$ rpki-client -vvf repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.mft File: 92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.mft (raw, json) Hash identifier: jQRcM7ylP+EHmYF9mouGwaF3Cj7QFnOgw4ifYNFpQak= Subject key identifier: 7F:92:F1:2D:50:70:B0:CF:6C:7A:04:38:0E:38:7D:53:B1:DC:9A:A6 Authority key identifier: 92:E6:CA:68:3A:FA:18:EA:03:19:DE:C1:7D:DF:53:E0:DE:14:FD:89 Certificate issuer: /CN=92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89 Certificate serial: 4FF43C31EFE229B05E225A83271A7F699A00D536 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.mft Manifest number: 04C7 Signing time: Sat 05 Apr 2025 02:50:39 +0000 Manifest this update: Sat 05 Apr 2025 02:45:39 +0000 Manifest next update: Tue 08 Apr 2025 06:48:39 +0000 Files and hashes: 1: 323430363a343563303a3a2f33322d3332203d3e203634333030.roa (hash: mExYqLdL0Yo1eS6gHZR1YzCOV2yWVv/IrbWEOLxL0ms=) 2: 323430363a343563303a383030303a3a2f33332d3438203d3e203634333030.roa (hash: Y92n8kI4o/dXH3j9WlXaL/z49fQAIto/aImu35/UD/c=) 3: 3130332e3135332e3134382e302f32332d3233203d3e203634333030.roa (hash: jVne5rUtwt9PTYaeEjn6cm3OrPHuxr79CzttZiT3p34=) 4: 3130332e3135332e3134392e302f32342d3234203d3e203634333030.roa (hash: ZBTXTgCA48JfGymalSfqrlXJz6ekuvT1MzgQd1mvq6s=) 5: 323430363a343563303a3a2f33332d3438203d3e203634333030.roa (hash: XquPbz3g3Ep5Ha8/mTO/9YwY+xxCsOYiSz93lsrulwc=) 6: 92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.crl (hash: bZQ7gKdSkYLT9Quuma2SI/PeFn8l4XEaLgLgzO3yoEE=) 7: 3130332e3135332e3134382e302f32342d3234203d3e203634333030.roa (hash: w2U2K9aELE05/Mpub68n6bRjpzCrbkUoCkMd5hXQabQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.crl rsync://repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:f4:3c:31:ef:e2:29:b0:5e:22:5a:83:27:1a:7f:69:9a:00:d5:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89 Validity Not Before: Apr 5 02:45:39 2025 GMT Not After : Apr 8 06:48:39 2025 GMT Subject: CN=7F92F12D5070B0CF6C7A04380E387D53B1DC9AA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:8f:be:54:88:36:bf:fd:c1:02:b8:de:6c:62: 91:95:19:e3:d0:a1:f5:78:d9:c5:b8:db:90:16:05: c1:3f:3c:36:66:45:85:74:c1:6d:20:09:44:56:bd: 9d:13:6b:ab:6c:49:5b:69:a1:19:7d:ad:a2:44:2f: 00:6d:8d:89:59:32:82:1c:4c:13:2c:39:3e:c8:63: ce:93:18:b3:52:fb:fe:c0:6b:43:62:ff:b6:5a:30: 91:46:c7:de:33:d5:19:d1:4c:54:61:7c:50:85:4c: 69:21:eb:1c:a6:c1:94:de:8f:0f:3c:67:ff:eb:fb: 94:a9:90:66:0e:53:a9:6f:eb:cc:08:4c:96:0d:f2: af:c1:cd:70:a2:3d:e7:87:2d:72:c3:10:ac:52:d6: 19:35:4b:59:4b:8a:49:41:65:c9:ee:d0:40:ce:59: f1:ca:b8:bd:34:d1:11:d0:2d:fa:96:c3:4e:f7:2f: a1:26:be:d8:7b:d9:9d:bb:f4:e7:5c:95:75:f3:62: 0f:a4:d7:4b:c2:7a:28:41:f4:fc:f9:05:cf:97:8d: 17:21:69:42:c8:19:4e:9a:0d:47:6e:58:86:85:9d: 77:0a:84:28:da:f1:07:19:d1:03:96:cf:5a:17:70: e4:e0:5c:dd:31:61:8f:80:f5:05:58:71:bd:95:cc: cd:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:92:F1:2D:50:70:B0:CF:6C:7A:04:38:0E:38:7D:53:B1:DC:9A:A6 X509v3 Authority Key Identifier: keyid:92:E6:CA:68:3A:FA:18:EA:03:19:DE:C1:7D:DF:53:E0:DE:14:FD:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e4304b64-2899-4830-9c3c-37584a327e1e/0/92E6CA683AFA18EA0319DEC17DDF53E0DE14FD89.