$ rpki-client -vvf repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft File: 7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft (raw, json) Hash identifier: 0VHmE4DgO8A7IaPFL72BJDUVm5y91nwAbET/D3+X8sM= Subject key identifier: 7D:ED:30:DA:8F:11:45:9C:EA:CF:80:C2:7C:4C:F8:CF:D7:9E:28:95 Authority key identifier: 7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67 Certificate issuer: /CN=7D64B8F4CFB687141137D10F9E73FFD0BAB93F67 Certificate serial: 36C14D15058084E1A493A05841817CCF669BD05F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer Subject info access: rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft Manifest number: 0273 Signing time: Thu 13 Mar 2025 04:22:12 +0000 Manifest this update: Thu 13 Mar 2025 04:17:12 +0000 Manifest next update: Sun 16 Mar 2025 13:20:12 +0000 Files and hashes: 1: 323430313a383434303a3133313a3a2f34382d3438203d3e20313336313331.roa (hash: oXxgDnwYMJpA65FicRf2Vx+95SgP9QkX6KUV8l6W3uQ=) 2: 323430313a383434303a3a2f33322d3332203d3e20313336313331.roa (hash: XjoAHco7m2PHrJkLw+g7kXYYTaQ359BKHQsXeKrypoE=) 3: 3130332e39372e37382e302f32342d3234203d3e20313336313331.roa (hash: gTWqsHLXGzmwOn5oUbLdKwsFxUOTG6JntDETCN1uoJg=) 4: 3130332e39372e37372e302f32342d3234203d3e20313336313331.roa (hash: rgwWhpicbIXeIE3pTFSF/nJgGhjsTFXordy0vbByPyc=) 5: 3130332e39372e37392e302f32342d3234203d3e20313336313331.roa (hash: g7TDmW1J5jNMb6eLJToYzt8xdajrekh1Q+uRWpcwKv0=) 6: 323430313a383434303a33313a3a2f34382d3438203d3e20313336313331.roa (hash: Ibg2Cfy0WnH4a3Wa7joodFlorARUZPZ2GPMpQCBNXj4=) 7: 7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl (hash: 5xZMnS4kkXIkkcGKKb1eL40a6+3mplAgYcSRolhijaY=) 8: 323430313a383434303a3331313a3a2f34382d3438203d3e20313336313331.roa (hash: YzYTXtZ1btRkdvh/XwpJ+AUIwj2v7beEUsuLvSxNdOw=) 9: 323430313a383434303a3233313a3a2f34382d3438203d3e20313336313331.roa (hash: FGjA3YaUzjk+Q4B/swMOf/6FNl/e1JQbVi/5xs5GJxc=) 10: 3130332e39372e37362e302f32342d3234203d3e20313336313331.roa (hash: sppd+EBGEaepceJfNxlZXMQLq/sqMLGJt/R8ADFWUfE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 16 Mar 2025 13:20:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 36:c1:4d:15:05:80:84:e1:a4:93:a0:58:41:81:7c:cf:66:9b:d0:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7D64B8F4CFB687141137D10F9E73FFD0BAB93F67 Validity Not Before: Mar 13 04:17:12 2025 GMT Not After : Mar 16 13:20:12 2025 GMT Subject: CN=7DED30DA8F11459CEACF80C27C4CF8CFD79E2895 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fc:12:4d:70:cc:be:f2:8f:aa:44:20:33:5e:cc: 87:75:84:7b:1e:6e:e7:c5:67:1e:99:88:5f:1c:67: d2:cd:9d:31:15:9a:03:04:05:bf:99:3e:f4:93:07: 12:81:9f:d2:00:e7:a8:71:c5:3b:8b:30:30:9d:55: 92:f1:9a:f4:4a:8a:88:d5:5a:02:2a:15:44:6f:47: 80:8e:74:9b:d2:fb:73:05:51:4f:9f:e2:67:84:0f: 3f:16:95:eb:70:71:e6:11:08:c0:a1:d9:d4:d8:a6: f1:60:2f:11:15:6d:91:d3:aa:46:5a:7c:3d:4f:09: a9:25:35:87:29:69:41:8a:7e:07:f4:50:83:d2:b1: 67:f0:a8:a1:c7:e7:4b:e0:2f:ec:41:6f:d1:8c:f6: 77:32:03:e3:d5:0f:42:a1:67:17:0b:62:a9:8f:85: 89:ba:b2:55:4c:ad:ed:ca:6c:e1:bc:e0:85:6b:d6: ff:d2:bd:19:c7:2c:a3:e2:b9:52:30:fe:f8:28:b4: 7b:9c:82:87:fd:82:ca:ab:a2:26:8b:5d:9e:4e:86: 15:3e:91:74:50:dc:93:00:a8:5c:8b:78:44:cc:94: 00:91:74:20:d1:11:fa:c6:37:4c:b8:15:be:b6:b6: 7e:de:af:5d:84:c3:9c:e5:91:35:8e:8d:62:f7:de: eb:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:ED:30:DA:8F:11:45:9C:EA:CF:80:C2:7C:4C:F8:CF:D7:9E:28:95 X509v3 Authority Key Identifier: keyid:7D:64:B8:F4:CF:B6:87:14:11:37:D1:0F:9E:73:FF:D0:BA:B9:3F:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/957b0d7e-eade-4318-ab20-8c7f2d5be69f/0/7D64B8F4CFB687141137D10F9E73FFD0BAB93F67.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7a:d4:2e:36:7f:91:04:15:3e:af:62:c9:d1:a1:3f:35:01:7c: ef:16:cd:bf:64:6f:1f:d6:c1:b1:6a:85:c7:5e:f8:fb:60:d3: 0f:9b:eb:8e:69:bb:13:41:7f:a4:5f:2f:e6:10:6a:ef:f1:ca: 2f:b2:b8:b1:53:96:bd:5c:7e:86:c7:4f:d5:28:bf:a0:e8:51: 0e:ea:06:02:fd:3a:7e:28:7a:55:8d:75:54:93:4d:bc:58:f2: e9:a1:84:dd:c6:b2:29:1f:64:d9:23:ff:6f:b7:f3:cd:6d:2c: 80:0a:24:4d:6c:d4:8c:61:16:7b:18:56:18:59:b8:7a:34:f5: e3:1e:8d:2e:ac:80:d0:b7:58:54:67:58:c0:b2:41:fb:be:1e: 53:22:30:59:64:84:88:91:74:dd:4d:ec:5e:8f:c2:1c:71:80: 7f:89:d8:f3:22:e9:4b:79:92:19:44:50:3a:99:04:fc:77:00: 40:b1:f3:3e:a6:e1:02:8c:71:dc:9d:38:20:70:83:cf:cc:71: c0:b5:dd:ad:c7:52:b2:ed:0b:70:6e:82:c6:36:ff:ba:53:a4: 94:25:ec:7c:03:d8:07:fd:3c:d9:50:f8:fd:75:0a:ac:f1:8d: 25:ea:ed:f4:f5:25:9b:12:bc:36:33:b8:1e:15:06:5f:63:ea: 1d:20:9a:04 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNsFNFQWAhOGkk6BYQYF8z2ab0F8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZGRDBC QUI5M0Y2NzAeFw0yNTAzMTMwNDE3MTJaFw0yNTAzMTYxMzIwMTJaMDMxMTAvBgNV BAMTKDdERUQzMERBOEYxMTQ1OUNFQUNGODBDMjdDNENGOENGRDc5RTI4OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD8Ek1wzL7yj6pEIDNezId1hHse bufFZx6ZiF8cZ9LNnTEVmgMEBb+ZPvSTBxKBn9IA56hxxTuLMDCdVZLxmvRKiojV WgIqFURvR4COdJvS+3MFUU+f4meEDz8WletwceYRCMCh2dTYpvFgLxEVbZHTqkZa fD1PCaklNYcpaUGKfgf0UIPSsWfwqKHH50vgL+xBb9GM9ncyA+PVD0KhZxcLYqmP hYm6slVMre3KbOG84IVr1v/SvRnHLKPiuVIw/vgotHucgof9gsqroiaLXZ5OhhU+ kXRQ3JMAqFyLeETMlACRdCDREfrGN0y4Fb62tn7er12Ew5zlkTWOjWL33usJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfe0w2o8RRZzqz4DCfEz4z9eeKJUwHwYDVR0j BBgwFoAUfWS49M+2hxQRN9EPnnP/0Lq5P2cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 NTdiMGQ3ZS1lYWRlLTQzMTgtYWIyMC04YzdmMmQ1YmU2OWYvMC83RDY0QjhGNENG QjY4NzE0MTEzN0QxMEY5RTczRkZEMEJBQjkzRjY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZGRDBCQUI5 M0Y2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTU3YjBkN2UtZWFkZS00MzE4LWFi MjAtOGM3ZjJkNWJlNjlmLzAvN0Q2NEI4RjRDRkI2ODcxNDExMzdEMTBGOUU3M0ZG RDBCQUI5M0Y2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHrULjZ/kQQVPq9iydGhPzUBfO8Wzb9kbx/W wbFqhcde+Ptg0w+b645puxNBf6RfL+YQau/xyi+yuLFTlr1cfobHT9Uov6DoUQ7q BgL9On4oelWNdVSTTbxY8umhhN3GsikfZNkj/2+3881tLIAKJE1s1IxhFnsYVhhZ uHo09eMejS6sgNC3WFRnWMCyQfu+HlMiMFlkhIiRdN1N7F6PwhxxgH+J2PMi6Ut5 khlEUDqZBPx3AECx8z6m4QKMcdydOCBwg8/MccC13a3HUrLtC3BugsY2/7pTpJQl 7HwD2Af9PNlQ+P11CqzxjSXq7fT1JZsSvDYzuB4VBl9j6h0gmgQ= -----END CERTIFICATE-----Generated at Thu Mar 13 21:30:39 2025 by rpki-client