$ rpki-client -vvf repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft File: 94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft (raw, json) Hash identifier: CHLic7b0FK4FzLMllI0uS5JrlbXKMznaYDk6d9Q+bto= Subject key identifier: B6:4B:53:D7:04:5F:50:84:26:80:34:D5:4B:5B:E2:49:05:CB:64:AE Authority key identifier: 94:15:9F:AF:0A:97:95:02:CA:B6:C5:AD:DC:AE:4C:FD:EC:DE:ED:EF Certificate issuer: /CN=94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF Certificate serial: 11AD322ED04B601A1A2995976D4577191155907F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft Manifest number: 7C Signing time: Sun 11 May 2025 16:10:34 +0000 Manifest this update: Sun 11 May 2025 16:05:34 +0000 Manifest next update: Wed 14 May 2025 17:08:34 +0000 Files and hashes: 1: 323030313a6466343a323038303a3a2f34382d3438203d3e20313430343436.roa (hash: /sVHS2YVPGN4I7pjlv0CumuB8iSOyLfbW32z22cHMqg=) 2: 94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.crl (hash: S3RS1Jb1sHRYta3QrCSDndx04W23IUd55TtYWbnrIuo=) 3: 3130332e3135322e3233322e302f32332d3234203d3e20313430343436.roa (hash: w8USKPwJWUmAD2EnMdpXJB1C3F3hUfqedwFlox0zn3A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.crl rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 17:08:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:ad:32:2e:d0:4b:60:1a:1a:29:95:97:6d:45:77:19:11:55:90:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF Validity Not Before: May 11 16:05:34 2025 GMT Not After : May 14 17:08:34 2025 GMT Subject: CN=B64B53D7045F5084268034D54B5BE24905CB64AE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:09:d2:a4:0a:23:62:f7:a6:fa:e2:95:dc:71: c0:5e:e4:7a:dd:2e:41:ed:9a:b7:b0:f2:33:27:ba: 36:70:f2:78:57:48:a6:ad:5a:7e:cb:b5:47:21:42: b4:0b:04:29:7a:3d:3a:ab:04:a0:99:17:66:56:16: 98:a0:9a:aa:2d:6a:08:04:54:60:39:7b:f3:72:21: 83:78:7a:a3:72:84:88:3c:35:e4:89:0d:1a:02:f6: 24:4c:8e:ae:48:5d:b8:39:36:ed:2b:c7:46:5c:8f: 92:cd:ce:8d:15:d0:f1:fb:16:98:b5:a2:e4:fa:61: bd:eb:3b:11:d2:15:76:21:40:00:b0:d8:62:21:d0: f9:0a:c8:c0:b7:b4:f7:a1:81:13:2e:cf:7b:b5:be: 97:74:d7:e9:7b:82:f7:1a:f6:9e:3f:16:c5:e9:e1: 37:57:61:b0:58:8f:28:7d:70:c1:10:c8:0a:c1:9a: 75:17:05:b2:48:d8:85:98:ed:bd:3f:3b:3e:96:8b: a0:56:bd:aa:3d:30:d7:ef:12:6e:8e:11:4b:39:10: 83:e4:9c:8a:13:a9:8e:d6:db:05:58:0e:7b:1e:dc: a9:19:03:56:39:5e:b5:f5:d8:9d:e3:49:2a:7e:d3: f0:38:2f:bf:0f:8c:c7:6f:cb:54:91:cb:04:28:c8: fc:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B6:4B:53:D7:04:5F:50:84:26:80:34:D5:4B:5B:E2:49:05:CB:64:AE X509v3 Authority Key Identifier: keyid:94:15:9F:AF:0A:97:95:02:CA:B6:C5:AD:DC:AE:4C:FD:EC:DE:ED:EF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c4f07987-b8ec-444a-9b44-291011ff46a6/0/94159FAF0A979502CAB6C5ADDCAE4CFDECDEEDEF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:72:06:c9:3e:b2:12:6d:ba:bd:c9:dd:81:47:87:3d:97:95: 57:a8:47:40:9f:eb:f4:3b:a0:d6:7c:23:26:6d:0c:f9:33:b8: ed:95:ff:db:bd:aa:ab:a4:05:04:77:48:60:0c:ab:46:3c:31: 09:1a:e3:e2:3b:3b:bb:82:3f:59:7e:ba:28:e9:07:e1:18:c1: 97:d1:60:c8:43:c6:d6:a1:b0:3e:eb:f1:57:98:b8:63:8a:88: f3:04:eb:c7:91:75:53:0a:a7:2c:45:19:b5:04:37:40:5d:6f: 63:51:fd:e9:0b:ff:cc:0e:b2:a1:3c:5f:51:6c:49:12:2a:28: e3:11:00:77:1b:38:7f:75:16:f0:dc:39:e7:08:87:60:06:82: 3e:ec:df:62:79:36:e9:7d:19:5d:a8:84:62:58:4b:0e:b4:3f: 36:b6:b1:69:16:aa:eb:d7:ee:fd:ef:a8:17:d1:00:03:8e:6f: 4e:b2:c4:93:90:63:92:35:c4:98:ac:76:86:ad:1f:d4:40:f9: 36:47:05:f7:34:95:35:9a:94:a5:49:ad:30:8e:f3:e6:9a:e5: ee:23:8a:dd:a2:60:b9:1a:ba:42:14:95:ae:26:aa:c4:05:ea: bb:96:6e:f1:67:6a:4f:2e:ac:bb:51:13:99:f3:97:0f:70:17: c1:03:0a:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEa0yLtBLYBoaKZWXbUV3GRFVkH8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTQxNTlGQUYwQTk3OTUwMkNBQjZDNUFERENBRTRDRkRF Q0RFRURFRjAeFw0yNTA1MTExNjA1MzRaFw0yNTA1MTQxNzA4MzRaMDMxMTAvBgNV BAMTKEI2NEI1M0Q3MDQ1RjUwODQyNjgwMzRENTRCNUJFMjQ5MDVDQjY0QUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPCdKkCiNi96b64pXcccBe5Hrd LkHtmrew8jMnujZw8nhXSKatWn7LtUchQrQLBCl6PTqrBKCZF2ZWFpigmqotaggE VGA5e/NyIYN4eqNyhIg8NeSJDRoC9iRMjq5IXbg5Nu0rx0Zcj5LNzo0V0PH7Fpi1 ouT6Yb3rOxHSFXYhQACw2GIh0PkKyMC3tPehgRMuz3u1vpd01+l7gvca9p4/FsXp 4TdXYbBYjyh9cMEQyArBmnUXBbJI2IWY7b0/Oz6Wi6BWvao9MNfvEm6OEUs5EIPk nIoTqY7W2wVYDnse3KkZA1Y5XrX12J3jSSp+0/A4L78PjMdvy1SRywQoyPzpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtktT1wRfUIQmgDTVS1viSQXLZK4wHwYDVR0j BBgwFoAUlBWfrwqXlQLKtsWt3K5M/eze7e8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j NGYwNzk4Ny1iOGVjLTQ0NGEtOWI0NC0yOTEwMTFmZjQ2YTYvMC85NDE1OUZBRjBB OTc5NTAyQ0FCNkM1QUREQ0FFNENGREVDREVFREVGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTQxNTlGQUYwQTk3OTUwMkNBQjZDNUFERENBRTRDRkRFQ0RF RURFRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzRmMDc5ODctYjhlYy00NDRhLTli NDQtMjkxMDExZmY0NmE2LzAvOTQxNTlGQUYwQTk3OTUwMkNBQjZDNUFERENBRTRD RkRFQ0RFRURFRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD5yBsk+shJtur3J3YFHhz2XlVeoR0Cf6/Q7 oNZ8IyZtDPkzuO2V/9u9qqukBQR3SGAMq0Y8MQka4+I7O7uCP1l+uijpB+EYwZfR YMhDxtahsD7r8VeYuGOKiPME68eRdVMKpyxFGbUEN0Bdb2NR/ekL/8wOsqE8X1Fs SRIqKOMRAHcbOH91FvDcOecIh2AGgj7s32J5Nul9GV2ohGJYSw60Pza2sWkWquvX 7v3vqBfRAAOOb06yxJOQY5I1xJisdoatH9RA+TZHBfc0lTWalKVJrTCO8+aa5e4j it2iYLkaukIUla4mqsQF6ruWbvFnak8urLtRE5nzlw9wF8EDCtw= -----END CERTIFICATE-----Generated at Mon May 12 12:23:51 2025 by rpki-client