$ rpki-client -vvf repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft File: D3BDA2123144839640DA280D6B971C12D0C9C929.mft (raw, json) Hash identifier: U6iyGkYgYh3bqiVrk55sQeFLyakepnIsKt58ORv2sIk= Subject key identifier: 36:51:07:6A:FA:65:46:6A:25:BA:6E:C7:1E:8F:E7:8F:70:96:25:14 Authority key identifier: D3:BD:A2:12:31:44:83:96:40:DA:28:0D:6B:97:1C:12:D0:C9:C9:29 Certificate issuer: /CN=D3BDA2123144839640DA280D6B971C12D0C9C929 Certificate serial: 5FDB955DB805317E625CB3F06921FD841940E4CE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3BDA2123144839640DA280D6B971C12D0C9C929.cer Subject info access: rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft Manifest number: 0199 Signing time: Sat 10 May 2025 06:51:39 +0000 Manifest this update: Sat 10 May 2025 06:46:39 +0000 Manifest next update: Tue 13 May 2025 08:15:39 +0000 Files and hashes: 1: 3130332e3130342e3133302e302f32342d3234203d3e20313336383731.roa (hash: LgwwS+fgDKg25QWDtuUlSa123O0j3oTaPddVCPibVQw=) 2: D3BDA2123144839640DA280D6B971C12D0C9C929.crl (hash: P1v3JMdywVJhlIXmGRtNAQUMGv3WDQl3Eg53DR7l2ck=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.crl rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3BDA2123144839640DA280D6B971C12D0C9C929.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 08:15:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:db:95:5d:b8:05:31:7e:62:5c:b3:f0:69:21:fd:84:19:40:e4:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3BDA2123144839640DA280D6B971C12D0C9C929 Validity Not Before: May 10 06:46:39 2025 GMT Not After : May 13 08:15:39 2025 GMT Subject: CN=3651076AFA65466A25BA6EC71E8FE78F70962514 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:f3:5d:2c:3b:7a:9a:d7:b8:80:b5:23:3f:5f: 6e:31:50:7f:a3:88:3b:84:09:5e:62:14:d7:b1:ff: 06:ab:87:d8:5c:32:ef:1e:4a:ba:8c:fd:72:5c:a1: bd:a4:a6:ea:d8:b4:53:df:77:a6:38:23:bd:4c:6c: 82:90:b1:00:68:89:9e:3b:95:00:5b:cb:fd:04:9f: 8b:68:92:e1:23:70:4f:87:6f:a1:73:42:96:8a:af: 72:ca:2c:3f:b4:cb:8d:24:d4:fe:2f:8b:83:b0:41: c2:ae:af:53:85:0e:cb:15:cc:6b:47:73:dc:26:15: cf:91:82:49:6e:de:b7:e3:61:80:39:79:6d:d2:47: d2:cc:7c:c2:2b:26:8c:67:d3:67:4b:3c:2c:6d:c6: 97:ec:34:c8:1e:b6:17:21:99:3a:51:35:42:5a:62: 78:69:a0:ce:c3:d7:10:dd:a5:23:44:33:0c:91:f7: 71:98:b5:ed:1f:0e:b1:59:fb:09:5c:0f:da:f0:38: 82:d2:07:75:cd:4d:de:cc:17:72:be:a3:3d:f9:dd: 47:26:23:22:94:bd:8b:a8:11:4f:2c:4c:5f:19:32: a7:cf:60:fc:e2:bf:37:d6:15:d3:fb:52:12:30:75: 21:a5:01:4d:0e:d0:d4:b3:a5:e2:f1:5c:f2:07:88: de:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:51:07:6A:FA:65:46:6A:25:BA:6E:C7:1E:8F:E7:8F:70:96:25:14 X509v3 Authority Key Identifier: keyid:D3:BD:A2:12:31:44:83:96:40:DA:28:0D:6B:97:1C:12:D0:C9:C9:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3BDA2123144839640DA280D6B971C12D0C9C929.