$ rpki-client -vvf repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.mft File: A7422B678A17489054C0697D44A3B19EB9F67509.mft (raw, json) Hash identifier: 1CXROUBPHPkvKhkTuRRI6S3To6kWy0ctMxt9a8qRaD0= Subject key identifier: 7C:C7:C0:E0:B1:93:C3:9B:BF:5B:71:67:6B:B0:02:EB:B2:21:5E:84 Authority key identifier: A7:42:2B:67:8A:17:48:90:54:C0:69:7D:44:A3:B1:9E:B9:F6:75:09 Certificate issuer: /CN=A7422B678A17489054C0697D44A3B19EB9F67509 Certificate serial: 405456C9896C50F07B3187FA128C2DD6FFED87A0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7422B678A17489054C0697D44A3B19EB9F67509.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.mft Manifest number: 04C1 Signing time: Wed 09 Apr 2025 05:30:33 +0000 Manifest this update: Wed 09 Apr 2025 05:25:33 +0000 Manifest next update: Sat 12 Apr 2025 11:30:33 +0000 Files and hashes: 1: A7422B678A17489054C0697D44A3B19EB9F67509.crl (hash: 2ieH57m1DcOPfEiRsHmZWs0Wz/3owfoL6KXcJPlmqb8=) 2: 323030313a6466343a393830303a3a2f34382d3438203d3e203338373735.roa (hash: XsaQ/U9Kr9yLnjasE2URoVoOaYVUiblHMtA00VDq9jU=) 3: 3230332e33342e3131392e302f32342d3234203d3e203338373735.roa (hash: g5xw1FE6htb/POnNtcobAWNKGzzdBwdYRHRRb9zZoKM=) 4: 3230332e33342e3131382e302f32342d3234203d3e203338373735.roa (hash: +PraNjMo7UJUfRvMuuMh94X99iB0d3sDtRSjaFBvobw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.crl rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7422B678A17489054C0697D44A3B19EB9F67509.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 11:30:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:54:56:c9:89:6c:50:f0:7b:31:87:fa:12:8c:2d:d6:ff:ed:87:a0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7422B678A17489054C0697D44A3B19EB9F67509 Validity Not Before: Apr 9 05:25:33 2025 GMT Not After : Apr 12 11:30:33 2025 GMT Subject: CN=7CC7C0E0B193C39BBF5B71676BB002EBB2215E84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:a4:c6:d6:7c:a9:78:73:14:63:d4:73:16:80: de:db:aa:ba:cf:03:12:b6:52:46:64:7b:da:01:02: 10:70:cf:c3:67:52:6b:d2:84:c4:d5:59:8f:57:f6: a1:a4:52:75:82:f5:d3:3a:f4:7b:c4:94:58:6c:17: a4:7e:24:a6:97:ec:55:6c:46:fd:7e:8b:07:ca:01: c6:78:a6:99:ed:b1:e2:57:a3:ef:be:a3:39:9d:bb: bb:64:26:ed:e2:58:a4:73:29:85:a9:93:a9:a6:fd: d9:6d:c0:dc:77:97:70:d3:d1:63:08:66:90:56:29: df:a2:68:88:07:9f:af:27:f3:14:ef:52:d1:aa:e0: 54:c6:4b:0a:c7:05:c9:64:a9:1c:83:0b:b2:82:4e: cf:8e:16:2f:06:1d:66:45:a8:52:ce:e8:38:a0:f7: 79:db:8e:c2:03:1d:ed:43:f6:0c:67:9d:53:68:9b: 71:1a:49:a9:52:23:74:de:cf:51:97:4a:75:30:44: 10:c8:31:29:03:70:40:63:07:33:c2:ec:b1:3e:af: 09:68:3e:63:93:33:1d:94:05:ed:0f:57:e6:7d:d5: ca:7c:27:9f:66:27:21:cb:8b:c8:9f:62:5d:83:65: 0b:cd:dd:1c:c4:59:f6:f0:35:80:3a:f7:78:99:57: 31:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:C7:C0:E0:B1:93:C3:9B:BF:5B:71:67:6B:B0:02:EB:B2:21:5E:84 X509v3 Authority Key Identifier: keyid:A7:42:2B:67:8A:17:48:90:54:C0:69:7D:44:A3:B1:9E:B9:F6:75:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7422B678A17489054C0697D44A3B19EB9F67509.