$ rpki-client -vvf repo-rpki.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/DA737E8BB9E3519F19E608DC3E839F360D2C4623.mft File: DA737E8BB9E3519F19E608DC3E839F360D2C4623.mft (raw, json) Hash identifier: 9oaIlsF4tb/A+EqvK2JR6xRiHWK7zmX9I/K2nAh0KtE= Subject key identifier: 7C:C0:B0:8B:1C:FB:F9:4B:F7:DE:1D:8F:0D:2C:2C:D8:3D:2D:CF:2F Authority key identifier: DA:73:7E:8B:B9:E3:51:9F:19:E6:08:DC:3E:83:9F:36:0D:2C:46:23 Certificate issuer: /CN=DA737E8BB9E3519F19E608DC3E839F360D2C4623 Certificate serial: 52DF7D473DD834F40B9CB8740D0EF75BCFFBA35A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA737E8BB9E3519F19E608DC3E839F360D2C4623.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/DA737E8BB9E3519F19E608DC3E839F360D2C4623.mft Manifest number: 87 Signing time: Sat 10 May 2025 08:01:48 +0000 Manifest this update: Sat 10 May 2025 07:56:48 +0000 Manifest next update: Tue 13 May 2025 15:30:48 +0000 Files and hashes: 1: 3130332e38312e3131302e302f32332d3234203d3e20313530393538.roa (hash: 2/cotGNcJ8/pTH7ezN1hAoiTKcYjyf0D6A4DNtUiVcI=) 2: 323030313a6466323a623263303a3a2f34382d3438203d3e20313530393538.roa (hash: pkgFynGQ9jkHeIrXOyJUjg6uu6vSpzsXT9qLBW8x194=) 3: DA737E8BB9E3519F19E608DC3E839F360D2C4623.crl (hash: I00y7bSOmKBpuYPrWyYiTi5m+rdLYT5Bin2v600hy7o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/DA737E8BB9E3519F19E608DC3E839F360D2C4623.crl rsync://repo-rpki.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/DA737E8BB9E3519F19E608DC3E839F360D2C4623.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA737E8BB9E3519F19E608DC3E839F360D2C4623.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 15:30:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:df:7d:47:3d:d8:34:f4:0b:9c:b8:74:0d:0e:f7:5b:cf:fb:a3:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA737E8BB9E3519F19E608DC3E839F360D2C4623 Validity Not Before: May 10 07:56:48 2025 GMT Not After : May 13 15:30:48 2025 GMT Subject: CN=7CC0B08B1CFBF94BF7DE1D8F0D2C2CD83D2DCF2F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:d3:30:1c:fb:9c:4c:56:4d:92:27:ff:b4:3a: 0d:1e:70:95:2b:64:5c:66:f3:67:83:cd:f7:19:df: 53:b3:7d:8f:c1:e3:4f:60:60:13:f2:47:fb:6d:1f: 32:f7:f2:67:07:31:3e:a7:ad:56:5b:85:b1:05:14: a0:fd:a4:f3:42:9c:ac:8c:b0:63:c8:55:1b:ae:b0: ed:dc:63:75:b8:1b:06:96:c1:c7:48:99:b6:a9:d3: d9:a0:2a:d9:54:56:2a:93:87:95:b7:4b:0b:e6:84: 0a:96:36:75:22:cc:9c:8e:1f:76:ee:91:7c:6d:aa: 4c:a2:49:10:1e:38:f3:6d:52:83:61:f1:37:be:6c: ca:c3:b2:b5:19:08:77:82:ec:00:05:07:2c:2d:fb: 31:cf:92:e2:e4:9e:38:e2:8f:9a:e5:34:5b:c8:b5: 83:91:b7:42:b1:8c:ac:ff:0c:32:db:7f:92:aa:5d: 8a:d7:ae:d1:33:9a:96:ad:40:57:53:71:f3:2e:92: b4:c2:91:41:3c:e4:ab:48:3a:36:5c:33:f4:36:88: 28:73:3c:3e:0c:e5:b3:93:be:ac:bc:f3:38:bf:90: 36:f0:5f:62:43:00:55:dd:5b:7e:20:ad:43:eb:11: 5c:8b:c5:9a:eb:06:ef:34:cc:36:91:eb:9d:15:8b: 1f:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:C0:B0:8B:1C:FB:F9:4B:F7:DE:1D:8F:0D:2C:2C:D8:3D:2D:CF:2F X509v3 Authority Key Identifier: keyid:DA:73:7E:8B:B9:E3:51:9F:19:E6:08:DC:3E:83:9F:36:0D:2C:46:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/DA737E8BB9E3519F19E608DC3E839F360D2C4623.