$ rpki-client -vvf repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.mft File: E7D91E7B841DB274E77E823084312F8B78A5C951.mft (raw, json) Hash identifier: r/nBWqEizND0CQPcAlwgFhfkjkvzOzvotNv5sOVvJhw= Subject key identifier: 96:E3:AE:14:33:2D:D1:56:3E:64:05:53:86:91:DA:0E:0C:5E:F0:2F Authority key identifier: E7:D9:1E:7B:84:1D:B2:74:E7:7E:82:30:84:31:2F:8B:78:A5:C9:51 Certificate issuer: /CN=E7D91E7B841DB274E77E823084312F8B78A5C951 Certificate serial: 84394B173EA6779BFB39828505C4AAE362C843 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7D91E7B841DB274E77E823084312F8B78A5C951.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.mft Manifest number: 0484 Signing time: Fri 04 Apr 2025 02:41:32 +0000 Manifest this update: Fri 04 Apr 2025 02:36:32 +0000 Manifest next update: Mon 07 Apr 2025 08:42:32 +0000 Files and hashes: 1: 3130332e3134312e3233382e302f32332d3234203d3e20313339333637.roa (hash: ptFcyErEiJ1JYS1a1G9a9k9pSg8MxBcsAnCveu1OYpY=) 2: 323030313a6466313a316338303a3a2f34382d3438203d3e20313339333637.roa (hash: FFu9qqO0bSps/kj6fyv5I//5Hd+4wId09goi1uFGoE8=) 3: E7D91E7B841DB274E77E823084312F8B78A5C951.crl (hash: jrVwpYgvNc3RiL/DDUBr7Xbu91urNdFeD24TYnEEiM8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.crl rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7D91E7B841DB274E77E823084312F8B78A5C951.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 08:42:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 84:39:4b:17:3e:a6:77:9b:fb:39:82:85:05:c4:aa:e3:62:c8:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=E7D91E7B841DB274E77E823084312F8B78A5C951 Validity Not Before: Apr 4 02:36:32 2025 GMT Not After : Apr 7 08:42:32 2025 GMT Subject: CN=96E3AE14332DD1563E6405538691DA0E0C5EF02F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:84:24:03:b6:31:0e:3c:bf:21:d7:94:5f:f3: 72:97:c2:36:04:be:06:b9:0c:70:ca:ec:43:d4:67: 0d:a3:a5:6d:a2:da:7b:1a:e8:c2:9b:be:3b:c1:1d: 17:e0:d4:fb:5a:96:3b:4c:9b:c6:dd:66:d6:1b:bb: 5e:31:2d:94:5c:19:78:9f:0d:73:83:20:bd:a4:56: 67:f5:ea:c0:a5:ee:a7:d2:5c:99:d5:fa:18:74:a8: 79:ba:ff:f6:f5:a5:a5:0f:ba:8d:85:8b:c0:05:b4: 0a:22:34:8e:f0:b1:02:60:94:01:a3:af:26:9f:6a: be:f2:ff:26:74:43:2d:81:13:de:e2:be:5e:5d:17: a6:d2:fb:6d:9c:7f:d0:cb:82:e1:f1:dc:1f:47:09: 02:6a:ca:8d:a1:ef:ec:a5:b2:1a:9f:d0:5a:8f:af: da:e4:93:71:02:c2:31:62:30:8c:af:72:a1:01:ac: f2:b6:f1:b3:ee:71:ec:d8:23:0b:97:d1:64:4b:87: 49:65:f4:34:07:b5:5e:ee:68:a8:89:3c:64:6f:d4: 60:bf:da:65:38:83:e9:38:10:a0:49:99:5c:8d:79: 8e:6f:d9:74:e3:af:9c:40:2c:d7:7a:3e:ca:c0:ac: 80:01:50:55:50:bb:83:be:f2:e2:2b:d3:82:d1:c4: 12:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:E3:AE:14:33:2D:D1:56:3E:64:05:53:86:91:DA:0E:0C:5E:F0:2F X509v3 Authority Key Identifier: keyid:E7:D9:1E:7B:84:1D:B2:74:E7:7E:82:30:84:31:2F:8B:78:A5:C9:51 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E7D91E7B841DB274E77E823084312F8B78A5C951.