$ rpki-client -vvf repo-rpki.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/07D6388316655597AEA703AEBFDD2869F80A8984.mft File: 07D6388316655597AEA703AEBFDD2869F80A8984.mft (raw, json) Hash identifier: Nkl5mhcKdGrBYWx88aYdM43IHwpnaAFyil2va6FyRDQ= Subject key identifier: A9:3F:29:8A:2F:16:49:8E:CD:5A:31:77:B7:58:AA:D7:C6:D3:BB:8F Authority key identifier: 07:D6:38:83:16:65:55:97:AE:A7:03:AE:BF:DD:28:69:F8:0A:89:84 Certificate issuer: /CN=07D6388316655597AEA703AEBFDD2869F80A8984 Certificate serial: 3CE8F56411BBBD55E3FA89D6DFCF57E5BA904DBF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07D6388316655597AEA703AEBFDD2869F80A8984.cer Subject info access: rsync://repo-rpki.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/07D6388316655597AEA703AEBFDD2869F80A8984.mft Manifest number: 02AE Signing time: Thu 17 Apr 2025 15:31:49 +0000 Manifest this update: Thu 17 Apr 2025 15:26:49 +0000 Manifest next update: Sun 20 Apr 2025 19:02:49 +0000 Files and hashes: 1: 3130332e3134372e3233362e302f32332d3234203d3e20313339393731.roa (hash: 90EbYJF0CwQ0ioDu8Lhy6M+Vc8eDu52r4V+l5s70WMI=) 2: 07D6388316655597AEA703AEBFDD2869F80A8984.crl (hash: 4ZO27SvgZjAJ9AyhOTJ8iMMrLmv5oHgvjnUegJFiV7Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/07D6388316655597AEA703AEBFDD2869F80A8984.crl rsync://repo-rpki.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/07D6388316655597AEA703AEBFDD2869F80A8984.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07D6388316655597AEA703AEBFDD2869F80A8984.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 19:02:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:e8:f5:64:11:bb:bd:55:e3:fa:89:d6:df:cf:57:e5:ba:90:4d:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07D6388316655597AEA703AEBFDD2869F80A8984 Validity Not Before: Apr 17 15:26:49 2025 GMT Not After : Apr 20 19:02:49 2025 GMT Subject: CN=A93F298A2F16498ECD5A3177B758AAD7C6D3BB8F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:d8:e0:b5:ac:4d:c8:bc:9b:8e:4c:ae:d0:11: e7:ab:2c:18:a7:e2:ee:b6:a8:0e:31:db:0d:3e:34: 52:ba:ff:6f:eb:af:82:96:33:08:a8:9e:1a:f4:db: ab:93:3b:f6:b4:ac:92:1b:b2:b8:36:7f:a6:08:35: ab:a2:f2:b2:60:a4:1a:03:9c:93:66:3e:63:81:0a: 88:cc:f0:0e:af:22:d5:be:7e:3d:16:05:fb:35:ab: 86:4f:27:9e:95:c4:8a:0d:e1:f8:66:09:62:42:cd: 35:1e:5e:2d:6e:35:b0:14:d8:a6:35:dc:00:1b:18: 45:f2:f8:1d:ea:8d:42:09:6d:c6:7c:77:44:a9:5d: 36:06:b8:a5:25:fd:19:cf:62:45:4a:07:be:54:c1: 8b:66:e5:c9:9d:96:8a:3e:04:b3:06:6f:84:c2:43: 69:c9:ab:11:4e:d3:47:4e:1f:f3:80:7c:7a:e2:11: 31:8b:71:e1:99:a0:c7:f5:47:59:91:18:d0:60:a3: 9d:6d:c5:94:89:e7:ca:2c:73:dc:3e:93:fe:40:52: a6:8b:1d:6d:4c:cf:38:d8:56:1d:11:79:e3:3e:3b: aa:3e:26:df:67:df:75:c4:9c:b5:3a:48:69:6c:4d: 72:5a:b8:da:3f:43:45:50:33:a9:7f:42:a1:f5:6a: c8:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:3F:29:8A:2F:16:49:8E:CD:5A:31:77:B7:58:AA:D7:C6:D3:BB:8F X509v3 Authority Key Identifier: keyid:07:D6:38:83:16:65:55:97:AE:A7:03:AE:BF:DD:28:69:F8:0A:89:84 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/07D6388316655597AEA703AEBFDD2869F80A8984.