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:ee:e5:d7:01:a1:15:e0:8c:bc:81:56:51:07:7b:2c:e5:69: a5:1d:9b:66:00:85:22:48:fa:62:c0:88:70:99:39:6d:c9:fa: b1:e6:ac:e6:7a:87:90:04:63:ca:3b:57:31:c2:27:62:90:54: 14:45:17:5d:71:f1:01:44:44:5e:a1:e2:bb:33:75:42:94:c3: de:2f:62:05:10:97:4d:2b:42:87:44:1a:0f:3f:c7:33:b6:f1: ad:38:9a:dd:c4:65:ab:0a:7e:51:b2:c1:07:5d:08:e8:f4:69: 21:85:69:af:81:51:4a:23:e9:43:ec:4c:49:e4:19:2f:f6:af: 31:3e:e6:4b:ec:9a:bc:5e:ad:38:15:c3:f8:bc:ac:07:13:86: 08:24:28:09:5c:d6:72:a1:30:ea:a7:c4:8e:a3:83:58:f5:88: ed:83:f7:07:61:2b:56:f1:07:52:ff:e2:17:40:9d:b3:3e:cd: e4:de:53:be:89:ba:4f:69:37:44:c2:6f:dc:15:a8:b7:63:e1: d3:0d:15:dd:4b:5e:e5:5c:ad:d0:a0:57:b4:11:30:61:7c:64: 94:5a:40:3a:95:7b:67:94:d3:4a:f8:6e:4e:5e:b3:34:be:3d: c5:40:f5:b9:78:bc:b0:0c:ed:96:c2:5c:72:d3:8f:1e:c3:be: 35:54:50:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT/Q8Me/iKbBeIlqDJxp/aZoA1TYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTJFNkNBNjgzQUZBMThFQTAzMTlERUMxN0RERjUzRTBE RTE0RkQ4OTAeFw0yNTA0MDUwMjQ1MzlaFw0yNTA0MDgwNjQ4MzlaMDMxMTAvBgNV BAMTKDdGOTJGMTJENTA3MEIwQ0Y2QzdBMDQzODBFMzg3RDUzQjFEQzlBQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXj75UiDa//cECuN5sYpGVGePQ ofV42cW425AWBcE/PDZmRYV0wW0gCURWvZ0Ta6tsSVtpoRl9raJELwBtjYlZMoIc TBMsOT7IY86TGLNS+/7Aa0Ni/7ZaMJFGx94z1RnRTFRhfFCFTGkh6xymwZTejw88 Z//r+5SpkGYOU6lv68wITJYN8q/BzXCiPeeHLXLDEKxS1hk1S1lLiklBZcnu0EDO WfHKuL000RHQLfqWw073L6Emvth72Z279OdclXXzYg+k10vCeihB9Pz5Bc+XjRch aULIGU6aDUduWIaFnXcKhCja8QcZ0QOWz1oXcOTgXN0xYY+A9QVYcb2VzM2DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUf5LxLVBwsM9segQ4Djh9U7HcmqYwHwYDVR0j BBgwFoAUkubKaDr6GOoDGd7Bfd9T4N4U/YkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NDMwNGI2NC0yODk5LTQ4MzAtOWMzYy0zNzU4NGEzMjdlMWUvMC85MkU2Q0E2ODNB RkExOEVBMDMxOURFQzE3RERGNTNFMERFMTRGRDg5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvOTJFNkNBNjgzQUZBMThFQTAzMTlERUMxN0RERjUzRTBERTE0 RkQ4OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTQzMDRiNjQtMjg5OS00ODMwLTlj M2MtMzc1ODRhMzI3ZTFlLzAvOTJFNkNBNjgzQUZBMThFQTAzMTlERUMxN0RERjUz RTBERTE0RkQ4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACnu5dcBoRXgjLyBVlEHeyzlaaUdm2YAhSJI +mLAiHCZOW3J+rHmrOZ6h5AEY8o7VzHCJ2KQVBRFF11x8QFERF6h4rszdUKUw94v YgUQl00rQodEGg8/xzO28a04mt3EZasKflGywQddCOj0aSGFaa+BUUoj6UPsTEnk GS/2rzE+5kvsmrxerTgVw/i8rAcThggkKAlc1nKhMOqnxI6jg1j1iO2D9wdhK1bx B1L/4hdAnbM+zeTeU76Juk9pN0TCb9wVqLdj4dMNFd1LXuVcrdCgV7QRMGF8ZJRa QDqVe2eU00r4bk5eszS+PcVA9bl4vLAM7ZbCXHLTjx7DvjVUUP0= -----END CERTIFICATE-----Generated at Sat Apr 5 16:44:56 2025 by rpki-client