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0a7083ab-270a-4b0a-8e55-a45e1cf1afd5/0/E7D91E7B841DB274E77E823084312F8B78A5C951.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:c3:12:b9:6b:86:02:41:74:67:80:d6:5c:23:a2:70:3e:93: 2e:5a:48:52:86:fe:ec:cc:8b:f5:46:6f:da:2b:6e:6e:e7:5f: 1a:77:3d:c3:18:28:1f:a5:e4:8b:e2:3c:20:e5:ec:7d:ee:c3: 18:3a:49:fa:61:33:44:4c:e4:a1:12:96:26:c0:67:9c:7e:d9: c9:7a:75:1d:cb:13:3e:de:b5:ef:bc:9f:a1:c7:29:e1:b6:e2: 3d:25:45:7b:a4:b3:ed:f3:f2:fb:05:05:fe:bd:e4:ac:04:31: 46:ad:8b:15:c3:c0:b2:fd:02:08:ff:1d:e3:6a:e8:ae:f7:4a: 7d:c7:06:ac:f7:40:24:6c:22:a7:34:e4:90:19:f8:2a:a9:7f: c6:7e:8e:4f:3d:77:30:b4:4b:6e:ce:10:bf:f8:50:7a:43:fe: da:d8:25:94:d7:09:52:e1:d2:1a:bd:1c:21:24:bb:f8:16:37: ac:39:f6:46:e7:32:9c:d2:e0:67:40:6f:e1:e6:e8:1c:b2:ef: ff:bf:02:cc:02:73:e7:9a:86:54:4a:19:0a:d1:a3:0a:ca:83: 25:2b:68:ac:04:51:61:ab:d4:33:31:3a:a5:03:74:32:61:bf: bd:f4:5c:e8:1f:51:73:22:6e:f5:14:aa:c9:90:e8:9e:16:32: 8e:50:f8:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAIQ5Sxc+pneb+zmChQXEquNiyEMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRTdEOTFFN0I4NDFEQjI3NEU3N0U4MjMwODQzMTJGOEI3 OEE1Qzk1MTAeFw0yNTA0MDQwMjM2MzJaFw0yNTA0MDcwODQyMzJaMDMxMTAvBgNV BAMTKDk2RTNBRTE0MzMyREQxNTYzRTY0MDU1Mzg2OTFEQTBFMEM1RUYwMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQhCQDtjEOPL8h15Rf83KXwjYE vga5DHDK7EPUZw2jpW2i2nsa6MKbvjvBHRfg1PtaljtMm8bdZtYbu14xLZRcGXif DXODIL2kVmf16sCl7qfSXJnV+hh0qHm6//b1paUPuo2Fi8AFtAoiNI7wsQJglAGj ryafar7y/yZ0Qy2BE97ivl5dF6bS+22cf9DLguHx3B9HCQJqyo2h7+ylshqf0FqP r9rkk3ECwjFiMIyvcqEBrPK28bPucezYIwuX0WRLh0ll9DQHtV7uaKiJPGRv1GC/ 2mU4g+k4EKBJmVyNeY5v2XTjr5xALNd6PsrArIABUFVQu4O+8uIr04LRxBLhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUluOuFDMt0VY+ZAVThpHaDgxe8C8wHwYDVR0j BBgwFoAU59kee4QdsnTnfoIwhDEvi3ilyVEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w YTcwODNhYi0yNzBhLTRiMGEtOGU1NS1hNDVlMWNmMWFmZDUvMC9FN0Q5MUU3Qjg0 MURCMjc0RTc3RTgyMzA4NDMxMkY4Qjc4QTVDOTUxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRTdEOTFFN0I4NDFEQjI3NEU3N0U4MjMwODQzMTJGOEI3OEE1 Qzk1MS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGE3MDgzYWItMjcwYS00YjBhLThl NTUtYTQ1ZTFjZjFhZmQ1LzAvRTdEOTFFN0I4NDFEQjI3NEU3N0U4MjMwODQzMTJG OEI3OEE1Qzk1MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ3DErlrhgJBdGeA1lwjonA+ky5aSFKG/uzM i/VGb9orbm7nXxp3PcMYKB+l5IviPCDl7H3uwxg6SfphM0RM5KESlibAZ5x+2cl6 dR3LEz7ete+8n6HHKeG24j0lRXuks+3z8vsFBf695KwEMUatixXDwLL9Agj/HeNq 6K73Sn3HBqz3QCRsIqc05JAZ+Cqpf8Z+jk89dzC0S27OEL/4UHpD/trYJZTXCVLh 0hq9HCEku/gWN6w59kbnMpzS4GdAb+Hm6Byy7/+/AswCc+eahlRKGQrRowrKgyUr aKwEUWGr1DMxOqUDdDJhv730XOgfUXMibvUUqsmQ6J4WMo5Q+O0= -----END CERTIFICATE-----Generated at Sun Apr 6 08:33:13 2025 by rpki-client