$ rpki-client -vvf repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft File: 7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft (raw, json) Hash identifier: WO35H/47v1C7SKmCADAnyjsdd4KCETWSZnOzuLwo270= Subject key identifier: 40:66:35:41:E0:0D:4B:6A:E6:29:23:51:C3:5B:00:2F:4B:3B:95:25 Authority key identifier: 7A:21:6F:23:D8:A2:28:FB:B8:F5:63:EC:15:DF:76:FD:50:32:31:B3 Certificate issuer: /CN=7A216F23D8A228FBB8F563EC15DF76FD503231B3 Certificate serial: 387DD84B18E4626B4766732DE70BE10234C28EB8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A216F23D8A228FBB8F563EC15DF76FD503231B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft Manifest number: 01BA Signing time: Thu 08 May 2025 23:52:07 +0000 Manifest this update: Thu 08 May 2025 23:47:07 +0000 Manifest next update: Mon 12 May 2025 11:28:07 +0000 Files and hashes: 1: 3130332e32302e3130392e302f32342d3234203d3e20313439373037.roa (hash: rOc9IS1yKanFrzj6lHEyVZN9K3Au8qIy9aCKaCdjEsw=) 2: 3130332e32302e3130382e302f32332d3234203d3e20313439373037.roa (hash: YUh1E1cCB+Tam8Lv4+/c622A6XvCbyDIufb9eqoPvMQ=) 3: 3130332e32302e3130382e302f32342d3234203d3e20313439373037.roa (hash: l72fTVO4iPS3td7y6iJ6FZ6Iq9uNFhg1kwCppW10yoE=) 4: 7A216F23D8A228FBB8F563EC15DF76FD503231B3.crl (hash: ZZb4JUFiwloCMHPa+6IETCpwbF7AbnVfGEzXSUm5H/4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.crl rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A216F23D8A228FBB8F563EC15DF76FD503231B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 11:28:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:7d:d8:4b:18:e4:62:6b:47:66:73:2d:e7:0b:e1:02:34:c2:8e:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A216F23D8A228FBB8F563EC15DF76FD503231B3 Validity Not Before: May 8 23:47:07 2025 GMT Not After : May 12 11:28:07 2025 GMT Subject: CN=40663541E00D4B6AE6292351C35B002F4B3B9525 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:1f:0e:08:a9:d9:76:d8:50:2c:af:0c:ef:ee: d0:59:e2:43:20:f7:69:a8:ca:18:bd:de:e6:87:f9: 67:a7:db:e2:71:09:1f:31:53:8f:04:72:c7:bf:20: f3:c1:2a:3a:a6:68:1e:81:eb:a1:7d:8c:a3:93:cc: c0:cc:07:2f:7e:e1:4a:18:64:55:16:fa:fa:95:c2: 77:09:36:96:be:1d:26:c5:b6:98:c8:c5:72:6a:c7: 3b:23:0d:2c:ea:87:40:37:4a:3d:9d:ee:37:99:56: ef:cc:f9:8d:b2:24:fa:4c:6d:a9:35:d7:da:ac:04: 51:5c:8b:7e:e9:69:6f:2b:c7:a7:a7:9d:42:ab:f3: 6c:d6:76:bb:6a:a5:42:1c:58:b3:81:e2:59:1a:9b: 5c:b7:e2:8a:60:5e:09:a5:b9:80:e9:78:e9:31:35: 7d:fd:63:70:91:70:85:bb:45:11:31:2c:4b:9d:6c: 24:df:6d:a3:86:88:50:46:cc:79:e8:b4:73:91:26: f3:58:23:df:8c:07:56:33:57:a7:06:03:35:78:ef: da:01:fa:57:41:87:09:2f:ab:9b:81:20:be:16:e0: 3c:b3:ce:2a:0c:e3:2a:5c:74:14:d6:9f:27:9b:8d: 24:e6:dd:57:fe:ae:dd:cf:23:bf:85:eb:24:be:73: 24:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:66:35:41:E0:0D:4B:6A:E6:29:23:51:C3:5B:00:2F:4B:3B:95:25 