$ rpki-client -vvf repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft File: C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft (raw, json) Hash identifier: tmHO73nveY/avXPViJZuKLU0gfA2aiIfey/c2A0N4Ms= Subject key identifier: AD:71:AB:6E:FB:04:F8:2C:C8:C5:54:DC:17:FB:48:0B:1D:8E:26:87 Authority key identifier: C7:F3:F7:AC:64:8C:60:73:C7:FE:73:62:71:A1:A8:E7:27:79:62:B7 Certificate issuer: /CN=C7F3F7AC648C6073C7FE736271A1A8E7277962B7 Certificate serial: 3B6E73B1A7ABDBD2B0D3FE37495A72E0B31003D3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft Manifest number: F3 Signing time: Sun 04 May 2025 11:01:30 +0000 Manifest this update: Sun 04 May 2025 10:56:30 +0000 Manifest next update: Wed 07 May 2025 13:44:30 +0000 Files and hashes: 1: 3130332e3134342e3132382e302f32342d3234203d3e20313339343333.roa (hash: n0wSfYokNi/npNPzftcDmS3sdBSeLLSMYOoHz/p9hrE=) 2: 3130332e3134342e3132382e302f32332d3233203d3e20313339343333.roa (hash: fPtFW64rMVWWTfe0idTINB3BUS2Ju2ivrfcwXSv84rI=) 3: 3130332e3134342e3132392e302f32342d3234203d3e20313339343333.roa (hash: RIPwkwrtUM/4ffKNW9yUN28LgPyDGB1P3EsXYFO7WUY=) 4: C7F3F7AC648C6073C7FE736271A1A8E7277962B7.crl (hash: DjdWM/AJ2BUd5esDA82hO/V7MGEqA56y1A6apmywNT0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.crl rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 13:44:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:6e:73:b1:a7:ab:db:d2:b0:d3:fe:37:49:5a:72:e0:b3:10:03:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7F3F7AC648C6073C7FE736271A1A8E7277962B7 Validity Not Before: May 4 10:56:30 2025 GMT Not After : May 7 13:44:30 2025 GMT Subject: CN=AD71AB6EFB04F82CC8C554DC17FB480B1D8E2687 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:be:cb:33:28:bd:60:c9:7a:3b:28:f3:8a:67: 80:85:8c:88:d8:21:00:1c:a0:00:3d:12:bc:c1:82: 96:a5:a1:72:7c:d7:96:68:c1:a8:aa:29:fb:92:e0: 6b:15:93:0c:0d:65:78:55:6e:f2:8d:0c:47:b2:5b: f9:8f:e1:1b:e3:2c:58:04:45:db:89:fd:6d:dc:db: 81:4c:c4:47:b5:79:7e:b1:3b:5d:e6:ad:f6:10:c1: a8:be:49:d0:f2:94:52:65:29:b2:14:5d:0e:2a:6b: 83:fd:eb:b5:6e:ae:76:3a:2d:78:2f:29:b5:56:d3: 89:6e:a4:c3:fc:f5:fd:10:89:6d:96:6b:14:42:53: 91:f7:ab:7d:f8:fe:9d:0a:83:9c:81:30:e1:50:ee: cf:11:cf:b7:a7:02:af:e8:70:84:f7:8f:6b:ea:33: f0:b6:57:21:29:39:39:84:b0:76:42:f4:bd:8f:22: f7:28:07:cc:b6:2a:ef:29:67:9b:68:0f:06:54:3d: ec:9e:c1:08:a0:24:af:52:d4:88:99:09:29:91:2f: 54:39:71:43:4d:be:95:cf:c1:b9:b8:35:0b:66:b0: 70:4a:84:f7:26:ee:e8:c6:64:cd:ae:f3:94:e1:c7: c3:cf:5a:42:7a:a0:18:b9:36:e8:f2:a8:60:72:f8: 80:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:71:AB:6E:FB:04:F8:2C:C8:C5:54:DC:17:FB:48:0B:1D:8E:26:87 X509v3 Authority Key Identifier: keyid:C7:F3:F7:AC:64:8C:60:73:C7:FE:73:62:71:A1:A8:E7:27:79:62:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e9f575db-c738-4b8e-b36a-6b020c66849d/0/C7F3F7AC648C6073C7FE736271A1A8E7277962B7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:e8:c7:c1:6a:7f:9c:ba:9b:6a:66:b5:ea:08:f4:24:28:6a: cc:2a:8f:4c:39:30:74:4e:5f:93:64:34:9b:98:70:2c:35:7e: 52:e5:de:d0:f5:31:3f:c5:99:2a:f3:c8:95:59:fb:ef:ca:56: ab:27:b4:0c:0d:72:e2:c4:07:37:c9:83:73:a5:45:06:ca:3d: d3:7a:26:fa:76:48:d9:7e:c9:08:7a:cd:4f:df:ef:df:e9:03: 92:7a:db:26:c6:42:98:df:1b:87:d5:9c:a4:ae:ce:6a:d0:da: 14:29:fe:9c:f9:e6:14:7d:87:75:87:0f:12:9c:13:24:37:39: c3:8d:fd:fc:7a:32:16:4a:50:06:d5:47:73:a9:ec:b6:ac:71: 14:e6:a9:b5:f5:9b:54:47:ba:81:ea:d4:28:4d:71:fd:1a:81: 2c:0b:af:c2:dc:a5:58:5b:b5:0e:0c:3c:62:cf:19:f9:79:85: 95:cd:11:11:05:47:95:11:54:f1:69:d8:ba:e8:6f:94:a5:df: bb:5c:d2:4c:a0:bc:6a:20:65:2c:f2:96:22:c6:be:4a:4b:c2: ae:a2:4b:f1:cc:d2:74:6c:13:69:9c:f5:c4:4e:b1:0d:d9:37: 1b:69:d2:3d:0a:56:7a:b5:a2:e4:a5:46:7b:9b:a2:ea:56:da: a2:35:a9:17 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO25zsaer29Kw0/43SVpy4LMQA9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzdGM0Y3QUM2NDhDNjA3M0M3RkU3MzYyNzFBMUE4RTcy Nzc5NjJCNzAeFw0yNTA1MDQxMDU2MzBaFw0yNTA1MDcxMzQ0MzBaMDMxMTAvBgNV BAMTKEFENzFBQjZFRkIwNEY4MkNDOEM1NTREQzE3RkI0ODBCMUQ4RTI2ODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmvsszKL1gyXo7KPOKZ4CFjIjY IQAcoAA9ErzBgpaloXJ815ZowaiqKfuS4GsVkwwNZXhVbvKNDEeyW/mP4RvjLFgE RduJ/W3c24FMxEe1eX6xO13mrfYQwai+SdDylFJlKbIUXQ4qa4P967VurnY6LXgv KbVW04lupMP89f0QiW2WaxRCU5H3q334/p0Kg5yBMOFQ7s8Rz7enAq/ocIT3j2vq M/C2VyEpOTmEsHZC9L2PIvcoB8y2Ku8pZ5toDwZUPeyewQigJK9S1IiZCSmRL1Q5 cUNNvpXPwbm4NQtmsHBKhPcm7ujGZM2u85Thx8PPWkJ6oBi5NujyqGBy+IDrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrXGrbvsE+CzIxVTcF/tICx2OJocwHwYDVR0j BBgwFoAUx/P3rGSMYHPH/nNicaGo5yd5YrcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OWY1NzVkYi1jNzM4LTRiOGUtYjM2YS02YjAyMGM2Njg0OWQvMC9DN0YzRjdBQzY0 OEM2MDczQzdGRTczNjI3MUExQThFNzI3Nzk2MkI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQzdGM0Y3QUM2NDhDNjA3M0M3RkU3MzYyNzFBMUE4RTcyNzc5 NjJCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTlmNTc1ZGItYzczOC00YjhlLWIz NmEtNmIwMjBjNjY4NDlkLzAvQzdGM0Y3QUM2NDhDNjA3M0M3RkU3MzYyNzFBMUE4 RTcyNzc5NjJCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKvox8Fqf5y6m2pmteoI9CQoaswqj0w5MHRO X5NkNJuYcCw1flLl3tD1MT/FmSrzyJVZ++/KVqsntAwNcuLEBzfJg3OlRQbKPdN6 Jvp2SNl+yQh6zU/f79/pA5J62ybGQpjfG4fVnKSuzmrQ2hQp/pz55hR9h3WHDxKc EyQ3OcON/fx6MhZKUAbVR3Op7LascRTmqbX1m1RHuoHq1ChNcf0agSwLr8LcpVhb tQ4MPGLPGfl5hZXNEREFR5URVPFp2Lrob5Sl37tc0kygvGogZSzyliLGvkpLwq6i S/HM0nRsE2mc9cROsQ3ZNxtp0j0KVnq1ouSlRnuboupW2qI1qRc= -----END CERTIFICATE-----Generated at Mon May 5 18:42:22 2025 by rpki-client