$ rpki-client -vvf repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft File: 847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft (raw, json) Hash identifier: gxFGbizTjPxVY3WPL548/bzlsMG3mkObqe36b3aL4Z8= Subject key identifier: C1:1C:39:6D:77:54:34:3A:53:16:3B:77:CF:15:CD:00:54:04:BA:E2 Authority key identifier: 84:7E:BE:D5:D2:D5:9F:7F:1F:79:1C:B9:C0:DF:A9:33:AE:F0:67:C5 Certificate issuer: /CN=847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5 Certificate serial: 51BA921DBE410A5DD7F5D999AEA8C69640A1C290 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft Manifest number: 04CC Signing time: Sat 03 May 2025 22:02:06 +0000 Manifest this update: Sat 03 May 2025 21:57:06 +0000 Manifest next update: Wed 07 May 2025 06:33:06 +0000 Files and hashes: 1: 3130332e3135302e3231382e302f32342d3234203d3e20313430343031.roa (hash: 8qEqjUoI8JCcLal/9MN7LwmrWh3RHDKtA/EYlOAqErE=) 2: 3130332e3135302e3231392e302f32342d3234203d3e20313430343031.roa (hash: c/6M07w25lMPdFZsQEiGsbFHOgyjdKi77jGVx678XmE=) 3: 847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.crl (hash: eWPuaKlNt54KKAGXkzNyriyP4czS+GxhMGyvErAj3+E=) 4: 3130332e3135302e3231382e302f32332d3233203d3e20313430343031.roa (hash: F+PPkcGu7dt3v5/ygEutR5kwCJMPDoB2mAth7Wc1KQQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.crl rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 06:33:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:ba:92:1d:be:41:0a:5d:d7:f5:d9:99:ae:a8:c6:96:40:a1:c2:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5 Validity Not Before: May 3 21:57:06 2025 GMT Not After : May 7 06:33:06 2025 GMT Subject: CN=C11C396D7754343A53163B77CF15CD005404BAE2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:28:c2:69:e7:75:5a:19:27:8e:4e:cd:20:9c: b0:0c:5a:e9:b6:20:78:be:b1:f6:3b:5c:ad:f1:12: 5a:4a:97:f7:13:97:11:f8:d6:41:8c:7d:00:c1:fa: 12:ad:ad:8b:cc:8c:e6:25:fa:97:0e:cd:9e:91:2b: c9:4e:db:f0:4b:09:97:3d:be:a9:3f:ee:0c:25:f3: 37:c7:71:85:1b:ae:59:69:f9:c3:29:6f:b3:73:4d: cb:2b:79:fc:fc:74:d3:41:89:1e:7f:7e:4c:af:d4: 6f:e4:6d:d7:f3:84:f7:16:19:ff:e5:b1:42:07:eb: 1c:50:f3:66:63:db:7f:cb:56:f7:e1:1f:f5:45:0f: 26:7a:3a:44:4c:6d:b0:8d:e4:12:9e:50:a0:75:23: e7:c2:65:5b:50:80:57:97:11:4a:e2:98:1f:f9:0a: b6:bf:cd:4a:aa:a9:68:98:64:f7:2c:52:67:19:84: eb:61:0f:54:91:ed:df:a5:f8:33:c6:20:49:66:36: ab:48:92:1b:d7:27:3f:21:ba:3a:9a:b6:04:90:2f: 10:35:75:e9:65:81:bf:6f:67:d1:fb:f6:5f:8b:ad: 06:13:39:cd:5b:31:58:86:7a:8d:40:62:8f:01:28: 0c:30:aa:0a:15:ff:cf:5d:15:f9:12:a4:59:ed:d3: 71:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:1C:39:6D:77:54:34:3A:53:16:3B:77:CF:15:CD:00:54:04:BA:E2 X509v3 Authority