$ rpki-client -vvf repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/D6729321F95E264CBE7373469790C77F8B57E268.mft File: D6729321F95E264CBE7373469790C77F8B57E268.mft (raw, json) Hash identifier: FExcMVzyDs8cMrSOq0ckAdHc7+eXHh8Purg7QNbA50o= Subject key identifier: 7D:BB:DC:03:A5:0B:D9:A6:AC:6E:C6:63:6B:06:28:53:AF:24:4C:F1 Authority key identifier: D6:72:93:21:F9:5E:26:4C:BE:73:73:46:97:90:C7:7F:8B:57:E2:68 Certificate issuer: /CN=D6729321F95E264CBE7373469790C77F8B57E268 Certificate serial: 5AB2FFC261B74F1FDC4F4BDB3C6D89A28ACA3DD3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6729321F95E264CBE7373469790C77F8B57E268.cer Subject info access: rsync://repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/D6729321F95E264CBE7373469790C77F8B57E268.mft Manifest number: 026A Signing time: Fri 04 Apr 2025 05:20:00 +0000 Manifest this update: Fri 04 Apr 2025 05:15:00 +0000 Manifest next update: Mon 07 Apr 2025 14:02:00 +0000 Files and hashes: 1: 3130332e3137372e3135322e302f32342d3234203d3e20313437313637.roa (hash: GzPhe/FHAzKWcFGzhJ3yzciMVW730zuvH2EeYtfsJ1g=) 2: D6729321F95E264CBE7373469790C77F8B57E268.crl (hash: 5GHvAQQBWN4f6GhRA7lm2RChyK9ZL7VjuepGduT3wcQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/D6729321F95E264CBE7373469790C77F8B57E268.crl rsync://repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/D6729321F95E264CBE7373469790C77F8B57E268.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6729321F95E264CBE7373469790C77F8B57E268.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 14:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:b2:ff:c2:61:b7:4f:1f:dc:4f:4b:db:3c:6d:89:a2:8a:ca:3d:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D6729321F95E264CBE7373469790C77F8B57E268 Validity Not Before: Apr 4 05:15:00 2025 GMT Not After : Apr 7 14:02:00 2025 GMT Subject: CN=7DBBDC03A50BD9A6AC6EC6636B062853AF244CF1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:0c:48:90:49:d0:de:e8:ce:65:e5:24:97:90: c4:0f:63:af:ee:a7:30:bb:91:06:8e:56:5c:0e:8e: 5c:57:ac:f3:a7:78:44:d4:5a:35:02:d5:a2:60:4a: d6:c0:12:4e:d5:79:9e:59:f0:07:50:c2:3e:4e:b2: 3f:13:f6:0b:4a:ee:84:42:cf:f0:7d:9f:b5:ca:b8: 3a:5c:3e:d8:c3:95:66:21:c0:5c:1c:81:3a:af:be: 58:7c:ae:8b:a1:58:65:7e:ea:c5:16:d6:a0:9b:9f: 7e:3b:c3:e1:01:94:9b:4f:a0:69:7d:df:da:ae:0b: eb:03:ce:fc:71:25:38:15:5a:ea:20:9a:2e:04:4b: fc:ce:78:2b:40:76:f5:42:92:58:e5:16:f9:21:24: fd:3b:17:47:e1:02:53:04:c6:6c:f5:de:bc:8b:06: d7:07:bd:ce:f5:4d:a8:e7:75:2b:b4:ad:7b:f4:ef: 37:24:cd:00:f2:9d:65:f2:d1:8e:42:18:6f:25:32: a6:d6:48:cb:75:9f:bb:ee:29:0c:f6:c4:eb:7c:cc: 0e:83:73:fb:30:4c:46:8b:1c:82:cf:f9:c8:58:3d: 96:fc:c7:9e:56:0f:ad:2b:27:eb:9e:9e:d7:ca:c8: 2a:ff:9d:ce:e1:b6:74:9f:32:7c:04:d0:91:34:c6: 5a:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:BB:DC:03:A5:0B:D9:A6:AC:6E:C6:63:6B:06:28:53:AF:24:4C:F1 X509v3 Authority Key Identifier: keyid:D6:72:93:21:F9:5E:26:4C:BE:73:73:46:97:90:C7:7F:8B:57:E2:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/D6729321F95E264CBE7373469790C77F8B57E268.