$ rpki-client -vvf repo-rpki.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.mft File: 7767CF49D7661AFAB45870341D88D2F3D9A86CE4.mft (raw, json) Hash identifier: ySgD5YvvCgGTr7MSNPmWDSTwI+y1NPQPR99zmJsZ43Q= Subject key identifier: E4:33:C4:D8:5F:C2:74:45:45:AE:29:09:66:56:8C:11:E8:31:8A:F5 Authority key identifier: 77:67:CF:49:D7:66:1A:FA:B4:58:70:34:1D:88:D2:F3:D9:A8:6C:E4 Certificate issuer: /CN=7767CF49D7661AFAB45870341D88D2F3D9A86CE4 Certificate serial: 7C2749EC4531474EC81F1240FC01D5E1E2467136 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.mft Manifest number: 01E8 Signing time: Thu 03 Apr 2025 16:31:39 +0000 Manifest this update: Thu 03 Apr 2025 16:26:39 +0000 Manifest next update: Sun 06 Apr 2025 16:32:39 +0000 Files and hashes: 1: 3130332e3137342e3137342e302f32342d3234203d3e20313437313031.roa (hash: mg4/qvSGbk0zDsf0Rx7OQC6CJE6sN8kDzPsI7vMCT4w=) 2: 7767CF49D7661AFAB45870341D88D2F3D9A86CE4.crl (hash: nBViMOiOm5iTlwA19yeONZOLszegQdONYM6bGMVMKVQ=) 3: 3130332e3137342e3137342e302f32332d3233203d3e20313437313031.roa (hash: qjco1QI2sNnouAlC+BzAGiX63kc+i+LJElEHwxqlyT4=) 4: 3130332e3137342e3137352e302f32342d3234203d3e20313437313031.roa (hash: hiVWfFJS+ICMc15b4VDK2HR8eWbWj/hyT+N05K9QMHE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.crl rsync://repo-rpki.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 16:32:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:27:49:ec:45:31:47:4e:c8:1f:12:40:fc:01:d5:e1:e2:46:71:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7767CF49D7661AFAB45870341D88D2F3D9A86CE4 Validity Not Before: Apr 3 16:26:39 2025 GMT Not After : Apr 6 16:32:39 2025 GMT Subject: CN=E433C4D85FC2744545AE290966568C11E8318AF5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:49:ab:eb:2c:f3:f2:f2:95:67:36:24:26:8e: 8a:6f:02:97:74:f8:2a:f0:30:98:f1:87:f2:54:52: 39:09:f6:4b:71:60:a5:57:0a:ec:60:db:f1:d0:e7: ee:1b:3b:af:30:d6:e4:e7:95:5e:c3:55:b7:f5:70: 04:10:f5:c7:27:d6:97:24:b5:77:3f:5b:18:95:f1: 2e:75:51:f2:7a:8c:45:30:ca:d5:1d:74:3e:10:71: e9:8a:23:dc:05:d0:15:52:dd:09:41:9c:ee:d0:f1: 3e:14:76:e1:af:98:34:39:6d:ed:80:62:c2:69:60: 28:29:cb:b2:ed:51:3a:4d:e2:25:7d:e8:92:89:8c: 1a:8f:2c:4a:14:0e:f5:b7:a2:49:09:78:64:65:a2: 1c:40:6e:9d:6e:87:a8:7f:f6:b3:0f:a5:67:3b:39: ce:6e:98:2c:05:b2:13:aa:68:6b:5e:62:af:08:16: 7d:15:84:a9:78:40:85:24:19:99:b6:d6:52:e0:80: 24:30:fb:66:76:fd:56:08:8d:f8:56:c0:93:3a:a7: e9:da:f0:65:8b:a5:a4:50:50:f3:fc:23:3f:2f:1c: 70:a0:71:3c:53:38:4a:40:21:be:89:09:70:1c:11: a7:89:85:9d:1a:35:3e:7b:1b:ac:1f:a0:e4:07:33: bb:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:33:C4:D8:5F:C2:74:45:45:AE:29:09:66:56:8C:11:E8:31:8A:F5 X509v3 Authority Key Identifier: keyid:77:67:CF:49:D7:66:1A:FA:B4:58:70:34:1D:88:D2:F3:D9:A8:6C:E4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a70d44e-0f70-45a3-af04-81f429db3a5d/0/7767CF49D7661AFAB45870341D88D2F3D9A86CE4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3d:7d:3c:bc:4f:3b:36:c2:a5:9d:01:59:f3:22:3c:9d:9b:1b: 7a:cd:63:ef:b2:6c:53:72:e9:ce:cb:38:00:7b:1a:1c:e2:c2: bb:58:af:66:42:27:30:a5:64:13:25:42:e5:8d:51:87:27:c4: 52:c5:6b:5d:53:c3:22:cf:4f:15:14:51:86:ec:24:7d:fb:2c: 72:1d:23:5c:fe:75:c6:3f:93:63:9a:fe:8c:44:69:a4:b5:e5: c5:67:12:51:c1:63:2c:cf:2f:ec:5e:d2:b5:6a:a0:fc:db:56: f6:2c:d5:9e:b0:00:39:48:8f:ea:d3:49:06:d1:08:b0:c6:3f: 45:0f:56:c8:64:2d:40:da:00:42:9b:1d:30:91:b1:78:1e:61: e8:35:8d:a3:f8:a0:9f:59:98:bf:5c:60:08:61:3b:6e:f1:50: a9:cf:00:ff:3b:4a:18:c2:14:c5:3d:6c:2e:2a:62:61:ec:4a: 3b:58:6c:c3:db:91:79:a3:2e:ce:0c:4c:8e:e1:27:c7:ec:aa: bf:ee:12:62:43:2a:8d:5a:bd:07:25:c5:d7:e7:62:a5:68:91: d4:2e:92:4a:e0:27:4f:d1:a2:69:21:71:8e:3f:c3:41:68:6f: 05:63:5e:75:2a:fb:36:18:b1:1f:10:a6:9e:fc:7b:09:52:e8: 57:12:cc:fb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfCdJ7EUxR07IHxJA/AHV4eJGcTYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNzc2N0NGNDlENzY2MUFGQUI0NTg3MDM0MUQ4OEQyRjNE OUE4NkNFNDAeFw0yNTA0MDMxNjI2MzlaFw0yNTA0MDYxNjMyMzlaMDMxMTAvBgNV BAMTKEU0MzNDNEQ4NUZDMjc0NDU0NUFFMjkwOTY2NTY4QzExRTgzMThBRjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDeSavrLPPy8pVnNiQmjopvApd0 +CrwMJjxh/JUUjkJ9ktxYKVXCuxg2/HQ5+4bO68w1uTnlV7DVbf1cAQQ9ccn1pck tXc/WxiV8S51UfJ6jEUwytUddD4QcemKI9wF0BVS3QlBnO7Q8T4UduGvmDQ5be2A YsJpYCgpy7LtUTpN4iV96JKJjBqPLEoUDvW3okkJeGRlohxAbp1uh6h/9rMPpWc7 Oc5umCwFshOqaGteYq8IFn0VhKl4QIUkGZm21lLggCQw+2Z2/VYIjfhWwJM6p+na 8GWLpaRQUPP8Iz8vHHCgcTxTOEpAIb6JCXAcEaeJhZ0aNT57G6wfoOQHM7v3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5DPE2F/CdEVFrikJZlaMEegxivUwHwYDVR0j BBgwFoAUd2fPSddmGvq0WHA0HYjS89mobOQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTcwZDQ0ZS0wZjcwLTQ1YTMtYWYwNC04MWY0MjlkYjNhNWQvMC83NzY3Q0Y0OUQ3 NjYxQUZBQjQ1ODcwMzQxRDg4RDJGM0Q5QTg2Q0U0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvNzc2N0NGNDlENzY2MUFGQUI0NTg3MDM0MUQ4OEQyRjNEOUE4 NkNFNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2E3MGQ0NGUtMGY3MC00NWEzLWFm MDQtODFmNDI5ZGIzYTVkLzAvNzc2N0NGNDlENzY2MUFGQUI0NTg3MDM0MUQ4OEQy RjNEOUE4NkNFNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD19PLxPOzbCpZ0BWfMiPJ2bG3rNY++ybFNy 6c7LOAB7GhziwrtYr2ZCJzClZBMlQuWNUYcnxFLFa11TwyLPTxUUUYbsJH37LHId I1z+dcY/k2Oa/oxEaaS15cVnElHBYyzPL+xe0rVqoPzbVvYs1Z6wADlIj+rTSQbR CLDGP0UPVshkLUDaAEKbHTCRsXgeYeg1jaP4oJ9ZmL9cYAhhO27xUKnPAP87ShjC FMU9bC4qYmHsSjtYbMPbkXmjLs4MTI7hJ8fsqr/uEmJDKo1avQclxdfnYqVokdQu kkrgJ0/RomkhcY4/w0FobwVjXnUq+zYYsR8Qpp78ewlS6FcSzPs= -----END CERTIFICATE-----Generated at Sat Apr 5 16:38:39 2025 by rpki-client