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07D6388316655597AEA703AEBFDD2869F80A8984.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/55ba47ce-3992-431c-abf1-681a4cc8ec48/0/07D6388316655597AEA703AEBFDD2869F80A8984.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:5a:c2:43:78:4e:0e:5e:dd:74:ff:de:0a:8f:03:c9:5b:f3: 27:22:cb:92:a8:57:1e:e5:2d:96:1e:00:55:0a:57:c4:e5:60: e8:70:97:a8:19:64:14:9d:85:f6:ec:19:12:65:e2:d9:29:d5: 10:dc:62:57:ad:f4:6f:f0:09:53:01:46:6a:c7:ed:de:47:ec: dc:7c:76:e6:28:df:d5:13:e8:df:03:0b:c5:26:65:b0:71:ec: 24:01:3a:3c:11:5f:d9:23:28:aa:8a:0b:78:bc:35:ae:a6:d7: 54:de:9a:73:69:92:ff:e4:66:ae:73:fb:ae:90:b4:f3:79:49: aa:c9:d6:f5:f1:3a:c0:4a:c1:57:7b:60:67:e5:6d:41:52:1d: a0:c4:57:5a:42:79:6c:9d:97:58:f7:ef:88:1f:99:53:b1:e8: 19:79:23:e0:9f:41:aa:f5:15:60:03:aa:84:0a:20:0d:45:fc: 62:0b:9e:8f:39:f0:38:e2:7a:65:c7:78:c7:94:03:44:b1:39: 0c:cf:ee:e7:6e:ca:2f:a6:99:cc:9a:aa:5c:dc:46:e1:10:39: 15:51:39:92:37:51:5c:b6:2c:02:46:8a:13:f4:75:a8:21:d4: aa:24:9e:dd:aa:89:c4:55:e2:63:66:c2:a8:21:7c:da:59:36: 5a:88:2e:46 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPOj1ZBG7vVXj+onW389X5bqQTb8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDdENjM4ODMxNjY1NTU5N0FFQTcwM0FFQkZERDI4NjlG ODBBODk4NDAeFw0yNTA0MTcxNTI2NDlaFw0yNTA0MjAxOTAyNDlaMDMxMTAvBgNV BAMTKEE5M0YyOThBMkYxNjQ5OEVDRDVBMzE3N0I3NThBQUQ3QzZEM0JCOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDK2OC1rE3IvJuOTK7QEeerLBin 4u62qA4x2w0+NFK6/2/rr4KWMwionhr026uTO/a0rJIbsrg2f6YINaui8rJgpBoD nJNmPmOBCojM8A6vItW+fj0WBfs1q4ZPJ56VxIoN4fhmCWJCzTUeXi1uNbAU2KY1 3AAbGEXy+B3qjUIJbcZ8d0SpXTYGuKUl/RnPYkVKB75UwYtm5cmdloo+BLMGb4TC Q2nJqxFO00dOH/OAfHriETGLceGZoMf1R1mRGNBgo51txZSJ58osc9w+k/5AUqaL HW1MzzjYVh0ReeM+O6o+Jt9n33XEnLU6SGlsTXJauNo/Q0VQM6l/QqH1asgpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqT8pii8WSY7NWjF3t1iq18bTu48wHwYDVR0j BBgwFoAUB9Y4gxZlVZeupwOuv90oafgKiYQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NWJhNDdjZS0zOTkyLTQzMWMtYWJmMS02ODFhNGNjOGVjNDgvMC8wN0Q2Mzg4MzE2 NjU1NTk3QUVBNzAzQUVCRkREMjg2OUY4MEE4OTg0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDdENjM4ODMxNjY1NTU5N0FFQTcwM0FFQkZERDI4NjlGODBB ODk4NC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTViYTQ3Y2UtMzk5Mi00MzFjLWFi ZjEtNjgxYTRjYzhlYzQ4LzAvMDdENjM4ODMxNjY1NTU5N0FFQTcwM0FFQkZERDI4 NjlGODBBODk4NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIxawkN4Tg5e3XT/3gqPA8lb8yciy5KoVx7l LZYeAFUKV8TlYOhwl6gZZBSdhfbsGRJl4tkp1RDcYlet9G/wCVMBRmrH7d5H7Nx8 duYo39UT6N8DC8UmZbBx7CQBOjwRX9kjKKqKC3i8Na6m11TemnNpkv/kZq5z+66Q tPN5SarJ1vXxOsBKwVd7YGflbUFSHaDEV1pCeWydl1j374gfmVOx6Bl5I+CfQar1 FWADqoQKIA1F/GILno858DjiemXHeMeUA0SxOQzP7uduyi+mmcyaqlzcRuEQORVR OZI3UVy2LAJGihP0dagh1Koknt2qicRV4mNmwqghfNpZNlqILkY= -----END CERTIFICATE-----Generated at Sat Apr 19 12:33:12 2025 by rpki-client