$ rpki-client -vvf repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft File: A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft (raw, json) Hash identifier: ziYgl3atHn8fcIIi2flKRN4I9g4AfWv33diyHndznJ0= Subject key identifier: E1:38:59:86:00:FC:A0:22:16:DD:D0:F3:27:58:9E:5A:96:C9:BA:91 Authority key identifier: A7:D5:3E:B5:45:1E:AF:8A:CA:B6:38:48:7F:BD:EB:40:17:7A:0F:8A Certificate issuer: /CN=A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A Certificate serial: 7B8C1A205F0EA596CEE981E757CE908880BEC52D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft Manifest number: 0178 Signing time: Wed 09 Apr 2025 07:41:26 +0000 Manifest this update: Wed 09 Apr 2025 07:36:26 +0000 Manifest next update: Sat 12 Apr 2025 13:58:26 +0000 Files and hashes: 1: 3130332e3139302e36332e302f32342d3234203d3e20313439383938.roa (hash: 2CVr+NqiEqGGwrJfck3G7ZB8HhulLnTSsHN6lGbSZ/c=) 2: 3130332e3139302e36322e302f32342d3234203d3e20313439383938.roa (hash: 2ja7FKvmu0FlqkDf7LuG1Z7B59LI4ArGIpEzwSMjxRg=) 3: 3130332e3139302e36322e302f32332d3234203d3e20313439383938.roa (hash: Cp2AGXmtWxhdOX8t8c9ZWl5s1GCXbA0uZVtL40w4/7g=) 4: A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.crl (hash: P8haTul5WP06u8PnZaYD2c+Fm1sS0kmi5831s5a14AY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.crl rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 13:58:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:8c:1a:20:5f:0e:a5:96:ce:e9:81:e7:57:ce:90:88:80:be:c5:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A Validity Not Before: Apr 9 07:36:26 2025 GMT Not After : Apr 12 13:58:26 2025 GMT Subject: CN=E138598600FCA02216DDD0F327589E5A96C9BA91 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:4f:a0:0f:27:1a:cd:9b:1c:51:6f:1f:c7:b8: 58:d7:43:74:b3:c0:bc:32:eb:5e:be:d6:f2:6b:7c: fd:9b:6b:37:f7:2f:8c:16:88:ca:43:cb:a9:e6:21: 7b:00:ef:98:90:fd:0b:3a:14:7d:fa:8f:e8:bd:80: c1:a6:d1:27:bb:c5:1b:e6:aa:ec:00:15:34:cf:c7: 41:f5:e5:7a:9e:26:d6:6b:6e:01:d9:87:90:a0:2b: 89:8b:fd:f4:11:29:32:9e:46:20:47:5f:54:b3:57: ef:73:01:b2:38:82:a0:0a:27:24:f6:53:4f:63:62: c6:5c:1b:d4:bc:3d:9f:67:3e:37:b6:a8:a7:ac:28: c9:d6:46:76:bd:be:10:93:9f:c2:33:9c:c4:4e:a5: 85:ca:8c:f3:15:9d:ef:d6:b0:ff:c8:96:e7:82:9f: 82:57:9c:1b:00:56:3a:82:61:9f:8a:ee:64:d9:ea: 43:da:2a:ed:39:80:25:f6:02:d6:0a:3b:aa:c1:6a: 28:e4:b0:be:c2:78:13:e8:92:77:f8:c5:18:f0:40: 1f:24:07:a4:88:76:74:56:62:df:5f:ff:28:26:26: 32:50:53:03:6d:7f:57:7d:98:cb:75:69:a6:35:d9: 94:93:0b:74:e9:a0:b5:5e:ea:4f:e5:16:cd:b0:a1: 49:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:38:59:86:00:FC:A0:22:16:DD:D0:F3:27:58:9E:5A:96:C9:BA:91 X509v3 Authority Key Identifier: keyid:A7:D5:3E:B5:45:1E:AF:8A:CA:B6:38:48:7F:BD:EB:40:17:7A:0F:8A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:11:4e:ad:ec:fd:ac:8e:95:f7:1d:ac:92:7d:13:b8:ea:f5: 55:f9:9a:98:88:51:41:bb:a1:7c:25:21:d1:fb:f2:1b:6c:9d: 15:d2:9d:f4:9a:65:ae:11:0e:94:77:9b:f0:ec:8f:6c:8a:76: 68:0d:6f:de:d2:3b:9c:ec:43:51:c8:1e:93:17:c2:86:74:c7: 63:1d:b0:b1:ca:ce:55:08:07:80:07:2f:7e:58:ff:7c:0a:6b: ca:ff:f5:7a:40:0c:d2:85:29:1a:3e:d4:5b:23:cf:88:38:ac: 20:94:0e:ed:f7:25:30:c3:60:12:4f:eb:e1:ec:2d:00:99:6f: a4:35:10:d6:90:f1:65:56:9c:a6:45:fb:a6:0c:51:e3:16:78: 37:63:8a:3d:c1:b1:c4:26:31:37:59:32:e4:52:b4:67:3e:5e: 48:94:0d:66:a9:75:ed:55:eb:8f:5c:5c:e0:2d:e4:04:0b:ea: 02:a0:51:93:ff:c0:58:e7:92:c4:96:ae:f7:57:dd:32:9f:3f: 4d:cf:f7:15:77:09:f8:d4:5f:f8:02:e8:3c:06:f1:21:e7:49: 38:ef:0b:fe:2d:be:3b:d4:61:77:38:ee:1f:ba:dc:39:97:9b: fd:c3:71:a4:11:59:4e:53:0e:72:5c:f2:08:65:9a:56:65:5b: 24:5b:24:95 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe4waIF8OpZbO6YHnV86QiIC+xS0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTdENTNFQjU0NTFFQUY4QUNBQjYzODQ4N0ZCREVCNDAx NzdBMEY4QTAeFw0yNTA0MDkwNzM2MjZaFw0yNTA0MTIxMzU4MjZaMDMxMTAvBgNV BAMTKEUxMzg1OTg2MDBGQ0EwMjIxNkRERDBGMzI3NTg5RTVBOTZDOUJBOTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjT6APJxrNmxxRbx/HuFjXQ3Sz wLwy616+1vJrfP2bazf3L4wWiMpDy6nmIXsA75iQ/Qs6FH36j+i9gMGm0Se7xRvm quwAFTTPx0H15XqeJtZrbgHZh5CgK4mL/fQRKTKeRiBHX1SzV+9zAbI4gqAKJyT2 U09jYsZcG9S8PZ9nPje2qKesKMnWRna9vhCTn8IznMROpYXKjPMVne/WsP/IlueC n4JXnBsAVjqCYZ+K7mTZ6kPaKu05gCX2AtYKO6rBaijksL7CeBPoknf4xRjwQB8k B6SIdnRWYt9f/ygmJjJQUwNtf1d9mMt1aaY12ZSTC3TpoLVe6k/lFs2woUlFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4ThZhgD8oCIW3dDzJ1ieWpbJupEwHwYDVR0j BBgwFoAUp9U+tUUer4rKtjhIf73rQBd6D4owDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 NjIwYjQyMy1kZDVkLTQ0OGYtYmJkMy0wNDUzMGVjMTcxNWQvMC9BN0Q1M0VCNTQ1 MUVBRjhBQ0FCNjM4NDg3RkJERUI0MDE3N0EwRjhBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTdENTNFQjU0NTFFQUY4QUNBQjYzODQ4N0ZCREVCNDAxNzdB MEY4QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzYyMGI0MjMtZGQ1ZC00NDhmLWJi ZDMtMDQ1MzBlYzE3MTVkLzAvQTdENTNFQjU0NTFFQUY4QUNBQjYzODQ4N0ZCREVC NDAxNzdBMEY4QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJIRTq3s/ayOlfcdrJJ9E7jq9VX5mpiIUUG7 oXwlIdH78htsnRXSnfSaZa4RDpR3m/Dsj2yKdmgNb97SO5zsQ1HIHpMXwoZ0x2Md sLHKzlUIB4AHL35Y/3wKa8r/9XpADNKFKRo+1Fsjz4g4rCCUDu33JTDDYBJP6+Hs LQCZb6Q1ENaQ8WVWnKZF+6YMUeMWeDdjij3BscQmMTdZMuRStGc+XkiUDWapde1V 649cXOAt5AQL6gKgUZP/wFjnksSWrvdX3TKfP03P9xV3CfjUX/gC6DwG8SHnSTjv C/4tvjvUYXc47h+63DmXm/3DcaQRWU5TDnJc8ghlmlZlWyRbJJU= -----END CERTIFICATE-----Generated at Thu Apr 10 04:20:44 2025 by rpki-client