$ rpki-client -vvf repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft File: 7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft (raw, json) Hash identifier: telYe1bBV0fo+RDeHAZwhQI7JhjQHSwG9av4hmMidio= Subject key identifier: 46:9D:E9:9C:0B:9C:CB:48:DA:42:00:C2:9B:EF:C5:28:A4:26:5A:D6 Authority key identifier: 7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67 Certificate issuer: /CN=7D64B8F4CFB687141137D10F9E73FFD0BAB93F67 Certificate serial: 587982791CBE5BC97DCEDE8884849362C564BDA2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer Subject info access: rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft Manifest number: 027D Signing time: Fri 04 Apr 2025 18:02:07 +0000 Manifest this update: Fri 04 Apr 2025 17:57:07 +0000 Manifest next update: Tue 08 Apr 2025 01:08:07 +0000 Files and hashes: 1: 323430313a383434303a3133313a3a2f34382d3438203d3e20313336313331.roa (hash: oXxgDnwYMJpA65FicRf2Vx+95SgP9QkX6KUV8l6W3uQ=) 2: 323430313a383434303a3a2f33322d3332203d3e20313336313331.roa (hash: XjoAHco7m2PHrJkLw+g7kXYYTaQ359BKHQsXeKrypoE=) 3: 3130332e39372e37372e302f32342d3234203d3e20313336313331.roa (hash: rgwWhpicbIXeIE3pTFSF/nJgGhjsTFXordy0vbByPyc=) 4: 3130332e39372e37382e302f32342d3234203d3e20313336313331.roa (hash: gTWqsHLXGzmwOn5oUbLdKwsFxUOTG6JntDETCN1uoJg=) 5: 323430313a383434303a3233313a3a2f34382d3438203d3e20313336313331.roa (hash: FGjA3YaUzjk+Q4B/swMOf/6FNl/e1JQbVi/5xs5GJxc=) 6: 3130332e39372e37362e302f32342d3234203d3e20313336313331.roa (hash: sppd+EBGEaepceJfNxlZXMQLq/sqMLGJt/R8ADFWUfE=) 7: 323430313a383434303a33313a3a2f34382d3438203d3e20313336313331.roa (hash: Ibg2Cfy0WnH4a3Wa7joodFlorARUZPZ2GPMpQCBNXj4=) 8: 3130332e39372e37392e302f32342d3234203d3e20313336313331.roa (hash: g7TDmW1J5jNMb6eLJToYzt8xdajrekh1Q+uRWpcwKv0=) 9: 7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl (hash: 5q1ddq65/FRCQbJrd4gr+/ZswYOvPW6mS4j/AMdLPZ0=) 10: 323430313a383434303a3331313a3a2f34382d3438203d3e20313336313331.roa (hash: YzYTXtZ1btRkdvh/XwpJ+AUIwj2v7beEUsuLvSxNdOw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:79:82:79:1c:be:5b:c9:7d:ce:de:88:84:84:93:62:c5:64:bd:a2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D64B8F4CFB687141137D10F9E73FFD0BAB93F67 Validity Not Before: Apr 4 17:57:07 2025 GMT Not After : Apr 8 01:08:07 2025 GMT Subject: CN=469DE99C0B9CCB48DA4200C29BEFC528A4265AD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:35:90:fe:0f:90:b5:ce:f4:60:7d:6f:84:43: 17:e1:1d:53:e0:ea:ae:47:28:72:fd:b5:5c:1f:be: b6:f4:cb:7e:ff:63:8f:f4:ef:1d:94:df:1d:57:cc: 22:aa:f7:65:69:53:9b:8f:f1:38:3e:24:35:4b:7a: e0:d5:db:63:d3:2e:b1:98:d0:9f:d3:ea:7b:8d:8e: e8:6e:dc:e8:04:3b:64:82:c5:ae:75:85:cf:30:f5: 27:76:7d:e8:9b:d6:59:1d:de:a2:db:7b:d3:0c:c7: 52:9e:0e:4b:d7:64:be:df:3e:32:03:a8:ac:0d:cc: aa:4e:2d:0e:b7:c5:4c:a7:0a:ab:d7:47:51:c7:19: ca:c4:f7:9f:c2:8e:8d:d8:04:d4:60:19:f2:20:de: c0:30:87:21:55:d4:78:e8:8e:19:01:a6:7e:b9:d9: 