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D6729321F95E264CBE7373469790C77F8B57E268.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/07dcf0a4-ad1b-4b72-840f-1f4a807f6594/0/D6729321F95E264CBE7373469790C77F8B57E268.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:cf:7a:3f:08:63:ea:15:f6:6f:de:55:fd:55:84:04:bd:bd: 9c:77:ce:88:a2:8c:6b:15:e2:58:5b:8f:de:8e:58:14:6c:b6: 6d:76:ad:58:99:b3:20:ef:90:4a:ab:c6:e0:91:62:8f:37:93: f3:4e:ac:24:27:9b:10:3f:55:63:46:5b:7c:6e:0a:4e:22:3d: 82:de:bf:90:38:94:22:20:23:01:a2:d2:dc:eb:fb:dd:de:fc: b4:51:5d:dd:f7:80:ad:2f:4e:1f:cc:52:e9:4f:1d:7b:9d:b0: 60:28:2e:a4:55:db:4b:56:59:4d:db:1b:bc:14:55:6a:a8:12: d7:5e:8f:77:d9:33:d3:78:9a:90:5e:46:d8:d2:b1:2b:77:da: 74:2d:8d:bd:32:0f:52:17:4f:0d:77:91:43:47:2b:d0:2a:72: fc:51:73:fb:0f:e3:fe:aa:57:f7:05:87:08:58:30:f2:91:cb: 5d:4b:04:c7:ce:bb:c3:5a:5c:d7:63:3f:18:c3:6c:92:6c:7a: 5a:49:15:68:0f:a0:50:50:f5:2d:2e:0b:2d:22:f7:dc:d5:56: 4d:c7:d6:f2:7f:67:ea:52:53:a8:2f:8c:b9:92:c4:20:19:c4: 89:2f:98:25:e4:6f:96:2a:88:5e:fa:91:49:2a:ba:3b:d8:1c: 76:f3:82:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWrL/wmG3Tx/cT0vbPG2JoorKPdMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY3MjkzMjFGOTVFMjY0Q0JFNzM3MzQ2OTc5MEM3N0Y4 QjU3RTI2ODAeFw0yNTA0MDQwNTE1MDBaFw0yNTA0MDcxNDAyMDBaMDMxMTAvBgNV BAMTKDdEQkJEQzAzQTUwQkQ5QTZBQzZFQzY2MzZCMDYyODUzQUYyNDRDRjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuDEiQSdDe6M5l5SSXkMQPY6/u pzC7kQaOVlwOjlxXrPOneETUWjUC1aJgStbAEk7VeZ5Z8AdQwj5Osj8T9gtK7oRC z/B9n7XKuDpcPtjDlWYhwFwcgTqvvlh8rouhWGV+6sUW1qCbn347w+EBlJtPoGl9 39quC+sDzvxxJTgVWuogmi4ES/zOeCtAdvVCkljlFvkhJP07F0fhAlMExmz13ryL BtcHvc71TajndSu0rXv07zckzQDynWXy0Y5CGG8lMqbWSMt1n7vuKQz2xOt8zA6D c/swTEaLHILP+chYPZb8x55WD60rJ+uentfKyCr/nc7htnSfMnwE0JE0xloJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfbvcA6UL2aasbsZjawYoU68kTPEwHwYDVR0j BBgwFoAU1nKTIfleJky+c3NGl5DHf4tX4mgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w N2RjZjBhNC1hZDFiLTRiNzItODQwZi0xZjRhODA3ZjY1OTQvMC9ENjcyOTMyMUY5 NUUyNjRDQkU3MzczNDY5NzkwQzc3RjhCNTdFMjY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDY3MjkzMjFGOTVFMjY0Q0JFNzM3MzQ2OTc5MEM3N0Y4QjU3 RTI2OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDdkY2YwYTQtYWQxYi00YjcyLTg0 MGYtMWY0YTgwN2Y2NTk0LzAvRDY3MjkzMjFGOTVFMjY0Q0JFNzM3MzQ2OTc5MEM3 N0Y4QjU3RTI2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD7Pej8IY+oV9m/eVf1VhAS9vZx3zoiijGsV 4lhbj96OWBRstm12rViZsyDvkEqrxuCRYo83k/NOrCQnmxA/VWNGW3xuCk4iPYLe v5A4lCIgIwGi0tzr+93e/LRRXd33gK0vTh/MUulPHXudsGAoLqRV20tWWU3bG7wU VWqoEtdej3fZM9N4mpBeRtjSsSt32nQtjb0yD1IXTw13kUNHK9AqcvxRc/sP4/6q V/cFhwhYMPKRy11LBMfOu8NaXNdjPxjDbJJselpJFWgPoFBQ9S0uCy0i99zVVk3H 1vJ/Z+pSU6gvjLmSxCAZxIkvmCXkb5YqiF76kUkqujvYHHbzgk8= -----END CERTIFICATE-----Generated at Sat Apr 5 16:44:56 2025 by rpki-client