$ rpki-client -vvf repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft File: 7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft (raw, json) Hash identifier: G23VausLLY5t5bzstzerUz9HC0dLI+EzGJk3UBo9SyY= Subject key identifier: 8A:F0:55:1F:B1:79:ED:16:28:45:44:17:5C:BB:07:8F:9B:45:DD:BD Authority key identifier: 7E:FA:64:C1:15:73:C2:92:E1:92:C2:CD:EA:C4:D5:F8:B8:C2:1D:BD Certificate issuer: /CN=7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD Certificate serial: 6E3AD5C7C8594EB14177A05979CA1BE153496FB6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft Manifest number: 04BE Signing time: Fri 04 Apr 2025 20:12:16 +0000 Manifest this update: Fri 04 Apr 2025 20:07:16 +0000 Manifest next update: Tue 08 Apr 2025 02:00:16 +0000 Files and hashes: 1: 3130332e31392e35372e302f32342d3234203d3e20313332363337.roa (hash: nvj4vFogJKPPYgFqYmFWvbmjSSvxwuNwrsXUM+va/jI=) 2: 3130332e31392e35362e302f32342d3234203d3e20313332363337.roa (hash: 0SNOXJv5maedIGBL0Qm9Po7XI+eFbCTVR/NtX0bm6ts=) 3: 323430323a333263303a3a2f33322d3332203d3e20313332363337.roa (hash: qUMTZOKqFJrYj5YAPgs121X9//L8rpIE4d8u+ioonEM=) 4: 3130332e31392e35382e302f32342d3234203d3e20313332363337.roa (hash: Se+JQojVLCUto29ucN5SOimVnmTwAPvqyMOWkGKak7Q=) 5: 3130332e31392e35392e302f32342d3234203d3e20313332363337.roa (hash: JU0Fqn+bNHy7TO2FDGiu0v8Et06ozUzFP/f0/9F2tIA=) 6: 7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.crl (hash: 3W8RC+SgnEpk6LpiJ8omL/0NZ+6/PbWcrkEW5ERDn+A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.crl rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:3a:d5:c7:c8:59:4e:b1:41:77:a0:59:79:ca:1b:e1:53:49:6f:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD Validity Not Before: Apr 4 20:07:16 2025 GMT Not After : Apr 8 02:00:16 2025 GMT Subject: CN=8AF0551FB179ED16284544175CBB078F9B45DDBD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:bc:dd:e5:49:af:28:2d:15:f4:5d:f6:e4:d7: ec:a7:73:68:f8:35:59:3a:d5:06:ac:79:94:5a:94: 78:f7:ed:64:e3:cd:a2:f4:ec:1c:05:1e:dd:0f:42: c9:c3:79:33:f9:be:19:10:78:27:66:c9:6e:d8:58: 5f:f7:8e:c7:3a:0b:57:37:b3:03:af:fa:65:3e:c5: 14:7a:ab:94:1e:b6:5c:29:75:9e:37:fa:64:b9:10: 7f:1b:93:3c:74:85:ca:87:d6:b4:c3:73:96:4d:7e: 71:b2:8b:1b:9a:be:8a:d2:97:4f:3d:43:79:a4:30: 50:f9:86:2e:0e:f8:aa:40:18:bd:b2:b9:be:c0:7c: b9:ea:14:6a:9f:29:fc:f1:3c:ec:f7:4c:8c:c6:54: 38:34:63:e9:99:db:13:a7:8e:d6:ff:44:14:2e:55: ac:c8:7d:3f:6a:e1:13:7a:e1:7e:78:26:04:56:08: de:3c:24:2c:77:46:45:e1:e7:50:17:a4:49:76:d3: 71:71:20:be:2c:75:34:f4:5b:a6:81:08:e2:26:fb: d1:b5:c9:e4:0b:6f:40:cc:0a:44:8a:6a:be:21:80: 30:73:ae:44:a9:9f:67:06:ca:89:e9:bd:23:28:4e: 90:5b:67:4e:15:3a:d3:6e:f0:ef:b7:0d:43:4c:ce: e3:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:F0:55:1F:B1:79:ED:16:28:45:44:17:5C:BB:07:8F:9B:45:DD:BD X509v3 Authority