$ rpki-client -vvf repo-rpki.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/7FD3F92F13241B80062CC31B0EC8A3D129871D90.mft File: 7FD3F92F13241B80062CC31B0EC8A3D129871D90.mft (raw, json) Hash identifier: 99yGaCS8ezTIBZX2WR5u/qOSMNUqmXWfdcRhwB01kdk= Subject key identifier: 84:D0:D4:0A:65:D4:C2:35:27:C1:48:0F:B6:BD:BE:0D:3C:C6:78:78 Authority key identifier: 7F:D3:F9:2F:13:24:1B:80:06:2C:C3:1B:0E:C8:A3:D1:29:87:1D:90 Certificate issuer: /CN=7FD3F92F13241B80062CC31B0EC8A3D129871D90 Certificate serial: 3C2B96A07F85305AB029C0DD07C32C09BF48AC0B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FD3F92F13241B80062CC31B0EC8A3D129871D90.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/7FD3F92F13241B80062CC31B0EC8A3D129871D90.mft Manifest number: 033F Signing time: Thu 03 Apr 2025 19:51:18 +0000 Manifest this update: Thu 03 Apr 2025 19:46:18 +0000 Manifest next update: Sun 06 Apr 2025 21:28:18 +0000 Files and hashes: 1: 3130332e3136342e3133362e302f32332d3234203d3e203137393935.roa (hash: Lqnr7jHsNW39LjAjC/nZJ0LGz/avbHl/uE7V4U6+3ac=) 2: 7FD3F92F13241B80062CC31B0EC8A3D129871D90.crl (hash: 5VUA5nmYsExK+EucVvj1wPHWAEg6hQbvcdsRSFJXw7k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/7FD3F92F13241B80062CC31B0EC8A3D129871D90.crl rsync://repo-rpki.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/7FD3F92F13241B80062CC31B0EC8A3D129871D90.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FD3F92F13241B80062CC31B0EC8A3D129871D90.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 21:28:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:2b:96:a0:7f:85:30:5a:b0:29:c0:dd:07:c3:2c:09:bf:48:ac:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7FD3F92F13241B80062CC31B0EC8A3D129871D90 Validity Not Before: Apr 3 19:46:18 2025 GMT Not After : Apr 6 21:28:18 2025 GMT Subject: CN=84D0D40A65D4C23527C1480FB6BDBE0D3CC67878 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:62:1f:05:20:f0:35:61:96:77:9b:b2:58:68: 70:d0:08:0e:d2:f6:84:6b:42:07:d3:16:d2:d3:c3: a3:de:5d:5f:3f:fd:ea:42:e0:60:e3:a1:b0:11:dd: f4:92:d5:f3:d3:3a:74:96:32:75:21:6e:0d:d1:b9: b2:54:59:c1:b8:17:bc:d1:39:e6:f0:a6:1f:d1:3f: 52:a4:06:07:91:82:1b:bc:6e:14:ca:89:1e:b3:c5: f6:86:3e:1e:27:5c:91:84:bb:0e:a4:ff:ee:f5:53: ca:f3:33:40:a4:aa:4e:32:c6:e2:71:ed:7a:81:ac: c7:7f:29:2f:25:fa:1f:f2:b9:b9:91:01:86:7a:12: 6c:36:55:1c:7d:20:77:f3:6b:06:2c:b9:68:33:3a: b1:7c:b1:6b:93:7e:aa:81:98:0a:3e:94:5e:26:fd: 76:93:ae:22:74:c0:a2:cb:10:25:4c:8a:84:a8:1e: 70:09:fa:ae:d6:9d:80:ff:c3:fd:6c:b5:e3:55:aa: 4a:90:29:4c:19:05:f8:b6:6b:17:a6:49:b3:75:48: 3f:70:95:44:87:04:fe:cb:27:de:33:e7:d8:df:96: dd:a8:5e:35:68:9e:1a:16:62:2b:0d:15:d5:d3:18: 89:1c:19:e7:68:02:4b:5b:a5:6c:17:ea:a7:19:c4: f8:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:D0:D4:0A:65:D4:C2:35:27:C1:48:0F:B6:BD:BE:0D:3C:C6:78:78 X509v3 Authority Key Identifier: keyid:7F:D3:F9:2F:13:24:1B:80:06:2C:C3:1B:0E:C8:A3:D1:29:87:1D:90 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/7FD3F92F13241B80062CC31B0EC8A3D129871D90.