$ rpki-client -vvf repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.mft File: DC0680824B7F80117B62C239676444B0691128B8.mft (raw, json) Hash identifier: lGTJqLTaWbk6R9IEWjfSJ42BphgeZfktjGcm+F+sfCI= Subject key identifier: 2A:8B:BD:3D:F9:49:10:3A:E3:CD:0C:70:49:AD:AF:CE:29:6E:FC:FB Authority key identifier: DC:06:80:82:4B:7F:80:11:7B:62:C2:39:67:64:44:B0:69:11:28:B8 Certificate issuer: /CN=DC0680824B7F80117B62C239676444B0691128B8 Certificate serial: 556ED7E2BF7C81110C85C9C215C0BC17ECFE86ED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DC0680824B7F80117B62C239676444B0691128B8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.mft Manifest number: 4E Signing time: Fri 09 May 2025 12:21:37 +0000 Manifest this update: Fri 09 May 2025 12:16:37 +0000 Manifest next update: Mon 12 May 2025 21:17:37 +0000 Files and hashes: 1: DC0680824B7F80117B62C239676444B0691128B8.crl (hash: l5icbR0TzfZm1aOGdADX3C+DtQF+HmYfzQYukTcvTlo=) 2: 3136302e3139312e3130362e302f32332d3234203d3e20313533313433.roa (hash: iw17DMpgfD2nYIWjQL2ZNOlw/a2YjINch68eFMNeuo0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.crl rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DC0680824B7F80117B62C239676444B0691128B8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 11:26:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:6e:d7:e2:bf:7c:81:11:0c:85:c9:c2:15:c0:bc:17:ec:fe:86:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC0680824B7F80117B62C239676444B0691128B8 Validity Not Before: May 9 12:16:37 2025 GMT Not After : May 12 21:17:37 2025 GMT Subject: CN=2A8BBD3DF949103AE3CD0C7049ADAFCE296EFCFB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e2:0b:1b:86:d9:5d:61:c1:ed:55:dc:82:ab: 7c:a6:d8:10:a2:46:61:c0:76:30:b3:a6:8f:ab:56: 8e:6f:d2:84:25:9e:80:d4:cf:f0:10:ad:90:aa:9d: 8c:96:06:bc:38:59:b5:36:49:22:8b:f5:9f:4a:88: 53:fa:26:6c:9b:b7:20:b5:ad:c6:3a:91:92:4b:75: df:38:d1:81:62:d6:ff:ce:9d:a3:2c:6d:18:b5:01: 08:f8:56:79:ba:ce:fd:64:75:dd:9a:bb:93:c7:ff: ce:94:9e:e3:7c:f7:12:ee:c4:26:ca:90:9b:13:32: 30:b7:10:a1:a7:65:ae:57:f1:0f:b1:19:29:7b:cb: 89:eb:60:c2:6a:52:ff:4b:e0:7c:bd:0c:75:37:2e: 8d:71:26:bd:2d:e3:b6:c4:da:2d:1e:ab:ed:c7:ed: a6:1b:e3:b6:7c:46:45:ce:37:16:24:a3:ad:a0:32: 8b:35:af:1b:58:0b:69:63:b2:06:08:d9:f0:10:1b: 2c:1c:dd:5e:49:36:a3:88:16:84:ee:db:6f:56:7b: 30:74:9d:65:e4:59:fd:c1:e5:81:0e:cc:4f:e8:4e: 2a:df:11:d1:5c:3e:bd:21:83:a2:96:f2:1d:cc:67: a1:f8:1c:8f:d6:dd:40:61:70:bd:5e:af:fd:b5:b5: 37:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:8B:BD:3D:F9:49:10:3A:E3:CD:0C:70:49:AD:AF:CE:29:6E:FC:FB X509v3 Authority Key Identifier: keyid:DC:06:80:82:4B:7F:80:11:7B:62:C2:39:67:64:44:B0:69:11:28:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DC0680824B7F80117B62C239676444B0691128B8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:fa:9e:0a:54:7c:90:61:dc:35:e0:f5:6f:ad:12:0c:f8:76: 49:93:97:b1:c0:34:b9:df:d4:b2:c9:52:03:88:00:0f:18:cd: a6:2b:8d:c9:b0:fd:1f:46:3e:00:77:6c:28:4c:4d:72:0c:93: 7e:d1:8a:28:ff:89:5c:6a:62:a8:f1:7f:d8:f2:78:63:2d:3b: 27:d3:13:2c:7d:94:32:6b:22:6b:e5:6d:0a:8e:3b:75:8a:6e: 4f:11:47:6c:b3:c1:75:31:09:88:59:01:35:cc:91:0b:37:ed: b0:02:49:35:0d:3d:a2:09:13:45:ea:ea:fb:25:64:38:9f:dd: 98:93:30:c1:ad:94:32:d3:d8:69:63:da:de:97:76:24:7e:af: 88:c7:fa:37:ab:56:0d:60:19:2f:4d:ac:c0:a3:7f:9c:17:c1: 50:fe:fe:ef:7b:88:52:16:4c:c0:b1:a0:96:95:cf:6e:9c:ee: 7f:e0:c0:b0:9a:ea:fe:75:b6:78:01:26:b8:81:cd:5e:10:be: fb:6a:1d:31:ed:a9:24:ce:bb:3f:50:d5:2e:10:00:10:37:e1: 00:7e:ec:b9:aa:53:fa:60:16:02:36:c5:f7:14:72:6d:24:0c: 4d:32:4f:2b:74:2c:8f:ef:57:5d:13:e5:52:38:04:b8:c8:33: 00:0d:1a:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVW7X4r98gREMhcnCFcC8F+z+hu0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMwNjgwODI0QjdGODAxMTdCNjJDMjM5Njc2NDQ0QjA2 OTExMjhCODAeFw0yNTA1MDkxMjE2MzdaFw0yNTA1MTIyMTE3MzdaMDMxMTAvBgNV BAMTKDJBOEJCRDNERjk0OTEwM0FFM0NEMEM3MDQ5QURBRkNFMjk2RUZDRkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCu4gsbhtldYcHtVdyCq3ym2BCi RmHAdjCzpo+rVo5v0oQlnoDUz/AQrZCqnYyWBrw4WbU2SSKL9Z9KiFP6JmybtyC1 rcY6kZJLdd840YFi1v/OnaMsbRi1AQj4Vnm6zv1kdd2au5PH/86UnuN89xLuxCbK kJsTMjC3EKGnZa5X8Q+xGSl7y4nrYMJqUv9L4Hy9DHU3Lo1xJr0t47bE2i0eq+3H 7aYb47Z8RkXONxYko62gMos1rxtYC2ljsgYI2fAQGywc3V5JNqOIFoTu229WezB0 nWXkWf3B5YEOzE/oTirfEdFcPr0hg6KW8h3MZ6H4HI/W3UBhcL1er/21tTcXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKou9PflJEDrjzQxwSa2vzilu/PswHwYDVR0j BBgwFoAU3AaAgkt/gBF7YsI5Z2REsGkRKLgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTg1NWU4YS0zZmY4LTQ3ZmYtYWFlYy00OGQ4YjM4MGE5MDQvMC9EQzA2ODA4MjRC N0Y4MDExN0I2MkMyMzk2NzY0NDRCMDY5MTEyOEI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvREMwNjgwODI0QjdGODAxMTdCNjJDMjM5Njc2NDQ0QjA2OTEx MjhCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWU4NTVlOGEtM2ZmOC00N2ZmLWFh ZWMtNDhkOGIzODBhOTA0LzAvREMwNjgwODI0QjdGODAxMTdCNjJDMjM5Njc2NDQ0 QjA2OTExMjhCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACL6ngpUfJBh3DXg9W+tEgz4dkmTl7HANLnf 1LLJUgOIAA8YzaYrjcmw/R9GPgB3bChMTXIMk37Riij/iVxqYqjxf9jyeGMtOyfT Eyx9lDJrImvlbQqOO3WKbk8RR2yzwXUxCYhZATXMkQs37bACSTUNPaIJE0Xq6vsl ZDif3ZiTMMGtlDLT2Glj2t6XdiR+r4jH+jerVg1gGS9NrMCjf5wXwVD+/u97iFIW TMCxoJaVz26c7n/gwLCa6v51tngBJriBzV4QvvtqHTHtqSTOuz9Q1S4QABA34QB+ 7LmqU/pgFgI2xfcUcm0kDE0yTyt0LI/vV10T5VI4BLjIMwANGv0= -----END CERTIFICATE-----Generated at Sun May 11 02:26:29 2025 by rpki-client