Key Identifier: keyid:7E:FA:64:C1:15:73:C2:92:E1:92:C2:CD:EA:C4:D5:F8:B8:C2:1D:BD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2d0927e6-8a0a-4fa7-8969-9fb9d694397c/0/7EFA64C11573C292E192C2CDEAC4D5F8B8C21DBD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:37:ad:d6:00:3a:1a:87:fd:56:0d:cf:67:21:31:a9:2c:8c: ec:ed:e0:2b:44:84:ba:67:f5:37:5f:6e:cf:a9:8a:28:bb:37: fc:8a:77:b3:6d:35:b4:06:d0:79:fd:08:46:52:bd:51:07:5c: c7:9e:72:58:0d:a0:6b:67:8b:d8:4b:92:ec:8b:30:05:45:8a: 68:ba:b0:18:d1:a5:32:a1:7e:95:e0:e3:e8:f2:59:61:51:53: dd:b2:e7:24:b8:c4:c5:42:f6:87:97:60:20:f9:d6:b0:c4:31: 8c:f7:7f:c9:53:24:ad:d4:f7:62:47:ea:de:ae:4f:57:32:83: 1a:5d:2a:09:f8:df:e3:d9:05:c0:3d:f9:46:1a:ea:d2:fb:6f: a5:c0:43:c3:12:ba:9e:62:73:e1:8d:45:f8:5b:b2:63:1a:46: f0:e7:97:4e:8c:2e:4a:d7:ab:94:81:7c:35:6a:d6:dd:55:35: 3d:f3:71:3a:8f:5b:13:8b:36:41:8e:47:aa:d6:b8:18:c4:47: c4:2a:4d:72:bd:3b:d7:da:ae:1c:b7:4d:1b:f1:ef:db:a9:e4: 74:55:00:e9:06:24:9f:c1:8a:35:0f:0a:ff:ae:a1:fe:f7:b0: 19:71:a1:81:fd:72:54:e7:60:bb:20:3d:55:6c:93:a3:3a:d4: 64:52:b3:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbjrVx8hZTrFBd6BZecob4VNJb7YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0VGQTY0QzExNTczQzI5MkUxOTJDMkNERUFDNEQ1RjhC OEMyMURCRDAeFw0yNTA0MDQyMDA3MTZaFw0yNTA0MDgwMjAwMTZaMDMxMTAvBgNV BAMTKDhBRjA1NTFGQjE3OUVEMTYyODQ1NDQxNzVDQkIwNzhGOUI0NUREQkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPvN3lSa8oLRX0Xfbk1+ync2j4 NVk61QaseZRalHj37WTjzaL07BwFHt0PQsnDeTP5vhkQeCdmyW7YWF/3jsc6C1c3 swOv+mU+xRR6q5QetlwpdZ43+mS5EH8bkzx0hcqH1rTDc5ZNfnGyixuavorSl089 Q3mkMFD5hi4O+KpAGL2yub7AfLnqFGqfKfzxPOz3TIzGVDg0Y+mZ2xOnjtb/RBQu VazIfT9q4RN64X54JgRWCN48JCx3RkXh51AXpEl203FxIL4sdTT0W6aBCOIm+9G1 yeQLb0DMCkSKar4hgDBzrkSpn2cGyonpvSMoTpBbZ04VOtNu8O+3DUNMzuMDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUivBVH7F57RYoRUQXXLsHj5tF3b0wHwYDVR0j BBgwFoAUfvpkwRVzwpLhksLN6sTV+LjCHb0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y ZDA5MjdlNi04YTBhLTRmYTctODk2OS05ZmI5ZDY5NDM5N2MvMC83RUZBNjRDMTE1 NzNDMjkyRTE5MkMyQ0RFQUM0RDVGOEI4QzIxREJELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0VGQTY0QzExNTczQzI5MkUxOTJDMkNERUFDNEQ1RjhCOEMy MURCRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmQwOTI3ZTYtOGEwYS00ZmE3LTg5 NjktOWZiOWQ2OTQzOTdjLzAvN0VGQTY0QzExNTczQzI5MkUxOTJDMkNERUFDNEQ1 RjhCOEMyMURCRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADA3rdYAOhqH/VYNz2chMaksjOzt4CtEhLpn 9Tdfbs+piii7N/yKd7NtNbQG0Hn9CEZSvVEHXMeeclgNoGtni9hLkuyLMAVFimi6 sBjRpTKhfpXg4+jyWWFRU92y5yS4xMVC9oeXYCD51rDEMYz3f8lTJK3U92JH6t6u T1cygxpdKgn43+PZBcA9+UYa6tL7b6XAQ8MSup5ic+GNRfhbsmMaRvDnl06MLkrX q5SBfDVq1t1VNT3zcTqPWxOLNkGOR6rWuBjER8QqTXK9O9farhy3TRvx79up5HRV AOkGJJ/BijUPCv+uof73sBlxoYH9clTnYLsgPVVsk6M61GRSs74= -----END CERTIFICATE-----Generated at Sat Apr 5 22:26:59 2025 by rpki-client