$ rpki-client -vvf repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft File: 407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft (raw, json) Hash identifier: xf3z7aaEjvqfUnn0O8xTfRb+09Z2s5XkovkASWUCm9w= Subject key identifier: F3:21:81:A1:88:D1:0E:FC:5B:A8:D4:A6:DE:32:9B:E9:6A:A5:43:3C Authority key identifier: 40:7B:7C:7E:E0:9E:DB:AA:0A:35:25:E2:09:FF:8E:93:E4:86:53:C8 Certificate issuer: /CN=407B7C7EE09EDBAA0A3525E209FF8E93E48653C8 Certificate serial: 5386E30BCCC989C97DA569BFFABECC7F3E7F9C72 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft Manifest number: 70 Signing time: Sat 05 Apr 2025 12:22:17 +0000 Manifest this update: Sat 05 Apr 2025 12:17:17 +0000 Manifest next update: Tue 08 Apr 2025 23:58:17 +0000 Files and hashes: 1: 407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.crl (hash: aBLuqB2j0zdBhOutSI+Bp3yWhfPhlASOWbyA6VR6wsk=) 2: 3130332e3136302e3230322e302f32342d3234203d3e20313431363036.roa (hash: haTibr3tt22zSchSW2+rcU9iqZLSDGd/xcHfzqqfZOo=) 3: 3130332e3136302e3230322e302f32332d3233203d3e20313431363036.roa (hash: Gj+dL3k6BLOV8ougeJn8Z24XkFylft6ZOL9dKAW0YtU=) 4: 3130332e3136302e3230332e302f32342d3234203d3e20313431363036.roa (hash: 2o2Ekkt+3oPedQ6t7WSvFM6gdfyWmdr+vQqMDBCvSgE=) 5: 323030313a6466313a366263303a3a2f34382d3438203d3e20313431363036.roa (hash: ELx/Mo51D3GSaEDSyBhL7pvfhZmjCeLx8uPSmWVwFVo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.crl rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:86:e3:0b:cc:c9:89:c9:7d:a5:69:bf:fa:be:cc:7f:3e:7f:9c:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=407B7C7EE09EDBAA0A3525E209FF8E93E48653C8 Validity Not Before: Apr 5 12:17:17 2025 GMT Not After : Apr 8 23:58:17 2025 GMT Subject: CN=F32181A188D10EFC5BA8D4A6DE329BE96AA5433C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:9e:5a:cb:fb:7f:73:33:21:9d:0f:8a:a2:68: 1d:4c:30:bc:be:0b:cb:e1:58:44:2c:de:36:ee:24: 41:b1:69:31:03:2b:cb:d5:7f:96:1d:8c:52:57:7c: 1e:8f:a3:cc:40:9c:3d:28:96:0c:08:66:5d:77:35: fb:c2:8c:f9:2a:d3:01:79:23:df:40:f7:0b:f2:3b: ea:0c:a1:84:a3:ee:0f:15:77:77:78:89:5f:d9:c2: d5:bd:aa:4b:12:c9:d9:a4:3b:05:7f:f8:47:b0:4c: a9:0c:d1:41:d0:a3:26:3e:18:3e:c0:e4:ab:a3:64: c5:ae:c5:56:04:b3:5d:ea:1a:6d:64:10:db:f2:5d: 90:d7:99:b2:c5:95:d6:14:f9:6a:f4:13:7e:30:5e: b3:eb:b4:64:3b:60:d9:56:34:fb:7e:05:a0:1a:6e: fc:20:97:96:50:33:be:b9:24:e7:3d:73:b1:a7:11: b3:c3:58:0e:32:f5:f7:e7:ff:f6:45:7b:cf:b9:e4: 9f:63:34:0d:12:41:68:68:69:af:e1:8f:1e:52:ea: df:02:d8:a8:b6:da:00:35:84:4a:39:68:d1:53:1b: b7:c7:1b:d3:af:71:92:4c:57:c4:5f:2d:7a:82:18: 23:fd:dc:2d:c6:31:8b:cd:72:69:9a:e7:85:20:d4: 94:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:21:81:A1:88:D1:0E:FC:5B:A8:D4:A6:DE:32:9B:E9:6A:A5:43:3C X509v3 Authority Key Identifier: keyid:40:7B:7C:7E:E0:9E:DB:AA:0A:35:25:E2:09:FF:8E:93:E4:86:53:C8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d64bf6a-4302-460f-9669-09a50a73af1a/0/407B7C7EE09EDBAA0A3525E209FF8E93E48653C8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:cc:86:81:68:fe:24:a5:09:a9:e9:93:92:ad:73:e4:b2:82: 54:e3:47:f0:11:9b:d0:f6:24:8e:16:86:d7:f2:65:a3:90:dd: 04:b9:47:75:50:15:16:0d:28:08:90:eb:2d:f7:48:67:b3:99: bc:c6:e0:0f:96:ae:2d:86:8e:46:f3:fe:40:c2:f7:61:da:6b: 9f:01:8c:16:c7:a8:6a:3c:2e:f2:f5:9e:6c:c0:cf:5a:ed:78: 81:ef:ed:53:c1:11:35:95:86:85:74:06:93:1c:0a:e1:83:b4: 12:34:e1:34:ed:62:91:3c:e2:4f:74:ea:ae:52:39:a7:d7:3c: ff:cd:23:46:f4:24:73:68:8d:41:ed:90:21:f6:e0:9e:14:14: ac:e4:0b:8b:6e:60:73:ae:39:7e:81:1c:a4:69:33:00:20:0b: da:fa:83:ca:92:56:66:7f:52:b6:4d:94:76:95:47:7e:53:4c: 79:4a:81:5e:3d:37:c9:2a:36:02:d6:d9:70:76:e1:9f:fe:c8: 0a:34:c3:31:7a:31:14:e6:3c:59:f2:59:5c:ed:2a:5d:91:de: d8:4a:d7:f0:3e:ac:7d:98:99:76:6e:79:3e:62:f7:cc:6a:5e: 59:f8:30:4a:3e:3c:de:e5:69:92:48:b3:1a:7e:1f:43:97:12: 88:73:0c:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU4bjC8zJicl9pWm/+r7Mfz5/nHIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA3QjdDN0VFMDlFREJBQTBBMzUyNUUyMDlGRjhFOTNF NDg2NTNDODAeFw0yNTA0MDUxMjE3MTdaFw0yNTA0MDgyMzU4MTdaMDMxMTAvBgNV BAMTKEYzMjE4MUExODhEMTBFRkM1QkE4RDRBNkRFMzI5QkU5NkFBNTQzM0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCznlrL+39zMyGdD4qiaB1MMLy+ C8vhWEQs3jbuJEGxaTEDK8vVf5YdjFJXfB6Po8xAnD0olgwIZl13NfvCjPkq0wF5 I99A9wvyO+oMoYSj7g8Vd3d4iV/ZwtW9qksSydmkOwV/+EewTKkM0UHQoyY+GD7A 5KujZMWuxVYEs13qGm1kENvyXZDXmbLFldYU+Wr0E34wXrPrtGQ7YNlWNPt+BaAa bvwgl5ZQM765JOc9c7GnEbPDWA4y9ffn//ZFe8+55J9jNA0SQWhoaa/hjx5S6t8C 2Ki22gA1hEo5aNFTG7fHG9OvcZJMV8RfLXqCGCP93C3GMYvNcmma54Ug1JSrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8yGBoYjRDvxbqNSm3jKb6WqlQzwwHwYDVR0j BBgwFoAUQHt8fuCe26oKNSXiCf+Ok+SGU8gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZDY0YmY2YS00MzAyLTQ2MGYtOTY2OS0wOWE1MGE3M2FmMWEvMC80MDdCN0M3RUUw OUVEQkFBMEEzNTI1RTIwOUZGOEU5M0U0ODY1M0M4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNDA3QjdDN0VFMDlFREJBQTBBMzUyNUUyMDlGRjhFOTNFNDg2 NTNDOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmQ2NGJmNmEtNDMwMi00NjBmLTk2 NjktMDlhNTBhNzNhZjFhLzAvNDA3QjdDN0VFMDlFREJBQTBBMzUyNUUyMDlGRjhF OTNFNDg2NTNDOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADbMhoFo/iSlCanpk5Ktc+SyglTjR/ARm9D2 JI4WhtfyZaOQ3QS5R3VQFRYNKAiQ6y33SGezmbzG4A+Wri2Gjkbz/kDC92Haa58B jBbHqGo8LvL1nmzAz1rteIHv7VPBETWVhoV0BpMcCuGDtBI04TTtYpE84k906q5S OafXPP/NI0b0JHNojUHtkCH24J4UFKzkC4tuYHOuOX6BHKRpMwAgC9r6g8qSVmZ/ UrZNlHaVR35TTHlKgV49N8kqNgLW2XB24Z/+yAo0wzF6MRTmPFnyWVztKl2R3thK 1/A+rH2YmXZueT5i98xqXln4MEo+PN7laZJIsxp+H0OXEohzDHQ= -----END CERTIFICATE-----Generated at Sat Apr 5 23:20:48 2025 by rpki-client