$ rpki-client -vvf repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft File: 7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft (raw, json) Hash identifier: xNl+L68sCJN8YTXytQUdn4vtmbdKHwzumrWw1jremmk= Subject key identifier: E9:E6:27:86:BE:00:22:0C:92:B5:C8:82:B9:1F:72:3A:35:D5:A4:83 Authority key identifier: 7A:21:6F:23:D8:A2:28:FB:B8:F5:63:EC:15:DF:76:FD:50:32:31:B3 Certificate issuer: /CN=7A216F23D8A228FBB8F563EC15DF76FD503231B3 Certificate serial: 3A465698244AB243AB447DA1BA9DB35C4E07B3E6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A216F23D8A228FBB8F563EC15DF76FD503231B3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft Manifest number: 01AB Signing time: Fri 04 Apr 2025 05:12:06 +0000 Manifest this update: Fri 04 Apr 2025 05:07:06 +0000 Manifest next update: Mon 07 Apr 2025 15:44:06 +0000 Files and hashes: 1: 3130332e32302e3130382e302f32332d3234203d3e20313439373037.roa (hash: YUh1E1cCB+Tam8Lv4+/c622A6XvCbyDIufb9eqoPvMQ=) 2: 3130332e32302e3130382e302f32342d3234203d3e20313439373037.roa (hash: l72fTVO4iPS3td7y6iJ6FZ6Iq9uNFhg1kwCppW10yoE=) 3: 7A216F23D8A228FBB8F563EC15DF76FD503231B3.crl (hash: sblmr/Jqrt8MBnAaZ4YwtdAk5h3sn0EXj0bwMJsA3lE=) 4: 3130332e32302e3130392e302f32342d3234203d3e20313439373037.roa (hash: rOc9IS1yKanFrzj6lHEyVZN9K3Au8qIy9aCKaCdjEsw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.crl rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A216F23D8A228FBB8F563EC15DF76FD503231B3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 15:44:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:46:56:98:24:4a:b2:43:ab:44:7d:a1:ba:9d:b3:5c:4e:07:b3:e6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7A216F23D8A228FBB8F563EC15DF76FD503231B3 Validity Not Before: Apr 4 05:07:06 2025 GMT Not After : Apr 7 15:44:06 2025 GMT Subject: CN=E9E62786BE00220C92B5C882B91F723A35D5A483 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:e6:eb:c0:3d:bf:bb:31:7c:64:9c:82:a8:81: 5b:69:76:a8:cd:fb:2e:c4:eb:12:bb:c7:f0:fa:cf: 0c:e2:14:7d:d3:7c:2b:8f:e0:da:d0:73:20:9e:e7: af:32:94:39:1c:be:bc:97:e7:03:8d:c8:0d:87:7d: ff:49:ed:2c:35:3d:b3:34:c6:fd:ae:b9:ea:80:9c: 8e:17:c0:51:1d:3c:37:e3:1b:34:20:b9:11:f8:81: dc:8a:0f:19:26:ef:12:1e:28:be:ae:33:e9:70:74: fc:ed:6a:1e:b5:c9:37:66:84:18:5a:70:f0:c9:63: e8:6b:b2:a7:c6:44:12:92:2b:c5:91:20:7f:6b:3c: 84:60:23:db:bd:46:6a:28:72:7a:4b:45:19:c4:0f: e6:4e:4d:a2:09:b4:88:91:6b:a2:85:60:e8:ca:c6: 36:48:f3:5a:79:3b:b4:e6:f4:84:a1:db:d4:01:c7: df:1b:f8:8d:0d:8c:b0:2e:55:6d:ab:e2:8d:80:a4: 23:5f:30:cd:f7:ba:ef:d6:83:b6:f7:02:b9:92:89: 86:24:ec:dc:44:59:13:96:b5:2f:a3:82:b8:d1:7e: 78:a8:4e:c4:93:bd:5b:b5:f7:ec:a8:c6:d2:e8:46: 89:15:b8:2c:07:73:be:94:67:3d:e2:d8:a6:2b:11: eb:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:E6:27:86:BE:00:22:0C:92:B5:C8:82:B9:1F:72:3A:35:D5:A4:83 X509v3 Authority Key Identifier: keyid:7A:21:6F:23:D8:A2:28:FB:B8:F5:63:EC:15:DF:76:FD:50:32:31:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7A216F23D8A228FBB8F563EC15DF76FD503231B3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acc6bd73-f9bd-4f5a-9c59-fbea1bd83473/0/7A216F23D8A228FBB8F563EC15DF76FD503231B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:fa:d3:85:93:5c:a3:a4:0a:da:11:fe:50:c0:96:66:43:b6: 16:26:07:1f:1e:20:9f:cb:bd:12:fe:6f:11:7f:f6:e2:e5:6e: b3:7c:21:1e:14:25:74:58:23:e8:e1:a0:fe:1f:d5:10:57:ef: b4:ea:62:32:e9:98:5d:9e:83:78:2f:33:c5:10:89:97:78:35: df:af:f6:30:06:8f:5d:e9:c9:e9:64:f9:9d:f6:8b:2d:bc:6d: 6e:b8:c1:d5:3e:df:6a:34:0b:bb:e0:59:6e:9e:34:b4:e0:bb: 1f:60:59:b9:d3:d5:93:e9:58:14:b8:50:0c:e7:d9:87:8a:ea: a3:c5:79:67:98:b3:16:33:01:b8:ce:b0:20:eb:26:59:9e:e5: 07:c4:f1:ce:8f:78:6f:4c:70:b4:00:1e:33:09:33:d0:cd:f5: 62:53:dc:fb:58:e0:34:25:44:84:55:da:21:74:65:47:74:68: 01:7a:fa:93:06:87:ca:1b:39:4c:ab:2e:79:8b:4d:83:ef:ec: 61:0c:32:c6:38:f4:b2:83:8b:7a:9c:47:8f:97:fe:92:ed:30: ae:73:12:4c:1c:82:cf:fe:31:fe:0a:96:65:93:ef:30:27:2a: 90:52:ea:9a:23:78:22:ed:5d:f3:de:e0:ee:30:79:73:63:c3: 41:00:37:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOkZWmCRKskOrRH2hup2zXE4Hs+YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0EyMTZGMjNEOEEyMjhGQkI4RjU2M0VDMTVERjc2RkQ1 MDMyMzFCMzAeFw0yNTA0MDQwNTA3MDZaFw0yNTA0MDcxNTQ0MDZaMDMxMTAvBgNV BAMTKEU5RTYyNzg2QkUwMDIyMEM5MkI1Qzg4MkI5MUY3MjNBMzVENUE0ODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCl5uvAPb+7MXxknIKogVtpdqjN +y7E6xK7x/D6zwziFH3TfCuP4NrQcyCe568ylDkcvryX5wONyA2Hff9J7Sw1PbM0 xv2uueqAnI4XwFEdPDfjGzQguRH4gdyKDxkm7xIeKL6uM+lwdPztah61yTdmhBha cPDJY+hrsqfGRBKSK8WRIH9rPIRgI9u9RmoocnpLRRnED+ZOTaIJtIiRa6KFYOjK xjZI81p5O7Tm9ISh29QBx98b+I0NjLAuVW2r4o2ApCNfMM33uu/Wg7b3ArmSiYYk 7NxEWROWtS+jgrjRfnioTsSTvVu19+yoxtLoRokVuCwHc76UZz3i2KYrEeuJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6eYnhr4AIgyStciCuR9yOjXVpIMwHwYDVR0j BBgwFoAUeiFvI9iiKPu49WPsFd92/VAyMbMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h Y2M2YmQ3My1mOWJkLTRmNWEtOWM1OS1mYmVhMWJkODM0NzMvMC83QTIxNkYyM0Q4 QTIyOEZCQjhGNTYzRUMxNURGNzZGRDUwMzIzMUIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0EyMTZGMjNEOEEyMjhGQkI4RjU2M0VDMTVERjc2RkQ1MDMy MzFCMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWNjNmJkNzMtZjliZC00ZjVhLTlj NTktZmJlYTFiZDgzNDczLzAvN0EyMTZGMjNEOEEyMjhGQkI4RjU2M0VDMTVERjc2 RkQ1MDMyMzFCMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIT604WTXKOkCtoR/lDAlmZDthYmBx8eIJ/L vRL+bxF/9uLlbrN8IR4UJXRYI+jhoP4f1RBX77TqYjLpmF2eg3gvM8UQiZd4Nd+v 9jAGj13pyelk+Z32iy28bW64wdU+32o0C7vgWW6eNLTgux9gWbnT1ZPpWBS4UAzn 2YeK6qPFeWeYsxYzAbjOsCDrJlme5QfE8c6PeG9McLQAHjMJM9DN9WJT3PtY4DQl RIRV2iF0ZUd0aAF6+pMGh8obOUyrLnmLTYPv7GEMMsY49LKDi3qcR4+X/pLtMK5z Ekwcgs/+Mf4KlmWT7zAnKpBS6pojeCLtXfPe4O4weXNjw0EAN+Q= -----END CERTIFICATE-----Generated at Sat Apr 5 16:45:18 2025 by rpki-client