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA737E8BB9E3519F19E608DC3E839F360D2C4623.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/DA737E8BB9E3519F19E608DC3E839F360D2C4623.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:ce:16:f0:20:b6:44:96:63:18:8c:3b:5b:56:7c:56:8e:52: 14:be:92:a8:35:e7:f2:97:6e:f8:f2:83:bc:6a:bb:41:48:c6: b2:bd:17:c5:10:20:d3:b3:79:f7:88:56:6b:c2:23:bd:62:a9: 8d:36:9f:0f:6f:b5:bf:2a:3a:1c:6a:39:7f:c0:e1:ca:c7:b1: cc:60:24:36:dc:77:0a:1f:81:36:04:06:f7:d6:d4:b3:5a:a2: 09:7b:a2:92:ac:c5:a4:28:56:88:a1:28:d5:f5:df:6d:37:f1: 16:68:e2:ae:b3:b5:0c:cf:5b:4f:2d:c8:cf:af:b5:11:44:5c: 44:7e:93:ce:be:8c:4e:04:e1:78:d8:66:4a:1e:85:55:6f:7d: ea:0d:e1:b2:ad:99:94:3e:09:54:1e:7c:a8:73:b3:3a:67:59: 25:fe:a3:96:a8:f3:77:0b:19:55:ea:6c:6f:3e:9b:5a:5d:1f: 2f:0d:ff:89:24:75:f9:aa:5b:5b:2c:3c:50:2c:4d:9c:b8:ac: 1f:71:ab:bb:cd:60:fc:14:ad:98:d8:06:c0:45:8d:ff:ff:1d: 35:5c:ff:00:f6:57:1d:5f:8c:00:67:92:ca:50:7e:4a:c0:70: fd:89:42:03:34:a0:71:3b:cf:5e:e6:84:ab:7f:81:4c:eb:bf: 2c:14:d2:7d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUt99Rz3YNPQLnLh0DQ73W8/7o1owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE3MzdFOEJCOUUzNTE5RjE5RTYwOERDM0U4MzlGMzYw RDJDNDYyMzAeFw0yNTA1MTAwNzU2NDhaFw0yNTA1MTMxNTMwNDhaMDMxMTAvBgNV BAMTKDdDQzBCMDhCMUNGQkY5NEJGN0RFMUQ4RjBEMkMyQ0Q4M0QyRENGMkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDq0zAc+5xMVk2SJ/+0Og0ecJUr ZFxm82eDzfcZ31OzfY/B409gYBPyR/ttHzL38mcHMT6nrVZbhbEFFKD9pPNCnKyM sGPIVRuusO3cY3W4GwaWwcdImbap09mgKtlUViqTh5W3SwvmhAqWNnUizJyOH3bu kXxtqkyiSRAeOPNtUoNh8Te+bMrDsrUZCHeC7AAFBywt+zHPkuLknjjij5rlNFvI tYORt0KxjKz/DDLbf5KqXYrXrtEzmpatQFdTcfMukrTCkUE85KtIOjZcM/Q2iChz PD4M5bOTvqy88zi/kDbwX2JDAFXdW34grUPrEVyLxZrrBu80zDaR650Vix9rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfMCwixz7+Uv33h2PDSws2D0tzy8wHwYDVR0j BBgwFoAU2nN+i7njUZ8Z5gjcPoOfNg0sRiMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjBiY2RjMy0wZmVhLTQ3NDctOTkwNy02NTY0ODZiYWU4ZGEvMC9EQTczN0U4QkI5 RTM1MTlGMTlFNjA4REMzRTgzOUYzNjBEMkM0NjIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREE3MzdFOEJCOUUzNTE5RjE5RTYwOERDM0U4MzlGMzYwRDJD NDYyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGYwYmNkYzMtMGZlYS00NzQ3LTk5 MDctNjU2NDg2YmFlOGRhLzAvREE3MzdFOEJCOUUzNTE5RjE5RTYwOERDM0U4MzlG MzYwRDJDNDYyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIbOFvAgtkSWYxiMO1tWfFaOUhS+kqg15/KX bvjyg7xqu0FIxrK9F8UQINOzefeIVmvCI71iqY02nw9vtb8qOhxqOX/A4crHscxg JDbcdwofgTYEBvfW1LNaogl7opKsxaQoVoihKNX132038RZo4q6ztQzPW08tyM+v tRFEXER+k86+jE4E4XjYZkoehVVvfeoN4bKtmZQ+CVQefKhzszpnWSX+o5ao83cL GVXqbG8+m1pdHy8N/4kkdfmqW1ssPFAsTZy4rB9xq7vNYPwUrZjYBsBFjf//HTVc /wD2Vx1fjABnkspQfkrAcP2JQgM0oHE7z17mhKt/gUzrvywU0n0= -----END CERTIFICATE-----Generated at Mon May 12 05:13:16 2025 by rpki-client