Key Identifier: keyid:84:7E:BE:D5:D2:D5:9F:7F:1F:79:1C:B9:C0:DF:A9:33:AE:F0:67:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:ae:12:7f:cf:ba:ab:c8:3d:69:de:82:ec:76:63:da:d7:5f: 89:e3:d2:e9:97:72:ff:ab:4f:75:33:bb:a1:96:51:3f:21:00: d8:b8:2f:a2:42:53:cb:d5:90:9d:d1:9f:34:73:8c:9c:87:b3: ae:ae:4f:30:b5:c6:d2:0a:84:d0:d4:ee:8c:6c:47:68:46:c4: 27:0a:44:03:d6:b2:f7:1a:54:c2:04:0c:a9:1e:a4:49:35:3b: 4a:53:af:8e:00:77:cb:15:79:ed:cb:61:76:fa:3e:8c:63:22: 6c:d2:d3:68:99:7a:3f:cc:bd:f3:fd:bb:6d:f4:45:d6:e5:34: f8:21:ff:14:81:65:cc:97:e2:20:6c:83:4e:63:01:08:c6:43: 0e:d4:28:ff:bc:fb:5c:d7:7f:3f:50:71:84:3e:0b:84:cb:0f: 16:60:6d:12:1e:33:cf:5c:89:3f:80:a0:5e:84:1c:c0:04:44: f4:b7:22:22:c1:0d:99:87:ea:d9:4d:c1:f5:f3:3a:7b:7c:36: 17:b0:7e:0e:5f:75:5a:eb:80:27:0c:c4:bc:52:1d:0c:b5:90: e7:38:15:ce:df:e8:6a:63:d9:ce:fd:59:3a:cf:3d:fd:55:dd: 29:8a:90:05:94:26:c4:69:13:d4:09:01:7c:87:e4:b0:d5:97: 25:13:43:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUbqSHb5BCl3X9dmZrqjGlkChwpAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ3RUJFRDVEMkQ1OUY3RjFGNzkxQ0I5QzBERkE5MzNB RUYwNjdDNTAeFw0yNTA1MDMyMTU3MDZaFw0yNTA1MDcwNjMzMDZaMDMxMTAvBgNV BAMTKEMxMUMzOTZENzc1NDM0M0E1MzE2M0I3N0NGMTVDRDAwNTQwNEJBRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkKMJp53VaGSeOTs0gnLAMWum2 IHi+sfY7XK3xElpKl/cTlxH41kGMfQDB+hKtrYvMjOYl+pcOzZ6RK8lO2/BLCZc9 vqk/7gwl8zfHcYUbrllp+cMpb7NzTcsrefz8dNNBiR5/fkyv1G/kbdfzhPcWGf/l sUIH6xxQ82Zj23/LVvfhH/VFDyZ6OkRMbbCN5BKeUKB1I+fCZVtQgFeXEUrimB/5 Cra/zUqqqWiYZPcsUmcZhOthD1SR7d+l+DPGIElmNqtIkhvXJz8hujqatgSQLxA1 dellgb9vZ9H79l+LrQYTOc1bMViGeo1AYo8BKAwwqgoV/89dFfkSpFnt03FpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwRw5bXdUNDpTFjt3zxXNAFQEuuIwHwYDVR0j BBgwFoAUhH6+1dLVn38feRy5wN+pM67wZ8UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjVkNzJmMy0yZGIyLTRiY2MtOWY3Ny1kMTQ0MmI2MzJkMDQvMC84NDdFQkVENUQy RDU5RjdGMUY3OTFDQjlDMERGQTkzM0FFRjA2N0M1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ3RUJFRDVEMkQ1OUY3RjFGNzkxQ0I5QzBERkE5MzNBRUYw NjdDNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I1ZDcyZjMtMmRiMi00YmNjLTlm NzctZDE0NDJiNjMyZDA0LzAvODQ3RUJFRDVEMkQ1OUY3RjFGNzkxQ0I5QzBERkE5 MzNBRUYwNjdDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFWuEn/PuqvIPWnegux2Y9rXX4nj0umXcv+r T3Uzu6GWUT8hANi4L6JCU8vVkJ3RnzRzjJyHs66uTzC1xtIKhNDU7oxsR2hGxCcK RAPWsvcaVMIEDKkepEk1O0pTr44Ad8sVee3LYXb6PoxjImzS02iZej/MvfP9u230 RdblNPgh/xSBZcyX4iBsg05jAQjGQw7UKP+8+1zXfz9QcYQ+C4TLDxZgbRIeM89c iT+AoF6EHMAERPS3IiLBDZmH6tlNwfXzOnt8Nhewfg5fdVrrgCcMxLxSHQy1kOc4 Fc7f6Gpj2c79WTrPPf1V3SmKkAWUJsRpE9QJAXyH5LDVlyUTQ/Y= -----END CERTIFICATE-----Generated at Tue May 6 01:51:08 2025 by rpki-client