$ rpki-client -vvf repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft File: B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft (raw, json) Hash identifier: JiUTPf3DtaGEs6Wp3PRFYQjGbhgQ1sZ2asgR+gupqGw= Subject key identifier: 11:C6:76:CC:EC:56:80:80:D9:0E:FD:25:26:46:BD:78:E1:AA:EE:3D Authority key identifier: B7:A3:DE:01:7F:B3:D7:40:B2:93:22:D8:18:D5:C6:A8:FE:6D:4C:30 Certificate issuer: /CN=B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30 Certificate serial: 2D27AC0AAD6692A6FC7DB31096EE7D10AE077817 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft Manifest number: D7 Signing time: Fri 18 Apr 2025 12:51:15 +0000 Manifest this update: Fri 18 Apr 2025 12:46:15 +0000 Manifest next update: Mon 21 Apr 2025 18:10:15 +0000 Files and hashes: 1: B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.crl (hash: F0S82j0d6IbnDfs9AXOAOEDr8AsWHSvVb/CBhd/1sxg=) 2: 3130332e3231352e36312e302f32342d3234203d3e20313531353033.roa (hash: yI+x3QlccThUEQyL4aGgW81et+4syWgCbrFAnQNyq/g=) 3: 3130332e3231352e36302e302f32342d3234203d3e20313531353033.roa (hash: b0fuY1pKKFn/0Zi2JNlIa5wt7XKTYP6sji14ARgrEj0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.crl rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 18:10:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:27:ac:0a:ad:66:92:a6:fc:7d:b3:10:96:ee:7d:10:ae:07:78:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30 Validity Not Before: Apr 18 12:46:15 2025 GMT Not After : Apr 21 18:10:15 2025 GMT Subject: CN=11C676CCEC568080D90EFD252646BD78E1AAEE3D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:64:be:9e:ff:6e:f9:f2:ff:07:31:95:b1:f9: 9d:46:f8:a3:d9:17:8b:c7:b7:7b:64:4f:54:dc:eb: 42:29:51:d3:83:7c:30:63:a8:f6:e1:b5:8a:6c:76: 9a:ca:31:6a:1c:9a:11:b0:c1:d7:84:8b:60:d3:c8: 09:56:ba:ba:a1:6b:2f:fd:f3:8c:65:3b:3d:47:59: 54:93:cc:c0:a4:32:65:c8:90:54:c1:11:6c:b5:1a: a3:40:10:4b:ca:07:79:40:44:47:32:8d:6f:27:ff: 16:5c:3a:15:f3:14:4e:2d:d4:83:2b:c1:6c:66:80: 0e:a2:45:fe:5a:a8:d3:6f:28:03:19:4a:2c:c1:3a: 9f:0a:a8:44:66:7d:8d:7a:14:a4:57:88:07:34:03: e6:9c:e1:57:73:bd:61:e3:c6:77:54:5b:e0:4f:3f: fd:9a:46:36:46:7e:a5:71:b4:5a:75:13:4b:c1:4e: fc:d8:71:fd:78:93:57:31:20:75:26:28:72:42:de: c7:b4:7d:00:4e:cc:4a:86:4f:61:46:fe:d4:e4:e7: 70:43:3a:de:ec:ac:36:71:21:fa:79:67:fd:3d:54: a6:d7:19:82:1b:5a:0d:38:62:b0:5d:82:98:9c:6b: a5:d5:cf:67:13:9c:df:04:d7:46:a8:e6:3a:3d:19: 44:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:C6:76:CC:EC:56:80:80:D9:0E:FD:25:26:46:BD:78:E1:AA:EE:3D X509v3 Authority Key Identifier: