$ rpki-client -vvf repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft File: 7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft (raw, json) Hash identifier: XNGQZvyzOVkX04ZwlA426tmL+eph7KUCLE6WfKqzpG4= Subject key identifier: 72:E7:D0:D9:48:BF:A7:DB:34:78:C9:73:F1:8E:43:5A:4B:DC:64:ED Authority key identifier: 7E:F8:9B:45:69:2D:93:E9:CA:15:DA:4C:F9:D4:39:30:06:32:EF:D4 Certificate issuer: /CN=7EF89B45692D93E9CA15DA4CF9D439300632EFD4 Certificate serial: 7448DE1DB7BC73CE589CB5DEF24C0143814DCB80 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft Manifest number: 01E5 Signing time: Sat 05 Apr 2025 16:40:02 +0000 Manifest this update: Sat 05 Apr 2025 16:35:02 +0000 Manifest next update: Wed 09 Apr 2025 01:26:02 +0000 Files and hashes: 1: 7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl (hash: I8uMa/K28FuhHu4ilQoBHiYJzPZZXd+gYHhSqcc3CRs=) 2: 3130332e3138302e35382e302f32342d3234203d3e2039333431.roa (hash: FdloWvzwT5E7bV0h2MrBbwdyadkn1oI1JIyg7UwS1zQ=) 3: 3130332e3138302e35382e302f32332d3233203d3e2039333431.roa (hash: lr7nUWH/7raRlFDZhAD65ANTChYQYYLQIg/z8dK94J4=) 4: 3130332e3138302e35392e302f32342d3234203d3e2039333431.roa (hash: i2rSOVglupsSuL0ZoSXVd/tHmiF7pW8+dps3wslED5c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 01:26:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:48:de:1d:b7:bc:73:ce:58:9c:b5:de:f2:4c:01:43:81:4d:cb:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EF89B45692D93E9CA15DA4CF9D439300632EFD4 Validity Not Before: Apr 5 16:35:02 2025 GMT Not After : Apr 9 01:26:02 2025 GMT Subject: CN=72E7D0D948BFA7DB3478C973F18E435A4BDC64ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:52:8d:41:81:ed:3c:84:01:9d:b7:ad:c6:17: 97:a6:e9:e5:32:de:aa:1f:fe:31:c8:a2:e1:c9:da: 01:67:3d:c9:43:8c:01:9c:19:ad:0d:59:55:33:31: 6e:b7:f1:5e:1f:78:f0:e4:21:8a:c1:d0:d8:4e:3d: 58:93:d9:30:43:4e:57:37:7b:92:5f:9b:85:6f:cc: 21:48:e8:cf:96:ff:e0:ed:4c:82:2a:81:83:35:c4: 5e:63:45:bc:72:9f:50:c6:8b:92:aa:05:b5:27:5e: 17:22:f7:bc:6d:da:7f:d4:1f:fc:c2:7a:40:59:d1: f6:fa:6f:c3:f7:11:3a:4b:75:54:26:38:07:d0:aa: 39:8c:dd:28:b0:dc:d7:bf:2b:fb:88:6e:76:a9:4a: f0:7c:4a:9f:fe:d3:ce:ff:e8:24:f3:b9:8f:90:a4: 04:ed:cb:01:75:f3:30:b7:fc:28:a7:53:cf:ec:6c: 56:14:66:96:e7:2c:4a:f7:1f:d3:21:77:11:de:19: 57:2b:f5:75:52:7f:7e:87:6f:11:c9:be:fc:d6:cb: 97:e1:e3:5d:eb:d6:59:8f:c3:53:94:70:7c:5c:ce: 8f:36:78:1d:28:ac:81:15:74:77:52:19:75:99:08: fe:8c:ad:86:4f:ee:58:9f:d6:dd:e9:3b:fd:85:ca: 92:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:E7:D0:D9:48:BF:A7:DB:34:78:C9:73:F1:8E:43:5A:4B:DC:64:ED X509v3 Authority Key Identifier: keyid:7E:F8:9B:45:69:2D:93:E9:CA:15:DA:4C:F9:D4:39:30:06:32:EF:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/171a847d-2531-4d7f-9241-9777850605d6/0/7EF89B45692D93E9CA15DA4CF9D439300632EFD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:3e:ba:e9:6f:23:02:ac:d9:16:2d:39:e8:4c:5c:32:1b:31: 94:eb:a0:ed:f6:29:dc:93:e7:f9:b0:0c:b5:24:9d:c5:eb:aa: 57:af:41:92:ed:32:3f:46:45:82:c8:15:60:85:5e:14:92:8c: 10:8c:d2:0e:0a:50:12:01:e2:cb:25:02:56:16:61:c4:12:a0: 0c:de:86:43:07:5b:b4:13:61:f4:51:0b:7b:a9:f7:10:b7:21: e5:21:a1:c8:a7:92:8f:19:ab:2c:ed:f1:23:55:3f:10:a6:36: b8:ed:92:c9:15:8d:8d:e6:d9:93:5f:bc:47:b1:a4:d9:41:0e: 57:8f:98:65:e9:02:96:4b:46:8c:b0:57:87:00:0c:c6:51:a2: 54:1f:25:ea:56:9e:df:ed:93:59:8d:ad:0e:13:a2:f8:82:56: d4:2e:ea:09:78:86:2b:f3:8d:7a:49:86:64:e2:e1:08:0c:c8: 8e:9a:e6:4b:7d:f0:f7:71:42:39:ad:a6:2b:26:86:0a:8c:be: 69:6f:82:e5:d8:9e:d5:3b:33:1c:5d:21:8d:a9:d3:a0:97:86: ac:49:ed:ce:47:4c:27:0a:2a:ac:b4:eb:f4:1e:70:1e:eb:87: 7e:f2:0e:d6:d9:c6:4e:c8:ca:de:ff:19:30:95:20:0b:a3:c6: 31:3c:a8:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdEjeHbe8c85YnLXe8kwBQ4FNy4AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VGODlCNDU2OTJEOTNFOUNBMTVEQTRDRjlENDM5MzAw NjMyRUZENDAeFw0yNTA0MDUxNjM1MDJaFw0yNTA0MDkwMTI2MDJaMDMxMTAvBgNV BAMTKDcyRTdEMEQ5NDhCRkE3REIzNDc4Qzk3M0YxOEU0MzVBNEJEQzY0RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqUo1Bge08hAGdt63GF5em6eUy 3qof/jHIouHJ2gFnPclDjAGcGa0NWVUzMW638V4fePDkIYrB0NhOPViT2TBDTlc3 e5Jfm4VvzCFI6M+W/+DtTIIqgYM1xF5jRbxyn1DGi5KqBbUnXhci97xt2n/UH/zC ekBZ0fb6b8P3ETpLdVQmOAfQqjmM3Siw3Ne/K/uIbnapSvB8Sp/+087/6CTzuY+Q pATtywF18zC3/CinU8/sbFYUZpbnLEr3H9MhdxHeGVcr9XVSf36HbxHJvvzWy5fh 413r1lmPw1OUcHxczo82eB0orIEVdHdSGXWZCP6MrYZP7lif1t3pO/2FypJVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcufQ2Ui/p9s0eMlz8Y5DWkvcZO0wHwYDVR0j BBgwFoAUfvibRWktk+nKFdpM+dQ5MAYy79QwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NzFhODQ3ZC0yNTMxLTRkN2YtOTI0MS05Nzc3ODUwNjA1ZDYvMC83RUY4OUI0NTY5 MkQ5M0U5Q0ExNURBNENGOUQ0MzkzMDA2MzJFRkQ0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0VGODlCNDU2OTJEOTNFOUNBMTVEQTRDRjlENDM5MzAwNjMy RUZENC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTcxYTg0N2QtMjUzMS00ZDdmLTky NDEtOTc3Nzg1MDYwNWQ2LzAvN0VGODlCNDU2OTJEOTNFOUNBMTVEQTRDRjlENDM5 MzAwNjMyRUZENC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADw+uulvIwKs2RYtOehMXDIbMZTroO32KdyT 5/mwDLUkncXrqlevQZLtMj9GRYLIFWCFXhSSjBCM0g4KUBIB4sslAlYWYcQSoAze hkMHW7QTYfRRC3up9xC3IeUhocinko8Zqyzt8SNVPxCmNrjtkskVjY3m2ZNfvEex pNlBDlePmGXpApZLRoywV4cADMZRolQfJepWnt/tk1mNrQ4ToviCVtQu6gl4hivz jXpJhmTi4QgMyI6a5kt98PdxQjmtpismhgqMvmlvguXYntU7MxxdIY2p06CXhqxJ 7c5HTCcKKqy06/QecB7rh37yDtbZxk7Iyt7/GTCVIAujxjE8qCY= -----END CERTIFICATE-----Generated at Sun Apr 6 03:36:14 2025 by rpki-client