$ rpki-client -vvf repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.mft File: D8D82E797873C8877988A42E5C473D1919238C2A.mft (raw, json) Hash identifier: 9gCIYDib3p25F3N4IOySy2VwdpoDN69OAkOkskiOiBI= Subject key identifier: FA:5B:E9:33:19:D0:79:2F:E4:94:1A:F6:7B:AE:5C:76:33:7B:79:BA Authority key identifier: D8:D8:2E:79:78:73:C8:87:79:88:A4:2E:5C:47:3D:19:19:23:8C:2A Certificate issuer: /CN=D8D82E797873C8877988A42E5C473D1919238C2A Certificate serial: 2A6EA97A6548967190675E450B165E7B5F8FA5A4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D8D82E797873C8877988A42E5C473D1919238C2A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.mft Manifest number: C7 Signing time: Thu 10 Apr 2025 19:40:50 +0000 Manifest this update: Thu 10 Apr 2025 19:35:50 +0000 Manifest next update: Mon 14 Apr 2025 02:08:50 +0000 Files and hashes: 1: 3135372e31352e34332e302f32342d3234203d3e20313532333635.roa (hash: SdCO6LUwi+1N2Ies+pS/6sQhEMVEri8BAI23zsU+Qbk=) 2: 3135372e31352e34322e302f32332d3234203d3e20313532333635.roa (hash: ySMjg/pkUv37Q0zTaOUXDRe+ryQNKPJrUvoPh4zMnMw=) 3: 3135372e31352e34322e302f32342d3234203d3e20313532333635.roa (hash: ZWPXh7PZMzPsScuf7sWCpbvy4mjVpdrHvlCNoGfhEtg=) 4: D8D82E797873C8877988A42E5C473D1919238C2A.crl (hash: z9EAlob90jnqhcHUTXdkoimF3RRWagUGub/lngOo5U0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.crl rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D8D82E797873C8877988A42E5C473D1919238C2A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 14 Apr 2025 02:08:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:6e:a9:7a:65:48:96:71:90:67:5e:45:0b:16:5e:7b:5f:8f:a5:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D8D82E797873C8877988A42E5C473D1919238C2A Validity Not Before: Apr 10 19:35:50 2025 GMT Not After : Apr 14 02:08:50 2025 GMT Subject: CN=FA5BE93319D0792FE4941AF67BAE5C76337B79BA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:fb:4f:38:93:2e:6e:26:49:a3:08:1f:ef:b4: ee:1a:b4:e4:16:5f:7d:e7:fe:5e:cc:ca:aa:58:d9: 8a:e9:dd:ad:92:b6:0c:2f:82:c7:d6:0e:8e:81:d4: 49:c5:7d:68:d2:94:bf:c6:33:48:23:7d:a4:9e:57: 8d:70:05:da:76:e9:a5:13:82:c6:97:d0:45:f8:b5: a8:e9:25:65:49:76:16:78:81:b6:14:f1:a8:77:e2: b1:ff:1f:65:53:44:28:7e:f9:ef:6f:d3:c5:f1:2a: 0a:01:87:d6:1c:4f:0d:ec:08:40:c1:c4:0e:ae:c2: ac:56:a9:14:2e:22:26:5e:12:97:1a:75:08:e6:a5: 65:ca:24:47:3c:ac:23:a5:87:19:1d:ca:ef:4d:08: 3d:6b:71:0f:a5:57:20:a8:34:50:4a:e2:0d:79:aa: 99:db:ba:b6:32:ab:27:2e:7d:d3:9f:bc:43:da:e7: b9:f5:aa:9d:40:2e:31:30:46:83:d1:ca:f0:87:05: cb:61:88:76:b4:75:f8:c8:ab:6b:52:ae:e0:7f:42: 23:e7:27:1f:ef:5d:ec:b0:00:f4:88:ad:3c:73:2d: e9:01:dc:0f:b2:88:94:b5:c9:27:18:eb:0e:ce:bf: ef:97:4c:72:e8:11:46:0b:9d:71:ef:a5:a6:03:77: b3:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:5B:E9:33:19:D0:79:2F:E4:94:1A:F6:7B:AE:5C:76:33:7B:79:BA X509v3 Authority Key Identifier: keyid:D8:D8:2E:79:78:73:C8:87:79:88:A4:2E:5C:47:3D:19:19:23:8C:2A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D8D82E797873C8877988A42E5C473D1919238C2A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e5de71ac-7f9f-47d4-9533-9df82afc5973/0/D8D82E797873C8877988A42E5C473D1919238C2A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:20:a6:cf:1d:ba:3b:7b:35:11:36:f2:d0:ab:93:0e:eb:e4: 3d:81:5b:c5:6e:19:84:8e:d7:16:cd:f9:c2:c8:9d:52:13:cf: 59:3c:66:df:cc:8e:71:c5:2c:8b:4d:37:50:40:a4:59:39:bf: 96:22:3a:4d:8d:a8:9b:92:d2:b7:d5:99:8c:8d:38:56:9b:40: 32:47:c8:c6:61:51:2c:df:40:b8:aa:e3:96:a2:c3:d9:e5:af: 96:80:f7:f3:1f:18:7c:9c:a4:41:db:76:fe:b9:11:37:65:b1: 34:09:6d:7a:d7:b0:68:0e:c4:7c:27:ec:3e:1b:7c:ef:c2:dd: ff:39:b3:6b:9d:dd:88:ef:6f:8d:36:19:d8:78:7e:e4:39:ab: 7a:ec:b7:4a:fb:bb:e8:76:34:59:ac:7a:34:48:92:b9:05:86: 21:61:82:40:5a:1b:8c:04:e5:a3:84:9c:11:9c:86:eb:62:6f: 12:67:07:ce:b8:30:3b:25:e9:58:b1:45:1f:d2:45:ca:d9:2a: ba:e2:37:cd:13:ba:1e:a1:4c:33:9c:04:04:14:f7:c2:a4:0a: 28:52:f5:58:f3:c6:e5:8d:ba:44:e6:ee:69:d5:4b:cc:a7:81: 43:1b:04:ef:8b:23:86:c8:90:ac:5a:e8:47:f5:d2:f7:d8:bd: e4:84:1e:8d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKm6pemVIlnGQZ15FCxZee1+PpaQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDhEODJFNzk3ODczQzg4Nzc5ODhBNDJFNUM0NzNEMTkx OTIzOEMyQTAeFw0yNTA0MTAxOTM1NTBaFw0yNTA0MTQwMjA4NTBaMDMxMTAvBgNV BAMTKEZBNUJFOTMzMTlEMDc5MkZFNDk0MUFGNjdCQUU1Qzc2MzM3Qjc5QkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT+084ky5uJkmjCB/vtO4atOQW X33n/l7MyqpY2Yrp3a2StgwvgsfWDo6B1EnFfWjSlL/GM0gjfaSeV41wBdp26aUT gsaX0EX4tajpJWVJdhZ4gbYU8ah34rH/H2VTRCh++e9v08XxKgoBh9YcTw3sCEDB xA6uwqxWqRQuIiZeEpcadQjmpWXKJEc8rCOlhxkdyu9NCD1rcQ+lVyCoNFBK4g15 qpnburYyqycufdOfvEPa57n1qp1ALjEwRoPRyvCHBcthiHa0dfjIq2tSruB/QiPn Jx/vXeywAPSIrTxzLekB3A+yiJS1yScY6w7Ov++XTHLoEUYLnXHvpaYDd7MfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+lvpMxnQeS/klBr2e65cdjN7ebowHwYDVR0j BBgwFoAU2NgueXhzyId5iKQuXEc9GRkjjCowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NWRlNzFhYy03ZjlmLTQ3ZDQtOTUzMy05ZGY4MmFmYzU5NzMvMC9EOEQ4MkU3OTc4 NzNDODg3Nzk4OEE0MkU1QzQ3M0QxOTE5MjM4QzJBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDhEODJFNzk3ODczQzg4Nzc5ODhBNDJFNUM0NzNEMTkxOTIz OEMyQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTVkZTcxYWMtN2Y5Zi00N2Q0LTk1 MzMtOWRmODJhZmM1OTczLzAvRDhEODJFNzk3ODczQzg4Nzc5ODhBNDJFNUM0NzNE MTkxOTIzOEMyQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAIgps8dujt7NRE28tCrkw7r5D2BW8VuGYSO 1xbN+cLInVITz1k8Zt/MjnHFLItNN1BApFk5v5YiOk2NqJuS0rfVmYyNOFabQDJH yMZhUSzfQLiq45aiw9nlr5aA9/MfGHycpEHbdv65ETdlsTQJbXrXsGgOxHwn7D4b fO/C3f85s2ud3Yjvb402Gdh4fuQ5q3rst0r7u+h2NFmsejRIkrkFhiFhgkBaG4wE 5aOEnBGchutibxJnB864MDsl6VixRR/SRcrZKrriN80Tuh6hTDOcBAQU98KkCihS 9VjzxuWNukTm7mnVS8yngUMbBO+LI4bIkKxa6Ef10vfYveSEHo0= -----END CERTIFICATE-----Generated at Sat Apr 12 02:20:45 2025 by rpki-client