$ rpki-client -vvf repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft File: D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft (raw, json) Hash identifier: dg4zv4mVQe0uLi/1ANHUgbiJebL7qzecch4t/4kjDrI= Subject key identifier: 77:54:1D:EC:BC:E5:AF:60:A6:C4:82:6C:A1:1E:71:5B:08:66:9B:01 Authority key identifier: D7:C7:C6:E5:33:C4:1C:36:D9:23:CD:C5:9F:FC:1B:04:36:C3:9F:AF Certificate issuer: /CN=D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF Certificate serial: 019BF4CA1800FF99C4486FF0A96A8829565492A2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft Manifest number: 021C Signing time: Sun 06 Apr 2025 02:11:36 +0000 Manifest this update: Sun 06 Apr 2025 02:06:36 +0000 Manifest next update: Wed 09 Apr 2025 12:03:36 +0000 Files and hashes: 1: 3130332e3130322e3136372e302f32342d3234203d3e20313335343634.roa (hash: G2Aj1Erzi22dbwXIe5ZKOYeLnX3IptEzXgXL9BU+vU0=) 2: 3130332e3130322e3137362e302f32342d3234203d3e20313335343634.roa (hash: /nnnpT4J0Tuu/cwXNYMkIuOZtyJHbw8wTsT308/p5rw=) 3: 3130332e3130322e3137372e302f32342d3234203d3e20313335343634.roa (hash: oHkNyUxZ+91xlNVhfeWI9Dc0rmMp8x6qN96DcYOObkU=) 4: D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.crl (hash: sloGxvcFqDFmPsUVmHchTFDxSa/XOe9I4R1kLI4yTEE=) 5: 3130332e37302e36382e302f32342d3234203d3e20313335343634.roa (hash: 2CoQGk4NMRfUrYnvT/UZsUPUuE84h2TZeseeJ7TfgPk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.crl rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 09 Apr 2025 10:37:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:f4:ca:18:00:ff:99:c4:48:6f:f0:a9:6a:88:29:56:54:92:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF Validity Not Before: Apr 6 02:06:36 2025 GMT Not After : Apr 9 12:03:36 2025 GMT Subject: CN=77541DECBCE5AF60A6C4826CA11E715B08669B01 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:4e:4d:37:de:22:d9:c3:ea:35:ad:b0:f7:5a: 1c:3d:aa:6b:50:75:b0:44:24:e6:a6:ee:a1:65:37: 4e:a2:65:15:c2:c3:15:f6:59:d9:da:e3:cc:1a:10: 3e:6c:20:d8:eb:ae:38:13:03:51:c5:20:50:9c:7d: 49:c4:58:17:5a:9f:83:87:fd:c7:42:a0:71:4b:bb: 2f:a0:01:42:13:89:25:ea:d5:40:dd:d7:d6:a5:0d: 2d:84:ee:0b:29:1d:cb:b9:da:85:2d:bb:fc:da:76: b1:3c:cf:b5:8a:22:62:72:05:58:18:24:09:06:65: 52:5c:5d:82:5f:71:f4:60:05:e4:fa:67:57:92:48: 8e:08:46:ca:c4:c6:a2:a4:34:bd:d7:1a:5e:df:d4: 11:c3:d7:b9:15:7d:d5:b4:aa:eb:ce:9e:9a:65:05: f2:cd:3b:58:07:52:88:97:af:66:e4:f4:e5:63:6d: 3a:ac:fa:e8:ae:f3:f7:d3:92:11:23:8a:54:85:90: 2f:ad:ff:f5:b5:2e:b1:e5:c3:b3:30:53:86:30:74: f1:b7:65:9b:25:bb:de:bd:d8:5c:7c:c2:41:df:2e: a3:48:13:1f:51:7d:67:cc:02:c9:eb:b0:12:85:a4: 5f:f8:68:65:08:73:1a:b3:00:93:f7:d5:94:3e:41: 3e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:54:1D:EC:BC:E5:AF:60:A6:C4:82:6C:A1:1E:71:5B:08:66:9B:01 X509v3 Authority Key Identifier: keyid:D7:C7:C6:E5:33:C4:1C:36:D9:23:CD:C5:9F:FC:1B:04:36:C3:9F:AF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/519a8538-da43-4158-abc2-8e63a8e40899/0/D7C7C6E533C41C36D923CDC59FFC1B0436C39FAF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:ae:01:58:c1:a7:41:1f:8d:e1:cd:1c:3c:41:28:30:94:e6: 77:72:9d:9a:d4:e4:70:01:93:ef:f8:22:56:3b:0b:d4:e1:83: f3:b8:62:88:2b:8e:22:2b:f8:4c:73:3d:ad:78:40:a8:01:b7: 42:4f:d1:63:1f:fc:93:e1:87:bb:6b:5a:79:4e:16:cb:df:99: 21:93:d3:cb:82:4c:58:f5:b5:3a:4b:43:42:a4:d8:97:b2:cc: fa:66:c6:db:b6:0c:ac:d5:93:8b:ad:b0:16:27:00:e3:2a:65: 66:b0:ee:ae:29:b8:74:fe:de:47:ce:a4:b7:e4:a3:89:58:70: a1:82:1b:6f:f8:6d:2c:63:d3:14:b1:d1:f0:61:c6:86:41:03: 15:df:2e:85:eb:bf:4f:ca:a3:71:c3:b4:65:cb:83:97:5b:4e: 01:4b:f4:89:eb:81:2f:ba:fa:d4:f9:d8:25:a9:d5:db:bb:59: e4:87:5b:f6:8b:db:b5:d4:b6:d5:ea:26:0e:87:51:7a:39:46: b8:a4:9d:7a:c8:c3:7b:df:81:32:9a:41:66:22:a6:8b:f5:9c: 79:af:23:61:bd:7f:f3:14:c7:0b:80:3e:c3:06:89:53:36:05: cd:ea:3d:79:36:d5:b7:d3:d2:16:26:6a:1f:64:ff:22:da:1b: 9d:03:7c:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAZv0yhgA/5nESG/wqWqIKVZUkqIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDdDN0M2RTUzM0M0MUMzNkQ5MjNDREM1OUZGQzFCMDQz NkMzOUZBRjAeFw0yNTA0MDYwMjA2MzZaFw0yNTA0MDkxMjAzMzZaMDMxMTAvBgNV BAMTKDc3NTQxREVDQkNFNUFGNjBBNkM0ODI2Q0ExMUU3MTVCMDg2NjlCMDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Tk033iLZw+o1rbD3Whw9qmtQ dbBEJOam7qFlN06iZRXCwxX2Wdna48waED5sINjrrjgTA1HFIFCcfUnEWBdan4OH /cdCoHFLuy+gAUITiSXq1UDd19alDS2E7gspHcu52oUtu/zadrE8z7WKImJyBVgY JAkGZVJcXYJfcfRgBeT6Z1eSSI4IRsrExqKkNL3XGl7f1BHD17kVfdW0quvOnppl BfLNO1gHUoiXr2bk9OVjbTqs+uiu8/fTkhEjilSFkC+t//W1LrHlw7MwU4YwdPG3 ZZslu9692Fx8wkHfLqNIEx9RfWfMAsnrsBKFpF/4aGUIcxqzAJP31ZQ+QT6TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUd1Qd7Lzlr2CmxIJsoR5xWwhmmwEwHwYDVR0j BBgwFoAU18fG5TPEHDbZI83Fn/wbBDbDn68wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MTlhODUzOC1kYTQzLTQxNTgtYWJjMi04ZTYzYThlNDA4OTkvMC9EN0M3QzZFNTMz QzQxQzM2RDkyM0NEQzU5RkZDMUIwNDM2QzM5RkFGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDdDN0M2RTUzM0M0MUMzNkQ5MjNDREM1OUZGQzFCMDQzNkMz OUZBRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTE5YTg1MzgtZGE0My00MTU4LWFi YzItOGU2M2E4ZTQwODk5LzAvRDdDN0M2RTUzM0M0MUMzNkQ5MjNDREM1OUZGQzFC MDQzNkMzOUZBRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB6uAVjBp0EfjeHNHDxBKDCU5ndynZrU5HAB k+/4IlY7C9Thg/O4YogrjiIr+ExzPa14QKgBt0JP0WMf/JPhh7trWnlOFsvfmSGT 08uCTFj1tTpLQ0Kk2JeyzPpmxtu2DKzVk4utsBYnAOMqZWaw7q4puHT+3kfOpLfk o4lYcKGCG2/4bSxj0xSx0fBhxoZBAxXfLoXrv0/Ko3HDtGXLg5dbTgFL9InrgS+6 +tT52CWp1du7WeSHW/aL27XUttXqJg6HUXo5RriknXrIw3vfgTKaQWYipov1nHmv I2G9f/MUxwuAPsMGiVM2Bc3qPXk21bfT0hYmah9k/yLaG50DfO0= -----END CERTIFICATE-----Generated at Sun Apr 6 12:45:54 2025 by rpki-client