$ rpki-client -vvf repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.mft File: EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.mft (raw, json) Hash identifier: PJvZTnnoWYWV9graYyUh2+bqX0evl7eC7oqd9Ex45tI= Subject key identifier: 4B:55:9F:43:FB:95:FF:0B:34:3B:EE:D3:EC:88:D4:AA:88:DC:6C:C3 Authority key identifier: ED:BD:84:5A:95:97:FE:C4:AD:90:03:0F:90:18:E4:B8:B6:3F:CC:77 Certificate issuer: /CN=EDBD845A9597FEC4AD90030F9018E4B8B63FCC77 Certificate serial: 784FA414B8890960D05292EC4FB9A28E83118DE5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.cer Subject info access: rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.mft Manifest number: 04C7 Signing time: Tue 08 Apr 2025 19:11:52 +0000 Manifest this update: Tue 08 Apr 2025 19:06:52 +0000 Manifest next update: Fri 11 Apr 2025 23:38:52 +0000 Files and hashes: 1: 3130332e37312e3235352e302f32342d3234203d3e20313335343731.roa (hash: abUfqnlz14hLa9k85gNaxLj5uZQzXtHEB+QPjRF4cFo=) 2: 3130332e3133372e33372e302f32342d3234203d3e20313335343731.roa (hash: K1Isdp6LgWz0qDU46LV/MR1idEvA1bOfMrNevu1CnYk=) 3: EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.crl (hash: w77EekP1b535XnCxwNACYQZlPv/0V3CNq290dqJ15+M=) 4: 323030313a6466343a6530303a3a2f34382d3438203d3e20313335343731.roa (hash: lPa8DdxFd1cETaniJFMsUZo/EW/3xjBsB7NOdfKIGEI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.crl rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 23:38:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:4f:a4:14:b8:89:09:60:d0:52:92:ec:4f:b9:a2:8e:83:11:8d:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EDBD845A9597FEC4AD90030F9018E4B8B63FCC77 Validity Not Before: Apr 8 19:06:52 2025 GMT Not After : Apr 11 23:38:52 2025 GMT Subject: CN=4B559F43FB95FF0B343BEED3EC88D4AA88DC6CC3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:4b:02:54:26:d9:9c:8e:09:e8:33:a8:6f:40: ab:74:5b:08:6c:7d:b5:c5:d6:f4:27:23:54:a6:fb: 77:2b:eb:81:04:ed:aa:1d:d6:48:7c:c1:14:aa:6c: 87:af:d3:b0:ec:a5:fa:76:d4:c3:d4:c0:d6:99:af: 16:aa:c7:52:07:9f:69:03:b0:51:21:fc:31:9e:58: de:82:f4:b8:65:53:ff:22:64:50:91:f9:72:ee:1d: c2:28:1b:2f:cd:7e:79:e2:6f:49:3e:0e:0f:27:41: 02:9e:04:9d:b4:99:2e:07:c9:19:f4:5e:08:07:cb: 3d:f4:63:a2:4f:ff:86:42:b6:e6:51:7f:6e:3d:b7: a1:a7:9d:d1:7b:16:ba:44:da:b5:12:89:98:e4:4f: d6:85:ab:e9:cb:c3:71:30:d8:8d:65:de:3d:f1:ec: 9f:76:2f:40:dc:70:f0:3b:61:4a:23:80:ec:52:ca: 54:6b:2d:4c:d1:e2:33:b1:83:a2:cb:77:93:ae:e0: 1d:77:1f:b9:20:71:cf:73:b2:ed:30:d4:8a:6b:b0: e9:12:c4:d7:96:77:02:a2:75:dc:14:24:ab:97:db: fb:e5:ce:5b:6c:c6:d8:81:8d:09:75:bd:c9:d5:29: 56:75:ff:63:1a:08:d4:4c:da:b7:d9:d4:62:57:ee: 81:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:55:9F:43:FB:95:FF:0B:34:3B:EE:D3:EC:88:D4:AA:88:DC:6C:C3 X509v3 Authority Key Identifier: keyid:ED:BD:84:5A:95:97:FE:C4:AD:90:03:0F:90:18:E4:B8:B6:3F:CC:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/46302810-564c-45b7-8a72-ef6b8f6309c0/0/EDBD845A9597FEC4AD90030F9018E4B8B63FCC77.