$ rpki-client -vvf repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft File: EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft (raw, json) Hash identifier: n+922CYBZWmYFDOsW5xvT5fZbTJxsa6N3AtOkuc9o70= Subject key identifier: DF:02:5A:D4:DF:DF:33:57:63:C0:ED:F5:05:A8:62:D5:CC:E2:13:68 Authority key identifier: EF:7C:A8:2C:5B:45:FD:41:2D:E8:92:CB:6D:A7:A8:CA:15:C8:5B:17 Certificate issuer: /CN=EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17 Certificate serial: 7D715BFF59C169E3C738117335897F400E91FE70 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft Manifest number: 8B Signing time: Wed 16 Apr 2025 20:51:17 +0000 Manifest this update: Wed 16 Apr 2025 20:46:17 +0000 Manifest next update: Sat 19 Apr 2025 22:50:17 +0000 Files and hashes: 1: 3135372e36362e38362e302f32332d3234203d3e20313532343432.roa (hash: n01B0+QX3ZNWpX+DEnQCCVM6NRztIEbwDneGS8PBh+8=) 2: EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.crl (hash: C6uApg+c16HPMRnjgF+dYAgpRLWBv00ggRpomjTscDY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.crl rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 22:50:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:71:5b:ff:59:c1:69:e3:c7:38:11:73:35:89:7f:40:0e:91:fe:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17 Validity Not Before: Apr 16 20:46:17 2025 GMT Not After : Apr 19 22:50:17 2025 GMT Subject: CN=DF025AD4DFDF335763C0EDF505A862D5CCE21368 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:22:23:b7:ad:d1:f7:f0:69:bd:05:3f:d1:ca: f2:e6:7f:82:87:a9:09:14:c8:28:2e:03:61:54:84: e5:cd:08:f7:ad:00:3f:14:95:f0:d4:f8:31:d5:b4: 9e:40:5b:3c:4e:c3:8e:ff:dd:69:89:2f:81:ed:1c: 40:e5:0c:12:ef:e5:fa:fe:17:14:af:d1:91:22:fc: 15:6b:d3:d4:83:e5:ae:24:13:9d:54:7c:de:46:79: 0c:22:59:c7:27:64:da:18:08:7c:15:b7:19:4f:b5: 02:1c:bb:42:6b:4d:03:71:be:2a:fe:87:61:c9:3f: 66:39:ca:cc:8b:ec:a2:c0:fb:b5:b8:b2:73:ac:15: 69:7f:6f:c0:b7:3c:96:65:bf:b2:34:29:21:20:6e: 9d:03:e1:45:71:fd:1c:a3:08:b9:12:9b:16:3a:59: 97:b8:4f:25:5b:1c:31:2c:f9:a2:b2:8a:c9:4a:de: bd:06:d2:27:59:2b:d5:39:f3:2a:26:6b:88:ff:a9: 00:75:cd:a5:a2:06:22:c8:a6:d7:3d:7b:e5:5d:5e: 24:96:f6:07:e8:6d:51:25:f2:78:30:7f:2b:ab:8a: 49:1a:dd:48:35:70:01:f3:90:3a:7b:68:a9:96:b3: 4b:6e:dd:92:90:32:9e:ef:00:21:07:00:26:81:2f: 4a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:02:5A:D4:DF:DF:33:57:63:C0:ED:F5:05:A8:62:D5:CC:E2:13:68 X509v3 Authority Key Identifier: keyid:EF:7C:A8:2C:5B:45:FD:41:2D:E8:92:CB:6D:A7:A8:CA:15:C8:5B:17 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f87dd597-40cd-409b-b3c5-2852ce014889/0/EF7CA82C5B45FD412DE892CB6DA7A8CA15C85B17.