$ rpki-client -vvf repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.mft File: 7A1D192D65B7EEADC46AB445208CC224DCE974B6.mft (raw, json) Hash identifier: kdDGh+H6GGxpalo7ethelskE0nl5xXJ0FIhH6niibT0= Subject key identifier: AC:52:B0:9C:B2:BF:D6:22:3B:95:63:E8:7B:C2:3E:B2:F5:78:AC:36 Authority key identifier: 7A:1D:19:2D:65:B7:EE:AD:C4:6A:B4:45:20:8C:C2:24:DC:E9:74:B6 Certificate issuer: /CN=7A1D192D65B7EEADC46AB445208CC224DCE974B6 Certificate serial: 4398F2DE6D43325BD862E45C850FA73A7708C1A7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A1D192D65B7EEADC46AB445208CC224DCE974B6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.mft Manifest number: 0244 Signing time: Tue 06 May 2025 16:20:50 +0000 Manifest this update: Tue 06 May 2025 16:15:50 +0000 Manifest next update: Fri 09 May 2025 16:41:50 +0000 Files and hashes: 1: 3130332e3134322e36302e302f32332d3234203d3e20313339333639.roa (hash: pb2t7SBeTp32K0Tjh6odZI2irDPZNgzYkTCAyS4mxhU=) 2: 3130332e3134322e36302e302f32342d3234203d3e20313339333639.roa (hash: fTPzmwwbdpauo5HKrQ+dNYQT14F8r8l5bzz22yqBEKg=) 3: 7A1D192D65B7EEADC46AB445208CC224DCE974B6.crl (hash: VgYA6lZ/0WHZ0JER4CeWOIFgpD5FyeBvePKW5ya6FQs=) 4: 3130332e3134322e36312e302f32342d3234203d3e20313339333639.roa (hash: o8PvJ8AMYKvkSxiHZFm3Ak0o0pEpkJQBsCIo8IhdcV8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.crl rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A1D192D65B7EEADC46AB445208CC224DCE974B6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 16:41:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:98:f2:de:6d:43:32:5b:d8:62:e4:5c:85:0f:a7:3a:77:08:c1:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A1D192D65B7EEADC46AB445208CC224DCE974B6 Validity Not Before: May 6 16:15:50 2025 GMT Not After : May 9 16:41:50 2025 GMT Subject: CN=AC52B09CB2BFD6223B9563E87BC23EB2F578AC36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:d6:dc:2e:75:75:11:56:5a:56:ac:96:dc:b6: 72:54:ec:4b:71:5b:d8:c6:fe:8e:e9:38:f9:f1:9d: 22:eb:f4:3c:49:bb:9a:80:40:11:0c:21:3c:5e:c8: 67:c0:52:be:17:4b:4c:3b:a1:d1:e3:37:a4:42:76: 12:c8:bc:84:56:01:f3:97:99:35:4f:f0:5a:73:c8: 71:98:d5:e1:65:04:0a:91:91:fb:44:8d:37:47:07: 60:e2:f9:c7:3f:05:af:43:dd:3e:9c:4a:56:b1:e5: 64:ed:41:25:d4:15:50:62:4b:32:d7:06:3d:fe:4a: b5:e2:9d:ee:aa:f3:ba:27:d6:61:c2:b6:dc:bc:73: eb:28:01:51:7b:fa:14:c7:2a:88:df:61:6d:7e:f9: ab:45:ae:ff:e5:53:15:12:60:07:cc:50:63:ec:02: 55:ef:03:36:2c:26:76:01:98:09:3b:bf:29:ab:fb: f2:b0:d8:dd:55:3d:a8:25:1f:db:c2:6f:e6:d8:8e: 22:04:07:d3:9c:a5:28:e7:83:19:5a:89:83:f1:35: d9:ef:89:fc:e9:b4:a8:93:52:b5:e7:77:6d:d8:39: bc:e6:77:a9:bc:41:4b:24:55:dc:d7:ec:a3:d4:ef: 5a:6e:4c:93:7a:e3:a5:a1:44:90:e0:d9:f5:46:4e: 8a:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AC:52:B0:9C:B2:BF:D6:22:3B:95:63:E8:7B:C2:3E:B2:F5:78:AC:36 X509v3 Authority Key Identifier: keyid:7A:1D:19:2D:65:B7:EE:AD:C4:6A:B4:45:20:8C:C2:24:DC:E9:74:B6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A1D192D65B7EEADC46AB445208CC224DCE974B6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e71bf980-24da-4865-a989-2d4489e3a505/0/7A1D192D65B7EEADC46AB445208CC224DCE974B6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:4a:7b:1a:0f:ff:4c:6a:50:f8:9f:44:03:1d:70:de:64:bb: 7e:c0:e9:51:fc:49:25:08:51:a5:d1:19:40:4a:b8:f0:8d:44: 6e:2f:cb:e8:1e:8e:92:fd:2c:27:8a:31:b7:d0:01:bc:a7:4f: e1:a4:3d:f8:00:68:59:ce:50:f7:55:c9:e3:75:23:9f:8f:a6: 22:35:97:86:99:bc:7f:34:dd:58:8e:ac:ed:c1:84:6e:d0:8d: 4d:f7:38:21:1a:55:ed:01:2a:84:ad:54:b1:05:c6:10:64:bb: d6:01:34:84:14:b4:c6:88:ed:54:cd:f0:bf:51:45:b8:be:2a: 3a:8e:66:02:91:dc:bd:13:92:4f:a4:72:f0:f1:a8:1a:9d:0d: a1:6a:fa:76:8a:25:7c:12:77:78:4e:1f:cf:06:a1:18:d5:1c: d9:31:3c:72:3d:d5:d5:47:2a:37:b4:11:7d:fb:db:30:35:3d: 39:e0:81:70:b9:f5:d1:e4:1a:94:aa:9b:9d:30:49:28:4a:b4: e0:4c:da:b7:b6:9b:d3:65:5f:9f:56:44:aa:6c:08:b4:a2:f9: 27:32:bd:b2:1a:cb:a5:1b:d2:5f:72:d2:f6:ea:86:40:3a:9f: eb:65:a7:0e:08:73:5d:93:1b:57:58:42:82:c3:f4:84:bd:4d: 0b:ff:0c:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQ5jy3m1DMlvYYuRchQ+nOncIwacwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ExRDE5MkQ2NUI3RUVBREM0NkFCNDQ1MjA4Q0MyMjRE Q0U5NzRCNjAeFw0yNTA1MDYxNjE1NTBaFw0yNTA1MDkxNjQxNTBaMDMxMTAvBgNV BAMTKEFDNTJCMDlDQjJCRkQ2MjIzQjk1NjNFODdCQzIzRUIyRjU3OEFDMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC01twudXURVlpWrJbctnJU7Etx W9jG/o7pOPnxnSLr9DxJu5qAQBEMITxeyGfAUr4XS0w7odHjN6RCdhLIvIRWAfOX mTVP8FpzyHGY1eFlBAqRkftEjTdHB2Di+cc/Ba9D3T6cSlax5WTtQSXUFVBiSzLX Bj3+SrXine6q87on1mHCtty8c+soAVF7+hTHKojfYW1++atFrv/lUxUSYAfMUGPs AlXvAzYsJnYBmAk7vymr+/Kw2N1VPaglH9vCb+bYjiIEB9OcpSjngxlaiYPxNdnv ifzptKiTUrXnd23YObzmd6m8QUskVdzX7KPU71puTJN646WhRJDg2fVGTopLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrFKwnLK/1iI7lWPoe8I+svV4rDYwHwYDVR0j BBgwFoAUeh0ZLWW37q3EarRFIIzCJNzpdLYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NzFiZjk4MC0yNGRhLTQ4NjUtYTk4OS0yZDQ0ODllM2E1MDUvMC83QTFEMTkyRDY1 QjdFRUFEQzQ2QUI0NDUyMDhDQzIyNERDRTk3NEI2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0ExRDE5MkQ2NUI3RUVBREM0NkFCNDQ1MjA4Q0MyMjREQ0U5 NzRCNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTcxYmY5ODAtMjRkYS00ODY1LWE5 ODktMmQ0NDg5ZTNhNTA1LzAvN0ExRDE5MkQ2NUI3RUVBREM0NkFCNDQ1MjA4Q0My MjREQ0U5NzRCNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHtKexoP/0xqUPifRAMdcN5ku37A6VH8SSUI UaXRGUBKuPCNRG4vy+gejpL9LCeKMbfQAbynT+GkPfgAaFnOUPdVyeN1I5+PpiI1 l4aZvH803ViOrO3BhG7QjU33OCEaVe0BKoStVLEFxhBku9YBNIQUtMaI7VTN8L9R Rbi+KjqOZgKR3L0Tkk+kcvDxqBqdDaFq+naKJXwSd3hOH88GoRjVHNkxPHI91dVH Kje0EX372zA1PTnggXC59dHkGpSqm50wSShKtOBM2re2m9NlX59WRKpsCLSi+Scy vbIay6Ub0l9y0vbqhkA6n+tlpw4Ic12TG1dYQoLD9IS9TQv/DHU= -----END CERTIFICATE-----Generated at Wed May 7 22:40:16 2025 by rpki-client