$ rpki-client -vvf repo-rpki.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/07479445ACFB5044B3A1BCAAD626072CABEA5C10.mft File: 07479445ACFB5044B3A1BCAAD626072CABEA5C10.mft (raw, json) Hash identifier: VI2C9hOTLIcYH+XgXNitQlpLQ1sxuAS5dGa7JxahEqI= Subject key identifier: 5A:35:C3:AC:C7:5D:3E:56:5B:82:0C:E9:FD:D7:2B:CF:11:0A:27:EC Authority key identifier: 07:47:94:45:AC:FB:50:44:B3:A1:BC:AA:D6:26:07:2C:AB:EA:5C:10 Certificate issuer: /CN=07479445ACFB5044B3A1BCAAD626072CABEA5C10 Certificate serial: 0D84D1E3EDBC16EE5F43570AB1E0BB92C0C45B4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07479445ACFB5044B3A1BCAAD626072CABEA5C10.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/07479445ACFB5044B3A1BCAAD626072CABEA5C10.mft Manifest number: 035E Signing time: Thu 17 Apr 2025 09:30:35 +0000 Manifest this update: Thu 17 Apr 2025 09:25:35 +0000 Manifest next update: Sun 20 Apr 2025 16:06:35 +0000 Files and hashes: 1: 07479445ACFB5044B3A1BCAAD626072CABEA5C10.crl (hash: KFT0a2DZPgYwi3gmCs2EqG96A+jBMNJQkiLJD1Z4f8Y=) 2: 3130332e3136302e3133362e302f32342d3234203d3e20313431353838.roa (hash: oUBWXXStIDyPZSiCAParv1979xKJJMQyaI/tmorNEfQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/07479445ACFB5044B3A1BCAAD626072CABEA5C10.crl rsync://repo-rpki.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/07479445ACFB5044B3A1BCAAD626072CABEA5C10.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07479445ACFB5044B3A1BCAAD626072CABEA5C10.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 16:06:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:84:d1:e3:ed:bc:16:ee:5f:43:57:0a:b1:e0:bb:92:c0:c4:5b:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=07479445ACFB5044B3A1BCAAD626072CABEA5C10 Validity Not Before: Apr 17 09:25:35 2025 GMT Not After : Apr 20 16:06:35 2025 GMT Subject: CN=5A35C3ACC75D3E565B820CE9FDD72BCF110A27EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3a:3b:19:dd:8e:b8:ed:8b:86:0e:76:2e:f5: a7:d3:77:53:2b:0e:e4:8e:90:ca:0d:16:c9:b9:58: ef:e3:20:35:78:34:6d:b2:77:ec:cc:f3:eb:d0:7f: e2:be:a2:c5:55:8c:6a:eb:46:46:d1:9d:14:2d:97: 1a:81:56:10:b4:e9:5d:01:cf:45:20:6a:f2:32:75: de:14:2f:5b:07:b4:b2:83:ee:14:b6:6f:90:5d:7a: c5:c9:98:8a:5e:d3:6b:5e:51:f4:db:cf:b7:08:7b: 5b:fd:28:db:4f:d2:0f:74:c7:cf:e4:53:ce:38:84: 6f:f7:f9:71:4a:3f:2e:e0:0f:a3:b3:d9:18:76:26: 5a:8f:ac:de:c9:b8:1b:a4:75:ff:08:03:b5:8d:cb: 4e:d3:ef:38:80:6d:d5:23:9b:2a:89:f6:dd:c8:71: 64:2d:03:1f:8b:24:4e:09:48:48:b2:22:4f:e8:7d: f5:b8:d5:c8:c2:4e:66:49:3d:3a:e5:89:a7:2f:a9: 44:99:4b:52:d6:f2:36:a1:d0:21:7a:62:a4:38:cf: 8f:5e:c0:6d:7b:45:e2:e7:0c:e3:51:e0:6a:2d:ea: c7:46:6e:05:06:f2:9d:c1:eb:5e:8c:bf:fa:b5:5e: 10:d2:52:04:d9:83:78:51:5f:9b:4f:e1:41:00:bd: 2f:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:35:C3:AC:C7:5D:3E:56:5B:82:0C:E9:FD:D7:2B:CF:11:0A:27:EC X509v3 Authority Key Identifier: keyid:07:47:94:45:AC:FB:50:44:B3:A1:BC:AA:D6:26:07:2C:AB:EA:5C:10 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/07479445ACFB5044B3A1BCAAD626072CABEA5C10.