$ rpki-client -vvf repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.mft File: DB03D7B542C60D3D72565734C86589420DF070A0.mft (raw, json) Hash identifier: +RTTKHoEDC0WkFtvzQnnGy2Kxy51e32/hnovYsUt0Qk= Subject key identifier: B0:6B:C2:7A:EC:E6:76:12:0B:85:C3:0F:EC:74:8A:E5:0C:3F:C8:79 Authority key identifier: DB:03:D7:B5:42:C6:0D:3D:72:56:57:34:C8:65:89:42:0D:F0:70:A0 Certificate issuer: /CN=DB03D7B542C60D3D72565734C86589420DF070A0 Certificate serial: 3C406AB58F952D90AE69A5470CFC781F60D8E74A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB03D7B542C60D3D72565734C86589420DF070A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.mft Manifest number: 01E5 Signing time: Sat 03 May 2025 01:42:07 +0000 Manifest this update: Sat 03 May 2025 01:37:07 +0000 Manifest next update: Tue 06 May 2025 11:51:07 +0000 Files and hashes: 1: 3130332e3138362e3231322e302f32332d3234203d3e20313439373134.roa (hash: qTxbUW36PI+ML7M9h6pieAAtdA4D+wz75UuUpAqL/GM=) 2: DB03D7B542C60D3D72565734C86589420DF070A0.crl (hash: iaSB6+bHYdGI+GjLNobzNa7rnqtLxzNctzthR+nQjHE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.crl rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB03D7B542C60D3D72565734C86589420DF070A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 May 2025 11:51:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:40:6a:b5:8f:95:2d:90:ae:69:a5:47:0c:fc:78:1f:60:d8:e7:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB03D7B542C60D3D72565734C86589420DF070A0 Validity Not Before: May 3 01:37:07 2025 GMT Not After : May 6 11:51:07 2025 GMT Subject: CN=B06BC27AECE676120B85C30FEC748AE50C3FC879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:f4:20:2e:5f:70:8b:09:5b:a8:40:85:23:1d: 6f:64:1d:51:e2:83:78:e0:43:7b:39:f8:ed:82:ce: 1c:f2:d4:48:f9:7f:05:46:3b:96:73:5c:6e:18:a3: 44:5d:69:02:ac:d6:9d:af:9e:9a:ae:a1:11:39:b0: 09:bb:d7:1f:95:0a:46:7d:97:3e:9e:72:04:83:d3: c9:56:dc:c5:bc:5c:e5:b9:1f:c6:85:5b:4b:57:48: 4f:4b:05:96:b7:10:cc:fe:ef:95:83:6b:97:6a:41: 06:74:68:ff:e7:45:ea:72:21:72:5a:f4:07:91:1b: 41:06:d3:af:0b:d1:e6:35:28:44:21:89:c8:c9:d9: 76:7e:47:4f:7f:63:b3:5d:a7:c0:66:f3:ce:66:99: 03:22:62:60:c3:27:22:45:70:8a:a1:62:7d:56:fc: f8:5a:d1:83:75:f4:b3:36:d3:12:29:09:30:7d:e2: 8d:6c:a8:98:0d:15:c2:dd:d5:5c:c2:d7:10:ea:3d: 1b:0b:3b:7a:5f:19:05:54:44:4f:4a:f2:ab:96:32: d8:93:fb:a0:c8:26:14:a9:e8:5a:22:51:68:93:90: 9a:51:b0:cf:e9:b4:d8:b2:8a:fb:5d:76:61:b7:33: e8:73:0b:0d:62:23:d0:e4:48:cd:25:0f:ad:20:a2: b1:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:6B:C2:7A:EC:E6:76:12:0B:85:C3:0F:EC:74:8A:E5:0C:3F:C8:79 X509v3 Authority Key Identifier: keyid:DB:03:D7:B5:42:C6:0D:3D:72:56:57:34:C8:65:89:42:0D:F0:70:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB03D7B542C60D3D72565734C86589420DF070A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c3:78:f2:e5:3b:9a:03:d7:cc:df:b0:c9:70:30:bf:31:7d:ec: 47:df:86:3a:3c:50:4e:62:f2:9f:6b:da:cf:37:55:a8:be:5d: 11:0c:75:3b:cc:7a:0e:db:67:a5:e1:16:25:79:0b:8c:26:6a: 20:11:02:3b:7f:f9:58:53:b1:50:08:81:8b:5d:38:13:a6:f4: 39:35:01:55:e2:fb:94:fd:e9:be:3e:28:58:8a:3b:91:48:48: fe:12:a9:a5:7d:7e:f1:04:80:ec:04:7f:f1:9e:f2:81:fc:12: b9:1e:55:12:25:1d:3e:8e:95:3b:3f:56:75:c9:c2:0d:dc:31: be:98:fd:64:c7:5b:85:29:19:c7:29:e2:12:37:1c:90:13:30: a2:c6:4a:fe:30:c4:cc:d6:1a:3c:ef:52:aa:bc:d3:d5:18:35: ce:13:4b:f8:b1:a0:6a:fa:92:9d:9c:23:88:d6:4c:b3:84:87: 95:7d:ac:f5:b3:8c:a6:1c:a5:7f:0f:e1:0f:61:68:0b:f2:19: 01:7e:de:2b:f8:1e:12:66:8e:52:c8:98:e7:73:55:06:ea:a2: c2:e3:b2:f6:43:64:b4:d8:38:b8:91:f1:07:aa:c3:23:d5:6c: 6a:db:e8:98:3c:99:09:67:04:97:e7:cc:30:d0:06:97:36:5f: a5:b8:2a:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPEBqtY+VLZCuaaVHDPx4H2DY50owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIwM0Q3QjU0MkM2MEQzRDcyNTY1NzM0Qzg2NTg5NDIw REYwNzBBMDAeFw0yNTA1MDMwMTM3MDdaFw0yNTA1MDYxMTUxMDdaMDMxMTAvBgNV BAMTKEIwNkJDMjdBRUNFNjc2MTIwQjg1QzMwRkVDNzQ4QUU1MEMzRkM4NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg9CAuX3CLCVuoQIUjHW9kHVHi g3jgQ3s5+O2Czhzy1Ej5fwVGO5ZzXG4Yo0RdaQKs1p2vnpquoRE5sAm71x+VCkZ9 lz6ecgSD08lW3MW8XOW5H8aFW0tXSE9LBZa3EMz+75WDa5dqQQZ0aP/nRepyIXJa 9AeRG0EG068L0eY1KEQhicjJ2XZ+R09/Y7Ndp8Bm885mmQMiYmDDJyJFcIqhYn1W /Pha0YN19LM20xIpCTB94o1sqJgNFcLd1VzC1xDqPRsLO3pfGQVURE9K8quWMtiT +6DIJhSp6FoiUWiTkJpRsM/ptNiyivtddmG3M+hzCw1iI9DkSM0lD60gorELAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsGvCeuzmdhILhcMP7HSK5Qw/yHkwHwYDVR0j BBgwFoAU2wPXtULGDT1yVlc0yGWJQg3wcKAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NGYyODIzNS0wYmE4LTRlMTQtOGI4NS0yOWMzYTRhNzZlYWIvMC9EQjAzRDdCNTQy QzYwRDNENzI1NjU3MzRDODY1ODk0MjBERjA3MEEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREIwM0Q3QjU0MkM2MEQzRDcyNTY1NzM0Qzg2NTg5NDIwREYw NzBBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDRmMjgyMzUtMGJhOC00ZTE0LThi ODUtMjljM2E0YTc2ZWFiLzAvREIwM0Q3QjU0MkM2MEQzRDcyNTY1NzM0Qzg2NTg5 NDIwREYwNzBBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMN48uU7mgPXzN+wyXAwvzF97Effhjo8UE5i 8p9r2s83Vai+XREMdTvMeg7bZ6XhFiV5C4wmaiARAjt/+VhTsVAIgYtdOBOm9Dk1 AVXi+5T96b4+KFiKO5FISP4SqaV9fvEEgOwEf/Ge8oH8ErkeVRIlHT6OlTs/VnXJ wg3cMb6Y/WTHW4UpGccp4hI3HJATMKLGSv4wxMzWGjzvUqq809UYNc4TS/ixoGr6 kp2cI4jWTLOEh5V9rPWzjKYcpX8P4Q9haAvyGQF+3iv4HhJmjlLImOdzVQbqosLj svZDZLTYOLiR8QeqwyPVbGrb6Jg8mQlnBJfnzDDQBpc2X6W4KlQ= -----END CERTIFICATE-----Generated at Tue May 6 04:33:37 2025 by rpki-client