$ rpki-client -vvf repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft File: DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft (raw, json) Hash identifier: monBk9nb394Ow6y6NbmlMW50SlTKIzFDMLPeEwdJ41U= Subject key identifier: F3:3D:C3:FB:A2:24:84:A5:A9:A7:0C:A3:A8:4B:6A:55:FA:8B:34:6C Authority key identifier: DB:1E:31:B6:A9:85:67:91:C3:1B:99:A7:3C:0F:39:01:18:E5:4E:B8 Certificate issuer: /CN=DB1E31B6A9856791C31B99A73C0F390118E54EB8 Certificate serial: 7C79C65158920A7B6756F264E1E809174D4BC7F5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1E31B6A9856791C31B99A73C0F390118E54EB8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft Manifest number: 0135 Signing time: Fri 09 May 2025 21:50:35 +0000 Manifest this update: Fri 09 May 2025 21:45:35 +0000 Manifest next update: Tue 13 May 2025 09:13:35 +0000 Files and hashes: 1: 3130332e3136342e38332e302f32342d3234203d3e20313431393036.roa (hash: hqJzUmkGfm1tL5Cu+d0Y0jzRfSAbuU8h9B0SylrnKNo=) 2: DB1E31B6A9856791C31B99A73C0F390118E54EB8.crl (hash: SGwIrrgjihiJkLsa9uHGKdTO+vAfQL5jFOBin5SrI7Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.crl rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1E31B6A9856791C31B99A73C0F390118E54EB8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 03:08:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:79:c6:51:58:92:0a:7b:67:56:f2:64:e1:e8:09:17:4d:4b:c7:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB1E31B6A9856791C31B99A73C0F390118E54EB8 Validity Not Before: May 9 21:45:35 2025 GMT Not After : May 13 09:13:35 2025 GMT Subject: CN=F33DC3FBA22484A5A9A70CA3A84B6A55FA8B346C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:c1:8e:2d:9f:ca:46:47:1b:a6:05:4b:8a:8e: 4c:ef:ea:89:e4:fa:dd:ba:5f:44:a7:c7:92:02:07: 5f:28:99:7c:fe:91:c9:7c:18:ee:61:af:58:91:e8: ae:77:46:e9:56:e0:74:87:26:ff:03:d1:16:44:a2: ee:aa:27:1d:87:32:d8:61:7d:fd:ab:f8:b9:be:02: 3d:d5:82:a1:44:03:44:08:32:9d:9d:a0:0a:0d:71: e5:36:7c:22:09:8f:6c:41:0d:02:5c:c0:4e:dc:68: 75:12:14:70:b2:f6:8d:ac:50:d6:37:55:0b:d5:83: c2:d0:1a:99:71:15:8d:36:c7:9d:b2:a7:7b:07:f2: a8:8f:4a:f8:b4:7e:0a:73:b9:ee:42:f2:c9:cb:d3: da:50:3c:88:19:e8:fe:83:59:f3:ed:44:d9:1a:5d: 15:d4:0b:66:80:c7:bc:f0:c1:f0:fb:28:f3:9b:12: d8:de:5e:76:c1:55:18:e2:12:ed:1b:da:92:ed:29: 79:98:14:4e:a9:93:66:47:00:b8:1f:3a:03:20:2f: f1:aa:f2:4b:52:f7:19:be:70:a5:9d:e2:53:e9:da: 89:45:3f:7f:4a:5a:ca:75:b8:14:72:db:a6:7f:6b: 8a:d4:01:8e:86:22:3c:3a:5d:78:5b:5e:51:76:f1: a9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:3D:C3:FB:A2:24:84:A5:A9:A7:0C:A3:A8:4B:6A:55:FA:8B:34:6C X509v3 Authority Key Identifier: keyid:DB:1E:31:B6:A9:85:67:91:C3:1B:99:A7:3C:0F:39:01:18:E5:4E:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1E31B6A9856791C31B99A73C0F390118E54EB8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7c:86:eb:80:94:b8:89:fd:23:d4:d4:d1:7f:bc:ee:c2:49:06: 02:b9:f3:37:c0:01:b2:ae:87:f0:90:fa:be:d8:19:7a:28:76: 6b:ac:e1:78:7e:5a:0f:f0:c9:cd:5e:57:80:7b:f7:a9:6d:40: 3f:e2:59:87:7c:9a:e8:97:05:e5:cb:70:2e:ba:70:ff:8c:17: 0a:8f:cf:fe:e2:18:02:07:c1:52:00:3f:09:4f:c2:e3:99:05: ea:6b:e7:be:3d:12:ff:99:72:a2:0a:7b:0c:f2:f8:4d:e4:5e: d7:cf:33:ee:87:8c:2d:d8:0b:5f:9e:25:4e:95:1c:d3:e6:0a: d1:b3:29:45:9a:e7:74:cb:87:01:d3:77:d9:62:13:0c:79:ef: 3f:13:93:64:a7:92:7e:3e:61:3f:0d:90:16:f4:fd:ec:fc:7e: 0b:bb:e9:60:85:cd:48:c3:bb:05:d9:ef:de:84:f9:a1:1f:ad: 80:61:64:8d:c6:76:15:f6:d3:21:b3:27:4c:f8:3c:f7:89:c0: df:e5:5c:94:3f:c0:bb:13:12:f3:ae:e2:f0:b5:5f:2a:3b:62: 5c:ab:55:51:ec:e9:f2:5f:c7:65:21:79:af:40:8d:5c:4a:98: c8:16:58:e7:04:63:3f:16:dd:f6:7b:f9:e8:72:38:e7:25:31: 40:09:ca:c2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfHnGUViSCntnVvJk4egJF01Lx/UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIxRTMxQjZBOTg1Njc5MUMzMUI5OUE3M0MwRjM5MDEx OEU1NEVCODAeFw0yNTA1MDkyMTQ1MzVaFw0yNTA1MTMwOTEzMzVaMDMxMTAvBgNV BAMTKEYzM0RDM0ZCQTIyNDg0QTVBOUE3MENBM0E4NEI2QTU1RkE4QjM0NkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjwY4tn8pGRxumBUuKjkzv6onk +t26X0Snx5ICB18omXz+kcl8GO5hr1iR6K53RulW4HSHJv8D0RZEou6qJx2HMthh ff2r+Lm+Aj3VgqFEA0QIMp2doAoNceU2fCIJj2xBDQJcwE7caHUSFHCy9o2sUNY3 VQvVg8LQGplxFY02x52yp3sH8qiPSvi0fgpzue5C8snL09pQPIgZ6P6DWfPtRNka XRXUC2aAx7zwwfD7KPObEtjeXnbBVRjiEu0b2pLtKXmYFE6pk2ZHALgfOgMgL/Gq 8ktS9xm+cKWd4lPp2olFP39KWsp1uBRy26Z/a4rUAY6GIjw6XXhbXlF28alVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8z3D+6IkhKWppwyjqEtqVfqLNGwwHwYDVR0j BBgwFoAU2x4xtqmFZ5HDG5mnPA85ARjlTrgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTE4ZjhhMC05M2FlLTQzNTktOGE1ZC0xY2E2NzhiZTU2NjgvMC9EQjFFMzFCNkE5 ODU2NzkxQzMxQjk5QTczQzBGMzkwMTE4RTU0RUI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREIxRTMxQjZBOTg1Njc5MUMzMUI5OUE3M0MwRjM5MDExOEU1 NEVCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmExOGY4YTAtOTNhZS00MzU5LThh NWQtMWNhNjc4YmU1NjY4LzAvREIxRTMxQjZBOTg1Njc5MUMzMUI5OUE3M0MwRjM5 MDExOEU1NEVCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHyG64CUuIn9I9TU0X+87sJJBgK58zfAAbKu h/CQ+r7YGXoodmus4Xh+Wg/wyc1eV4B796ltQD/iWYd8muiXBeXLcC66cP+MFwqP z/7iGAIHwVIAPwlPwuOZBepr5749Ev+ZcqIKewzy+E3kXtfPM+6HjC3YC1+eJU6V HNPmCtGzKUWa53TLhwHTd9liEwx57z8Tk2Snkn4+YT8NkBb0/ez8fgu76WCFzUjD uwXZ796E+aEfrYBhZI3GdhX20yGzJ0z4PPeJwN/lXJQ/wLsTEvOu4vC1Xyo7Ylyr VVHs6fJfx2Uhea9AjVxKmMgWWOcEYz8W3fZ7+ehyOOclMUAJysI= -----END CERTIFICATE-----Generated at Sat May 10 04:56:58 2025 by rpki-client