$ rpki-client -vvf repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.mft File: 7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.mft (raw, json) Hash identifier: m9BWWHYkq/z8Y66rSFuK23y937uxiAaVjIweMYFvGv4= Subject key identifier: 57:4D:49:8D:49:15:BB:EC:E6:38:FD:8F:15:A0:D3:4E:6C:D2:EC:29 Authority key identifier: 7C:4E:AC:B6:A8:C8:C7:27:6D:4C:EB:86:DC:DC:A3:E7:F4:68:A7:93 Certificate issuer: /CN=7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793 Certificate serial: 55875518C49117A2C7CEAF0294FE62F2C8DC1FEA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.mft Manifest number: A4 Signing time: Mon 07 Apr 2025 22:00:44 +0000 Manifest this update: Mon 07 Apr 2025 21:55:44 +0000 Manifest next update: Fri 11 Apr 2025 04:56:44 +0000 Files and hashes: 1: 3135372e32302e3231322e302f32332d3234203d3e20313532343135.roa (hash: rbjJyAwc8hNNHHozNUZcHui2yrJ3XRP3MxmsmjgubzQ=) 2: 7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.crl (hash: SVVtY57SyXzEXUjzipAlnEeRlLZvhUJU+Mv4iM/DH8Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.crl rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 04:56:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:87:55:18:c4:91:17:a2:c7:ce:af:02:94:fe:62:f2:c8:dc:1f:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793 Validity Not Before: Apr 7 21:55:44 2025 GMT Not After : Apr 11 04:56:44 2025 GMT Subject: CN=574D498D4915BBECE638FD8F15A0D34E6CD2EC29 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:cf:f4:49:15:28:a2:84:98:81:8b:ea:a1:38: b6:40:87:78:36:03:e2:f1:f3:04:d6:e1:4d:dc:99: 4e:ee:5f:a1:09:79:c9:56:83:d3:c1:76:db:db:29: 21:fa:93:35:bb:4b:9a:28:d6:0b:c3:40:84:8e:90: cf:16:dd:0d:eb:c5:07:ad:45:4e:b3:90:73:98:43: 3b:dd:ae:1a:5c:0f:cd:1b:c7:fa:83:97:84:5e:78: 03:83:6f:94:97:82:dd:2e:56:bb:f6:a9:bb:bd:25: 12:35:47:34:3a:19:b1:c5:88:c5:72:c7:2a:d1:ee: 9c:c0:67:76:30:c4:8f:f8:cb:81:51:eb:b1:1b:5f: 7a:c3:6e:3e:a2:ff:40:00:42:b8:2f:f4:8f:19:ee: 4e:f0:89:0e:90:1f:62:87:89:2f:bf:b2:82:42:96: 7a:c6:1d:a3:ae:f3:af:40:d9:e2:ef:a0:3c:45:45: 39:b4:a2:2f:13:1d:e3:e8:7d:8a:88:3b:ae:ec:64: d7:e5:87:1f:92:42:69:4c:25:f4:60:86:d8:1f:9f: 7b:46:77:6c:71:e3:70:86:8f:ff:09:32:e2:6e:70: 2f:5d:b3:62:1a:8c:20:a8:73:0f:43:af:c0:99:f8: 99:f2:e4:0a:93:5a:85:aa:69:a5:2f:cd:76:e6:78: 9b:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:4D:49:8D:49:15:BB:EC:E6:38:FD:8F:15:A0:D3:4E:6C:D2:EC:29 X509v3 Authority Key Identifier: keyid:7C:4E:AC:B6:A8:C8:C7:27:6D:4C:EB:86:DC:DC:A3:E7:F4:68:A7:93 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f3b47ab6-d1f1-4d2e-9cfc-8084a4bacf0b/0/7C4EACB6A8C8C7276D4CEB86DCDCA3E7F468A793.