$ rpki-client -vvf repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft File: 7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft (raw, json) Hash identifier: cjmXgQI+RArNXDGrUGjXZ9/GMKOTP43hjcdqaR+zQe8= Subject key identifier: 0C:FD:70:FD:CF:C2:CA:9D:42:28:22:69:1E:0D:09:9F:4B:62:C2:D4 Authority key identifier: 7D:6E:DF:DB:21:B8:B7:E6:A7:5A:99:0A:7B:EC:AD:85:E8:BE:B9:53 Certificate issuer: /CN=7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953 Certificate serial: 2264EA368577F5D1C4D9F381DE7E8CCC34BAD7CC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft Manifest number: 016D Signing time: Thu 10 Apr 2025 05:00:04 +0000 Manifest this update: Thu 10 Apr 2025 04:55:04 +0000 Manifest next update: Sun 13 Apr 2025 14:16:04 +0000 Files and hashes: 1: 3130332e34362e342e302f32342d3234203d3e20313530343630.roa (hash: 70RFcRoz1w22nVDdjd8xwvOHx9oaAPRDsiAFJSjZRVk=) 2: 7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.crl (hash: Stsmm7FjBuGDlf/xrkKxqf6Vq4mo+1O87zjihcHYDMU=) 3: 3130332e34362e342e302f32332d3233203d3e20313530343630.roa (hash: NXHMc5cBUZitTQZ4ST9s7lp3tsPIg2LlkZ5yYQ7KPUA=) 4: 3130332e34362e352e302f32342d3234203d3e20313530343630.roa (hash: OiXuaCFeHNTNKTkxwDwZ/IJjAlYs+aZs7qWhd3mySzg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.crl rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 13 Apr 2025 14:16:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:64:ea:36:85:77:f5:d1:c4:d9:f3:81:de:7e:8c:cc:34:ba:d7:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953 Validity Not Before: Apr 10 04:55:04 2025 GMT Not After : Apr 13 14:16:04 2025 GMT Subject: CN=0CFD70FDCFC2CA9D422822691E0D099F4B62C2D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:50:c2:b9:7d:25:29:3d:9f:b8:2b:25:40:92: c6:77:50:55:20:e6:82:8a:52:84:f3:7f:48:04:80: 80:fc:05:78:26:c0:d6:22:b0:13:2e:90:cb:cd:ac: 6f:c2:60:b4:9a:29:6d:69:29:48:d0:27:66:84:e1: 36:04:3c:7c:81:65:5a:94:4e:ce:70:6f:c4:2b:70: d4:6c:fe:8c:72:52:fb:ae:b1:44:dd:3c:dc:f9:78: fa:9f:f8:ab:c4:1a:84:11:da:de:3e:ec:f0:10:51: 31:fc:78:e4:09:13:a8:a0:5b:bd:3b:59:a8:8d:5a: c9:7b:1b:77:75:81:4f:4a:c2:9e:d7:dc:bb:9a:bf: c5:ab:a4:f6:53:3c:26:b6:77:67:6d:3e:25:dd:d7: 62:94:bd:d2:6c:d3:7c:17:45:f4:92:d6:a7:4c:b2: 47:9f:5a:c4:70:b0:02:3e:48:b9:51:59:ed:60:a9: 40:90:68:fe:43:4e:db:75:53:5c:9c:34:6b:57:e2: a6:1a:d7:41:1b:1a:e3:6f:c9:c9:4f:4c:33:c0:52: 3b:bd:e7:3e:e1:f3:28:5c:d5:fb:14:9f:7a:d3:09: 13:32:61:86:5a:99:af:71:55:04:37:32:78:8e:d8: 00:6b:19:34:77:38:47:d0:68:a8:6a:8c:ce:95:4d: e5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:FD:70:FD:CF:C2:CA:9D:42:28:22:69:1E:0D:09:9F:4B:62:C2:D4 X509v3 Authority Key Identifier: keyid:7D:6E:DF:DB:21:B8:B7:E6:A7:5A:99:0A:7B:EC:AD:85:E8:BE:B9:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bc8cda5-3483-42b0-b385-fc070716fbcc/0/7D6EDFDB21B8B7E6A75A990A7BECAD85E8BEB953.