keyid:B7:A3:DE:01:7F:B3:D7:40:B2:93:22:D8:18:D5:C6:A8:FE:6D:4C:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0616c04d-d9e0-4c1f-8a14-e23bf2744592/0/B7A3DE017FB3D740B29322D818D5C6A8FE6D4C30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:4b:b6:2b:6c:26:7e:75:33:10:8f:2e:38:45:2f:8b:a0:0d: 60:94:1a:6e:3a:00:65:96:14:67:20:5f:f0:39:62:5a:00:af: 20:e3:4e:71:a2:05:f3:89:4a:0b:54:9c:38:ea:fd:bf:0e:da: 22:d9:1b:50:47:7d:05:7e:ba:4b:c0:79:21:b7:50:f5:3e:98: 9b:4f:8e:4d:f7:cb:1f:e9:24:30:65:e7:1b:1c:f4:84:a7:5d: 24:35:c0:30:a2:ff:f5:39:d9:9b:24:c7:ed:b6:ab:74:48:3e: fc:9b:c8:72:ae:a6:bc:e9:16:ad:97:9f:9a:07:f9:a7:77:99: 8a:1f:2f:b8:8a:c6:a1:8c:1d:65:ae:c0:67:8f:e3:09:35:d9: c3:06:a4:dd:7c:71:fc:d8:81:2c:09:cd:6f:8e:14:45:f5:56: 99:a5:78:e6:b7:01:41:67:c7:3a:16:e1:64:d2:2d:e3:7d:72: d9:c3:f7:14:b4:86:ab:38:27:22:5f:e4:25:7d:9c:d4:28:ee: 3c:d5:0d:7c:6f:18:38:c4:e9:d4:4e:90:8e:f3:f5:dd:2f:be: 50:d7:41:b2:25:a1:f5:e8:db:1e:7f:15:58:92:0c:50:30:8b: 60:37:7d:03:33:ab:6c:bc:a3:89:80:d6:d1:d3:1d:05:19:f1: 1f:fe:cf:ee -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULSesCq1mkqb8fbMQlu59EK4HeBcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjdBM0RFMDE3RkIzRDc0MEIyOTMyMkQ4MThENUM2QThG RTZENEMzMDAeFw0yNTA0MTgxMjQ2MTVaFw0yNTA0MjExODEwMTVaMDMxMTAvBgNV BAMTKDExQzY3NkNDRUM1NjgwODBEOTBFRkQyNTI2NDZCRDc4RTFBQUVFM0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnZL6e/2758v8HMZWx+Z1G+KPZ F4vHt3tkT1Tc60IpUdODfDBjqPbhtYpsdprKMWocmhGwwdeEi2DTyAlWurqhay/9 84xlOz1HWVSTzMCkMmXIkFTBEWy1GqNAEEvKB3lAREcyjW8n/xZcOhXzFE4t1IMr wWxmgA6iRf5aqNNvKAMZSizBOp8KqERmfY16FKRXiAc0A+ac4VdzvWHjxndUW+BP P/2aRjZGfqVxtFp1E0vBTvzYcf14k1cxIHUmKHJC3se0fQBOzEqGT2FG/tTk53BD Ot7srDZxIfp5Z/09VKbXGYIbWg04YrBdgpica6XVz2cTnN8E10ao5jo9GUS3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEcZ2zOxWgIDZDv0lJka9eOGq7j0wHwYDVR0j BBgwFoAUt6PeAX+z10CykyLYGNXGqP5tTDAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjE2YzA0ZC1kOWUwLTRjMWYtOGExNC1lMjNiZjI3NDQ1OTIvMC9CN0EzREUwMTdG QjNENzQwQjI5MzIyRDgxOEQ1QzZBOEZFNkQ0QzMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQjdBM0RFMDE3RkIzRDc0MEIyOTMyMkQ4MThENUM2QThGRTZE NEMzMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYxNmMwNGQtZDllMC00YzFmLThh MTQtZTIzYmYyNzQ0NTkyLzAvQjdBM0RFMDE3RkIzRDc0MEIyOTMyMkQ4MThENUM2 QThGRTZENEMzMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACVLtitsJn51MxCPLjhFL4ugDWCUGm46AGWW FGcgX/A5YloAryDjTnGiBfOJSgtUnDjq/b8O2iLZG1BHfQV+ukvAeSG3UPU+mJtP jk33yx/pJDBl5xsc9ISnXSQ1wDCi//U52Zskx+22q3RIPvybyHKuprzpFq2Xn5oH +ad3mYofL7iKxqGMHWWuwGeP4wk12cMGpN18cfzYgSwJzW+OFEX1VpmleOa3AUFn xzoW4WTSLeN9ctnD9xS0hqs4JyJf5CV9nNQo7jzVDXxvGDjE6dROkI7z9d0vvlDX QbIlofXo2x5/FViSDFAwi2A3fQMzq2y8o4mA1tHTHQUZ8R/+z+4= -----END CERTIFICATE-----Generated at Sun Apr 20 00:57:44 2025 by rpki-client