31:3a:11:42:2a:74:f1:21:9e:57:a2:82:64:42:af: 53:23:6b:cb:99:62:09:28:3e:e1:39:66:0d:26:e8: e7:94:90:8c:82:75:ae:88:36:d9:ac:b5:ca:6d:eb: c2:51:40:e5:7c:5c:3c:d1:b8:10:50:b6:c3:99:5f: 14:17:67:76:11:24:c3:66:d6:bb:3e:aa:78:16:b5: 20:d0:43:22:33:19:bf:f7:f3:6f:35:13:c7:0c:c7: 9a:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:9D:E9:9C:0B:9C:CB:48:DA:42:00:C2:9B:EF:C5:28:A4:26:5A:D6 X509v3 Authority Key Identifier: keyid:7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c6:d6:18:46:18:20:65:ba:fc:1d:06:51:ba:d4:42:6c:5d:b9: 9a:17:e1:07:d8:29:51:5e:90:4e:9f:e5:f7:ad:d3:7a:7f:39: a0:ea:58:fb:bd:6f:0a:85:fd:b2:db:b7:53:0b:8c:3f:02:90: 7f:a8:94:5a:35:d2:40:5c:db:1b:10:30:5f:a5:ae:c9:ac:19: 9e:e2:ee:0b:b9:1a:77:6f:51:df:72:70:d7:9a:bb:24:ca:e3: 75:00:e2:aa:1b:f6:d1:8a:db:00:33:54:51:f2:ac:e9:01:c7: 03:35:3b:5a:a6:f3:8e:de:1d:df:05:e8:d3:9d:a8:67:2b:cb: a2:3a:fc:d0:db:73:be:c8:31:f0:e2:84:d6:be:8e:41:be:36: a2:89:9e:d5:e3:2f:0a:79:08:c9:1b:8a:aa:4b:37:7b:8f:20: c4:7c:96:b5:dd:0f:a6:12:88:a2:13:37:f0:cc:40:be:9d:77: 31:01:a2:1f:94:6d:27:a1:cd:f8:ac:97:e4:6b:e7:d3:12:c3: cf:6b:19:5d:0b:34:96:ab:86:13:d4:96:45:15:a4:88:e4:0b: 9e:d7:e4:22:0d:67:71:7e:80:78:84:3b:f7:4b:f5:ae:79:52: 2a:a7:d8:f4:07:18:ef:83:6c:b8:4e:4c:09:37:6b:1d:27:b9: 9e:3a:4c:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWHmCeRy+W8l9zt6IhISTYsVkvaIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZGRDBC QUI5M0Y2NzAeFw0yNTA0MDQxNzU3MDdaFw0yNTA0MDgwMTA4MDdaMDMxMTAvBgNV BAMTKDQ2OURFOTlDMEI5Q0NCNDhEQTQyMDBDMjlCRUZDNTI4QTQyNjVBRDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFNZD+D5C1zvRgfW+EQxfhHVPg 6q5HKHL9tVwfvrb0y37/Y4/07x2U3x1XzCKq92VpU5uP8Tg+JDVLeuDV22PTLrGY 0J/T6nuNjuhu3OgEO2SCxa51hc8w9Sd2feib1lkd3qLbe9MMx1KeDkvXZL7fPjID qKwNzKpOLQ63xUynCqvXR1HHGcrE95/Cjo3YBNRgGfIg3sAwhyFV1HjojhkBpn65 2TE6EUIqdPEhnleigmRCr1Mja8uZYgkoPuE5Zg0m6OeUkIyCda6INtmstcpt68JR QOV8XDzRuBBQtsOZXxQXZ3YRJMNm1rs+qngWtSDQQyIzGb/38281E8cMx5rHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURp3pnAucy0jaQgDCm+/FKKQmWtYwHwYDVR0j BBgwFoAUfWS49M+2hxQRN9EPnnP/0Lq5P2cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTdiMGQ3ZS1lYWRlLTQzMTgtYWIyMC04YzdmMmQ1YmU2OWYvMC83RDY0QjhGNENG QjY4NzE0MTEzN0QxMEY5RTczRkZEMEJBQjkzRjY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZGRDBCQUI5 M0Y2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTU3YjBkN2UtZWFkZS00MzE4LWFi MjAtOGM3ZjJkNWJlNjlmLzAvN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZG RDBCQUI5M0Y2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMbWGEYYIGW6/B0GUbrUQmxduZoX4QfYKVFe kE6f5fet03p/OaDqWPu9bwqF/bLbt1MLjD8CkH+olFo10kBc2xsQMF+lrsmsGZ7i 7gu5GndvUd9ycNeauyTK43UA4qob9tGK2wAzVFHyrOkBxwM1O1qm847eHd8F6NOd qGcry6I6/NDbc77IMfDihNa+jkG+NqKJntXjLwp5CMkbiqpLN3uPIMR8lrXdD6YS iKITN/DMQL6ddzEBoh+UbSehzfisl+Rr59MSw89rGV0LNJarhhPUlkUVpIjkC57X 5CINZ3F+gHiEO/dL9a55Uiqn2PQHGO+DbLhOTAk3ax0nuZ46TOw= -----END CERTIFICATE-----Generated at Sat Apr 5 21:19:27 2025 by rpki-client