$ rpki-client -vvf repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft File: 7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft (raw, json) Hash identifier: m0ruwrlnipD2cZyJV3dhtLF9R4sVfbzuJAkR+5FymS4= Subject key identifier: 51:48:08:6E:EE:96:8F:DE:55:0C:31:C6:8D:6C:A3:6E:DA:E6:B8:44 Authority key identifier: 7D:9E:0E:E5:BE:72:73:60:81:01:D9:3C:5F:7F:B6:1C:BC:04:04:C7 Certificate issuer: /CN=7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7 Certificate serial: 06AE204FA154F7E276EBB44F67ED6A70008E7955 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft Manifest number: 7B Signing time: Fri 09 May 2025 10:10:00 +0000 Manifest this update: Fri 09 May 2025 10:05:00 +0000 Manifest next update: Mon 12 May 2025 20:14:00 +0000 Files and hashes: 1: 3130332e3136392e3134332e302f32342d3234203d3e20313531353831.roa (hash: V98kYcU8v569igqvltJ62ENZBRSZDERQept9pSJvYEE=) 2: 7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.crl (hash: GThQibeNQMWyyO4fqcNlbHt62F3V6ReBlpnK20gVLks=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.crl rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 20:14:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:ae:20:4f:a1:54:f7:e2:76:eb:b4:4f:67:ed:6a:70:00:8e:79:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7 Validity Not Before: May 9 10:05:00 2025 GMT Not After : May 12 20:14:00 2025 GMT Subject: CN=5148086EEE968FDE550C31C68D6CA36EDAE6B844 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:46:b9:0e:58:86:d9:1e:50:33:d8:c3:76:f4: a2:0b:07:98:45:a0:90:a8:8a:58:50:56:69:ed:a2: a7:1e:2c:95:75:22:db:a7:e5:6b:45:94:e6:ab:76: 32:f6:db:e7:6c:84:22:4c:00:ec:c2:e5:22:01:6b: 52:de:aa:68:c6:e5:84:82:14:2e:3d:05:1c:3e:a7: 20:54:88:df:4a:24:1e:59:8d:6f:3e:a3:b0:d7:39: d4:67:ec:8b:2a:3e:f0:dc:c8:7e:50:08:dc:36:b8: 5d:34:0c:8e:55:93:a9:7b:74:78:ec:f9:53:6c:1a: c9:18:cf:2f:37:95:2c:75:ff:b9:08:e2:2a:b4:34: 8d:fb:75:69:7d:33:7c:a2:9a:cf:7c:3c:e0:02:2d: 52:15:be:84:c3:2e:7c:97:47:db:b3:75:b6:c4:13: 50:ab:77:07:23:d9:dd:72:12:17:8a:f0:25:de:eb: 0c:ce:89:45:6c:4c:17:30:29:1a:c6:c7:64:80:7e: 6e:1e:3a:f8:9b:78:65:9e:ef:e1:97:0a:86:76:3b: 59:c9:90:39:81:10:55:16:78:c8:e1:0d:59:ae:c5: 78:33:81:82:d6:74:0d:bc:f6:c7:b6:09:53:b3:a2: 26:21:1b:bc:66:c6:7e:8f:2d:ac:85:23:08:b9:8f: d6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:48:08:6E:EE:96:8F:DE:55:0C:31:C6:8D:6C:A3:6E:DA:E6:B8:44 X509v3 Authority Key Identifier: keyid:7D:9E:0E:E5:BE:72:73:60:81:01:D9:3C:5F:7F:B6:1C:BC:04:04:C7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a6de1a8e-c2b8-4996-9492-6f92c2dfec7a/0/7D9E0EE5BE7273608101D93C5F7FB61CBC0404C7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:78:2c:2d:68:52:bb:95:8d:e6:63:0d:63:ec:cb:58:2a:12: 