$ rpki-client -vvf repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft File: DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft (raw, json) Hash identifier: /YzWCIlzVcbH1kUqTPZNI0jjxY5Y2Tof1nlKuYF/+4E= Subject key identifier: 14:63:81:00:F5:19:56:62:39:76:E7:C2:C7:CB:3B:45:5B:C0:3D:7C Authority key identifier: DB:F7:1D:6F:8C:24:BD:B8:0D:69:2B:E8:6D:6F:7A:D3:95:1B:6C:EE Certificate issuer: /CN=DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE Certificate serial: 1D503B5542419DF3902C924ED8C07132185C4A9E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft Manifest number: 37 Signing time: Sat 03 May 2025 20:51:41 +0000 Manifest this update: Sat 03 May 2025 20:46:41 +0000 Manifest next update: Tue 06 May 2025 23:56:41 +0000 Files and hashes: 1: 3130332e3131352e3130342e302f32342d3234203d3e20313337333631.roa (hash: 6mL7Avaab4glDlpMGnON/Jhq6VFk/42559+PiNPAoXE=) 2: 323030313a6466353a323730303a3a2f34382d3438203d3e20313337333631.roa (hash: lAwEnKyw5OHxCplSawk5HVEotvU+5HwJxxtoSxrjtdo=) 3: DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.crl (hash: lEaj1PzTFnao/SL59b86zVANcLsPGi1Z6WrP7LDi9+I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.crl rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 May 2025 23:56:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1d:50:3b:55:42:41:9d:f3:90:2c:92:4e:d8:c0:71:32:18:5c:4a:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE Validity Not Before: May 3 20:46:41 2025 GMT Not After : May 6 23:56:41 2025 GMT Subject: CN=14638100F51956623976E7C2C7CB3B455BC03D7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:93:ab:f9:5a:c1:9f:2c:d2:e1:82:23:75:c8: c2:48:37:dd:25:f4:1a:ba:af:9c:6a:f3:b7:ec:80: 99:f5:92:3b:b9:d6:26:b0:ea:fe:c9:9f:ec:c7:ef: c4:a7:28:ab:52:0f:37:d2:3d:18:fb:75:c1:79:25: 75:36:ce:41:99:8d:e8:e7:a4:6d:0a:8c:64:92:62: a3:08:0c:52:e6:b2:65:a2:f6:ee:d0:11:27:7d:8f: ae:3f:ba:15:2a:6e:72:35:61:a4:d6:b3:f7:da:87: 6d:96:35:72:19:20:e2:34:79:9b:e8:9a:11:52:2a: 73:92:88:7d:96:2c:18:05:c3:e4:65:ed:b8:53:21: cb:f2:d6:01:5b:cd:0f:3e:af:53:91:c9:80:85:04: 85:1b:30:55:62:36:75:2b:06:9c:ed:ee:86:1a:18: f6:84:eb:4a:a8:11:9b:c8:40:b8:dd:19:50:17:74: 1f:a0:23:c0:10:e6:b0:40:56:25:0a:ae:c5:18:86: 2b:34:d3:23:8f:3a:ed:1b:71:26:4a:49:c9:a3:4f: 4b:7b:b3:a8:d4:91:51:95:b7:f7:73:92:59:f9:72: 47:fe:f8:4f:04:23:3e:40:53:be:ee:07:5f:94:68: 0a:ca:01:d2:89:3c:75:20:81:b3:d4:39:2d:4d:4e: b7:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 14:63:81:00:F5:19:56:62:39:76:E7:C2:C7:CB:3B:45:5B:C0:3D:7C X509v3 Authority Key Identifier: keyid:DB:F7:1D:6F:8C:24:BD:B8:0D:69:2B:E8:6D:6F:7A:D3:95:1B:6C:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:1a:4f:ec:d8:c4:b0:84:7d:6b:e3:bf:b8:b7:ee:41:58:c1: d3:30:99:b2:5c:6e:b8:0c:63:ed:0c:c8:52:90:62:8e:ce:de: d5:e7:2e:1b:c8:e1:42:ab:d6:32:f7:c9:e4:9e:77:5d:a9:0f: 35:d3:0b:6f:bc:51:b8:39:b8:25:4d:01:65:66:c7:e9:56:b3: cc:2f:69:62:0c:93:3f:55:10:2c:54:e8:9d:01:51:f8:17:d7: ac:ed:f0:4f:8b:bb:0b:df:38:2a:89:01:bd:f3:a8:a2:24:9e: 16:b1:10:b5:44:a2:73:af:10:d1:43:02:db:d0:0d:15:a5:3f: 65:5c:7f:74:bf:e7:e5:78:d8:55:ce:bf:0a:fe:27:c8:8f:b3: b9:50:6b:36:21:96:35:f2:00:1f:7c:59:16:8b:b3:ef:64:3c: 96:16:c8:61:d9:87:d9:ab:56:3d:1c:b2:38:56:0b:07:b1:60: 47:15:96:ce:7f:2a:d7:53:63:7e:32:90:b9:67:7e:03:f7:46: 35:c2:c5:72:20:57:e7:79:06:7b:32:0e:5f:25:ec:e8:2c:de: 69:99:60:0b:9b:81:3c:27:5b:6b:3c:b7:3f:9e:7c:8c:dc:20: 15:72:8f:75:e9:9f:a3:5f:4e:3b:c5:b4:b3:ba:fd:fb:3d:57: 8c:b6:01:b0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHVA7VUJBnfOQLJJO2MBxMhhcSp4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJGNzFENkY4QzI0QkRCODBENjkyQkU4NkQ2RjdBRDM5 NTFCNkNFRTAeFw0yNTA1MDMyMDQ2NDFaFw0yNTA1MDYyMzU2NDFaMDMxMTAvBgNV BAMTKDE0NjM4MTAwRjUxOTU2NjIzOTc2RTdDMkM3Q0IzQjQ1NUJDMDNEN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVk6v5WsGfLNLhgiN1yMJIN90l 9Bq6r5xq87fsgJn1kju51iaw6v7Jn+zH78SnKKtSDzfSPRj7dcF5JXU2zkGZjejn pG0KjGSSYqMIDFLmsmWi9u7QESd9j64/uhUqbnI1YaTWs/fah22WNXIZIOI0eZvo mhFSKnOSiH2WLBgFw+Rl7bhTIcvy1gFbzQ8+r1ORyYCFBIUbMFViNnUrBpzt7oYa GPaE60qoEZvIQLjdGVAXdB+gI8AQ5rBAViUKrsUYhis00yOPOu0bcSZKScmjT0t7 s6jUkVGVt/dzkln5ckf++E8EIz5AU77uB1+UaArKAdKJPHUggbPUOS1NTrcpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFGOBAPUZVmI5dufCx8s7RVvAPXwwHwYDVR0j BBgwFoAU2/cdb4wkvbgNaSvobW9605UbbO4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MzJjYWUzZi1iMzI5LTQ0MWItOTdmYy01YmI5ZmNjMDUxZDIvMC9EQkY3MUQ2RjhD MjRCREI4MEQ2OTJCRTg2RDZGN0FEMzk1MUI2Q0VFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREJGNzFENkY4QzI0QkRCODBENjkyQkU4NkQ2RjdBRDM5NTFC NkNFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDMyY2FlM2YtYjMyOS00NDFiLTk3 ZmMtNWJiOWZjYzA1MWQyLzAvREJGNzFENkY4QzI0QkRCODBENjkyQkU4NkQ2RjdB RDM5NTFCNkNFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADQaT+zYxLCEfWvjv7i37kFYwdMwmbJcbrgM Y+0MyFKQYo7O3tXnLhvI4UKr1jL3yeSed12pDzXTC2+8Ubg5uCVNAWVmx+lWs8wv aWIMkz9VECxU6J0BUfgX16zt8E+LuwvfOCqJAb3zqKIknhaxELVEonOvENFDAtvQ DRWlP2Vcf3S/5+V42FXOvwr+J8iPs7lQazYhljXyAB98WRaLs+9kPJYWyGHZh9mr Vj0csjhWCwexYEcVls5/KtdTY34ykLlnfgP3RjXCxXIgV+d5BnsyDl8l7Ogs3mmZ YAubgTwnW2s8tz+efIzcIBVyj3Xpn6NfTjvFtLO6/fs9V4y2AbA= -----END CERTIFICATE-----Generated at Mon May 5 23:43:32 2025 by rpki-client