$ rpki-client -vvf repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.mft File: A7422B678A17489054C0697D44A3B19EB9F67509.mft (raw, json) Hash identifier: 5cr9/QN33eutwyhHbr913Oq4nVFjUpFn7yh1RKCeDwc= Subject key identifier: 6B:F7:58:81:90:8D:21:6D:5C:54:AA:95:3E:43:FF:47:73:19:DC:38 Authority key identifier: A7:42:2B:67:8A:17:48:90:54:C0:69:7D:44:A3:B1:9E:B9:F6:75:09 Certificate issuer: /CN=A7422B678A17489054C0697D44A3B19EB9F67509 Certificate serial: 3B2299659C201484BA1B6EAD1EF5E88400ECA510 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7422B678A17489054C0697D44A3B19EB9F67509.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.mft Manifest number: 04CF Signing time: Sat 10 May 2025 23:00:36 +0000 Manifest this update: Sat 10 May 2025 22:55:36 +0000 Manifest next update: Wed 14 May 2025 07:11:36 +0000 Files and hashes: 1: 3230332e33342e3131382e302f32342d3234203d3e203338373735.roa (hash: +PraNjMo7UJUfRvMuuMh94X99iB0d3sDtRSjaFBvobw=) 2: A7422B678A17489054C0697D44A3B19EB9F67509.crl (hash: K3nDZ/GyKi2Emq+BChni4OXXgUshnZx7V1wHy8drMnE=) 3: 323030313a6466343a393830303a3a2f34382d3438203d3e203338373735.roa (hash: XsaQ/U9Kr9yLnjasE2URoVoOaYVUiblHMtA00VDq9jU=) 4: 3230332e33342e3131392e302f32342d3234203d3e203338373735.roa (hash: g5xw1FE6htb/POnNtcobAWNKGzzdBwdYRHRRb9zZoKM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.crl rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7422B678A17489054C0697D44A3B19EB9F67509.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 07:11:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:22:99:65:9c:20:14:84:ba:1b:6e:ad:1e:f5:e8:84:00:ec:a5:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7422B678A17489054C0697D44A3B19EB9F67509 Validity Not Before: May 10 22:55:36 2025 GMT Not After : May 14 07:11:36 2025 GMT Subject: CN=6BF75881908D216D5C54AA953E43FF477319DC38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:1e:dc:4a:23:ef:8d:5c:46:30:a5:7b:cd:8c: 24:46:b1:8d:10:f1:8e:7b:aa:84:88:14:c4:87:14: 06:97:7b:40:41:70:78:bd:e5:58:e9:05:82:64:8d: 94:1a:f9:9d:63:21:1d:19:87:54:0d:91:ce:d2:b9: 10:d3:21:b6:45:9e:21:3b:0d:79:50:52:ff:57:b3: b5:58:1f:c2:9a:c9:22:9c:45:e3:05:c5:5c:57:b0: 24:36:d8:88:76:54:7b:88:30:83:5b:ec:b7:02:5a: e4:a1:25:16:6f:b4:30:5f:67:34:db:95:89:9d:a9: 1c:42:83:a2:69:11:ee:dc:aa:03:bb:5f:8b:a1:b2: b4:f0:7e:d3:db:06:36:39:f0:06:19:66:af:a6:99: 87:d2:95:81:35:93:39:2c:79:89:53:b8:89:1b:ce: 40:d2:2d:b6:49:66:7e:ad:e5:4c:d2:73:b6:3a:3b: ca:8f:fb:dd:e9:1a:0f:62:d8:9a:a9:64:df:cb:f4: cb:64:96:a0:72:0e:1c:95:01:c5:a8:56:f1:13:5a: 26:18:bd:79:c7:7e:fd:c6:13:ad:57:2a:ed:eb:dd: b6:3e:75:16:86:c2:64:a6:b6:f4:38:de:d7:a2:38: 62:7a:c9:9b:f8:fe:3b:18:ec:0c:c8:50:40:2d:3c: 0c:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:F7:58:81:90:8D:21:6D:5C:54:AA:95:3E:43:FF:47:73:19:DC:38 X509v3 Authority Key Identifier: keyid:A7:42:2B:67:8A:17:48:90:54:C0:69:7D:44:A3:B1:9E:B9:F6:75:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7422B678A17489054C0697D44A3B19EB9F67509.