$ rpki-client -vvf repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft File: 7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft (raw, json) Hash identifier: KIT6/0kpo9CZHNgerZVsfJbUMQ97Jt52g0k+rbgSFLU= Subject key identifier: 7F:08:7D:7B:7E:45:22:ED:7D:9B:EA:02:7D:FF:01:DE:62:9C:F3:C2 Authority key identifier: 7F:EF:6B:F5:3F:A3:12:2A:0F:09:CE:F4:B4:08:E1:37:92:A1:45:45 Certificate issuer: /CN=7FEF6BF53FA3122A0F09CEF4B408E13792A14545 Certificate serial: 298F8E12562B8831C71BFFAF4BEB61C0F9F6EB6B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.cer Subject info access: rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft Manifest number: 01B9 Signing time: Wed 12 Mar 2025 20:31:30 +0000 Manifest this update: Wed 12 Mar 2025 20:26:30 +0000 Manifest next update: Sun 16 Mar 2025 02:58:30 +0000 Files and hashes: 1: 7FEF6BF53FA3122A0F09CEF4B408E13792A14545.crl (hash: IRhrNTsHMFuPiVZYRU2pP29c+LgUBB3lAQpXwhNCEM0=) 2: 3130332e3136372e3130352e302f32342d3234203d3e203338333230.roa (hash: t5DmPirQU+jLx9aHjmb/pgwv+a8S0p8w/q4YuXRMJQI=) 3: 3130332e3136372e3130342e302f32342d3234203d3e20313339343130.roa (hash: cilQSsMRfqwA9LOmx5CPo41uuLBHWQ7Qq5S49MHRn2E=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.crl rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 16 Mar 2025 02:58:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:8f:8e:12:56:2b:88:31:c7:1b:ff:af:4b:eb:61:c0:f9:f6:eb:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7FEF6BF53FA3122A0F09CEF4B408E13792A14545 Validity Not Before: Mar 12 20:26:30 2025 GMT Not After : Mar 16 02:58:30 2025 GMT Subject: CN=7F087D7B7E4522ED7D9BEA027DFF01DE629CF3C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:93:bb:f9:fc:41:04:d8:b1:84:73:69:36:c6: 4f:0a:0a:de:f9:7d:5f:da:63:ed:9f:b1:45:3b:99: 9e:e9:d3:77:ca:a0:84:f6:e5:b2:13:e1:58:77:a5: b3:19:56:bd:d4:9e:b1:87:ac:82:e1:f5:00:b1:81: 75:5e:a0:cd:ae:2d:d1:f3:0e:8c:75:57:e3:de:ca: ea:bd:8b:6d:ab:b1:be:fb:3c:68:b7:b9:0f:2e:15: 09:4a:d8:4a:08:82:88:7b:18:c5:59:e7:c8:c8:40: 62:6d:c4:24:2e:44:a7:74:1f:3d:41:45:2c:cc:3f: 9f:72:52:57:42:3d:e9:1b:4d:d5:7e:d6:a1:e1:87: 12:bd:af:93:9e:84:c6:ff:38:9e:a2:9e:5a:fe:44: 02:4e:e1:7a:ef:a8:94:ea:13:3c:bc:bd:72:59:49: 5e:33:54:7a:02:5d:81:fb:1c:ab:0a:f4:69:25:34: 20:64:47:cf:c5:e9:90:17:14:d5:25:7b:17:75:58: ae:56:f3:a1:f4:5f:90:be:a7:63:6f:db:ae:44:27: 80:97:bc:54:bd:45:1a:2b:23:4b:d2:18:f4:2b:78: 07:46:50:eb:6e:19:fc:1f:75:64:db:a6:0f:7c:ea: f8:9d:7e:7c:c6:b2:0f:8b:2a:8a:25:f3:c3:54:6b: 1a:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:08:7D:7B:7E:45:22:ED:7D:9B:EA:02:7D:FF:01:DE:62:9C:F3:C2 X509v3 Authority Key Identifier: keyid:7F:EF:6B:F5:3F:A3:12:2A:0F:09:CE:F4:B4:08:E1:37:92:A1:45:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/303ebabb-999f-4f3e-84c1-bf279bfe1787/0/7FEF6BF53FA3122A0F09CEF4B408E13792A14545.