X509v3 Authority Key Identifier: keyid:7A:21:6F:23:D8:A2:28:FB:B8:F5:63:EC:15:DF:76:FD:50:32:31:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A216F23D8A228FBB8F563EC15DF76FD503231B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:d9:79:ae:a1:e9:c4:88:4a:17:cc:08:c7:c8:80:c8:f7:89: 2c:e5:55:74:41:15:f7:1a:03:72:6a:8b:2a:00:19:52:33:b6: 02:53:91:19:89:db:a6:a1:d3:07:04:67:1e:9c:fc:fc:7b:b1: fc:b5:48:66:2f:b5:13:b0:71:5f:aa:45:04:21:67:8e:bd:31: b7:cf:fd:71:a6:23:c8:25:cf:d1:d7:7f:02:36:91:3a:e4:81: fe:7a:a8:20:13:d5:92:b1:53:72:85:e3:24:fa:f2:7b:f0:d3: 5a:7f:4d:88:27:aa:67:53:2d:c7:35:b7:0f:01:b5:8a:b9:a9: 4f:1d:13:1c:dc:85:d9:8d:75:f7:1f:e9:a5:31:5b:90:b9:21: 8a:4c:10:a6:96:53:c5:a0:2f:94:de:df:1f:1c:65:53:5d:56: 66:27:d9:97:8c:c3:fd:05:c1:47:e3:c1:61:23:db:b0:cd:b5: 15:45:38:6c:e4:a5:21:96:b4:5b:a8:ec:a4:7a:a6:e1:e5:3b: 1a:72:36:01:e0:a6:d6:f8:68:dc:96:e3:6b:32:30:6a:b8:13: 9f:72:5c:28:a8:f0:d5:7c:fc:2c:36:eb:78:b9:e9:4b:9d:12: ca:9a:dc:73:b8:37:5e:f3:9c:ca:a1:a1:2a:0f:75:28:eb:ac: 6f:40:34:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOH3YSxjkYmtHZnMt5wvhAjTCjrgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0EyMTZGMjNEOEEyMjhGQkI4RjU2M0VDMTVERjc2RkQ1 MDMyMzFCMzAeFw0yNTA1MDgyMzQ3MDdaFw0yNTA1MTIxMTI4MDdaMDMxMTAvBgNV BAMTKDQwNjYzNTQxRTAwRDRCNkFFNjI5MjM1MUMzNUIwMDJGNEIzQjk1MjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNHw4Iqdl22FAsrwzv7tBZ4kMg 92moyhi93uaH+Wen2+JxCR8xU48Ecse/IPPBKjqmaB6B66F9jKOTzMDMBy9+4UoY ZFUW+vqVwncJNpa+HSbFtpjIxXJqxzsjDSzqh0A3Sj2d7jeZVu/M+Y2yJPpMbak1 19qsBFFci37paW8rx6ennUKr82zWdrtqpUIcWLOB4lkam1y34opgXgmluYDpeOkx NX39Y3CRcIW7RRExLEudbCTfbaOGiFBGzHnotHORJvNYI9+MB1YzV6cGAzV479oB +ldBhwkvq5uBIL4W4DyzzioM4ypcdBTWnyebjSTm3Vf+rt3PI7+F6yS+cyQRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQGY1QeANS2rmKSNRw1sAL0s7lSUwHwYDVR0j BBgwFoAUeiFvI9iiKPu49WPsFd92/VAyMbMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Y2M2YmQ3My1mOWJkLTRmNWEtOWM1OS1mYmVhMWJkODM0NzMvMC83QTIxNkYyM0Q4 QTIyOEZCQjhGNTYzRUMxNURGNzZGRDUwMzIzMUIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0EyMTZGMjNEOEEyMjhGQkI4RjU2M0VDMTVERjc2RkQ1MDMy MzFCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWNjNmJkNzMtZjliZC00ZjVhLTlj NTktZmJlYTFiZDgzNDczLzAvN0EyMTZGMjNEOEEyMjhGQkI4RjU2M0VDMTVERjc2 RkQ1MDMyMzFCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABHZea6h6cSIShfMCMfIgMj3iSzlVXRBFfca A3JqiyoAGVIztgJTkRmJ26ah0wcEZx6c/Px7sfy1SGYvtROwcV+qRQQhZ469MbfP /XGmI8glz9HXfwI2kTrkgf56qCAT1ZKxU3KF4yT68nvw01p/TYgnqmdTLcc1tw8B tYq5qU8dExzchdmNdfcf6aUxW5C5IYpMEKaWU8WgL5Te3x8cZVNdVmYn2ZeMw/0F wUfjwWEj27DNtRVFOGzkpSGWtFuo7KR6puHlOxpyNgHgptb4aNyW42syMGq4E59y XCio8NV8/Cw263i56UudEsqa3HO4N17znMqhoSoPdSjrrG9ANKg= -----END CERTIFICATE-----Generated at Sat May 10 18:44:42 2025 by rpki-client