$ rpki-client -vvf repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft File: 1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft (raw, json) Hash identifier: wuE0OQH5lWuc2KoNA2NxhMGPQyYvl6NrzP0Z706Numw= Subject key identifier: AB:1A:0A:AF:05:FB:77:2B:AD:F3:B5:34:27:0D:AD:39:4F:73:6E:CA Authority key identifier: 1D:21:38:5E:B5:B3:F8:2C:7D:1A:B5:C7:FD:3E:F2:7B:E8:E8:3A:7B Certificate issuer: /CN=1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B Certificate serial: 503D28C3A27674C56AC2A6DE8398B9CB208C66AD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft Manifest number: A7 Signing time: Sat 10 May 2025 20:32:23 +0000 Manifest this update: Sat 10 May 2025 20:27:23 +0000 Manifest next update: Wed 14 May 2025 07:20:23 +0000 Files and hashes: 1: 3130332e3138362e3231312e302f32342d3234203d3e20313439373136.roa (hash: j4UVAm85xznfydPQ3h7b+m7Leez4agyKq00s/igegvE=) 2: 3130332e3138362e3231302e302f32342d3234203d3e20313439373136.roa (hash: V3n7iTqFLIuD2Vsrr8YhXUNiWyUGWv7MsjGLhbtU/DY=) 3: 1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.crl (hash: WBvog42HfAEHLm249LKEruGHXP5++YdM2UlodQ8cglU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.crl rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 07:20:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:3d:28:c3:a2:76:74:c5:6a:c2:a6:de:83:98:b9:cb:20:8c:66:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B Validity Not Before: May 10 20:27:23 2025 GMT Not After : May 14 07:20:23 2025 GMT Subject: CN=AB1A0AAF05FB772BADF3B534270DAD394F736ECA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:cb:2a:81:2c:fb:1f:9f:e0:94:e6:1c:7c:13: c8:5a:a9:51:ab:71:df:32:02:99:e5:b5:28:7d:01: 98:af:38:a8:82:f1:b6:b1:7d:76:16:a1:b2:42:b7: b8:95:d9:2e:19:81:84:46:26:55:13:1b:69:65:48: 91:4d:32:c7:a2:31:c5:bb:1e:65:9d:e6:28:a8:5e: 90:10:c1:75:be:3e:81:66:cf:99:46:d7:f6:30:b9: a2:f5:52:5d:7f:bf:c2:b4:23:9a:b8:87:30:39:fc: d0:6e:63:2a:5e:fc:76:34:5c:13:54:ee:7b:e7:7b: be:9a:81:8e:38:23:a8:22:0c:83:5d:d6:27:5f:e3: e7:61:db:72:61:6b:db:8a:10:89:4c:21:c7:3f:01: 28:ec:45:ee:c9:b9:f5:2a:d4:09:f3:3b:77:32:3a: 8b:56:a9:88:27:e0:08:ae:47:f6:66:12:3e:8b:33: e7:28:70:f4:4e:50:c7:c1:4a:16:2d:2e:4d:b4:32: de:05:cc:9e:f2:ed:ac:8f:3e:e8:83:7e:6b:43:01: 1e:1e:3a:0c:8c:68:d7:6f:c0:74:b0:03:fb:25:0e: 3d:2e:d6:34:24:98:f2:ad:58:47:d2:0c:5a:6c:ee: 77:d2:e9:d6:8e:96:e4:c9:96:0c:5c:10:0c:e9:9a: bf:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:1A:0A:AF:05:FB:77:2B:AD:F3:B5:34:27:0D:AD:39:4F:73:6E:CA X509v3 Authority Key Identifier: keyid:1D:21:38:5E:B5:B3:F8:2C:7D:1A:B5:C7:FD:3E:F2:7B:E8:E8:3A:7B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/94dcef65-5de3-4129-ac27-7706d7266001/0/1D21385EB5B3F82C7D1AB5C7FD3EF27BE8E83A7B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:59:30:db:81:b9:08:a1:1f:9f:cf:35:62:59:1e:4b:76:ee: 34:c0:da:d8:6b:b1:3f:2b:97:7c:8d:fd:0d:d8:6c:bb:48:d2: de:b0:1e:10:00:32:b4:87:5f:6b:fd:72:70:07:aa:9b:49:2d: 50:cf:1c:a4:d8:7c:97:0b:00:8b:c6:5a:f2:7d:77:42:c5:0f: c0:50:75:ff:6f:b7:b8:e2:47:a2:28:c8:f2:a5:1a:59:d6:f6: a2:3e:3e:9d:ca:ec:8d:64:f0:0d:6b:0c:4d:8f:d8:82:e1:ed: 22:c6:3f:f9:24:62:67:45:e2:e6:4f:2d:48:fa:be:60:18:6e: d0:b2:c2:0a:7a:b8:95:6c:b1:24:51:15:6c:be:5d:93:8f:67: fe:a2:2b:48:61:d8:55:94:26:a0:15:aa:33:77:56:f0:57:8a: 1c:9c:f4:9d:36:85:68:67:1c:29:2d:04:bb:06:26:a7:fb:da: ab:33:12:51:5a:f7:ac:ca:db:ad:7e:73:c6:46:09:4a:16:c4: 94:d7:90:65:e4:6f:6f:78:7a:a3:dd:60:1c:de:38:c9:64:2b: c5:cf:05:ec:d7:08:10:a4:aa:ce:1b:03:d2:f6:ac:73:4a:1f: 36:80:3d:55:f2:78:99:9c:08:2f:1d:a6:3d:c1:72:37:6c:06: 46:52:af:9a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUD0ow6J2dMVqwqbeg5i5yyCMZq0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUQyMTM4NUVCNUIzRjgyQzdEMUFCNUM3RkQzRUYyN0JF OEU4M0E3QjAeFw0yNTA1MTAyMDI3MjNaFw0yNTA1MTQwNzIwMjNaMDMxMTAvBgNV BAMTKEFCMUEwQUFGMDVGQjc3MkJBREYzQjUzNDI3MERBRDM5NEY3MzZFQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeyyqBLPsfn+CU5hx8E8haqVGr cd8yApnltSh9AZivOKiC8baxfXYWobJCt7iV2S4ZgYRGJlUTG2llSJFNMseiMcW7 HmWd5iioXpAQwXW+PoFmz5lG1/YwuaL1Ul1/v8K0I5q4hzA5/NBuYype/HY0XBNU 7nvne76agY44I6giDINd1idf4+dh23Jha9uKEIlMIcc/ASjsRe7JufUq1AnzO3cy OotWqYgn4AiuR/ZmEj6LM+cocPROUMfBShYtLk20Mt4FzJ7y7ayPPuiDfmtDAR4e OgyMaNdvwHSwA/slDj0u1jQkmPKtWEfSDFps7nfS6daOluTJlgxcEAzpmr+bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqxoKrwX7dyut87U0Jw2tOU9zbsowHwYDVR0j BBgwFoAUHSE4XrWz+Cx9GrXH/T7ye+joOnswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NGRjZWY2NS01ZGUzLTQxMjktYWMyNy03NzA2ZDcyNjYwMDEvMC8xRDIxMzg1RUI1 QjNGODJDN0QxQUI1QzdGRDNFRjI3QkU4RTgzQTdCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMUQyMTM4NUVCNUIzRjgyQzdEMUFCNUM3RkQzRUYyN0JFOEU4 M0E3Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTRkY2VmNjUtNWRlMy00MTI5LWFj MjctNzcwNmQ3MjY2MDAxLzAvMUQyMTM4NUVCNUIzRjgyQzdEMUFCNUM3RkQzRUYy N0JFOEU4M0E3Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ9ZMNuBuQihH5/PNWJZHkt27jTA2thrsT8r l3yN/Q3YbLtI0t6wHhAAMrSHX2v9cnAHqptJLVDPHKTYfJcLAIvGWvJ9d0LFD8BQ df9vt7jiR6IoyPKlGlnW9qI+Pp3K7I1k8A1rDE2P2ILh7SLGP/kkYmdF4uZPLUj6 vmAYbtCywgp6uJVssSRRFWy+XZOPZ/6iK0hh2FWUJqAVqjN3VvBXihyc9J02hWhn HCktBLsGJqf72qszElFa96zK261+c8ZGCUoWxJTXkGXkb294eqPdYBzeOMlkK8XP BezXCBCkqs4bA9L2rHNKHzaAPVXyeJmcCC8dpj3BcjdsBkZSr5o= -----END CERTIFICATE-----Generated at Sun May 11 15:07:47 2025 by rpki-client