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:e6:4a:ac:52:cd:ed:73:f0:21:87:0e:7e:ce:be:71:da:15: 62:a3:36:77:82:95:a2:77:c3:67:8d:1d:a4:65:fa:f5:c1:17: 0c:a3:8e:3f:e9:e3:a7:37:52:da:ed:73:5f:d4:88:7b:46:73: 5b:35:57:08:bd:cd:5b:dc:80:b9:b7:6a:5d:08:69:6b:c0:d3: 06:81:cd:a1:1e:ea:22:07:30:6a:a8:73:28:dc:91:56:94:18: 67:bc:37:e8:81:88:61:e1:a7:c7:81:7f:32:f8:45:d0:b5:03: 86:93:74:58:b0:a7:50:cb:a5:55:fc:e8:cc:49:23:ae:06:26: 28:af:b5:42:85:72:48:51:18:07:2b:ac:71:b5:a3:34:a2:48: 33:ac:96:db:76:f0:4a:86:63:e9:1b:0e:d9:5b:a8:57:4d:f8: a6:a2:1a:c0:69:48:b4:26:fb:15:50:b4:da:66:13:00:e3:38: 81:30:b5:f7:fd:b6:b6:db:da:df:9e:44:d5:34:2c:c5:65:38: 2c:41:9d:05:7e:1f:d0:92:c9:91:34:da:9f:a2:4d:3e:a0:b1: 21:d0:1b:55:02:a4:2d:ab:f8:90:b0:26:e5:4d:99:a6:e8:66: e1:a2:fc:2a:a1:89:85:4a:de:1f:12:4f:02:70:24:10:a1:c8: 42:a9:1c:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX9uVXbgFMX5iXLPwaSH9hBlA5M4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNCREEyMTIzMTQ0ODM5NjQwREEyODBENkI5NzFDMTJE MEM5QzkyOTAeFw0yNTA1MTAwNjQ2MzlaFw0yNTA1MTMwODE1MzlaMDMxMTAvBgNV BAMTKDM2NTEwNzZBRkE2NTQ2NkEyNUJBNkVDNzFFOEZFNzhGNzA5NjI1MTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/810sO3qa17iAtSM/X24xUH+j iDuECV5iFNex/warh9hcMu8eSrqM/XJcob2kpurYtFPfd6Y4I71MbIKQsQBoiZ47 lQBby/0En4tokuEjcE+Hb6FzQpaKr3LKLD+0y40k1P4vi4OwQcKur1OFDssVzGtH c9wmFc+Rgklu3rfjYYA5eW3SR9LMfMIrJoxn02dLPCxtxpfsNMgethchmTpRNUJa YnhpoM7D1xDdpSNEMwyR93GYte0fDrFZ+wlcD9rwOILSB3XNTd7MF3K+oz353Ucm IyKUvYuoEU8sTF8ZMqfPYPzivzfWFdP7UhIwdSGlAU0O0NSzpeLxXPIHiN6bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNlEHavplRmolum7HHo/nj3CWJRQwHwYDVR0j BBgwFoAU072iEjFEg5ZA2igNa5ccEtDJySkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjA3NDRiMS0yNTI5LTRhZTItYjVkNS01ZDQ5OWQzZjUyYzIvMC9EM0JEQTIxMjMx NDQ4Mzk2NDBEQTI4MEQ2Qjk3MUMxMkQwQzlDOTI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDNCREEyMTIzMTQ0ODM5NjQwREEyODBENkI5NzFDMTJEMEM5 QzkyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYwNzQ0YjEtMjUyOS00YWUyLWI1 ZDUtNWQ0OTlkM2Y1MmMyLzAvRDNCREEyMTIzMTQ0ODM5NjQwREEyODBENkI5NzFD MTJEMEM5QzkyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAvmSqxSze1z8CGHDn7OvnHaFWKjNneClaJ3 w2eNHaRl+vXBFwyjjj/p46c3Utrtc1/UiHtGc1s1Vwi9zVvcgLm3al0IaWvA0waB zaEe6iIHMGqocyjckVaUGGe8N+iBiGHhp8eBfzL4RdC1A4aTdFiwp1DLpVX86MxJ I64GJiivtUKFckhRGAcrrHG1ozSiSDOsltt28EqGY+kbDtlbqFdN+KaiGsBpSLQm +xVQtNpmEwDjOIEwtff9trbb2t+eRNU0LMVlOCxBnQV+H9CSyZE02p+iTT6gsSHQ G1UCpC2r+JCwJuVNmaboZuGi/CqhiYVK3h8STwJwJBChyEKpHIU= -----END CERTIFICATE-----Generated at Sat May 10 09:56:19 2025 by rpki-client