$ rpki-client -vvf repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.mft File: 754BC04892430632A8C965AF4C5B71C59B2A3CCB.mft (raw, json) Hash identifier: +gCn0KEGfSjZQnD5usSeo5CttkAgoo3J1MYqUiL5ezU= Subject key identifier: 7B:5D:7F:74:D6:A8:F9:D6:40:1E:A7:3B:42:62:7C:59:E0:09:A7:47 Authority key identifier: 75:4B:C0:48:92:43:06:32:A8:C9:65:AF:4C:5B:71:C5:9B:2A:3C:CB Certificate issuer: /CN=754BC04892430632A8C965AF4C5B71C59B2A3CCB Certificate serial: 58DCE70C29ED4E3B1B45A2F7561BD9EA09975480 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754BC04892430632A8C965AF4C5B71C59B2A3CCB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.mft Manifest number: 01F7 Signing time: Fri 18 Apr 2025 07:21:34 +0000 Manifest this update: Fri 18 Apr 2025 07:16:34 +0000 Manifest next update: Mon 21 Apr 2025 12:42:34 +0000 Files and hashes: 1: 754BC04892430632A8C965AF4C5B71C59B2A3CCB.crl (hash: GXqRENroxdnwTuXbYua1I1xCINlpkrB3jqxYrFWCuZQ=) 2: 3230322e34332e3131362e302f32332d3234203d3e203435373037.roa (hash: Sf9PeSZZ7a8NKRrtWUTmVWuqUtTX2GsdEZGDuX14gwU=) 3: 3131302e39332e31322e302f32322d3234203d3e203435373037.roa (hash: 7iXx5jGESFjpBjO3AiKnrpyYnQjS82YYkQqBjeaeWk0=) 4: 3130332e382e35362e302f32322d3234203d3e203435373037.roa (hash: e0FCZrIOKWaH0btSP4kAUqXaQNeE2QggQ8Gj6R8jPew=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.crl rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754BC04892430632A8C965AF4C5B71C59B2A3CCB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 12:42:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:dc:e7:0c:29:ed:4e:3b:1b:45:a2:f7:56:1b:d9:ea:09:97:54:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=754BC04892430632A8C965AF4C5B71C59B2A3CCB Validity Not Before: Apr 18 07:16:34 2025 GMT Not After : Apr 21 12:42:34 2025 GMT Subject: CN=7B5D7F74D6A8F9D6401EA73B42627C59E009A747 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:6b:e2:6c:27:53:02:18:e2:61:0a:38:6d:d7: 66:d6:5e:0e:75:48:6e:03:25:03:fa:c0:10:79:ad: b2:34:b7:8d:01:b8:7b:7d:2d:39:11:f5:bd:4a:e5: 63:ef:01:d4:38:12:2e:be:25:53:8e:33:29:3c:bc: 54:7d:a1:30:2b:8e:1e:5c:aa:f9:31:3c:4f:5b:e6: 33:97:76:ab:66:67:47:5f:b3:b2:20:59:d3:2d:33: ae:a8:df:cc:11:ea:c5:a0:0c:ef:20:f1:5f:ce:2a: f7:02:35:74:4c:b1:3d:56:71:8f:b1:08:6c:ba:74: b2:bc:0e:29:88:7a:3a:75:34:5a:ce:55:dc:0d:f1: 74:5f:5f:96:69:89:76:0b:e4:b2:93:eb:1c:50:a0: e1:e2:da:93:08:4e:34:3b:7b:8b:0f:a4:f3:05:26: 98:f3:22:ee:ab:79:7a:d7:6a:b7:f8:ce:4a:39:6a: 77:02:72:2b:d4:88:fe:5b:f1:69:58:a4:4a:99:20: b4:c5:f4:62:f0:ef:25:5d:64:4e:43:f4:38:fa:7a: 51:80:3f:40:71:fe:46:5a:f9:80:ad:58:f2:3a:c6: 95:85:17:b2:6e:a5:3f:bf:00:12:5d:f1:31:e0:51: 64:55:bb:74:b7:82:5f:87:10:ec:47:e0:44:8c:bb: 89:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7B:5D:7F:74:D6:A8:F9:D6:40:1E:A7:3B:42:62:7C:59:E0:09:A7:47 X509v3 Authority Key Identifier: keyid:75:4B:C0:48:92:43:06:32:A8:C9:65:AF:4C:5B:71:C5:9B:2A:3C:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/754BC04892430632A8C965AF4C5B71C59B2A3CCB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/20d2bde4-056b-45c6-80bf-f5d4d277336b/0/754BC04892430632A8C965AF4C5B71C59B2A3CCB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a9:61:6a:64:3c:4c:ea:c6:68:4b:0f:10:ae:d2:fd:11:f4:b3: de:4a:a2:23:44:3f:c5:81:dc:ac:3d:5a:0f:d6:f9:e5:20:ab: cf:ec:49:ec:fd:37:7a:02:c2:f0:e2:ff:cb:35:52:0b:ab:e4: a5:00:6a:38:60:f7:03:a3:81:ef:19:fa:d1:40:93:e4:0f:68: bb:ef:bd:93:b9:01:a3:63:ad:c4:ac:79:5b:3e:8f:04:7d:7a: a6:0c:dd:f1:2f:35:01:46:1c:f2:d1:06:c8:b9:f3:60:f9:84: 25:ba:72:5c:b7:ec:b1:c2:da:91:d8:77:82:bc:be:19:8d:8d: 2e:f8:d8:1e:c8:84:83:cb:f1:c1:71:c1:bc:d0:a7:ab:b9:6d: 48:ba:22:22:23:6c:88:ec:d7:de:ac:63:71:7d:5a:fb:d7:27: 33:33:8d:72:19:5c:a5:ae:89:66:98:89:22:68:a4:95:32:90: fb:67:2e:7b:57:02:3d:c1:df:09:36:21:11:1d:d9:0a:d1:9f: 6c:a9:86:30:6c:3d:a9:c0:7f:06:67:68:8b:a1:66:54:17:d5: 10:87:04:e0:5a:52:55:e3:5c:95:41:d8:03:f6:45:06:46:f5: 0f:b0:7f:75:f7:fe:dd:77:7a:98:10:b4:ec:33:f7:1a:b7:bd: 61:b7:46:26 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWNznDCntTjsbRaL3VhvZ6gmXVIAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzU0QkMwNDg5MjQzMDYzMkE4Qzk2NUFGNEM1QjcxQzU5 QjJBM0NDQjAeFw0yNTA0MTgwNzE2MzRaFw0yNTA0MjExMjQyMzRaMDMxMTAvBgNV BAMTKDdCNUQ3Rjc0RDZBOEY5RDY0MDFFQTczQjQyNjI3QzU5RTAwOUE3NDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEa+JsJ1MCGOJhCjht12bWXg51 SG4DJQP6wBB5rbI0t40BuHt9LTkR9b1K5WPvAdQ4Ei6+JVOOMyk8vFR9oTArjh5c qvkxPE9b5jOXdqtmZ0dfs7IgWdMtM66o38wR6sWgDO8g8V/OKvcCNXRMsT1WcY+x CGy6dLK8DimIejp1NFrOVdwN8XRfX5ZpiXYL5LKT6xxQoOHi2pMITjQ7e4sPpPMF JpjzIu6reXrXarf4zko5ancCcivUiP5b8WlYpEqZILTF9GLw7yVdZE5D9Dj6elGA P0Bx/kZa+YCtWPI6xpWFF7JupT+/ABJd8THgUWRVu3S3gl+HEOxH4ESMu4lPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUe11/dNao+dZAHqc7QmJ8WeAJp0cwHwYDVR0j BBgwFoAUdUvASJJDBjKoyWWvTFtxxZsqPMswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MGQyYmRlNC0wNTZiLTQ1YzYtODBiZi1mNWQ0ZDI3NzMzNmIvMC83NTRCQzA0ODky NDMwNjMyQThDOTY1QUY0QzVCNzFDNTlCMkEzQ0NCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzU0QkMwNDg5MjQzMDYzMkE4Qzk2NUFGNEM1QjcxQzU5QjJB M0NDQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjBkMmJkZTQtMDU2Yi00NWM2LTgw YmYtZjVkNGQyNzczMzZiLzAvNzU0QkMwNDg5MjQzMDYzMkE4Qzk2NUFGNEM1Qjcx QzU5QjJBM0NDQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKlhamQ8TOrGaEsPEK7S/RH0s95KoiNEP8WB 3Kw9Wg/W+eUgq8/sSez9N3oCwvDi/8s1Ugur5KUAajhg9wOjge8Z+tFAk+QPaLvv vZO5AaNjrcSseVs+jwR9eqYM3fEvNQFGHPLRBsi582D5hCW6cly37LHC2pHYd4K8 vhmNjS742B7IhIPL8cFxwbzQp6u5bUi6IiIjbIjs196sY3F9WvvXJzMzjXIZXKWu iWaYiSJopJUykPtnLntXAj3B3wk2IREd2QrRn2yphjBsPanAfwZnaIuhZlQX1RCH BOBaUlXjXJVB2AP2RQZG9Q+wf3X3/t13epgQtOwz9xq3vWG3RiY= -----END CERTIFICATE-----Generated at Sat Apr 19 15:21:40 2025 by rpki-client