$ rpki-client -vvf repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft File: 4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft (raw, json) Hash identifier: mw+EEp7EnoUCWz914nwtBUOZY3nIFrrE75CJmzt4jiI= Subject key identifier: 23:D3:6C:E7:C4:6E:57:CA:11:78:53:DA:9E:23:FF:FC:4F:8E:8C:6D Authority key identifier: 4E:CF:7D:FB:09:FB:3B:5C:21:DD:E6:61:15:0B:95:76:8B:6B:D3:19 Certificate issuer: /CN=4ECF7DFB09FB3B5C21DDE661150B95768B6BD319 Certificate serial: 5804619137A3E7251EE6BCF82D85A87EF566494C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft Manifest number: 01DC Signing time: Fri 09 May 2025 02:41:20 +0000 Manifest this update: Fri 09 May 2025 02:36:20 +0000 Manifest next update: Mon 12 May 2025 08:28:20 +0000 Files and hashes: 1: 3130332e3136332e3233302e302f32342d3234203d3e20313431393037.roa (hash: BplHdHRvA1GeP43VsiSGj8a+Gmuq6dP6VgR2vhuZ0uU=) 2: 3130332e3136332e3233312e302f32342d3234203d3e20313431393037.roa (hash: yg4jobWhxttigVY/iZoK6bsKdtykwi2az+8aCa0nyW4=) 3: 4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl (hash: fij3mrKhZ1kbffwwvtmxHtYgSxUuQPnpCWVjBQi1Dv4=) 4: 3130332e3136332e3233302e302f32332d3233203d3e20313431393037.roa (hash: TWsMpo4cWVJOgLuAED46zFpQBaqLsvvEiv7xGtW44bE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 08:28:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:04:61:91:37:a3:e7:25:1e:e6:bc:f8:2d:85:a8:7e:f5:66:49:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4ECF7DFB09FB3B5C21DDE661150B95768B6BD319 Validity Not Before: May 9 02:36:20 2025 GMT Not After : May 12 08:28:20 2025 GMT Subject: CN=23D36CE7C46E57CA117853DA9E23FFFC4F8E8C6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:db:1d:46:89:25:f5:67:54:05:dd:31:fb:e3: d9:5f:4b:6e:9b:6f:b3:9e:0d:0a:41:bd:32:8e:40: 81:60:f5:ab:f6:76:d7:a6:75:89:ab:00:f0:76:56: 00:70:b1:2d:a8:bc:eb:66:1d:cb:7c:02:de:d6:e1: 5e:ea:6c:d4:f2:25:50:f5:80:47:28:cf:78:5b:4b: 6e:21:b2:50:8e:67:57:94:d7:5a:1a:c5:8a:1f:fe: be:5f:03:af:ee:46:81:ec:1a:a2:a4:b1:65:8b:71: 46:6a:cd:f4:ba:eb:38:ca:71:ef:b1:03:84:ba:86: 66:9d:0d:25:36:3c:fb:f8:97:b0:ae:1e:ac:3b:ad: 7e:d2:4a:ea:e0:34:66:97:dc:22:55:81:6b:51:8b: b7:66:80:c9:f1:24:70:a1:f7:d0:6d:2f:30:56:08: 58:d5:82:c8:13:36:cd:50:92:a7:82:d4:68:7c:b5: 7d:bc:fc:e7:8a:a5:2d:00:d3:e2:c2:f9:34:71:64: 04:02:8c:0f:6d:5d:f4:e9:2f:f6:a0:9c:90:58:6f: 2f:b0:a1:31:e9:62:97:98:a1:92:4d:5f:a7:c9:2d: 07:ae:7a:d9:f6:60:bd:42:89:2f:0d:08:15:91:53: e4:07:1e:3a:90:b3:6a:03:7e:07:95:99:ce:a6:21: 09:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:D3:6C:E7:C4:6E:57:CA:11:78:53:DA:9E:23:FF:FC:4F:8E:8C:6D X509v3 Authority Key Identifier: keyid:4E:CF:7D:FB:09:FB:3B:5C:21:DD:E6:61:15:0B:95:76:8B:6B:D3:19 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d035b3b-e6c5-47f8-99b4-1cb0326edae5/0/4ECF7DFB09FB3B5C21DDE661150B95768B6BD319.