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:63:88:bf:66:02:b0:3e:a4:aa:77:14:60:78:2e:b6:16:4b: 30:0b:48:08:42:ea:01:e6:53:4c:95:49:77:f4:a6:53:00:7c: 4d:c1:04:3c:2b:cf:30:12:9a:17:79:2e:39:db:ac:19:db:b6: 24:36:8c:4b:5b:88:e8:51:c3:6d:c3:80:cd:dd:2a:14:a2:ac: 9c:60:da:29:6b:c1:36:af:81:96:9b:7a:36:8f:2b:83:b9:bd: 69:8b:7e:2d:66:40:bc:11:e1:65:55:f6:9b:a8:ca:48:b6:b6: f8:fa:76:5d:11:dd:26:b6:4a:60:a9:44:3d:de:9a:e0:f4:27: 81:3d:cf:55:49:b2:02:21:dc:62:2a:48:b7:6a:64:77:77:d2: e3:12:28:4c:d9:03:ca:f4:b5:c7:94:81:17:f9:a2:b1:d6:c1: 13:d4:de:dc:75:60:25:c1:60:6c:12:cc:53:2e:15:8f:95:df: b8:00:a7:53:59:48:31:58:43:ce:a4:61:05:29:56:43:42:9b: 2a:e6:23:c6:e2:c4:35:63:d7:8e:e3:3f:49:d4:ce:b8:d4:c6: b8:f9:65:c6:f6:1a:dd:86:72:38:53:bd:b5:b0:7e:27:c9:65: 7f:d8:4b:53:f1:21:3f:2d:41:48:26:fd:7f:93:d6:ae:79:02: 16:98:35:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOyKZZZwgFIS6G26tHvXohADspRAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc0MjJCNjc4QTE3NDg5MDU0QzA2OTdENDRBM0IxOUVC OUY2NzUwOTAeFw0yNTA1MTAyMjU1MzZaFw0yNTA1MTQwNzExMzZaMDMxMTAvBgNV BAMTKDZCRjc1ODgxOTA4RDIxNkQ1QzU0QUE5NTNFNDNGRjQ3NzMxOURDMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSHtxKI++NXEYwpXvNjCRGsY0Q 8Y57qoSIFMSHFAaXe0BBcHi95VjpBYJkjZQa+Z1jIR0Zh1QNkc7SuRDTIbZFniE7 DXlQUv9Xs7VYH8KaySKcReMFxVxXsCQ22Ih2VHuIMINb7LcCWuShJRZvtDBfZzTb lYmdqRxCg6JpEe7cqgO7X4uhsrTwftPbBjY58AYZZq+mmYfSlYE1kzkseYlTuIkb zkDSLbZJZn6t5UzSc7Y6O8qP+93pGg9i2JqpZN/L9MtklqByDhyVAcWoVvETWiYY vXnHfv3GE61XKu3r3bY+dRaGwmSmtvQ43teiOGJ6yZv4/jsY7AzIUEAtPAxbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa/dYgZCNIW1cVKqVPkP/R3MZ3DgwHwYDVR0j BBgwFoAUp0IrZ4oXSJBUwGl9RKOxnrn2dQkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTA1M2Q5Ni1kYTE3LTQwOTktYjcwNy1kYTBlYjJiZjA3YmMvMC9BNzQyMkI2NzhB MTc0ODkwNTRDMDY5N0Q0NEEzQjE5RUI5RjY3NTA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTc0MjJCNjc4QTE3NDg5MDU0QzA2OTdENDRBM0IxOUVCOUY2 NzUwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkwNTNkOTYtZGExNy00MDk5LWI3 MDctZGEwZWIyYmYwN2JjLzAvQTc0MjJCNjc4QTE3NDg5MDU0QzA2OTdENDRBM0Ix OUVCOUY2NzUwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJVjiL9mArA+pKp3FGB4LrYWSzALSAhC6gHm U0yVSXf0plMAfE3BBDwrzzASmhd5LjnbrBnbtiQ2jEtbiOhRw23DgM3dKhSirJxg 2ilrwTavgZabejaPK4O5vWmLfi1mQLwR4WVV9puoyki2tvj6dl0R3Sa2SmCpRD3e muD0J4E9z1VJsgIh3GIqSLdqZHd30uMSKEzZA8r0tceUgRf5orHWwRPU3tx1YCXB YGwSzFMuFY+V37gAp1NZSDFYQ86kYQUpVkNCmyrmI8bixDVj147jP0nUzrjUxrj5 Zcb2Gt2GcjhTvbWwfifJZX/YS1PxIT8tQUgm/X+T1q55AhaYNSM= -----END CERTIFICATE-----Generated at Mon May 12 15:42:30 2025 by rpki-client