$ rpki-client -vvf repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft File: 847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft (raw, json) Hash identifier: EwZBHK3eG49h/u7JDXnW0DU5IZvrL4qMqbBocTkK2x8= Subject key identifier: 16:A2:DC:95:CE:E7:C3:AA:63:AE:6C:E9:5D:25:F7:CF:3D:5C:25:AA Authority key identifier: 84:7E:BE:D5:D2:D5:9F:7F:1F:79:1C:B9:C0:DF:A9:33:AE:F0:67:C5 Certificate issuer: /CN=847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5 Certificate serial: 4D37C2F380EDB3443D1FB5245B8F8EB5A554C0DD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft Manifest number: 04DA Signing time: Wed 04 Jun 2025 07:22:13 +0000 Manifest this update: Wed 04 Jun 2025 07:17:13 +0000 Manifest next update: Sat 07 Jun 2025 13:43:13 +0000 Files and hashes: 1: 3130332e3135302e3231382e302f32342d3234203d3e20313430343031.roa (hash: 6KEFG7gOeKI7fxJfx+u8jmdjQjUOjVjYS1O6prR+8Mc=) 2: 3130332e3135302e3231392e302f32342d3234203d3e20313430343031.roa (hash: vYLyQrACcRO6ie/Wp6rrQI2WVCD+CROuBHLk0caAF98=) 3: 847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.crl (hash: m9AC8Ck9UzmKYTw+mF2sUa31Jra1bLkHgsQ4X5PrM7E=) 4: 3130332e3135302e3231382e302f32332d3233203d3e20313430343031.roa (hash: fUNLn/gqrM2Xntbspu+zD9nUYetH3QwyuJY+iLTQn+0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.crl rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 13:43:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:37:c2:f3:80:ed:b3:44:3d:1f:b5:24:5b:8f:8e:b5:a5:54:c0:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5 Validity Not Before: Jun 4 07:17:13 2025 GMT Not After : Jun 7 13:43:13 2025 GMT Subject: CN=16A2DC95CEE7C3AA63AE6CE95D25F7CF3D5C25AA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3a:f6:17:15:20:59:43:28:58:e8:0b:e1:a4: aa:e8:47:39:8a:c2:b1:e9:9c:2c:44:e5:b0:15:b8: 64:51:ba:99:a8:ec:cd:02:39:21:e6:2b:c4:da:c2: 2c:27:a5:70:ff:06:6e:fe:d7:00:34:bc:27:39:92: d2:72:07:16:fe:90:64:da:c7:09:58:7a:e5:e6:c2: b2:02:27:84:79:3a:3c:83:34:f6:d7:52:4b:ba:53: 0c:47:0b:f9:5c:b8:58:63:59:4a:b0:a4:d9:ad:21: 73:63:e1:e0:5f:e6:72:dc:75:e9:c0:4a:2b:07:eb: 80:54:6c:4e:60:32:a4:e1:41:47:5a:4d:73:27:01: 44:c0:1c:de:7e:a5:02:d6:28:8d:75:ea:44:72:17: b9:ea:c3:40:2e:87:f9:76:6a:f5:c0:3d:76:42:72: 68:ac:e4:9b:d9:b9:da:e2:d6:7a:6e:d7:01:0f:55: 10:1e:4d:a4:b1:74:84:44:2e:3d:f1:20:10:54:5a: 44:9e:5a:5e:76:f5:3f:a7:db:6a:78:e6:66:40:5e: 49:aa:72:53:6c:c2:80:d0:80:06:c3:c7:3b:1d:c2: ff:5a:71:da:f7:89:6c:85:4d:1b:03:a7:1d:93:47: 97:ac:34:dd:f7:eb:d3:e9:fd:52:6f:4f:60:e5:35: 90:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:A2:DC:95:CE:E7:C3:AA:63:AE:6C:E9:5D:25:F7:CF:3D:5C:25:AA X509v3 Authority Key Identifier: keyid:84:7E:BE:D5:D2:D5:9F:7F:1F:79:1C:B9:C0:DF:A9:33:AE:F0:67:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7b5d72f3-2db2-4bcc-9f77-d1442b632d04/0/847EBED5D2D59F7F1F791CB9C0DFA933AEF067C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:97:2f:e1:6a:c2:9d:cb:1f:2e:8c:37:f2:7e:38:cd:9a:e5: 2c:ca:86:8b:41:ef:71:77:3e:74:4e:28:50:86:00:28:0b:1f: 13:6b:d8:5a:46:7b:0f:9e:8e:02:63:ec:30:f7:2b:7d:ab:d7: 24:4c:b6:69:4e:d3:df:90:9d:ef:aa:e7:dc:7b:14:a5:9b:50: f7:f3:f1:1b:b0:e0:f8:bb:41:2b:a8:4a:57:93:20:4b:a3:5e: 99:ad:57:3e:30:bb:f5:ef:b5:73:e4:73:61:c6:3a:4f:9b:ad: 9d:00:d7:53:02:3c:a8:1d:68:91:58:1c:6d:eb:37:75:b6:8b: 42:5c:1e:42:f4:33:e4:b0:ea:67:df:95:c3:9c:d0:32:e5:b5: a6:ce:90:0d:9a:99:5a:44:3c:a4:9a:76:00:06:ec:f8:61:0e: 0e:1b:ba:5a:6a:36:d9:85:39:b6:27:3d:4f:3e:26:fd:69:a2: c2:62:91:da:b8:10:62:0f:37:8e:70:69:72:a0:a7:f8:6c:25: f4:71:f2:ad:93:26:51:49:0e:98:8c:74:5b:a2:71:86:f9:cd: 7e:13:69:1d:13:8d:3c:48:3d:07:b7:18:8f:0a:81:af:09:b9: 10:ef:2a:01:13:78:ce:dd:78:9c:9b:b4:2e:44:92:d4:bc:92: 97:df:60:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTTfC84Dts0Q9H7UkW4+OtaVUwN0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ3RUJFRDVEMkQ1OUY3RjFGNzkxQ0I5QzBERkE5MzNB RUYwNjdDNTAeFw0yNTA2MDQwNzE3MTNaFw0yNTA2MDcxMzQzMTNaMDMxMTAvBgNV BAMTKDE2QTJEQzk1Q0VFN0MzQUE2M0FFNkNFOTVEMjVGN0NGM0Q1QzI1QUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3OvYXFSBZQyhY6AvhpKroRzmK wrHpnCxE5bAVuGRRupmo7M0COSHmK8TawiwnpXD/Bm7+1wA0vCc5ktJyBxb+kGTa xwlYeuXmwrICJ4R5OjyDNPbXUku6UwxHC/lcuFhjWUqwpNmtIXNj4eBf5nLcdenA SisH64BUbE5gMqThQUdaTXMnAUTAHN5+pQLWKI116kRyF7nqw0Auh/l2avXAPXZC cmis5JvZudri1npu1wEPVRAeTaSxdIRELj3xIBBUWkSeWl529T+n22p45mZAXkmq clNswoDQgAbDxzsdwv9acdr3iWyFTRsDpx2TR5esNN3369Pp/VJvT2DlNZA/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFqLclc7nw6pjrmzpXSX3zz1cJaowHwYDVR0j BBgwFoAUhH6+1dLVn38feRy5wN+pM67wZ8UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YjVkNzJmMy0yZGIyLTRiY2MtOWY3Ny1kMTQ0MmI2MzJkMDQvMC84NDdFQkVENUQy RDU5RjdGMUY3OTFDQjlDMERGQTkzM0FFRjA2N0M1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvODQ3RUJFRDVEMkQ1OUY3RjFGNzkxQ0I5QzBERkE5MzNBRUYw NjdDNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2I1ZDcyZjMtMmRiMi00YmNjLTlm NzctZDE0NDJiNjMyZDA0LzAvODQ3RUJFRDVEMkQ1OUY3RjFGNzkxQ0I5QzBERkE5 MzNBRUYwNjdDNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHOXL+Fqwp3LHy6MN/J+OM2a5SzKhotB73F3 PnROKFCGACgLHxNr2FpGew+ejgJj7DD3K32r1yRMtmlO09+Qne+q59x7FKWbUPfz 8Ruw4Pi7QSuoSleTIEujXpmtVz4wu/XvtXPkc2HGOk+brZ0A11MCPKgdaJFYHG3r N3W2i0JcHkL0M+Sw6mfflcOc0DLltabOkA2amVpEPKSadgAG7PhhDg4bulpqNtmF ObYnPU8+Jv1posJikdq4EGIPN45waXKgp/hsJfRx8q2TJlFJDpiMdFuicYb5zX4T aR0TjTxIPQe3GI8Kga8JuRDvKgETeM7deJybtC5EktS8kpffYDs= -----END CERTIFICATE-----Generated at Thu Jun 5 18:10:49 2025 by rpki-client