$ rpki-client -vvf repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft File: DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft (raw, json) Hash identifier: SkdD+wYdlfrM69Wqx4/7ocodn+v+GBYpVq4fYmHkrek= Subject key identifier: A6:43:0D:14:B8:A3:6E:D0:49:B6:D0:BA:D2:DD:C1:AD:5A:02:FF:1E Authority key identifier: DE:76:C6:11:73:80:1C:DB:71:8B:A5:8B:1A:4A:40:B5:C9:4E:9C:70 Certificate issuer: /CN=DE76C61173801CDB718BA58B1A4A40B5C94E9C70 Certificate serial: 2444225C832F8F75E2D7FDA7BFB8F78AB9E46173 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft Manifest number: C1 Signing time: Sun 11 May 2025 02:10:02 +0000 Manifest this update: Sun 11 May 2025 02:05:02 +0000 Manifest next update: Wed 14 May 2025 12:51:02 +0000 Files and hashes: 1: 3130332e38302e3234302e302f32322d3234203d3e20313336303534.roa (hash: rxBcvYlSzsa7LvAtTgr9iAlrA1pyphm/JuM/Rkc6s+c=) 2: DE76C61173801CDB718BA58B1A4A40B5C94E9C70.crl (hash: Cy1yV59vHqVC5rhhFMpKOpe4RxVOWngg6u4NymIo/uA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.crl rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 12:51:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:44:22:5c:83:2f:8f:75:e2:d7:fd:a7:bf:b8:f7:8a:b9:e4:61:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE76C61173801CDB718BA58B1A4A40B5C94E9C70 Validity Not Before: May 11 02:05:02 2025 GMT Not After : May 14 12:51:02 2025 GMT Subject: CN=A6430D14B8A36ED049B6D0BAD2DDC1AD5A02FF1E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:c8:b4:ed:32:d2:27:6b:47:0b:2c:f6:27:36: 8c:ea:b5:82:28:5d:87:6e:80:32:eb:a5:b5:60:60: c9:41:9b:7b:4e:06:62:a8:ea:b7:4b:e1:bc:48:02: 58:71:3f:e7:3e:09:6b:53:b1:3e:32:7c:bc:54:5f: f7:24:f4:b2:07:b1:ae:c0:0e:9d:c3:7e:3e:ca:28: 40:8a:ca:b4:65:52:7d:9a:a7:e9:0c:55:17:8e:e9: 8f:55:75:59:3b:04:e4:d9:86:4a:9c:33:7c:cb:dd: 32:49:3d:cb:ad:4b:de:24:27:93:3d:ac:b5:2d:71: 28:e8:1c:42:c8:f1:47:90:dd:cd:e0:ba:09:4b:fd: c1:73:0f:d8:f5:fc:12:8e:6a:93:ad:41:a4:d8:c8: c7:02:6f:17:cd:d9:fc:00:5f:69:47:46:33:96:6e: 32:45:e8:dd:ba:f6:d8:06:01:70:21:da:fa:20:5b: 5a:e3:f3:12:e1:5b:c2:24:fc:f6:50:f9:66:20:1f: 8b:25:2d:dd:b8:53:fb:b9:02:14:7b:0f:3f:14:2b: c8:c0:06:f1:f1:8b:bb:76:5d:61:b6:87:ca:4a:81: 83:ec:d5:7d:8f:9f:ec:b7:15:c9:a2:8a:db:27:a0: 1d:5b:39:5a:63:58:3f:2c:ad:70:23:1f:f6:46:c3: cd:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:43:0D:14:B8:A3:6E:D0:49:B6:D0:BA:D2:DD:C1:AD:5A:02:FF:1E X509v3 Authority Key Identifier: keyid:DE:76:C6:11:73:80:1C:DB:71:8B:A5:8B:1A:4A:40:B5:C9:4E:9C:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:3c:08:6a:99:29:68:3e:86:d5:ea:80:e7:72:75:f3:6f:a2: b9:de:98:b1:a0:2b:c1:f2:b4:20:d5:71:9f:aa:a6:65:cd:b3: aa:4e:dd:7e:eb:f5:9b:21:46:c8:a6:b2:2e:e6:a5:ea:c3:29: 21:3b:6e:d4:f0:3b:f1:2a:b8:c8:c8:a7:68:0f:ab:7b:f3:f5: 88:cc:86:b1:b7:9d:bb:11:d4:89:37:e9:d3:8f:da:dd:11:de: a2:04:d6:ac:17:ac:81:b2:fc:1a:bd:48:9b:8a:0b:fb:dc:e7: e7:dd:a5:d7:df:1c:e9:51:89:7a:4e:f0:e3:4b:2a:08:64:15: c5:6a:71:63:03:39:cd:77:c1:3c:ff:7f:b1:49:4b:50:23:2d: 35:1a:6f:82:59:6d:9b:ee:fa:cc:d8:9f:7b:74:d6:fb:ed:16: bb:83:3d:3b:b6:b3:a8:e6:71:ff:b6:2c:29:ed:b3:54:6c:5c: fd:1c:bd:bd:95:6c:5d:fb:5e:17:9c:e0:12:93:e3:df:ef:02: 92:39:32:b9:84:f5:92:d0:52:59:d9:9d:ac:5f:c6:57:7e:2e: 4f:32:5e:db:ea:4e:d6:2f:42:f3:9f:40:87:e2:11:b6:de:ba: 27:fe:62:0f:65:4a:52:2b:80:3a:bf:5b:71:7d:94:50:ce:31: e6:85:6f:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJEQiXIMvj3Xi1/2nv7j3irnkYXMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU3NkM2MTE3MzgwMUNEQjcxOEJBNThCMUE0QTQwQjVD OTRFOUM3MDAeFw0yNTA1MTEwMjA1MDJaFw0yNTA1MTQxMjUxMDJaMDMxMTAvBgNV BAMTKEE2NDMwRDE0QjhBMzZFRDA0OUI2RDBCQUQyRERDMUFENUEwMkZGMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgyLTtMtIna0cLLPYnNozqtYIo XYdugDLrpbVgYMlBm3tOBmKo6rdL4bxIAlhxP+c+CWtTsT4yfLxUX/ck9LIHsa7A Dp3Dfj7KKECKyrRlUn2ap+kMVReO6Y9VdVk7BOTZhkqcM3zL3TJJPcutS94kJ5M9 rLUtcSjoHELI8UeQ3c3guglL/cFzD9j1/BKOapOtQaTYyMcCbxfN2fwAX2lHRjOW bjJF6N269tgGAXAh2vogW1rj8xLhW8Ik/PZQ+WYgH4slLd24U/u5AhR7Dz8UK8jA BvHxi7t2XWG2h8pKgYPs1X2Pn+y3FcmiitsnoB1bOVpjWD8srXAjH/ZGw81TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpkMNFLijbtBJttC60t3BrVoC/x4wHwYDVR0j BBgwFoAU3nbGEXOAHNtxi6WLGkpAtclOnHAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjA5Y2JiOS0xYWFkLTRiMWEtYmQ0ZS0wNmZkODQ0NzJmZDcvMC9ERTc2QzYxMTcz ODAxQ0RCNzE4QkE1OEIxQTRBNDBCNUM5NEU5QzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU3NkM2MTE3MzgwMUNEQjcxOEJBNThCMUE0QTQwQjVDOTRF OUM3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGYwOWNiYjktMWFhZC00YjFhLWJk NGUtMDZmZDg0NDcyZmQ3LzAvREU3NkM2MTE3MzgwMUNEQjcxOEJBNThCMUE0QTQw QjVDOTRFOUM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEA8CGqZKWg+htXqgOdydfNvornemLGgK8Hy tCDVcZ+qpmXNs6pO3X7r9ZshRsimsi7mperDKSE7btTwO/EquMjIp2gPq3vz9YjM hrG3nbsR1Ik36dOP2t0R3qIE1qwXrIGy/Bq9SJuKC/vc5+fdpdffHOlRiXpO8ONL KghkFcVqcWMDOc13wTz/f7FJS1AjLTUab4JZbZvu+szYn3t01vvtFruDPTu2s6jm cf+2LCnts1RsXP0cvb2VbF37Xhec4BKT49/vApI5MrmE9ZLQUlnZnaxfxld+Lk8y XtvqTtYvQvOfQIfiEbbeuif+Yg9lSlIrgDq/W3F9lFDOMeaFb90= -----END CERTIFICATE-----Generated at Mon May 12 04:55:54 2025 by rpki-client