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:ea:f3:ff:29:02:70:12:c4:90:99:a1:60:b9:7f:1b:65:d9: 7d:82:5e:c1:a7:9c:46:a2:a0:15:17:85:6a:00:db:cd:ea:29: 21:f4:e5:f1:76:49:c9:f4:f4:2b:f1:ab:cb:cb:22:dc:0b:76: 45:a9:e6:1f:ef:e7:5c:97:90:36:da:56:c8:bc:40:85:91:f1: 41:1f:a3:41:d8:35:e9:e0:22:b3:3b:8a:c1:c3:5f:4d:86:ae: 46:ab:4f:df:87:94:96:d2:64:98:34:30:3e:d9:cf:2d:56:34: 64:3b:0e:dc:83:05:81:f3:e0:7b:1f:7f:58:7e:b7:fd:b7:02: a8:76:8f:7b:fd:48:fe:bc:ca:fc:d2:cd:73:0a:d7:ea:7c:16: 08:df:14:a0:f6:de:68:7f:c4:b2:4f:0b:fe:aa:05:3e:b9:59: 2c:b1:a0:10:1c:71:54:7e:6a:ea:35:18:68:3a:d7:53:53:ac: 3c:4f:14:83:cc:39:66:fa:54:9d:33:7f:f8:f0:89:08:d3:0c: 3c:5a:9f:bc:76:7c:ed:44:8e:57:a9:ea:4a:4d:33:4a:38:95: db:a1:e2:dd:46:d0:c2:dd:8b:95:19:15:40:30:cb:62:30:72: 0e:6a:a4:84:4d:96:c0:d8:50:2c:1c:b1:f4:e4:ff:6f:a2:c4: aa:fb:6f:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVYdVGMSRF6LHzq8ClP5i8sjcH+owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoN0M0RUFDQjZBOEM4QzcyNzZENENFQjg2RENEQ0EzRTdG NDY4QTc5MzAeFw0yNTA0MDcyMTU1NDRaFw0yNTA0MTEwNDU2NDRaMDMxMTAvBgNV BAMTKDU3NEQ0OThENDkxNUJCRUNFNjM4RkQ4RjE1QTBEMzRFNkNEMkVDMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8z/RJFSiihJiBi+qhOLZAh3g2 A+Lx8wTW4U3cmU7uX6EJeclWg9PBdtvbKSH6kzW7S5oo1gvDQISOkM8W3Q3rxQet RU6zkHOYQzvdrhpcD80bx/qDl4ReeAODb5SXgt0uVrv2qbu9JRI1RzQ6GbHFiMVy xyrR7pzAZ3YwxI/4y4FR67EbX3rDbj6i/0AAQrgv9I8Z7k7wiQ6QH2KHiS+/soJC lnrGHaOu869A2eLvoDxFRTm0oi8THePofYqIO67sZNflhx+SQmlMJfRghtgfn3tG d2xx43CGj/8JMuJucC9ds2IajCCocw9Dr8CZ+Jny5AqTWoWqaaUvzXbmeJudAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUV01JjUkVu+zmOP2PFaDTTmzS7CkwHwYDVR0j BBgwFoAUfE6stqjIxydtTOuG3Nyj5/Rop5MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m M2I0N2FiNi1kMWYxLTRkMmUtOWNmYy04MDg0YTRiYWNmMGIvMC83QzRFQUNCNkE4 QzhDNzI3NkQ0Q0VCODZEQ0RDQTNFN0Y0NjhBNzkzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvN0M0RUFDQjZBOEM4QzcyNzZENENFQjg2RENEQ0EzRTdGNDY4 QTc5My5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjNiNDdhYjYtZDFmMS00ZDJlLTlj ZmMtODA4NGE0YmFjZjBiLzAvN0M0RUFDQjZBOEM4QzcyNzZENENFQjg2RENEQ0Ez RTdGNDY4QTc5My5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADLq8/8pAnASxJCZoWC5fxtl2X2CXsGnnEai oBUXhWoA283qKSH05fF2Scn09Cvxq8vLItwLdkWp5h/v51yXkDbaVsi8QIWR8UEf o0HYNengIrM7isHDX02GrkarT9+HlJbSZJg0MD7Zzy1WNGQ7DtyDBYHz4Hsff1h+ t/23Aqh2j3v9SP68yvzSzXMK1+p8FgjfFKD23mh/xLJPC/6qBT65WSyxoBAccVR+ auo1GGg611NTrDxPFIPMOWb6VJ0zf/jwiQjTDDxan7x2fO1Ejlep6kpNM0o4lduh 4t1G0MLdi5UZFUAwy2Iwcg5qpIRNlsDYUCwcsfTk/2+ixKr7bx0= -----END CERTIFICATE-----Generated at Wed Apr 9 15:21:13 2025 by rpki-client