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9f:87:53:ff:cc:78:f6:91:e4:14:e2:35:6b:38:73:93:3d:e6: 5a:dd:4a:b5:7f:25:79:cb:b2:1a:66:63:7c:e7:a2:fc:e7:9a: db:3c:9e:c7:ec:85:3c:07:c4:a0:39:60:25:9b:f4:7e:da:85: aa:b6:93:ff:83:71:a4:81:e1:b6:af:a9:06:fa:73:e7:90:1b: 79:10:b3:02:a0:8a:e2:26:5b:30:4c:dc:d5:07:17:15:8d:76: 51:dc:f4:ed:79:4d:ba:31:01:d9:f5:ac:1e:80:d5:db:bb:fa: 19:c6:71:cc:e6:3a:17:a7:cb:de:15:a8:46:4a:53:c7:1d:71: 38:65:36:3c:9d:dc:8e:3e:20:04:17:40:20:f9:76:6d:4d:21: 99:a5:3c:d6:0e:cd:08:6c:e1:ad:e3:ab:38:fe:56:7d:d0:35: 6c:b9:f9:3c:f1:cd:a5:21:55:04:fa:7c:f3:31:f9:b6:28:86: 73:99:9e:70:86:93:3f:2c:db:2a:a3:9f:a6:48:ce:00:e3:ef: 59:f9:a7:1e:80:46:0d:90:6e:7b:e0:21:24:2b:ea:89:22:a5: 8c:aa:af:51:e8:35:7e:d1:49:54:d2:bf:5f:a4:d0:86:fa:21: c8:39:36:05:46:4f:30:5c:59:2f:25:60:b4:5a:9e:82:de:0d: b3:af:c7:20 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKY+OElYriDHHG/+vS+thwPn262swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ZFRjZCRjUzRkEzMTIyQTBGMDlDRUY0QjQwOEUxMzc5 MkExNDU0NTAeFw0yNTAzMTIyMDI2MzBaFw0yNTAzMTYwMjU4MzBaMDMxMTAvBgNV BAMTKDdGMDg3RDdCN0U0NTIyRUQ3RDlCRUEwMjdERkYwMURFNjI5Q0YzQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEk7v5/EEE2LGEc2k2xk8KCt75 fV/aY+2fsUU7mZ7p03fKoIT25bIT4Vh3pbMZVr3UnrGHrILh9QCxgXVeoM2uLdHz Dox1V+Peyuq9i22rsb77PGi3uQ8uFQlK2EoIgoh7GMVZ58jIQGJtxCQuRKd0Hz1B RSzMP59yUldCPekbTdV+1qHhhxK9r5OehMb/OJ6inlr+RAJO4XrvqJTqEzy8vXJZ SV4zVHoCXYH7HKsK9GklNCBkR8/F6ZAXFNUlexd1WK5W86H0X5C+p2Nv265EJ4CX vFS9RRorI0vSGPQreAdGUOtuGfwfdWTbpg986vidfnzGsg+LKool88NUaxoLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfwh9e35FIu19m+oCff8B3mKc88IwHwYDVR0j BBgwFoAUf+9r9T+jEioPCc70tAjhN5KhRUUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MDNlYmFiYi05OTlmLTRmM2UtODRjMS1iZjI3OWJmZTE3ODcvMC83RkVGNkJGNTNG QTMxMjJBMEYwOUNFRjRCNDA4RTEzNzkyQTE0NTQ1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0ZFRjZCRjUzRkEzMTIyQTBGMDlDRUY0QjQwOEUxMzc5MkEx NDU0NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzAzZWJhYmItOTk5Zi00ZjNlLTg0 YzEtYmYyNzliZmUxNzg3LzAvN0ZFRjZCRjUzRkEzMTIyQTBGMDlDRUY0QjQwOEUx Mzc5MkExNDU0NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ+HU//MePaR5BTiNWs4c5M95lrdSrV/JXnL shpmY3znovznmts8nsfshTwHxKA5YCWb9H7ahaq2k/+DcaSB4bavqQb6c+eQG3kQ swKgiuImWzBM3NUHFxWNdlHc9O15TboxAdn1rB6A1du7+hnGcczmOheny94VqEZK U8cdcThlNjyd3I4+IAQXQCD5dm1NIZmlPNYOzQhs4a3jqzj+Vn3QNWy5+TzxzaUh VQT6fPMx+bYohnOZnnCGkz8s2yqjn6ZIzgDj71n5px6ARg2QbnvgISQr6okipYyq r1HoNX7RSVTSv1+k0Ib6Icg5NgVGTzBcWS8lYLRanoLeDbOvxyA= -----END CERTIFICATE-----Generated at Thu Mar 13 21:30:47 2025 by rpki-client