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:4f:30:95:ed:96:5d:c7:0a:1d:5b:eb:7c:e7:b1:3e:22:d9: cd:13:7d:3b:8e:4a:59:12:cd:29:d5:41:2d:9d:94:dc:2a:a3: 20:a7:ad:99:e8:b5:97:d5:51:c1:01:3f:42:bf:a0:4d:84:cd: b4:ef:25:b7:ff:07:c1:08:97:00:72:99:4e:ae:80:aa:ed:bd: f8:e2:62:49:ed:de:ed:f5:53:79:68:9e:f9:73:cb:8a:6a:8e: 3a:b1:09:b6:30:71:08:8b:15:6f:e1:b2:47:33:ef:02:8b:1e: d8:0f:22:a3:44:db:83:9a:75:ee:13:03:f2:99:2f:81:14:3e: c7:ae:8a:99:21:20:7e:84:0b:0b:23:a5:67:a1:c4:03:9d:be: a4:0b:97:10:4b:91:29:05:d9:5b:b7:96:9b:af:36:72:4d:29: f5:35:7b:c4:12:81:62:86:d7:2b:52:44:2d:a9:06:a0:69:57: d0:fb:06:b6:aa:87:3d:de:e3:3b:70:64:5f:b7:96:1f:b2:39: 25:98:eb:b3:b4:d0:45:d2:1a:7d:10:ad:a1:18:9e:b9:9a:35: ca:01:85:85:ea:61:52:e2:d9:7d:f8:3f:36:4d:0b:6f:c6:81: 71:0e:02:96:4f:e6:df:43:3f:60:b0:4e:36:17:9b:90:2a:53: d5:81:72:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeE+kFLiJCWDQUpLsT7mijoMRjeUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRURCRDg0NUE5NTk3RkVDNEFEOTAwMzBGOTAxOEU0QjhC NjNGQ0M3NzAeFw0yNTA0MDgxOTA2NTJaFw0yNTA0MTEyMzM4NTJaMDMxMTAvBgNV BAMTKDRCNTU5RjQzRkI5NUZGMEIzNDNCRUVEM0VDODhENEFBODhEQzZDQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtSwJUJtmcjgnoM6hvQKt0Wwhs fbXF1vQnI1Sm+3cr64EE7aod1kh8wRSqbIev07Dspfp21MPUwNaZrxaqx1IHn2kD sFEh/DGeWN6C9LhlU/8iZFCR+XLuHcIoGy/Nfnnib0k+Dg8nQQKeBJ20mS4HyRn0 XggHyz30Y6JP/4ZCtuZRf249t6GnndF7FrpE2rUSiZjkT9aFq+nLw3Ew2I1l3j3x 7J92L0DccPA7YUojgOxSylRrLUzR4jOxg6LLd5Ou4B13H7kgcc9zsu0w1IprsOkS xNeWdwKiddwUJKuX2/vlzltsxtiBjQl1vcnVKVZ1/2MaCNRM2rfZ1GJX7oGHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUS1WfQ/uV/ws0O+7T7IjUqojcbMMwHwYDVR0j BBgwFoAU7b2EWpWX/sStkAMPkBjkuLY/zHcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NjMwMjgxMC01NjRjLTQ1YjctOGE3Mi1lZjZiOGY2MzA5YzAvMC9FREJEODQ1QTk1 OTdGRUM0QUQ5MDAzMEY5MDE4RTRCOEI2M0ZDQzc3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRURCRDg0NUE5NTk3RkVDNEFEOTAwMzBGOTAxOEU0QjhCNjNG Q0M3Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDYzMDI4MTAtNTY0Yy00NWI3LThh NzItZWY2YjhmNjMwOWMwLzAvRURCRDg0NUE5NTk3RkVDNEFEOTAwMzBGOTAxOEU0 QjhCNjNGQ0M3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACxPMJXtll3HCh1b63znsT4i2c0TfTuOSlkS zSnVQS2dlNwqoyCnrZnotZfVUcEBP0K/oE2EzbTvJbf/B8EIlwBymU6ugKrtvfji Yknt3u31U3lonvlzy4pqjjqxCbYwcQiLFW/hskcz7wKLHtgPIqNE24Oade4TA/KZ L4EUPseuipkhIH6ECwsjpWehxAOdvqQLlxBLkSkF2Vu3lpuvNnJNKfU1e8QSgWKG 1ytSRC2pBqBpV9D7Braqhz3e4ztwZF+3lh+yOSWY67O00EXSGn0QraEYnrmaNcoB hYXqYVLi2X34PzZNC2/GgXEOApZP5t9DP2CwTjYXm5AqU9WBcvE= -----END CERTIFICATE-----Generated at Wed Apr 9 19:42:36 2025 by rpki-client