$ rpki-client -vvf repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft File: 7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft (raw, json) Hash identifier: gy1OIv5bSvcc+ZWi+3yl75nt7ZhZ4GCNSSPHq56dNa0= Subject key identifier: 27:86:14:A1:D8:0A:8C:36:49:20:DE:E2:29:01:57:B6:05:A6:99:DF Authority key identifier: 7F:EF:6B:F5:3F:A3:12:2A:0F:09:CE:F4:B4:08:E1:37:92:A1:45:45 Certificate issuer: /CN=7FEF6BF53FA3122A0F09CEF4B408E13792A14545 Certificate serial: 6CB4655182E5B7405F0C2007FC99D8E36E846618 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.cer Subject info access: rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft Manifest number: 01C9 Signing time: Fri 18 Apr 2025 17:51:34 +0000 Manifest this update: Fri 18 Apr 2025 17:46:34 +0000 Manifest next update: Mon 21 Apr 2025 23:09:34 +0000 Files and hashes: 1: 3130332e3136372e3130352e302f32342d3234203d3e203338333230.roa (hash: t5DmPirQU+jLx9aHjmb/pgwv+a8S0p8w/q4YuXRMJQI=) 2: 7FEF6BF53FA3122A0F09CEF4B408E13792A14545.crl (hash: XFPuHZYNi0W5EaRDYR7lVAwdcWOd/NSMn+iYrOp77+4=) 3: 3130332e3136372e3130342e302f32342d3234203d3e20313339343130.roa (hash: cilQSsMRfqwA9LOmx5CPo41uuLBHWQ7Qq5S49MHRn2E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.crl rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 23:09:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:b4:65:51:82:e5:b7:40:5f:0c:20:07:fc:99:d8:e3:6e:84:66:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7FEF6BF53FA3122A0F09CEF4B408E13792A14545 Validity Not Before: Apr 18 17:46:34 2025 GMT Not After : Apr 21 23:09:34 2025 GMT Subject: CN=278614A1D80A8C364920DEE2290157B605A699DF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:38:89:55:b0:94:28:06:f4:22:b2:de:15:6d: b4:b2:d6:44:0c:4e:38:5b:0e:00:48:2c:89:b8:44: d9:fd:9b:5d:42:e6:fd:78:92:1d:58:13:d5:34:2e: 1e:78:09:84:22:7c:b2:e4:f2:99:0c:13:0e:97:91: 60:79:b6:6c:b2:46:81:71:ff:cb:f2:97:f6:8b:78: 21:b6:bd:00:54:ce:8f:c6:41:56:ae:1a:10:f8:92: 71:32:2f:79:e9:25:a3:0d:24:95:a6:4e:ea:ab:e9: 6f:bd:3a:3d:cc:4c:c9:a2:83:d2:c1:e9:d6:72:e6: 73:5d:44:0a:e7:61:cf:bd:f5:e9:a5:01:24:6e:5c: 5c:60:3f:5f:c0:c8:50:9e:df:72:c2:83:5a:59:a3: 86:ed:82:59:67:97:60:83:df:91:66:a4:5c:77:b6: 8b:f1:bb:02:43:fd:b6:f3:f8:22:eb:1c:fd:f2:18: e3:02:a9:29:58:84:08:a1:3c:02:8c:fe:2d:f4:08: 41:d4:68:89:98:c1:47:2c:36:12:6e:eb:a6:18:71: 84:9e:65:81:94:46:79:1c:4a:26:e8:77:36:c2:9e: 43:a7:09:1e:bc:94:e0:39:7f:3b:de:41:5a:6b:4a: 12:48:fd:d5:ac:96:76:95:f0:e7:c6:ca:73:6e:d1: 1e:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 27:86:14:A1:D8:0A:8C:36:49:20:DE:E2:29:01:57:B6:05:A6:99:DF X509v3 Authority Key Identifier: keyid:7F:EF:6B:F5:3F:A3:12:2A:0F:09:CE:F4:B4:08:E1:37:92:A1:45:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:fd:82:a8:69:21:b2:81:e4:a0:af:92:0e:5b:bd:84:7e:42: f1:4c:37:00:ec:06:b0:36:d4:11:a0:0e:63:11:98:2d:92:e5: e0:11:e5:7b:9e:37:32:71:58:e6:8e:84:37:d9:f1:79:19:ba: cd:be:1f:f2:ff:cc:e2:28:e8:be:f3:21:80:ff:06:a1:af:9b: 81:c4:4b:6e:a9:3c:fb:3b:ae:35:5a:08:bf:ea:a2:d7:31:7d: e9:e8:9e:52:19:19:40:be:5d:09:a1:e0:37:a3:08:e8:d9:dc: 7a:17:5c:28:5d:31:47:6a:61:f2:d5:b7:93:aa:5b:e4:d4:69: 85:4e:6d:ee:8c:f8:c0:5a:49:a5:9d:49:41:28:57:7a:ef:f1: 47:4e:e5:dc:5e:64:68:36:4c:e8:eb:44:5e:9d:5b:3b:5a:57: c7:80:f6:c6:94:05:b0:12:42:cc:45:4f:d2:c4:1d:ef:4c:93: b7:7d:ff:df:84:86:4e:32:e8:1d:38:8c:f2:9d:6d:64:b4:c7: d7:9a:d7:c7:5a:98:74:be:99:5f:2b:bd:1b:c3:18:5e:42:69: 6c:a0:a5:48:52:fb:70:39:65:55:e9:c6:61:21:95:13:58:a6: dd:25:08:6c:09:cd:fc:99:d1:69:4a:41:7a:48:ec:f2:42:0e: 73:de:68:2a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbLRlUYLlt0BfDCAH/JnY426EZhgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ZFRjZCRjUzRkEzMTIyQTBGMDlDRUY0QjQwOEUxMzc5 MkExNDU0NTAeFw0yNTA0MTgxNzQ2MzRaFw0yNTA0MjEyMzA5MzRaMDMxMTAvBgNV BAMTKDI3ODYxNEExRDgwQThDMzY0OTIwREVFMjI5MDE1N0I2MDVBNjk5REYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQOIlVsJQoBvQist4VbbSy1kQM TjhbDgBILIm4RNn9m11C5v14kh1YE9U0Lh54CYQifLLk8pkMEw6XkWB5tmyyRoFx /8vyl/aLeCG2vQBUzo/GQVauGhD4knEyL3npJaMNJJWmTuqr6W+9Oj3MTMmig9LB 6dZy5nNdRArnYc+99emlASRuXFxgP1/AyFCe33LCg1pZo4btgllnl2CD35FmpFx3 tovxuwJD/bbz+CLrHP3yGOMCqSlYhAihPAKM/i30CEHUaImYwUcsNhJu66YYcYSe ZYGURnkcSibodzbCnkOnCR68lOA5fzveQVprShJI/dWslnaV8OfGynNu0R6FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJ4YUodgKjDZJIN7iKQFXtgWmmd8wHwYDVR0j BBgwFoAUf+9r9T+jEioPCc70tAjhN5KhRUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MDNlYmFiYi05OTlmLTRmM2UtODRjMS1iZjI3OWJmZTE3ODcvMC83RkVGNkJGNTNG QTMxMjJBMEYwOUNFRjRCNDA4RTEzNzkyQTE0NTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0ZFRjZCRjUzRkEzMTIyQTBGMDlDRUY0QjQwOEUxMzc5MkEx NDU0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzAzZWJhYmItOTk5Zi00ZjNlLTg0 YzEtYmYyNzliZmUxNzg3LzAvN0ZFRjZCRjUzRkEzMTIyQTBGMDlDRUY0QjQwOEUx Mzc5MkExNDU0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAr9gqhpIbKB5KCvkg5bvYR+QvFMNwDsBrA2 1BGgDmMRmC2S5eAR5XueNzJxWOaOhDfZ8XkZus2+H/L/zOIo6L7zIYD/BqGvm4HE S26pPPs7rjVaCL/qotcxfenonlIZGUC+XQmh4DejCOjZ3HoXXChdMUdqYfLVt5Oq W+TUaYVObe6M+MBaSaWdSUEoV3rv8UdO5dxeZGg2TOjrRF6dWztaV8eA9saUBbAS QsxFT9LEHe9Mk7d9/9+Ehk4y6B04jPKdbWS0x9ea18damHS+mV8rvRvDGF5CaWyg pUhS+3A5ZVXpxmEhlRNYpt0lCGwJzfyZ0WlKQXpI7PJCDnPeaCo= -----END CERTIFICATE-----Generated at Sat Apr 19 07:22:44 2025 by rpki-client