2a:2b:1e:41:52:5b:98:b0:4a:0c:b5:4e:b0:f6:19:f8:c7:30: 18:4e:fe:21:4b:52:e9:ea:5e:9a:4b:72:14:f0:2d:26:96:a9: 3c:d2:47:80:46:5d:68:77:f5:50:ee:c3:f6:85:7e:8f:5b:c9: b4:3f:2e:2b:f3:89:43:3a:01:28:d1:44:83:a2:07:a2:52:6f: 7c:7f:b5:02:00:8e:3e:1f:33:26:1b:45:6b:ac:85:7f:7a:8d: 02:6f:68:89:73:29:74:cf:c6:59:44:c6:73:01:fd:1d:f7:91: 10:18:f8:66:cf:9f:5e:f2:cc:99:da:0b:a6:c6:74:c7:ad:cf: 08:60:3e:ea:8f:5c:3c:86:0a:ab:1d:06:f8:24:5a:6d:84:bd: 91:60:fb:b4:41:7b:0a:0b:5c:fb:3f:80:fb:60:e9:c0:66:1e: 50:c6:97:38:f2:d5:bf:8a:0f:e5:15:d4:6a:96:b0:06:47:57: 94:a9:be:dc:78:ef:29:57:46:31:5e:66:3f:43:91:1a:ba:9a: fb:24:f6:41:4a:56:57:64:db:06:c4:ee:0f:f7:fb:75:e1:16: 68:bb:66:b7:57:b0:d2:ee:42:f5:f6:6c:1e:3d:6e:a1:c1:ae: 4a:8a:f3:e9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBq4gT6FU9+J267RPZ+1qcACOeVUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q5RTBFRTVCRTcyNzM2MDgxMDFEOTNDNUY3RkI2MUNC QzA0MDRDNzAeFw0yNTA1MDkxMDA1MDBaFw0yNTA1MTIyMDE0MDBaMDMxMTAvBgNV BAMTKDUxNDgwODZFRUU5NjhGREU1NTBDMzFDNjhENkNBMzZFREFFNkI4NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgRrkOWIbZHlAz2MN29KILB5hF oJCoilhQVmntoqceLJV1Itun5WtFlOardjL22+dshCJMAOzC5SIBa1LeqmjG5YSC FC49BRw+pyBUiN9KJB5ZjW8+o7DXOdRn7IsqPvDcyH5QCNw2uF00DI5Vk6l7dHjs +VNsGskYzy83lSx1/7kI4iq0NI37dWl9M3yims98POACLVIVvoTDLnyXR9uzdbbE E1Crdwcj2d1yEheK8CXe6wzOiUVsTBcwKRrGx2SAfm4eOvibeGWe7+GXCoZ2O1nJ kDmBEFUWeMjhDVmuxXgzgYLWdA289se2CVOzoiYhG7xmxn6PLayFIwi5j9bNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUUgIbu6Wj95VDDHGjWyjbtrmuEQwHwYDVR0j BBgwFoAUfZ4O5b5yc2CBAdk8X3+2HLwEBMcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NmRlMWE4ZS1jMmI4LTQ5OTYtOTQ5Mi02ZjkyYzJkZmVjN2EvMC83RDlFMEVFNUJF NzI3MzYwODEwMUQ5M0M1RjdGQjYxQ0JDMDQwNEM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q5RTBFRTVCRTcyNzM2MDgxMDFEOTNDNUY3RkI2MUNCQzA0 MDRDNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTZkZTFhOGUtYzJiOC00OTk2LTk0 OTItNmY5MmMyZGZlYzdhLzAvN0Q5RTBFRTVCRTcyNzM2MDgxMDFEOTNDNUY3RkI2 MUNCQzA0MDRDNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAV4LC1oUruVjeZjDWPsy1gqEiorHkFSW5iw Sgy1TrD2GfjHMBhO/iFLUunqXppLchTwLSaWqTzSR4BGXWh39VDuw/aFfo9bybQ/ LivziUM6ASjRRIOiB6JSb3x/tQIAjj4fMyYbRWushX96jQJvaIlzKXTPxllExnMB /R33kRAY+GbPn17yzJnaC6bGdMetzwhgPuqPXDyGCqsdBvgkWm2EvZFg+7RBewoL XPs/gPtg6cBmHlDGlzjy1b+KD+UV1GqWsAZHV5Spvtx47ylXRjFeZj9DkRq6mvsk 9kFKVldk2wbE7g/3+3XhFmi7ZrdXsNLuQvX2bB49bqHBrkqK8+k= -----END CERTIFICATE-----Generated at Sat May 10 11:35:40 2025 by rpki-client