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7FD3F92F13241B80062CC31B0EC8A3D129871D90.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d04d6427-3f03-4d21-b8cc-bbfd2a3f8c33/0/7FD3F92F13241B80062CC31B0EC8A3D129871D90.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:7c:38:6d:f2:5d:16:b1:ad:e9:4e:e2:55:5a:e3:28:d6:b4: 85:4f:bc:66:1d:d2:53:83:b5:7b:50:59:fe:3a:26:cc:ac:92: fd:e5:78:5b:66:ec:f1:c5:f2:36:8c:61:80:96:61:f9:89:c3: 6a:3c:5d:63:b9:be:d4:f8:b0:76:a2:cd:16:06:e7:97:98:36: ac:d2:5f:77:06:1d:81:22:f1:64:2a:1a:1a:3b:4a:f3:1c:94: e0:5f:2d:1e:13:32:00:56:9c:3b:46:9f:c9:8e:ee:88:1e:eb: da:84:f3:0e:f9:37:44:82:91:33:84:6f:6b:e1:13:7c:09:5d: 99:f1:17:33:2d:6c:ba:86:f4:ea:c0:be:b0:b3:e8:86:0d:33: da:56:dc:f9:c1:4f:78:77:3a:a6:7a:82:9d:ff:6c:ae:ee:7a: b6:54:95:cb:2c:8c:c0:0e:c5:70:d8:fd:61:19:4b:e9:b7:79: 2a:84:18:fe:69:cf:06:55:6f:65:a2:21:6c:f9:ed:84:90:d4: 2a:4e:55:e3:e1:0a:44:a5:58:fb:16:9f:d4:a3:86:71:2c:c2: c3:e7:53:79:c7:cd:49:92:96:09:29:0f:48:f6:23:fb:89:66: b0:a8:68:0a:d0:d4:13:ac:69:12:71:b9:3f:de:43:da:fc:43: 2e:a1:af:0a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPCuWoH+FMFqwKcDdB8MsCb9IrAswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0ZEM0Y5MkYxMzI0MUI4MDA2MkNDMzFCMEVDOEEzRDEy OTg3MUQ5MDAeFw0yNTA0MDMxOTQ2MThaFw0yNTA0MDYyMTI4MThaMDMxMTAvBgNV BAMTKDg0RDBENDBBNjVENEMyMzUyN0MxNDgwRkI2QkRCRTBEM0NDNjc4NzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrYh8FIPA1YZZ3m7JYaHDQCA7S 9oRrQgfTFtLTw6PeXV8//epC4GDjobAR3fSS1fPTOnSWMnUhbg3RubJUWcG4F7zR Oebwph/RP1KkBgeRghu8bhTKiR6zxfaGPh4nXJGEuw6k/+71U8rzM0Ckqk4yxuJx 7XqBrMd/KS8l+h/yubmRAYZ6Emw2VRx9IHfzawYsuWgzOrF8sWuTfqqBmAo+lF4m /XaTriJ0wKLLECVMioSoHnAJ+q7WnYD/w/1steNVqkqQKUwZBfi2axemSbN1SD9w lUSHBP7LJ94z59jflt2oXjVonhoWYisNFdXTGIkcGedoAktbpWwX6qcZxPjFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhNDUCmXUwjUnwUgPtr2+DTzGeHgwHwYDVR0j BBgwFoAUf9P5LxMkG4AGLMMbDsij0SmHHZAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDRkNjQyNy0zZjAzLTRkMjEtYjhjYy1iYmZkMmEzZjhjMzMvMC83RkQzRjkyRjEz MjQxQjgwMDYyQ0MzMUIwRUM4QTNEMTI5ODcxRDkwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvN0ZEM0Y5MkYxMzI0MUI4MDA2MkNDMzFCMEVDOEEzRDEyOTg3 MUQ5MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA0ZDY0MjctM2YwMy00ZDIxLWI4 Y2MtYmJmZDJhM2Y4YzMzLzAvN0ZEM0Y5MkYxMzI0MUI4MDA2MkNDMzFCMEVDOEEz RDEyOTg3MUQ5MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIt8OG3yXRaxrelO4lVa4yjWtIVPvGYd0lOD tXtQWf46Jsyskv3leFtm7PHF8jaMYYCWYfmJw2o8XWO5vtT4sHaizRYG55eYNqzS X3cGHYEi8WQqGho7SvMclOBfLR4TMgBWnDtGn8mO7oge69qE8w75N0SCkTOEb2vh E3wJXZnxFzMtbLqG9OrAvrCz6IYNM9pW3PnBT3h3OqZ6gp3/bK7uerZUlcssjMAO xXDY/WEZS+m3eSqEGP5pzwZVb2WiIWz57YSQ1CpOVePhCkSlWPsWn9SjhnEswsPn U3nHzUmSlgkpD0j2I/uJZrCoaArQ1BOsaRJxuT/eQ9r8Qy6hrwo= -----END CERTIFICATE-----Generated at Sat Apr 5 15:30:53 2025 by rpki-client