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:3d:78:c8:02:e4:a3:c1:04:4f:f9:fd:7b:1e:fc:23:01:59: f2:86:d6:7b:3e:59:7a:2c:1e:64:59:4c:10:05:f8:d2:4f:37: b0:fe:ec:36:85:c8:4c:72:fa:f2:06:47:4d:5a:85:5e:e4:ae: d2:54:78:ee:5b:98:f2:b5:3a:fc:d7:61:69:f3:18:23:80:f4: d2:75:0e:da:20:ee:c7:7b:0f:f1:ab:e4:40:fc:67:27:f7:13: 1e:f1:34:3a:2b:e8:cb:13:91:76:91:e4:cd:c8:50:de:c1:4f: b9:9a:b9:2c:03:6d:be:ae:15:7d:a5:58:94:1d:3d:75:bb:4c: 86:8d:33:ab:e3:27:e1:46:d6:b5:d3:8b:e5:ab:e4:90:19:9e: e5:e1:0c:37:49:84:58:3f:65:23:f1:5a:6f:13:f2:66:2d:f9: 25:4b:c0:b3:dc:ae:b9:ac:b0:3e:0d:c3:8a:97:e6:45:04:b8: 7d:2b:7d:20:e0:20:ec:76:97:25:64:cc:db:2d:f0:66:05:cd: b3:b9:96:12:cc:95:f5:a6:00:df:9f:01:69:ee:2a:69:b4:f9: 57:51:fb:d0:51:11:1f:b8:1f:a8:29:ef:46:05:36:df:51:fc: e4:ca:79:5e:40:5d:38:ec:49:62:dd:c5:fe:42:b6:54:84:db: 19:26:19:41 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUImTqNoV39dHE2fOB3n6MzDS618wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q2RURGREIyMUI4QjdFNkE3NUE5OTBBN0JFQ0FEODVF OEJFQjk1MzAeFw0yNTA0MTAwNDU1MDRaFw0yNTA0MTMxNDE2MDRaMDMxMTAvBgNV BAMTKDBDRkQ3MEZEQ0ZDMkNBOUQ0MjI4MjI2OTFFMEQwOTlGNEI2MkMyRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDUMK5fSUpPZ+4KyVAksZ3UFUg 5oKKUoTzf0gEgID8BXgmwNYisBMukMvNrG/CYLSaKW1pKUjQJ2aE4TYEPHyBZVqU Ts5wb8QrcNRs/oxyUvuusUTdPNz5ePqf+KvEGoQR2t4+7PAQUTH8eOQJE6igW707 WaiNWsl7G3d1gU9Kwp7X3Luav8WrpPZTPCa2d2dtPiXd12KUvdJs03wXRfSS1qdM skefWsRwsAI+SLlRWe1gqUCQaP5DTtt1U1ycNGtX4qYa10EbGuNvyclPTDPAUju9 5z7h8yhc1fsUn3rTCRMyYYZama9xVQQ3MniO2ABrGTR3OEfQaKhqjM6VTeVvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDP1w/c/Cyp1CKCJpHg0Jn0tiwtQwHwYDVR0j BBgwFoAUfW7f2yG4t+anWpkKe+ythei+uVMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 YmM4Y2RhNS0zNDgzLTQyYjAtYjM4NS1mYzA3MDcxNmZiY2MvMC83RDZFREZEQjIx QjhCN0U2QTc1QTk5MEE3QkVDQUQ4NUU4QkVCOTUzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q2RURGREIyMUI4QjdFNkE3NUE5OTBBN0JFQ0FEODVFOEJF Qjk1My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJjOGNkYTUtMzQ4My00MmIwLWIz ODUtZmMwNzA3MTZmYmNjLzAvN0Q2RURGREIyMUI4QjdFNkE3NUE5OTBBN0JFQ0FE ODVFOEJFQjk1My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACw9eMgC5KPBBE/5/Xse/CMBWfKG1ns+WXos HmRZTBAF+NJPN7D+7DaFyExy+vIGR01ahV7krtJUeO5bmPK1OvzXYWnzGCOA9NJ1 Dtog7sd7D/Gr5ED8Zyf3Ex7xNDor6MsTkXaR5M3IUN7BT7mauSwDbb6uFX2lWJQd PXW7TIaNM6vjJ+FG1rXTi+Wr5JAZnuXhDDdJhFg/ZSPxWm8T8mYt+SVLwLPcrrms sD4Nw4qX5kUEuH0rfSDgIOx2lyVkzNst8GYFzbO5lhLMlfWmAN+fAWnuKmm0+VdR +9BRER+4H6gp70YFNt9R/OTKeV5AXTjsSWLdxf5CtlSE2xkmGUE= -----END CERTIFICATE-----Generated at Sat Apr 12 16:10:31 2025 by rpki-client