$ rpki-client -vvf repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft File: 7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft (raw, json) Hash identifier: oqeJSgdLRTiE2UP7qmSm+xYHBSZ2M1H/GqaAZL3hiFQ= Subject key identifier: F8:54:A1:3A:38:AC:FC:3B:11:25:9E:46:5C:15:B5:6B:7E:B4:EF:05 Authority key identifier: 7B:94:59:74:A7:9E:8C:77:CB:02:F9:44:95:BA:9F:87:BA:A0:E0:38 Certificate issuer: /CN=7B945974A79E8C77CB02F94495BA9F87BAA0E038 Certificate serial: 2B2913FFFCE1BF017697A0023A0BE8E348DD917D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B945974A79E8C77CB02F94495BA9F87BAA0E038.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft Manifest number: 034B Signing time: Mon 05 May 2025 22:31:58 +0000 Manifest this update: Mon 05 May 2025 22:26:58 +0000 Manifest next update: Thu 08 May 2025 22:33:58 +0000 Files and hashes: 1: 3130332e3136372e33302e302f32332d3234203d3e203137393935.roa (hash: gtwTI3DJtMemj0Ti0EgOwcabGH1uQz62nqOF7QPkYWU=) 2: 7B945974A79E8C77CB02F94495BA9F87BAA0E038.crl (hash: yNCN1ykUrmFQAbep4CF5hhfkNSPvn6bpNOJdPu1Pkuk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.crl rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B945974A79E8C77CB02F94495BA9F87BAA0E038.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 08 May 2025 22:33:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:29:13:ff:fc:e1:bf:01:76:97:a0:02:3a:0b:e8:e3:48:dd:91:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B945974A79E8C77CB02F94495BA9F87BAA0E038 Validity Not Before: May 5 22:26:58 2025 GMT Not After : May 8 22:33:58 2025 GMT Subject: CN=F854A13A38ACFC3B11259E465C15B56B7EB4EF05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:a7:e7:d4:f4:0e:57:cc:f4:bd:ba:22:3f:3e: bf:fc:fc:3a:6c:1a:01:29:59:51:8e:20:94:8c:e4: 09:9a:bc:ff:8b:14:b2:28:c6:e3:c0:74:a1:db:33: 6d:87:c3:47:ae:43:85:34:70:af:b0:9d:44:98:83: 51:6d:85:46:14:48:0f:e8:28:50:25:d5:11:96:5f: d7:dc:7e:eb:23:3a:cf:7b:cb:65:95:b6:47:8c:fe: 49:79:59:d5:e4:cc:df:e2:1f:cd:7a:44:2e:98:dd: 7a:71:77:b5:86:a1:42:a7:b7:2b:71:09:6e:23:cc: b7:3b:d1:e3:0d:27:43:2d:34:6d:b4:c2:72:3a:2f: 63:53:dd:9c:3b:14:e3:87:84:47:57:d1:fc:88:bc: 82:46:01:c4:94:da:4f:83:7b:a5:79:f4:af:39:11: f8:9f:2f:0f:01:06:c6:68:0c:d2:3e:0a:f1:fd:a2: 86:ec:12:a8:59:b2:e2:2b:e5:4c:b8:f7:49:97:df: 75:23:73:a4:c2:0a:02:24:a1:ca:d6:bc:8c:d4:6b: 95:d5:92:65:43:96:15:b4:af:2b:1e:ba:9e:58:dd: a1:b0:b4:b4:84:fc:8b:52:f1:b3:ef:5d:eb:3e:2f: 10:d1:75:b6:53:1e:74:0a:01:08:7e:9b:95:6f:91: 6c:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F8:54:A1:3A:38:AC:FC:3B:11:25:9E:46:5C:15:B5:6B:7E:B4:EF:05 X509v3 Authority Key Identifier: keyid:7B:94:59:74:A7:9E:8C:77:CB:02:F9:44:95:BA:9F:87:BA:A0:E0:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B945974A79E8C77CB02F94495BA9F87BAA0E038.