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9053d96-da17-4099-b707-da0eb2bf07bc/0/A7422B678A17489054C0697D44A3B19EB9F67509.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:ee:98:ae:5a:ab:5e:fd:c2:f8:a4:1d:05:7c:ae:48:f7:a1: 69:3b:1d:5a:be:08:56:6a:e6:8c:54:47:e5:7d:1d:91:eb:e5: 46:81:44:c0:f6:97:00:f5:6d:de:1f:76:89:d1:63:cb:d1:7d: 6c:1c:49:42:24:94:4e:97:df:f1:61:29:05:f1:cb:78:13:94: 3b:99:69:3f:a1:6b:ae:63:5b:d2:f1:5a:44:3c:74:e6:ba:a4: b6:65:dc:69:07:8d:c5:11:54:81:91:bf:5f:2b:da:c3:80:50: 90:97:b7:2d:a6:b4:1f:6a:79:b6:7c:91:34:10:b5:29:8f:7b: 94:92:1f:51:21:4c:e3:07:e9:47:a3:6c:50:fd:f5:d2:cf:23: 22:b8:4a:3a:98:33:aa:aa:99:82:1e:d5:2a:65:2f:a6:39:f7: 7e:9a:84:70:4c:01:f4:a7:9c:e8:72:6f:d8:d9:14:e2:1e:55: e9:0b:e9:86:c7:ed:17:90:23:69:b4:02:a9:6a:be:35:43:a9: d9:16:14:12:62:b5:96:33:71:8b:24:8b:db:68:50:52:f8:fa: d5:cd:eb:48:2f:3c:b7:b8:cc:a2:e2:50:16:35:a6:1c:ba:5c: 58:bc:13:66:6a:d7:08:e0:73:9f:41:aa:06:bf:c0:17:1b:6e: c7:f9:31:53 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQFRWyYlsUPB7MYf6Eowt1v/th6AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTc0MjJCNjc4QTE3NDg5MDU0QzA2OTdENDRBM0IxOUVC OUY2NzUwOTAeFw0yNTA0MDkwNTI1MzNaFw0yNTA0MTIxMTMwMzNaMDMxMTAvBgNV BAMTKDdDQzdDMEUwQjE5M0MzOUJCRjVCNzE2NzZCQjAwMkVCQjIyMTVFODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDspMbWfKl4cxRj1HMWgN7bqrrP AxK2UkZke9oBAhBwz8NnUmvShMTVWY9X9qGkUnWC9dM69HvElFhsF6R+JKaX7FVs Rv1+iwfKAcZ4ppntseJXo+++ozmdu7tkJu3iWKRzKYWpk6mm/dltwNx3l3DT0WMI ZpBWKd+iaIgHn68n8xTvUtGq4FTGSwrHBclkqRyDC7KCTs+OFi8GHWZFqFLO6Dig 93nbjsIDHe1D9gxnnVNom3EaSalSI3Tez1GXSnUwRBDIMSkDcEBjBzPC7LE+rwlo PmOTMx2UBe0PV+Z91cp8J59mJyHLi8ifYl2DZQvN3RzEWfbwNYA693iZVzFTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfMfA4LGTw5u/W3Fna7AC67IhXoQwHwYDVR0j BBgwFoAUp0IrZ4oXSJBUwGl9RKOxnrn2dQkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k OTA1M2Q5Ni1kYTE3LTQwOTktYjcwNy1kYTBlYjJiZjA3YmMvMC9BNzQyMkI2NzhB MTc0ODkwNTRDMDY5N0Q0NEEzQjE5RUI5RjY3NTA5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvQTc0MjJCNjc4QTE3NDg5MDU0QzA2OTdENDRBM0IxOUVCOUY2 NzUwOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDkwNTNkOTYtZGExNy00MDk5LWI3 MDctZGEwZWIyYmYwN2JjLzAvQTc0MjJCNjc4QTE3NDg5MDU0QzA2OTdENDRBM0Ix OUVCOUY2NzUwOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACTumK5aq179wvikHQV8rkj3oWk7HVq+CFZq 5oxUR+V9HZHr5UaBRMD2lwD1bd4fdonRY8vRfWwcSUIklE6X3/FhKQXxy3gTlDuZ aT+ha65jW9LxWkQ8dOa6pLZl3GkHjcURVIGRv18r2sOAUJCXty2mtB9qebZ8kTQQ tSmPe5SSH1EhTOMH6UejbFD99dLPIyK4SjqYM6qqmYIe1SplL6Y5936ahHBMAfSn nOhyb9jZFOIeVekL6YbH7ReQI2m0AqlqvjVDqdkWFBJitZYzcYski9toUFL4+tXN 60gvPLe4zKLiUBY1phy6XFi8E2Zq1wjgc59Bqga/wBcbbsf5MVM= -----END CERTIFICATE-----Generated at Thu Apr 10 21:38:06 2025 by rpki-client