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:b9:2e:86:f1:03:ac:cb:1b:4d:e8:2b:c7:d7:ba:52:fc:af: 5b:ed:1b:3a:4d:8d:e4:18:0c:d4:e1:6c:dc:45:4a:52:8f:69: b7:73:14:c9:6e:0b:9a:bd:5a:9a:33:44:11:9f:f7:fc:75:90: 4a:00:d5:14:55:15:a4:f5:97:85:83:c2:2b:9b:a1:e1:72:89: c4:50:4a:f0:5f:fd:24:7a:51:57:f9:ec:79:74:1a:2b:66:9e: 24:e5:2e:aa:9b:bb:2e:10:39:c9:2f:fa:cf:89:76:e1:64:d4: ba:d3:90:36:be:0e:cc:b6:74:5e:bc:09:05:f1:9b:55:88:81: 74:3e:29:82:fe:50:1d:8f:e8:5e:4a:6c:27:4a:b7:63:c8:13: 7f:d4:93:7b:fd:f9:03:2d:a9:00:21:23:c4:70:9f:29:f4:ea: e1:86:f7:f2:2c:28:df:11:62:14:a7:32:96:c0:8f:3b:82:4b: 47:5d:2f:da:df:fb:27:6c:37:f5:74:53:bf:ba:63:c3:fc:c3: ae:c3:c1:0a:5d:18:b9:62:c3:91:9f:b6:53:08:4c:9b:84:e2: e0:17:04:90:63:db:ef:6a:af:16:63:1c:7e:f1:8a:6e:93:95: cc:18:05:c3:14:18:91:f5:dd:0f:66:52:cc:a4:f9:2c:e9:75: 06:32:a3:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfXFb/1nBaePHOBFzNYl/QA6R/nAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRUY3Q0E4MkM1QjQ1RkQ0MTJERTg5MkNCNkRBN0E4Q0Ex NUM4NUIxNzAeFw0yNTA0MTYyMDQ2MTdaFw0yNTA0MTkyMjUwMTdaMDMxMTAvBgNV BAMTKERGMDI1QUQ0REZERjMzNTc2M0MwRURGNTA1QTg2MkQ1Q0NFMjEzNjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkIiO3rdH38Gm9BT/RyvLmf4KH qQkUyCguA2FUhOXNCPetAD8UlfDU+DHVtJ5AWzxOw47/3WmJL4HtHEDlDBLv5fr+ FxSv0ZEi/BVr09SD5a4kE51UfN5GeQwiWccnZNoYCHwVtxlPtQIcu0JrTQNxvir+ h2HJP2Y5ysyL7KLA+7W4snOsFWl/b8C3PJZlv7I0KSEgbp0D4UVx/RyjCLkSmxY6 WZe4TyVbHDEs+aKyislK3r0G0idZK9U58yoma4j/qQB1zaWiBiLIptc9e+VdXiSW 9gfobVEl8ngwfyurikka3Ug1cAHzkDp7aKmWs0tu3ZKQMp7vACEHACaBL0p9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3wJa1N/fM1djwO31Bahi1cziE2gwHwYDVR0j BBgwFoAU73yoLFtF/UEt6JLLbaeoyhXIWxcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m ODdkZDU5Ny00MGNkLTQwOWItYjNjNS0yODUyY2UwMTQ4ODkvMC9FRjdDQTgyQzVC NDVGRDQxMkRFODkyQ0I2REE3QThDQTE1Qzg1QjE3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRUY3Q0E4MkM1QjQ1RkQ0MTJERTg5MkNCNkRBN0E4Q0ExNUM4 NUIxNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjg3ZGQ1OTctNDBjZC00MDliLWIz YzUtMjg1MmNlMDE0ODg5LzAvRUY3Q0E4MkM1QjQ1RkQ0MTJERTg5MkNCNkRBN0E4 Q0ExNUM4NUIxNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEe5LobxA6zLG03oK8fXulL8r1vtGzpNjeQY DNThbNxFSlKPabdzFMluC5q9WpozRBGf9/x1kEoA1RRVFaT1l4WDwiuboeFyicRQ SvBf/SR6UVf57Hl0GitmniTlLqqbuy4QOckv+s+JduFk1LrTkDa+Dsy2dF68CQXx m1WIgXQ+KYL+UB2P6F5KbCdKt2PIE3/Uk3v9+QMtqQAhI8Rwnyn06uGG9/IsKN8R YhSnMpbAjzuCS0ddL9rf+ydsN/V0U7+6Y8P8w67DwQpdGLliw5GftlMITJuE4uAX BJBj2+9qrxZjHH7xim6TlcwYBcMUGJH13Q9mUsyk+SzpdQYyo5Q= -----END CERTIFICATE-----Generated at Thu Apr 17 12:32:24 2025 by rpki-client