$ rpki-client -vvf repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft File: 7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft (raw, json) Hash identifier: +FoSJEL+71MYTiQMGRhwihnRitjhHFPhIHcrnQDpGlA= Subject key identifier: 2C:E0:31:C5:09:FB:5E:BD:6D:06:D2:F1:AC:BA:77:50:DA:74:B4:A2 Authority key identifier: 7B:94:59:74:A7:9E:8C:77:CB:02:F9:44:95:BA:9F:87:BA:A0:E0:38 Certificate issuer: /CN=7B945974A79E8C77CB02F94495BA9F87BAA0E038 Certificate serial: 236179F6F6D9579BCBFD82602481D1C180E63DF2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B945974A79E8C77CB02F94495BA9F87BAA0E038.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft Manifest number: 0333 Signing time: Thu 13 Mar 2025 03:11:58 +0000 Manifest this update: Thu 13 Mar 2025 03:06:58 +0000 Manifest next update: Sun 16 Mar 2025 03:25:58 +0000 Files and hashes: 1: 7B945974A79E8C77CB02F94495BA9F87BAA0E038.crl (hash: QA8+AQNijd7QktshnZwupJEUmLiqG0C7sTsVObz+1n8=) 2: 3130332e3136372e33302e302f32332d3234203d3e203137393935.roa (hash: gtwTI3DJtMemj0Ti0EgOwcabGH1uQz62nqOF7QPkYWU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.crl rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B945974A79E8C77CB02F94495BA9F87BAA0E038.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 16 Mar 2025 03:25:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:61:79:f6:f6:d9:57:9b:cb:fd:82:60:24:81:d1:c1:80:e6:3d:f2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7B945974A79E8C77CB02F94495BA9F87BAA0E038 Validity Not Before: Mar 13 03:06:58 2025 GMT Not After : Mar 16 03:25:58 2025 GMT Subject: CN=2CE031C509FB5EBD6D06D2F1ACBA7750DA74B4A2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:8f:46:2c:2f:72:5f:d2:6d:c5:13:0a:58:be: 58:d2:1c:f5:d4:c8:b4:2e:2a:61:59:e9:79:ba:04: e7:21:fc:ca:65:02:ec:42:a7:3b:57:06:da:94:26: 82:54:04:a8:8e:13:90:47:3c:51:d2:b9:5a:cb:df: ce:6e:b2:4b:94:e0:fb:11:d3:91:41:7e:6d:fb:78: 3b:ae:53:57:17:2e:00:1d:d5:88:53:eb:a4:d4:be: 83:b2:8b:5a:b3:de:57:7f:87:fd:d1:f8:95:5d:7e: 65:ec:eb:ee:c3:a7:0b:ec:24:bc:93:e0:69:c4:44: 0b:e8:21:09:91:6c:ca:56:bb:41:24:6c:69:d2:e2: c6:b3:03:6d:3c:dd:6c:6e:c1:a3:86:1e:ce:07:b1: bb:71:36:2a:7a:21:8b:7f:f1:f0:90:26:cc:a2:36: 48:8c:8b:c1:63:83:e2:99:fa:be:e4:61:cd:0a:25: 14:a4:5b:b4:e3:42:6d:07:59:4c:23:ba:09:cc:ce: 6f:57:4e:5b:1f:f2:a6:5f:0f:81:b3:1b:cd:9c:fc: 49:99:1e:40:e0:1b:13:7c:4d:71:64:58:b1:50:f8: d7:ae:7c:b7:84:46:1c:b6:9a:18:24:ad:0b:ce:cd: f3:c9:fb:64:24:a0:08:7a:57:ad:8a:6e:6f:b4:a5: 66:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:E0:31:C5:09:FB:5E:BD:6D:06:D2:F1:AC:BA:77:50:DA:74:B4:A2 X509v3 Authority Key Identifier: keyid:7B:94:59:74:A7:9E:8C:77:CB:02:F9:44:95:BA:9F:87:BA:A0:E0:38 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7B945974A79E8C77CB02F94495BA9F87BAA0E038.