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/07479445ACFB5044B3A1BCAAD626072CABEA5C10.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f1eed09c-6068-407a-b0a6-59b7d0b87855/0/07479445ACFB5044B3A1BCAAD626072CABEA5C10.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:eb:a1:68:ef:d3:fd:80:92:d7:78:47:73:10:f5:d7:80:27: d0:9c:5c:a6:30:6d:a6:db:06:93:da:b9:1f:e8:bb:6a:86:18: 5d:c1:a4:01:f4:fd:79:02:8c:8c:62:0b:57:5b:51:3f:7b:a6: b4:05:f4:b3:09:15:19:fb:b8:c7:bd:c9:0f:70:54:5b:31:1d: e2:12:af:6c:26:7f:64:13:45:72:24:a6:22:8f:a5:40:02:36: 7a:4d:f1:aa:4c:79:5f:57:ab:7d:bf:22:fb:17:c3:54:19:ae: 2c:db:35:77:5f:e7:75:7e:2c:a6:79:0e:53:9a:d0:05:14:62: 9c:e7:67:9a:a8:b3:d9:e3:81:10:82:d2:eb:a2:aa:a9:d1:39: 6e:f5:8d:4b:06:c8:60:a9:ed:e1:8b:22:59:6f:f8:a8:72:e0: dc:66:2f:59:e9:34:5c:c2:29:1e:c7:d3:47:30:9c:f8:8e:8f: 0f:30:ff:57:d1:fb:ed:76:4f:c8:74:f0:b2:35:6e:d1:7a:7d: 8b:71:f4:b6:7c:c4:57:f5:e1:00:7a:ac:46:91:9e:b0:23:3b: bc:3a:08:12:a7:2f:d7:b6:75:d8:32:8a:0b:43:29:8d:06:ee: 0d:44:da:b3:ee:11:33:d8:03:20:d9:06:34:e2:cb:49:20:5a: d3:e0:70:73 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDYTR4+28Fu5fQ1cKseC7ksDEW00wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDc0Nzk0NDVBQ0ZCNTA0NEIzQTFCQ0FBRDYyNjA3MkNB QkVBNUMxMDAeFw0yNTA0MTcwOTI1MzVaFw0yNTA0MjAxNjA2MzVaMDMxMTAvBgNV BAMTKDVBMzVDM0FDQzc1RDNFNTY1QjgyMENFOUZERDcyQkNGMTEwQTI3RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4OjsZ3Y647YuGDnYu9afTd1Mr DuSOkMoNFsm5WO/jIDV4NG2yd+zM8+vQf+K+osVVjGrrRkbRnRQtlxqBVhC06V0B z0UgavIydd4UL1sHtLKD7hS2b5BdesXJmIpe02teUfTbz7cIe1v9KNtP0g90x8/k U844hG/3+XFKPy7gD6Oz2Rh2JlqPrN7JuBukdf8IA7WNy07T7ziAbdUjmyqJ9t3I cWQtAx+LJE4JSEiyIk/offW41cjCTmZJPTrliacvqUSZS1LW8jah0CF6YqQ4z49e wG17ReLnDONR4Got6sdGbgUG8p3B616Mv/q1XhDSUgTZg3hRX5tP4UEAvS8pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWjXDrMddPlZbggzp/dcrzxEKJ+wwHwYDVR0j BBgwFoAUB0eURaz7UESzobyq1iYHLKvqXBAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MWVlZDA5Yy02MDY4LTQwN2EtYjBhNi01OWI3ZDBiODc4NTUvMC8wNzQ3OTQ0NUFD RkI1MDQ0QjNBMUJDQUFENjI2MDcyQ0FCRUE1QzEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMDc0Nzk0NDVBQ0ZCNTA0NEIzQTFCQ0FBRDYyNjA3MkNBQkVB NUMxMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjFlZWQwOWMtNjA2OC00MDdhLWIw YTYtNTliN2QwYjg3ODU1LzAvMDc0Nzk0NDVBQ0ZCNTA0NEIzQTFCQ0FBRDYyNjA3 MkNBQkVBNUMxMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIProWjv0/2Aktd4R3MQ9deAJ9CcXKYwbabb BpPauR/ou2qGGF3BpAH0/XkCjIxiC1dbUT97prQF9LMJFRn7uMe9yQ9wVFsxHeIS r2wmf2QTRXIkpiKPpUACNnpN8apMeV9Xq32/IvsXw1QZrizbNXdf53V+LKZ5DlOa 0AUUYpznZ5qos9njgRCC0uuiqqnROW71jUsGyGCp7eGLIllv+Khy4NxmL1npNFzC KR7H00cwnPiOjw8w/1fR++12T8h08LI1btF6fYtx9LZ8xFf14QB6rEaRnrAjO7w6 CBKnL9e2ddgyigtDKY0G7g1E2rPuETPYAyDZBjTiy0kgWtPgcHM= -----END CERTIFICATE-----Generated at Sat Apr 19 15:17:18 2025 by rpki-client