$ rpki-client -vvf repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft File: 7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft (raw, json) Hash identifier: hAhrTe61aAyXO17JjACtH+hFK22NOpgIc/E4wEe5y7c= Subject key identifier: 7E:BE:B0:15:61:F2:58:7C:09:B6:A4:0B:88:59:ED:44:89:8B:7A:32 Authority key identifier: 7F:DB:76:1B:09:E7:A9:A8:0C:D2:8C:84:A5:FF:DB:12:F5:C9:BB:D0 Certificate issuer: /CN=7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0 Certificate serial: 62B0E257394379C462BC80AA833FDFCE4AC3BEE6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft Manifest number: 01CE Signing time: Sun 11 May 2025 10:10:59 +0000 Manifest this update: Sun 11 May 2025 10:05:59 +0000 Manifest next update: Wed 14 May 2025 20:05:59 +0000 Files and hashes: 1: 7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.crl (hash: jfqYzazCJ/VyLU0h99kMuTD1EqnTs9lGgMDBQseXZec=) 2: 3130332e3138362e38382e302f32342d3234203d3e20313439373137.roa (hash: qKtIrqocYRtH9mFT0B1bJLwWXs7q8vOuLUP4J+rTPCk=) 3: 3130332e3138362e38392e302f32342d3234203d3e20313439373137.roa (hash: d85h85v2ptQz3vrVN5qkUm0+GStqZnlOAr5LKlkna3k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.crl rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 20:05:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:b0:e2:57:39:43:79:c4:62:bc:80:aa:83:3f:df:ce:4a:c3:be:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0 Validity Not Before: May 11 10:05:59 2025 GMT Not After : May 14 20:05:59 2025 GMT Subject: CN=7EBEB01561F2587C09B6A40B8859ED44898B7A32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:e5:30:14:87:0a:d5:48:76:7a:51:0a:11:8b: 68:16:be:e6:af:54:7c:5d:f8:b3:9b:9c:b2:c5:88: 06:fa:43:bd:c2:ad:cf:bd:28:67:a3:f5:5d:f4:fa: eb:9e:81:4c:76:51:3e:ab:50:bb:17:22:63:71:f1: c0:65:ca:94:d4:57:20:f3:0c:d5:58:6f:f0:5b:11: 60:42:6c:35:f7:a6:83:00:f9:bc:6b:b4:c9:7e:67: 6b:dc:43:33:da:fc:7d:6d:a4:05:0a:cd:dd:76:64: 8c:ca:88:78:a8:b3:b5:14:5f:de:66:56:17:c8:5d: 6a:ad:0e:5d:e4:d7:69:be:2d:ea:4d:8a:23:5f:4a: 05:f8:73:64:82:65:3e:ac:d6:47:7a:0e:49:5d:e3: 1a:c1:42:db:8e:a2:2a:39:0d:0d:5f:47:b7:1b:3d: 13:a1:ac:8a:10:da:98:e6:90:75:ec:55:a2:6a:17: ce:a7:ad:ea:2b:ac:68:9d:8d:0d:75:92:f6:ff:ae: c8:30:03:8d:cc:84:8b:14:e3:cb:c6:10:fc:96:1d: 43:db:fb:69:d8:b7:d6:48:c2:a1:43:cd:d5:3b:f0: 70:76:9e:29:4a:5b:a1:f7:89:5b:c0:ec:e6:fe:06: 6d:e0:3d:fe:cf:98:12:0f:5c:17:cc:cb:7c:fe:04: fe:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:BE:B0:15:61:F2:58:7C:09:B6:A4:0B:88:59:ED:44:89:8B:7A:32 X509v3 Authority Key Identifier: keyid:7F:DB:76:1B:09:E7:A9:A8:0C:D2:8C:84:A5:FF:DB:12:F5:C9:BB:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e3295de6-2058-46a7-936b-052cf2fa920d/0/7FDB761B09E7A9A80CD28C84A5FFDB12F5C9BBD0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:f4:7a:bf:0f:89:3c:69:2f:66:ab:64:b7:39:16:38:e0:81: 87:5a:1c:40:a1:09:a0:63:54:1c:96:c0:c6:62:16:81:c2:d4: fa:95:be:8a:48:a1:47:f9:7e:30:52:26:71:ef:98:0b:c2:69: ca:86:33:ce:a8:1a:42:8e:41:af:af:40:a5:fa:c8:b9:b7:13: 98:09:4a:af:df:74:bb:23:42:a8:4d:ac:79:07:64:7b:64:3a: 45:7d:ee:cd:38:3e:2a:5a:f3:69:66:77:ac:55:c4:a9:12:e5: b5:cc:9a:96:69:44:25:36:97:cb:1a:09:2c:76:cb:f0:7e:02: e5:3b:98:68:2e:bb:10:17:aa:1a:e7:76:27:42:43:17:ed:cb: 82:bd:3a:5e:03:bd:c2:c3:ae:91:51:15:80:8f:5d:dd:1c:bc: d8:72:cd:c6:b4:6b:b3:d5:93:ab:97:5e:5c:29:74:ec:bb:eb: 9c:f5:90:a2:5f:ec:fa:fe:82:42:cb:53:ed:55:69:b2:b7:69: 5c:6a:47:3e:c8:79:2c:82:c1:7b:ea:7d:69:b9:9d:35:6a:34: e1:1a:d5:d2:dd:1a:90:22:f1:f3:32:8a:26:81:66:dd:07:55: 86:9a:01:00:43:a8:c1:ad:16:69:99:3c:67:8f:bc:3d:c7:5c: c0:e1:bd:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYrDiVzlDecRivICqgz/fzkrDvuYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ZEQjc2MUIwOUU3QTlBODBDRDI4Qzg0QTVGRkRCMTJG NUM5QkJEMDAeFw0yNTA1MTExMDA1NTlaFw0yNTA1MTQyMDA1NTlaMDMxMTAvBgNV BAMTKDdFQkVCMDE1NjFGMjU4N0MwOUI2QTQwQjg4NTlFRDQ0ODk4QjdBMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq5TAUhwrVSHZ6UQoRi2gWvuav VHxd+LObnLLFiAb6Q73Crc+9KGej9V30+uuegUx2UT6rULsXImNx8cBlypTUVyDz DNVYb/BbEWBCbDX3poMA+bxrtMl+Z2vcQzPa/H1tpAUKzd12ZIzKiHios7UUX95m VhfIXWqtDl3k12m+LepNiiNfSgX4c2SCZT6s1kd6Dkld4xrBQtuOoio5DQ1fR7cb PROhrIoQ2pjmkHXsVaJqF86nreorrGidjQ11kvb/rsgwA43MhIsU48vGEPyWHUPb +2nYt9ZIwqFDzdU78HB2nilKW6H3iVvA7Ob+Bm3gPf7PmBIPXBfMy3z+BP7HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfr6wFWHyWHwJtqQLiFntRImLejIwHwYDVR0j BBgwFoAUf9t2GwnnqagM0oyEpf/bEvXJu9AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MzI5NWRlNi0yMDU4LTQ2YTctOTM2Yi0wNTJjZjJmYTkyMGQvMC83RkRCNzYxQjA5 RTdBOUE4MENEMjhDODRBNUZGREIxMkY1QzlCQkQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0ZEQjc2MUIwOUU3QTlBODBDRDI4Qzg0QTVGRkRCMTJGNUM5 QkJEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTMyOTVkZTYtMjA1OC00NmE3LTkz NmItMDUyY2YyZmE5MjBkLzAvN0ZEQjc2MUIwOUU3QTlBODBDRDI4Qzg0QTVGRkRC MTJGNUM5QkJEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ/0er8PiTxpL2arZLc5FjjggYdaHEChCaBj VByWwMZiFoHC1PqVvopIoUf5fjBSJnHvmAvCacqGM86oGkKOQa+vQKX6yLm3E5gJ Sq/fdLsjQqhNrHkHZHtkOkV97s04Pipa82lmd6xVxKkS5bXMmpZpRCU2l8saCSx2 y/B+AuU7mGguuxAXqhrndidCQxfty4K9Ol4DvcLDrpFRFYCPXd0cvNhyzca0a7PV k6uXXlwpdOy765z1kKJf7Pr+gkLLU+1VabK3aVxqRz7IeSyCwXvqfWm5nTVqNOEa 1dLdGpAi8fMyiiaBZt0HVYaaAQBDqMGtFmmZPGePvD3HXMDhve4= -----END CERTIFICATE-----Generated at Mon May 12 08:19:36 2025 by rpki-client