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7c635ce9-0ea5-47d8-9fcc-cad1c9f06fbe/0/7B945974A79E8C77CB02F94495BA9F87BAA0E038.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:46:98:85:7a:8c:19:85:c9:bf:d9:61:fd:c8:fd:cc:0e:f6: b1:02:a1:1b:5e:80:61:ea:6b:c7:cb:92:37:c4:c3:4f:3e:0d: a0:04:1d:04:37:bc:21:7b:dd:c7:20:1b:f2:9f:93:e0:42:5e: 0d:49:3d:31:92:d6:f2:26:d4:ba:21:24:56:1f:de:6e:1c:dc: 04:70:1d:83:fd:c1:f0:4e:5f:0c:df:0d:88:3b:df:80:1a:71: d1:22:67:82:d2:00:41:8e:f5:60:8b:b1:07:6b:ea:26:19:10: eb:a1:da:b3:85:8c:91:c9:75:99:4c:c9:34:64:ad:05:56:b1: 4f:c2:10:cb:51:82:c8:1a:48:0d:80:98:27:30:08:f4:a0:85: 3d:90:50:83:fc:ee:2f:fa:78:39:ce:bc:ff:7e:22:f2:1f:87: 18:cd:1c:45:2e:d6:07:61:df:d5:e6:5e:a5:99:71:a0:41:7d: 5c:dd:9e:70:d2:9e:bf:fe:73:5f:77:ec:a9:3a:ab:9c:0e:2d: e2:d0:67:43:a7:31:24:67:8e:0a:bd:40:ba:2e:f0:9b:05:83: 76:0c:e5:62:f9:f4:ab:1a:ff:4c:5c:c7:48:7e:1f:79:4c:8e: 44:4a:29:5f:d8:d5:81:4f:f4:a5:c9:63:40:42:ad:cb:8c:2b: 7c:03:5d:f8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI2F59vbZV5vL/YJgJIHRwYDmPfIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0I5NDU5NzRBNzlFOEM3N0NCMDJGOTQ0OTVCQTlGODdC QUEwRTAzODAeFw0yNTAzMTMwMzA2NThaFw0yNTAzMTYwMzI1NThaMDMxMTAvBgNV BAMTKDJDRTAzMUM1MDlGQjVFQkQ2RDA2RDJGMUFDQkE3NzUwREE3NEI0QTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9j0YsL3Jf0m3FEwpYvljSHPXU yLQuKmFZ6Xm6BOch/MplAuxCpztXBtqUJoJUBKiOE5BHPFHSuVrL385uskuU4PsR 05FBfm37eDuuU1cXLgAd1YhT66TUvoOyi1qz3ld/h/3R+JVdfmXs6+7DpwvsJLyT 4GnERAvoIQmRbMpWu0EkbGnS4sazA2083WxuwaOGHs4HsbtxNip6IYt/8fCQJsyi NkiMi8Fjg+KZ+r7kYc0KJRSkW7TjQm0HWUwjugnMzm9XTlsf8qZfD4GzG82c/EmZ HkDgGxN8TXFkWLFQ+NeufLeERhy2mhgkrQvOzfPJ+2QkoAh6V62Kbm+0pWapAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULOAxxQn7Xr1tBtLxrLp3UNp0tKIwHwYDVR0j BBgwFoAUe5RZdKeejHfLAvlElbqfh7qg4DgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YzYzNWNlOS0wZWE1LTQ3ZDgtOWZjYy1jYWQxYzlmMDZmYmUvMC83Qjk0NTk3NEE3 OUU4Qzc3Q0IwMkY5NDQ5NUJBOUY4N0JBQTBFMDM4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0I5NDU5NzRBNzlFOEM3N0NCMDJGOTQ0OTVCQTlGODdCQUEw RTAzOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2M2MzVjZTktMGVhNS00N2Q4LTlm Y2MtY2FkMWM5ZjA2ZmJlLzAvN0I5NDU5NzRBNzlFOEM3N0NCMDJGOTQ0OTVCQTlG ODdCQUEwRTAzOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAClGmIV6jBmFyb/ZYf3I/cwO9rECoRtegGHq a8fLkjfEw08+DaAEHQQ3vCF73ccgG/Kfk+BCXg1JPTGS1vIm1LohJFYf3m4c3ARw HYP9wfBOXwzfDYg734AacdEiZ4LSAEGO9WCLsQdr6iYZEOuh2rOFjJHJdZlMyTRk rQVWsU/CEMtRgsgaSA2AmCcwCPSghT2QUIP87i/6eDnOvP9+IvIfhxjNHEUu1gdh 39XmXqWZcaBBfVzdnnDSnr/+c1937Kk6q5wOLeLQZ0OnMSRnjgq9QLou8JsFg3YM 5WL59Ksa/0xcx0h+H3lMjkRKKV/Y1YFP9KXJY0BCrcuMK3wDXfg= -----END CERTIFICATE-----Generated at Thu Mar 13 21:31:37 2025 by rpki-client