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:a6:ec:1e:a3:ce:59:30:fa:aa:d5:5a:0e:86:7e:ca:fb:35: b9:00:ef:52:58:39:92:b9:15:a6:65:67:22:b2:a2:a8:a2:64: 04:33:63:ac:96:96:2b:a7:b2:d2:70:a7:3a:ce:f2:ee:c5:ce: c0:35:a8:90:c3:92:d8:1f:71:7b:1e:e5:ad:20:fa:37:04:61: 6e:5a:e6:ca:ca:25:48:39:54:77:0b:5b:49:18:df:8e:25:55: f9:cd:18:34:f6:09:1b:c7:7f:c7:a8:82:c5:e3:dc:97:09:d5: b7:bd:8f:c5:97:f3:62:6e:f9:51:fb:25:ee:e7:4a:2f:11:59: 9e:ee:25:99:7c:8a:c2:80:e0:5c:f8:74:51:95:4e:f4:0a:10: 4a:98:74:ad:d5:b7:e4:f3:fc:d3:4a:a7:6f:f3:4d:1b:f1:4a: 1d:66:22:a7:87:93:d8:1e:8c:a5:dd:1d:74:d5:23:b9:a7:99: 9a:60:83:71:a2:e6:1f:dc:b1:d4:f8:e9:09:fa:11:6a:fb:4d: 65:c2:19:b3:34:93:16:52:83:2d:49:28:f5:51:26:0d:4c:f3: c9:00:55:be:af:d9:7c:69:e1:b3:8c:b9:36:c0:56:22:5f:48: e1:cc:28:ac:86:90:41:6e:6b:a2:b4:24:03:9e:76:85:5b:75: 45:74:f2:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKykT//zhvwF2l6ACOgvo40jdkX0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0I5NDU5NzRBNzlFOEM3N0NCMDJGOTQ0OTVCQTlGODdC QUEwRTAzODAeFw0yNTA1MDUyMjI2NThaFw0yNTA1MDgyMjMzNThaMDMxMTAvBgNV BAMTKEY4NTRBMTNBMzhBQ0ZDM0IxMTI1OUU0NjVDMTVCNTZCN0VCNEVGMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzp+fU9A5XzPS9uiI/Pr/8/Dps GgEpWVGOIJSM5AmavP+LFLIoxuPAdKHbM22Hw0euQ4U0cK+wnUSYg1FthUYUSA/o KFAl1RGWX9fcfusjOs97y2WVtkeM/kl5WdXkzN/iH816RC6Y3Xpxd7WGoUKntytx CW4jzLc70eMNJ0MtNG20wnI6L2NT3Zw7FOOHhEdX0fyIvIJGAcSU2k+De6V59K85 EfifLw8BBsZoDNI+CvH9oobsEqhZsuIr5Uy490mX33Ujc6TCCgIkocrWvIzUa5XV kmVDlhW0ryseup5Y3aGwtLSE/ItS8bPvXes+LxDRdbZTHnQKAQh+m5VvkWxRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+FShOjis/DsRJZ5GXBW1a3607wUwHwYDVR0j BBgwFoAUe5RZdKeejHfLAvlElbqfh7qg4DgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzYzNWNlOS0wZWE1LTQ3ZDgtOWZjYy1jYWQxYzlmMDZmYmUvMC83Qjk0NTk3NEE3 OUU4Qzc3Q0IwMkY5NDQ5NUJBOUY4N0JBQTBFMDM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0I5NDU5NzRBNzlFOEM3N0NCMDJGOTQ0OTVCQTlGODdCQUEw RTAzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2M2MzVjZTktMGVhNS00N2Q4LTlm Y2MtY2FkMWM5ZjA2ZmJlLzAvN0I5NDU5NzRBNzlFOEM3N0NCMDJGOTQ0OTVCQTlG ODdCQUEwRTAzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFem7B6jzlkw+qrVWg6Gfsr7NbkA71JYOZK5 FaZlZyKyoqiiZAQzY6yWliunstJwpzrO8u7FzsA1qJDDktgfcXse5a0g+jcEYW5a 5srKJUg5VHcLW0kY344lVfnNGDT2CRvHf8eogsXj3JcJ1be9j8WX82Ju+VH7Je7n Si8RWZ7uJZl8isKA4Fz4dFGVTvQKEEqYdK3Vt+Tz/NNKp2/zTRvxSh1mIqeHk9ge jKXdHXTVI7mnmZpgg3Gi5h/csdT46Qn6EWr7TWXCGbM0kxZSgy1JKPVRJg1M88kA Vb6v2Xxp4bOMuTbAViJfSOHMKKyGkEFua6K0JAOedoVbdUV08kM= -----END CERTIFICATE-----Generated at Wed May 7 17:44:36 2025 by rpki-client