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:d2:d6:83:79:47:8e:aa:0c:1d:ab:bc:bf:09:03:e4:0d:d0: 96:56:98:36:cd:ca:8b:91:08:83:cc:7e:8a:10:4e:f3:ad:d7: 55:4d:a4:42:18:05:98:41:34:40:de:31:66:29:14:87:e0:d4: 3a:85:d0:3b:78:b6:3d:90:eb:03:a8:a6:52:f7:85:34:f3:93: 96:c2:9f:71:5f:17:81:8a:39:f1:5e:b2:a4:df:c0:9d:28:67: b8:c2:35:6c:6d:34:41:d3:12:74:63:3d:39:0a:f0:3b:1c:d1: 7a:6d:0a:3a:e4:6e:f4:94:e6:ae:5a:97:61:43:d3:d4:79:2c: dd:1f:51:c6:15:d8:64:18:8f:70:0c:04:57:b1:8c:ab:66:5b: be:9e:a7:fb:70:c1:e8:de:21:97:5a:6a:38:72:df:7b:86:1b: 5a:1a:64:a0:a7:50:59:40:39:4d:07:28:a8:e9:64:61:dd:b7: 1b:9b:fb:29:bd:f2:7b:51:dd:97:88:31:25:4e:d9:40:18:38: b9:98:85:67:e3:fa:e9:1c:6c:3a:24:4b:57:4d:ba:ea:d1:0a: 03:8c:2a:48:87:e9:f7:d5:9e:83:e1:6d:43:ed:46:61:23:c8: 68:a7:e2:76:1a:21:41:86:ab:de:a3:ab:45:f6:3e:25:31:9f: 37:de:e5:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWARhkTej5yUe5rz4LYWofvVmSUwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEVDRjdERkIwOUZCM0I1QzIxRERFNjYxMTUwQjk1NzY4 QjZCRDMxOTAeFw0yNTA1MDkwMjM2MjBaFw0yNTA1MTIwODI4MjBaMDMxMTAvBgNV BAMTKDIzRDM2Q0U3QzQ2RTU3Q0ExMTc4NTNEQTlFMjNGRkZDNEY4RThDNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC22x1GiSX1Z1QF3TH749lfS26b b7OeDQpBvTKOQIFg9av2dtemdYmrAPB2VgBwsS2ovOtmHct8At7W4V7qbNTyJVD1 gEcoz3hbS24hslCOZ1eU11oaxYof/r5fA6/uRoHsGqKksWWLcUZqzfS66zjKce+x A4S6hmadDSU2PPv4l7CuHqw7rX7SSurgNGaX3CJVgWtRi7dmgMnxJHCh99BtLzBW CFjVgsgTNs1QkqeC1Gh8tX28/OeKpS0A0+LC+TRxZAQCjA9tXfTpL/agnJBYby+w oTHpYpeYoZJNX6fJLQeuetn2YL1CiS8NCBWRU+QHHjqQs2oDfgeVmc6mIQkrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUI9Ns58RuV8oReFPaniP//E+OjG0wHwYDVR0j BBgwFoAUTs99+wn7O1wh3eZhFQuVdotr0xkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDAzNWIzYi1lNmM1LTQ3ZjgtOTliNC0xY2IwMzI2ZWRhZTUvMC80RUNGN0RGQjA5 RkIzQjVDMjFEREU2NjExNTBCOTU3NjhCNkJEMzE5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNEVDRjdERkIwOUZCM0I1QzIxRERFNjYxMTUwQjk1NzY4QjZC RDMxOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2QwMzViM2ItZTZjNS00N2Y4LTk5 YjQtMWNiMDMyNmVkYWU1LzAvNEVDRjdERkIwOUZCM0I1QzIxRERFNjYxMTUwQjk1 NzY4QjZCRDMxOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJvS1oN5R46qDB2rvL8JA+QN0JZWmDbNyouR CIPMfooQTvOt11VNpEIYBZhBNEDeMWYpFIfg1DqF0Dt4tj2Q6wOoplL3hTTzk5bC n3FfF4GKOfFesqTfwJ0oZ7jCNWxtNEHTEnRjPTkK8Dsc0XptCjrkbvSU5q5al2FD 09R5LN0fUcYV2GQYj3AMBFexjKtmW76ep/twwejeIZdaajhy33uGG1oaZKCnUFlA OU0HKKjpZGHdtxub+ym98ntR3ZeIMSVO2UAYOLmYhWfj+ukcbDokS1dNuurRCgOM KkiH6ffVnoPhbUPtRmEjyGin4nYaIUGGq96jq0X2PiUxnzfe5fg= -----END CERTIFICATE-----Generated at Sat May 10 05:36:42 2025 by rpki-client