$ rpki-client -vvf repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft File: C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft (raw, json) Hash identifier: jEuCMs4g4n7oayBpY5YBiXwomyhXz8LdBuiKzCVYL5o= Subject key identifier: 2B:8A:7B:D0:5F:75:A7:EE:14:A2:BA:93:16:AA:A0:6E:26:D0:A0:99 Authority key identifier: C7:83:94:27:F4:4C:8E:D8:9E:6C:27:20:F1:9C:CF:27:92:70:FD:2A Certificate issuer: /CN=C7839427F44C8ED89E6C2720F19CCF279270FD2A Certificate serial: 797526388CCFF2AE2EF2030A422049E3140F2065 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C7839427F44C8ED89E6C2720F19CCF279270FD2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft Manifest number: 5C Signing time: Sat 19 Apr 2025 15:31:02 +0000 Manifest this update: Sat 19 Apr 2025 15:26:02 +0000 Manifest next update: Tue 22 Apr 2025 22:32:02 +0000 Files and hashes: 1: 3135372e32302e3233382e302f32342d3234203d3e20313532343239.roa (hash: YUfWeO4Zp71JGwLmW0ExOlIuGUiX5R5EB5q+WHM4Ews=) 2: C7839427F44C8ED89E6C2720F19CCF279270FD2A.crl (hash: DzPdvvz7A2mzplFoDLv4AIZQQdkW0oHSxCZWxyF0w7w=) 3: 3135372e32302e3233382e302f32332d3233203d3e20313532343239.roa (hash: 47XUtIsbPhvEMu3eZ7qPRDeVpw2v8OOWFwMXf8PZG1I=) 4: 3135372e32302e3233392e302f32342d3234203d3e20313532343239.roa (hash: +vgEkqNs4IZ18TGSuIZbEqxX1A4966mLzeBSJvGF+d0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.crl rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C7839427F44C8ED89E6C2720F19CCF279270FD2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Apr 2025 14:11:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:75:26:38:8c:cf:f2:ae:2e:f2:03:0a:42:20:49:e3:14:0f:20:65 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C7839427F44C8ED89E6C2720F19CCF279270FD2A Validity Not Before: Apr 19 15:26:02 2025 GMT Not After : Apr 22 22:32:02 2025 GMT Subject: CN=2B8A7BD05F75A7EE14A2BA9316AAA06E26D0A099 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:3d:59:68:a9:d8:43:c0:21:90:de:f2:e7:8b: 08:14:c5:67:c5:48:b1:1f:44:f6:89:56:4f:7d:22: 0d:f2:64:91:12:fb:49:81:0a:04:63:14:e8:ac:b4: bf:4e:2e:3c:e1:ff:a0:85:17:26:06:2e:da:dc:6d: 7c:04:75:d5:eb:ba:fa:68:f8:e1:83:ea:69:cc:b2: 55:e0:06:a1:6b:28:a8:bb:b5:2e:0a:3c:de:9e:ba: 1e:05:cf:34:3c:fc:51:4d:66:e3:45:03:e1:09:b2: 86:d4:40:c4:b6:0e:f8:c2:5b:ac:01:dd:6c:9b:1c: 3f:72:b7:bc:b7:69:18:20:b9:bd:cb:81:46:7e:f4: bc:56:89:97:a0:6c:06:0a:7a:2d:fe:d2:93:db:99: a2:26:cc:fd:a7:0d:bd:f2:30:09:dc:0f:ca:e4:83: 73:6b:a7:31:cd:a9:69:79:8e:a0:be:a9:bf:d4:1d: 41:2e:b0:7f:9a:a9:ec:01:b7:25:03:19:ee:d4:dd: d3:25:11:d0:7b:3e:60:c2:48:5b:de:bc:fb:15:d0: bf:41:c7:b3:3f:d3:a3:c6:d6:b6:71:cd:a5:1e:2b: ed:8c:a5:a1:d4:0c:45:fa:63:a9:7e:a1:11:1b:de: b0:ae:8f:74:87:82:3f:80:c8:a3:ab:be:72:37:da: 12:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:8A:7B:D0:5F:75:A7:EE:14:A2:BA:93:16:AA:A0:6E:26:D0:A0:99 X509v3 Authority Key Identifier: keyid:C7:83:94:27:F4:4C:8E:D8:9E:6C:27:20:F1:9C:CF:27:92:70:FD:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/C7839427F44C8ED89E6C2720F19CCF279270FD2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/18d1c449-978c-4845-b823-b5925a905427/0/C7839427F44C8ED89E6C2720F19CCF279270FD2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:5f:c9:12:f3:19:29:e9:a4:0e:08:82:c7:60:41:fa:c6:f2: a7:f9:fb:dd:dc:c1:1b:52:74:c3:d4:70:80:ff:d5:d2:b5:1d: 52:b5:c6:8c:9a:dc:53:e0:45:a2:38:58:7f:6c:14:1c:0d:12: 51:12:89:76:30:0b:b6:5a:d2:f2:f6:37:c6:50:56:4b:57:0a: fc:9e:ba:81:b4:23:8e:11:c4:7d:8c:a3:06:ee:dc:07:0a:64: e5:6e:de:2c:5b:ce:78:b1:cc:f1:48:7a:e7:24:99:21:5f:4f: 00:01:62:49:b1:70:04:4c:e7:8c:56:51:74:8e:87:f1:a2:03: ff:f1:ac:39:b2:02:3c:4d:ce:54:c9:f9:8e:57:c4:20:16:d3: af:2b:fa:af:a9:3a:81:f7:4b:7a:04:49:cf:65:0c:4b:85:c5: 44:a4:2e:76:57:c2:6d:bc:01:73:fd:25:d7:f2:e8:de:36:cb: f2:1d:17:c5:5f:e8:4a:ee:d7:0d:e4:33:81:0c:b1:73:73:ce: 78:bb:66:e1:45:57:c5:6c:52:ea:31:ab:6f:df:3f:16:55:b2: a4:1c:a1:5d:5f:75:17:5d:d6:3d:f4:e3:bd:fd:6c:d6:80:68: a4:c6:5e:61:1e:8c:21:a7:35:65:a3:9e:85:42:ca:cf:bf:39: 3a:0e:dc:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeXUmOIzP8q4u8gMKQiBJ4xQPIGUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzc4Mzk0MjdGNDRDOEVEODlFNkMyNzIwRjE5Q0NGMjc5 MjcwRkQyQTAeFw0yNTA0MTkxNTI2MDJaFw0yNTA0MjIyMjMyMDJaMDMxMTAvBgNV BAMTKDJCOEE3QkQwNUY3NUE3RUUxNEEyQkE5MzE2QUFBMDZFMjZEMEEwOTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAPVloqdhDwCGQ3vLniwgUxWfF SLEfRPaJVk99Ig3yZJES+0mBCgRjFOistL9OLjzh/6CFFyYGLtrcbXwEddXruvpo +OGD6mnMslXgBqFrKKi7tS4KPN6euh4FzzQ8/FFNZuNFA+EJsobUQMS2DvjCW6wB 3WybHD9yt7y3aRggub3LgUZ+9LxWiZegbAYKei3+0pPbmaImzP2nDb3yMAncD8rk g3NrpzHNqWl5jqC+qb/UHUEusH+aqewBtyUDGe7U3dMlEdB7PmDCSFvevPsV0L9B x7M/06PG1rZxzaUeK+2MpaHUDEX6Y6l+oREb3rCuj3SHgj+AyKOrvnI32hLbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUK4p70F91p+4UorqTFqqgbibQoJkwHwYDVR0j BBgwFoAUx4OUJ/RMjtiebCcg8ZzPJ5Jw/SowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x OGQxYzQ0OS05NzhjLTQ4NDUtYjgyMy1iNTkyNWE5MDU0MjcvMC9DNzgzOTQyN0Y0 NEM4RUQ4OUU2QzI3MjBGMTlDQ0YyNzkyNzBGRDJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvQzc4Mzk0MjdGNDRDOEVEODlFNkMyNzIwRjE5Q0NGMjc5Mjcw RkQyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMThkMWM0NDktOTc4Yy00ODQ1LWI4 MjMtYjU5MjVhOTA1NDI3LzAvQzc4Mzk0MjdGNDRDOEVEODlFNkMyNzIwRjE5Q0NG Mjc5MjcwRkQyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH5fyRLzGSnppA4IgsdgQfrG8qf5+93cwRtS dMPUcID/1dK1HVK1xoya3FPgRaI4WH9sFBwNElESiXYwC7Za0vL2N8ZQVktXCvye uoG0I44RxH2Mowbu3AcKZOVu3ixbznixzPFIeuckmSFfTwABYkmxcARM54xWUXSO h/GiA//xrDmyAjxNzlTJ+Y5XxCAW068r+q+pOoH3S3oESc9lDEuFxUSkLnZXwm28 AXP9Jdfy6N42y/IdF8Vf6Eru1w3kM4EMsXNzzni7ZuFFV8VsUuoxq2/fPxZVsqQc oV1fdRdd1j304739bNaAaKTGXmEejCGnNWWjnoVCys+/OToO3GI= -----END CERTIFICATE-----Generated at Sun Apr 20 02:11:02 2025 by rpki-client