$ rpki-client -vvf repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft File: 7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft (raw, json) Hash identifier: DTCyug1WoMW6ukcg0heqHFl6YHHRFzvXEEczXLymiP4= Subject key identifier: E3:78:69:1C:70:CD:D5:31:2E:D2:10:D1:71:DE:74:EE:D6:52:6E:B1 Authority key identifier: 7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67 Certificate issuer: /CN=7D64B8F4CFB687141137D10F9E73FFD0BAB93F67 Certificate serial: 5F3C3E6B0D978906AC64AE134B14796A75BD4A28 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer Subject info access: rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft Manifest number: 028C Signing time: Fri 09 May 2025 00:52:08 +0000 Manifest this update: Fri 09 May 2025 00:47:08 +0000 Manifest next update: Mon 12 May 2025 05:56:08 +0000 Files and hashes: 1: 3130332e39372e37382e302f32342d3234203d3e20313336313331.roa (hash: gTWqsHLXGzmwOn5oUbLdKwsFxUOTG6JntDETCN1uoJg=) 2: 3130332e39372e37362e302f32342d3234203d3e20313336313331.roa (hash: sppd+EBGEaepceJfNxlZXMQLq/sqMLGJt/R8ADFWUfE=) 3: 3130332e39372e37392e302f32342d3234203d3e20313336313331.roa (hash: g7TDmW1J5jNMb6eLJToYzt8xdajrekh1Q+uRWpcwKv0=) 4: 323430313a383434303a3233313a3a2f34382d3438203d3e20313336313331.roa (hash: 9q0QjNfZ8ZidXQKSI35eyNIOpPTa4MZHY+H9XcdTGqQ=) 5: 323430313a383434303a3a2f33322d3332203d3e20313336313331.roa (hash: XjoAHco7m2PHrJkLw+g7kXYYTaQ359BKHQsXeKrypoE=) 6: 323430313a383434303a3133313a3a2f34382d3438203d3e20313336313331.roa (hash: 7XF+7tNQBQV2Wy0AsX8lBCySJ+ATYXgli7NY4z4VmfM=) 7: 323430313a383434303a3331313a3a2f34382d3438203d3e20313336313331.roa (hash: uNKV4J4iyB42iT7YiJbc/obq8TacFQRWwVPHqjYHdt4=) 8: 323430313a383434303a33313a3a2f34382d3438203d3e20313336313331.roa (hash: imoDv7fNxiS0ABFe1mnjo4w6QxU9zgowGM6VjXLrifM=) 9: 7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl (hash: 2aGm3bn5jnsmMz5osFnCVvnpB4ZHxVTRT82XKmHa5f0=) 10: 3130332e39372e37372e302f32342d3234203d3e20313336313331.roa (hash: rgwWhpicbIXeIE3pTFSF/nJgGhjsTFXordy0vbByPyc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 05:56:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:3c:3e:6b:0d:97:89:06:ac:64:ae:13:4b:14:79:6a:75:bd:4a:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D64B8F4CFB687141137D10F9E73FFD0BAB93F67 Validity Not Before: May 9 00:47:08 2025 GMT Not After : May 12 05:56:08 2025 GMT Subject: CN=E378691C70CDD5312ED210D171DE74EED6526EB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:65:17:64:ab:ae:5e:9b:26:7e:63:89:1e:d3: 9e:c1:48:35:c3:20:35:8c:b4:83:90:0d:65:12:49: 17:11:3b:3b:50:84:db:a5:9d:2e:32:34:59:58:12: 5d:22:f8:f9:8e:75:b3:92:31:44:91:65:d4:da:ba: 70:26:19:ff:4c:66:38:a1:92:db:06:3c:a1:ef:7a: 59:47:d1:57:1d:c6:3f:88:3b:64:79:44:2d:57:e1: 6b:ec:de:db:c3:7f:75:54:94:4f:36:bc:d0:cb:42: 7a:5d:32:b2:2e:0c:42:3c:d3:83:65:ba:73:40:d9: ca:51:b1:a8:a3:44:bb:30:20:03:17:1c:dd:44:c3: 59:76:63:9b:2c:39:4a:1b:91:97:50:c8:7e:59:56: 55:98:6c:83:95:d2:14:ac:8b:19:dd:21:5a:d8:c5: c2:b9:bc:03:44:25:15:eb:89:cd:f8:6e:b0:ba:a2: 9b:98:e8:58:c0:2c:68:62:cc:2f:4c:59:e0:1e:84: 6f:cd:2c:83:54:63:07:61:cb:c6:64:ed:3d:b0:ef: 3f:50:93:ec:47:08:89:bb:39:88:87:7f:e6:0d:b2: 6d:99:ae:e1:44:fa:7d:f2:41:07:88:48:24:b1:75: 11:48:d5:4f:28:98:a0:50:c9:72:50:9a:ac:b7:86: af:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:78:69:1C:70:CD:D5:31:2E:D2:10:D1:71:DE:74:EE:D6:52:6E:B1 X509v3 Authority Key Identifier: keyid:7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:a9:4b:16:7f:73:e1:10:5c:70:da:7e:29:2d:52:4e:e7:f1: 53:80:b8:a5:22:a4:17:bb:15:2b:02:b3:c0:3d:18:0d:9f:46: ee:ef:6f:20:f7:53:c0:0c:68:be:2a:69:f3:18:a4:f7:ff:5c: 30:3e:9c:d6:1e:48:17:45:c0:02:05:08:c5:db:04:02:f6:85: 41:01:84:63:11:25:55:c1:d3:33:ff:70:f6:05:87:57:33:54: 19:ec:ac:76:4e:5e:a2:67:94:1d:92:62:c5:fb:74:0d:1a:89: e9:e0:46:4a:83:20:1b:3f:74:38:24:ee:5b:8b:2c:27:ef:8f: ed:90:ac:f1:c3:f9:a6:64:b9:20:31:a0:1f:47:0a:06:fb:de: 4a:a7:e9:42:24:d0:e7:0d:b3:de:d9:c7:bd:fb:5c:ab:3e:13: 20:19:07:4b:c3:58:62:25:6c:5d:6c:d0:a2:9e:de:c9:1b:56: 26:8e:c0:a6:09:f6:f4:7c:8b:6b:5f:76:ae:d8:e4:9d:6d:d4: a1:53:f3:ec:4e:dc:e1:d1:bf:e0:9f:f3:05:b3:f6:6e:c7:f8: 7a:f6:ca:7f:85:24:3c:2e:5e:93:13:fd:ab:25:fd:1b:8d:1e: 0e:47:1e:02:b0:7f:85:e6:44:d8:b0:10:96:ec:05:e3:25:54: 1b:34:9d:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXzw+aw2XiQasZK4TSxR5anW9SigwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZGRDBC QUI5M0Y2NzAeFw0yNTA1MDkwMDQ3MDhaFw0yNTA1MTIwNTU2MDhaMDMxMTAvBgNV BAMTKEUzNzg2OTFDNzBDREQ1MzEyRUQyMTBEMTcxREU3NEVFRDY1MjZFQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEZRdkq65emyZ+Y4ke057BSDXD IDWMtIOQDWUSSRcROztQhNulnS4yNFlYEl0i+PmOdbOSMUSRZdTaunAmGf9MZjih ktsGPKHvellH0Vcdxj+IO2R5RC1X4Wvs3tvDf3VUlE82vNDLQnpdMrIuDEI804Nl unNA2cpRsaijRLswIAMXHN1Ew1l2Y5ssOUobkZdQyH5ZVlWYbIOV0hSsixndIVrY xcK5vANEJRXric34brC6opuY6FjALGhizC9MWeAehG/NLINUYwdhy8Zk7T2w7z9Q k+xHCIm7OYiHf+YNsm2ZruFE+n3yQQeISCSxdRFI1U8omKBQyXJQmqy3hq+tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU43hpHHDN1TEu0hDRcd507tZSbrEwHwYDVR0j BBgwFoAUfWS49M+2hxQRN9EPnnP/0Lq5P2cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTdiMGQ3ZS1lYWRlLTQzMTgtYWIyMC04YzdmMmQ1YmU2OWYvMC83RDY0QjhGNENG QjY4NzE0MTEzN0QxMEY5RTczRkZEMEJBQjkzRjY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZGRDBCQUI5 M0Y2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTU3YjBkN2UtZWFkZS00MzE4LWFi MjAtOGM3ZjJkNWJlNjlmLzAvN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZG RDBCQUI5M0Y2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKGpSxZ/c+EQXHDafiktUk7n8VOAuKUipBe7 FSsCs8A9GA2fRu7vbyD3U8AMaL4qafMYpPf/XDA+nNYeSBdFwAIFCMXbBAL2hUEB hGMRJVXB0zP/cPYFh1czVBnsrHZOXqJnlB2SYsX7dA0aiengRkqDIBs/dDgk7luL LCfvj+2QrPHD+aZkuSAxoB9HCgb73kqn6UIk0OcNs97Zx737XKs+EyAZB0vDWGIl bF1s0KKe3skbViaOwKYJ9vR8i2tfdq7Y5J1t1KFT8+xO3OHRv+Cf8wWz9m7H+Hr2 yn+FJDwuXpMT/asl/RuNHg5HHgKwf4XmRNiwEJbsBeMlVBs0nSg= -----END CERTIFICATE-----Generated at Sat May 10 11:41:30 2025 by rpki-client