:8e:51:9b:f7:83:1e:30:ad:f3:e7:55:17: ee:be:fa:68:ed:ae:88:ab:30:42:4e:88:6d:cf:cc: 2e:52:ce:46:1f:e1:4f:4f:cd:d2:42:0e:a1:3a:4c: 1d:f7:f3:3a:c3:f0:48:1c:f4:15:e5:ca:93:8c:3e: 1c:2a:2c:7a:fc:c2:3a:cd:64:63:d3:2b:54:83:5b: 4c:2a:42:1d:d1:0b:d8:fc:49:d4:40:72:62:b2:4e: 03:8f:59:74:46:e5:79:75:8d:37:fa:21:62:87:23: 44:72:93:79:ae:dc:b5:af:c5:66:3c:f6:21:a3:63: 74:b8:f2:59:1b:2f:5d:6f:94:6e:28:c8:af:73:9d: f9:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:65:CA:B0:B2:F9:8F:EA:DD:BC:0A:89:19:85:EB:C1:32:00:1C:5D X509v3 Authority Key Identifier: keyid:A7:D5:3E:B5:45:1E:AF:8A:CA:B6:38:48:7F:BD:EB:40:17:7A:0F:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:38:f8:da:fe:77:3f:90:0d:cd:17:4b:96:f5:e8:be:c2:8c: b3:8c:c7:62:93:a0:b5:3a:9d:13:6c:8e:ab:b8:da:e3:f7:b3: 56:cd:8e:0f:f0:90:50:d4:06:9d:c6:ce:3a:7f:41:24:11:28: 45:cb:cb:72:8b:3d:62:93:e6:6d:27:7e:0e:dd:da:a5:27:c7: 8f:ac:35:a9:07:a6:b4:87:7d:53:e1:a8:d5:2b:7c:c6:72:28: df:56:76:5b:98:91:e0:c1:a9:93:c9:76:d1:09:ac:cd:6c:ea: f1:79:db:86:38:bd:4f:ac:5a:5f:8c:a9:15:52:04:16:7c:28: 50:6f:e0:25:fb:8f:d7:a5:47:15:95:08:cf:bf:e1:cc:7d:be: 4f:d9:95:2c:e3:16:07:f2:4f:76:fd:6e:c1:79:5b:1a:f4:f0: 87:08:15:97:76:35:a6:93:be:55:e7:94:5a:18:dc:c7:1b:aa: 9a:8a:5b:22:48:8d:55:38:15:52:1e:da:b3:a9:08:f2:a2:5c: a1:f8:07:a2:2a:81:08:6a:57:dd:45:c2:dd:f1:e1:15:e0:bd: 56:f2:42:49:81:2f:c5:e0:bb:ce:9d:fc:59:69:eb:42:41:2a: 5f:ec:53:5c:87:a8:dc:7f:8d:dd:c1:0e:53:bf:ee:ae:da:c0: 81:df:a8:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT0cvAAYquu90BSeqmnkWw2LNg9UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdENTNFQjU0NTFFQUY4QUNBQjYzODQ4N0ZCREVCNDAx NzdBMEY4QTAeFw0yNTA1MTMwMzA2MjhaFw0yNTA1MTYxMzI5MjhaMDMxMTAvBgNV BAMTKDMyNjVDQUIwQjJGOThGRUFEREJDMEE4OTE5ODVFQkMxMzIwMDFDNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAwff39fGM8RA41qu6PF6lXAu3 orgBl6fIsEqUAkxL05goyo08yHoyKp2Nyjx0gfdxaRItztIU5UYzK6ZkHqb2QdP8 NzODJLbHNMxmAw2x6BZBz/9YiSmpg+oXBWjhoDjJFWZMyh+9QTrgjAXHCNW4N+7C 2XREnV0sl45Rm/eDHjCt8+dVF+6++mjtroirMEJOiG3PzC5SzkYf4U9PzdJCDqE6 TB338zrD8Egc9BXlypOMPhwqLHr8wjrNZGPTK1SDW0wqQh3RC9j8SdRAcmKyTgOP WXRG5Xl1jTf6IWKHI0Ryk3mu3LWvxWY89iGjY3S48lkbL11vlG4oyK9znfmzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMmXKsLL5j+rdvAqJGYXrwTIAHF0wHwYDVR0j BBgwFoAUp9U+tUUer4rKtjhIf73rQBd6D4owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjIwYjQyMy1kZDVkLTQ0OGYtYmJkMy0wNDUzMGVjMTcxNWQvMC9BN0Q1M0VCNTQ1 MUVBRjhBQ0FCNjM4NDg3RkJERUI0MDE3N0EwRjhBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTdENTNFQjU0NTFFQUY4QUNBQjYzODQ4N0ZCREVCNDAxNzdB MEY4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzYyMGI0MjMtZGQ1ZC00NDhmLWJi ZDMtMDQ1MzBlYzE3MTVkLzAvQTdENTNFQjU0NTFFQUY4QUNBQjYzODQ4N0ZCREVC NDAxNzdBMEY4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIk4+Nr+dz+QDc0XS5b16L7CjLOMx2KToLU6 nRNsjqu42uP3s1bNjg/wkFDUBp3Gzjp/QSQRKEXLy3KLPWKT5m0nfg7d2qUnx4+s NakHprSHfVPhqNUrfMZyKN9WdluYkeDBqZPJdtEJrM1s6vF524Y4vU+sWl+MqRVS BBZ8KFBv4CX7j9elRxWVCM+/4cx9vk/ZlSzjFgfyT3b9bsF5Wxr08IcIFZd2NaaT vlXnlFoY3McbqpqKWyJIjVU4FVIe2rOpCPKiXKH4B6IqgQhqV91Fwt3x4RXgvVby QkmBL8Xgu86d/Flp60JBKl/sU1yHqNx/jd3BDlO/7q7awIHfqBc= -----END CERTIFICATE-----Generated at Tue May 13 06:40:37 2025 by rpki-client