$ rpki-client -vvf repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.mft File: 7433AB64571BE1827F0BC97ED291976B6E3429FA.mft (raw, json) Hash identifier: dpZyca1teoIWR7tWkvRWgyFGKLXXOuBgd+c/jz2h6OY= Subject key identifier: 83:E4:5C:F8:D9:6D:74:88:87:F8:B9:91:3D:A4:AE:F5:48:F7:9C:0A Authority key identifier: 74:33:AB:64:57:1B:E1:82:7F:0B:C9:7E:D2:91:97:6B:6E:34:29:FA Certificate issuer: /CN=7433AB64571BE1827F0BC97ED291976B6E3429FA Certificate serial: 2AA4431FF2B77058A4430FE9E1A890E59429C21A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7433AB64571BE1827F0BC97ED291976B6E3429FA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.mft Manifest number: 0163 Signing time: Fri 18 Apr 2025 01:52:11 +0000 Manifest this update: Fri 18 Apr 2025 01:47:11 +0000 Manifest next update: Mon 21 Apr 2025 07:24:11 +0000 Files and hashes: 1: 3130332e37352e36322e302f32342d3234203d3e20313530353339.roa (hash: Foo7ECvYM8eC5QdFLfci515Pz4pdcUotJYsrxOmUjnQ=) 2: 7433AB64571BE1827F0BC97ED291976B6E3429FA.crl (hash: 0cAquYDwnCRbFcBmZBZfK1/ozAyVYSehdSkFEqLSnI8=) 3: 3130332e37352e36322e302f32332d3234203d3e20313530353339.roa (hash: LDOqOfl8+d8Lz+/c+0knmLxGK2Kr8P4Ti1sIU0L3/wo=) 4: 3130332e37352e36332e302f32342d3234203d3e20313530353339.roa (hash: dt0M2E6hMVGXyd6wchuCJpbqgL7DjAEk9eGkYZfJTqo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.crl rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7433AB64571BE1827F0BC97ED291976B6E3429FA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 07:24:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:a4:43:1f:f2:b7:70:58:a4:43:0f:e9:e1:a8:90:e5:94:29:c2:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7433AB64571BE1827F0BC97ED291976B6E3429FA Validity Not Before: Apr 18 01:47:11 2025 GMT Not After : Apr 21 07:24:11 2025 GMT Subject: CN=83E45CF8D96D748887F8B9913DA4AEF548F79C0A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:9a:da:5f:9d:89:b2:e2:7a:e3:ae:b4:26:12: cf:10:af:61:be:25:bd:ba:36:de:32:7f:25:f3:71: 4a:28:2e:42:1c:f7:2b:f6:0d:f6:f2:11:e6:4c:1e: 5a:7d:a1:fc:01:ac:3e:72:8e:43:f2:ba:c9:e0:9c: 4b:19:eb:30:5e:f1:ce:59:2b:44:b4:6f:0f:a5:95: 74:e4:23:e9:54:1d:04:28:7f:3b:03:c9:de:5c:31: 67:30:9f:3b:e5:34:d9:13:f6:05:b9:e5:31:31:f4: f6:41:ed:c7:61:2c:ff:ad:0c:5b:31:19:41:1b:93: b1:00:b4:a8:ec:d9:65:01:90:be:da:6f:6e:59:5e: b5:58:79:02:9f:bf:63:04:e8:d2:78:1d:78:9b:74: 29:a0:ee:75:41:7f:e4:15:56:1a:f7:92:6f:94:ff: 38:3e:d5:91:13:be:e9:16:ed:4a:dd:01:08:47:84: c1:86:4e:f8:91:96:02:bd:27:3c:a2:d3:32:45:46: 48:59:58:3b:0e:65:e5:db:f0:61:52:21:eb:2a:b0: d9:1d:96:90:28:62:12:1a:e7:d5:10:2c:b9:25:e9: 10:c2:93:b9:e2:11:92:7e:d1:10:2d:bc:bc:88:f2: 17:3e:1d:d7:74:d7:03:9b:e0:f5:6f:72:84:40:43: 97:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:E4:5C:F8:D9:6D:74:88:87:F8:B9:91:3D:A4:AE:F5:48:F7:9C:0A X509v3 Authority Key Identifier: keyid:74:33:AB:64:57:1B:E1:82:7F:0B:C9:7E:D2:91:97:6B:6E:34:29:FA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7433AB64571BE1827F0BC97ED291976B6E3429FA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07c8a0c3-37f5-4667-a430-6fa111d343aa/0/7433AB64571BE1827F0BC97ED291976B6E3429FA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:bb:eb:6f:cf:39:33:88:28:8d:58:d8:1c:dd:ed:14:82:7b: 09:69:b9:07:dc:ab:7a:12:49:4c:dd:84:3c:69:31:90:78:2b: ec:99:9a:a3:84:ab:61:01:eb:a8:29:c7:d9:a7:b9:5d:23:25: 85:3a:95:e2:02:8b:83:9e:08:11:2c:83:e6:b9:06:5f:94:e9: 92:6c:e9:23:ea:67:0e:81:89:03:07:26:e6:34:c2:ef:5c:27: 0a:10:bb:40:e9:92:9d:b9:80:f1:71:a6:b4:0d:51:dd:f6:48: 6d:53:64:37:83:f7:45:18:ac:97:47:45:10:df:f7:78:0c:66: 95:b9:45:cc:91:14:fa:c7:54:27:50:1d:74:f6:1b:95:53:13: 96:96:62:50:66:6f:7a:bb:33:86:3c:67:30:bb:f7:e8:07:06: a3:d7:0d:cf:c4:57:ef:9d:f7:6e:87:02:84:cb:4f:5c:d3:a3: e4:19:e9:f3:f3:ac:40:77:00:8d:d6:5e:f3:63:a5:bb:89:71: 80:69:23:6d:e7:3a:b8:7d:0c:8e:45:b4:c2:8d:73:70:cc:b2: c2:f9:6c:17:b9:84:ae:4f:94:30:12:34:45:26:66:36:8b:80: 59:22:fd:ce:63:57:ed:96:a5:55:cc:7a:a8:4c:03:14:7f:f4: 45:97:2b:2e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKqRDH/K3cFikQw/p4aiQ5ZQpwhowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzQzM0FCNjQ1NzFCRTE4MjdGMEJDOTdFRDI5MTk3NkI2 RTM0MjlGQTAeFw0yNTA0MTgwMTQ3MTFaFw0yNTA0MjEwNzI0MTFaMDMxMTAvBgNV BAMTKDgzRTQ1Q0Y4RDk2RDc0ODg4N0Y4Qjk5MTNEQTRBRUY1NDhGNzlDMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnmtpfnYmy4nrjrrQmEs8Qr2G+ Jb26Nt4yfyXzcUooLkIc9yv2DfbyEeZMHlp9ofwBrD5yjkPyusngnEsZ6zBe8c5Z K0S0bw+llXTkI+lUHQQofzsDyd5cMWcwnzvlNNkT9gW55TEx9PZB7cdhLP+tDFsx GUEbk7EAtKjs2WUBkL7ab25ZXrVYeQKfv2ME6NJ4HXibdCmg7nVBf+QVVhr3km+U /zg+1ZETvukW7UrdAQhHhMGGTviRlgK9Jzyi0zJFRkhZWDsOZeXb8GFSIesqsNkd lpAoYhIa59UQLLkl6RDCk7niEZJ+0RAtvLyI8hc+Hdd01wOb4PVvcoRAQ5fRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUg+Rc+NltdIiH+LmRPaSu9Uj3nAowHwYDVR0j BBgwFoAUdDOrZFcb4YJ/C8l+0pGXa240KfowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w N2M4YTBjMy0zN2Y1LTQ2NjctYTQzMC02ZmExMTFkMzQzYWEvMC83NDMzQUI2NDU3 MUJFMTgyN0YwQkM5N0VEMjkxOTc2QjZFMzQyOUZBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzQzM0FCNjQ1NzFCRTE4MjdGMEJDOTdFRDI5MTk3NkI2RTM0 MjlGQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDdjOGEwYzMtMzdmNS00NjY3LWE0 MzAtNmZhMTExZDM0M2FhLzAvNzQzM0FCNjQ1NzFCRTE4MjdGMEJDOTdFRDI5MTk3 NkI2RTM0MjlGQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAi762/POTOIKI1Y2Bzd7RSCewlpuQfcq3oS SUzdhDxpMZB4K+yZmqOEq2EB66gpx9mnuV0jJYU6leICi4OeCBEsg+a5Bl+U6ZJs 6SPqZw6BiQMHJuY0wu9cJwoQu0Dpkp25gPFxprQNUd32SG1TZDeD90UYrJdHRRDf 93gMZpW5RcyRFPrHVCdQHXT2G5VTE5aWYlBmb3q7M4Y8ZzC79+gHBqPXDc/EV++d 926HAoTLT1zTo+QZ6fPzrEB3AI3WXvNjpbuJcYBpI23nOrh9DI5FtMKNc3DMssL5 bBe5hK5PlDASNEUmZjaLgFki/c5jV+2WpVXMeqhMAxR/9EWXKy4= -----END CERTIFICATE-----Generated at Fri Apr 18 06:48:21 2025 by rpki-client