$ rpki-client -vvf repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft File: DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft (raw, json) Hash identifier: 9vlS0vEq3MqqDgMZBDPBKPUgr9u7APhhh6vn3tj3tx0= Subject key identifier: B1:0E:1F:D0:D8:5D:3F:48:62:6E:E8:23:2B:E8:DF:F1:12:6A:AE:E1 Authority key identifier: DC:34:C8:B5:F4:38:B8:D4:CB:13:F2:45:1A:D1:F0:95:5E:5F:7F:BB Certificate issuer: /CN=DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB Certificate serial: 4BB32FC32C24C917913BAB8F8E2635F7E06C7B82 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft Manifest number: 0453 Signing time: Fri 09 May 2025 13:21:34 +0000 Manifest this update: Fri 09 May 2025 13:16:34 +0000 Manifest next update: Mon 12 May 2025 22:39:34 +0000 Files and hashes: 1: DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.crl (hash: oUilJ1xPMN/5wKe9Ai7u08+u5G2JdJlIADyP4CYihCE=) 2: 323030313a6466363a313830303a3a2f34382d3438203d3e20313331373535.roa (hash: HGlDA4/8VVAgy1tfZNlAnPXlJMICAK8Z05H6MVK5yJM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.crl rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 22:39:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:b3:2f:c3:2c:24:c9:17:91:3b:ab:8f:8e:26:35:f7:e0:6c:7b:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB Validity Not Before: May 9 13:16:34 2025 GMT Not After : May 12 22:39:34 2025 GMT Subject: CN=B10E1FD0D85D3F48626EE8232BE8DFF1126AAEE1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:99:85:b5:65:cc:ad:9e:02:29:52:f1:27:c0: ff:5f:32:17:e5:b5:83:78:00:67:56:24:bb:b8:7c: 40:2f:28:aa:4a:7e:4b:9c:8d:d4:3b:5b:d8:69:b2: 63:5b:d3:83:08:15:bb:14:31:91:0e:e1:38:a5:40: 04:33:12:4c:6b:be:3c:ce:15:b0:e6:e3:43:f5:c7: 23:b7:15:5a:e7:5e:da:5a:c3:42:ea:97:86:33:d4: 09:ac:b2:19:7a:c0:d3:d5:67:5d:40:0d:76:57:10: 6e:a9:5e:53:68:7b:fd:e1:01:1a:ee:06:77:36:d1: 13:d7:52:36:56:0e:ef:3e:a6:c6:99:0c:1d:97:8d: 1d:b9:8d:2d:59:3f:76:f4:1a:b3:c0:56:98:3f:40: 32:d6:5c:09:2a:10:b6:61:d1:20:53:8e:d9:6f:55: d0:c7:ec:30:2e:09:64:d9:8b:0a:ed:ea:f9:f6:d5: 85:73:44:cb:45:b3:2c:4e:b1:b7:b4:81:00:5c:02: b5:b1:92:81:57:e4:c2:07:65:a1:dc:e4:7d:37:2b: 8a:4f:9b:70:d4:7f:13:1b:40:bb:79:36:8a:73:0f: b5:5e:97:34:d5:2e:94:f3:21:cd:82:08:c2:3d:24: 8b:79:c7:17:ed:97:77:a7:48:d9:31:b9:91:3e:ba: f4:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:0E:1F:D0:D8:5D:3F:48:62:6E:E8:23:2B:E8:DF:F1:12:6A:AE:E1 X509v3 Authority Key Identifier: keyid:DC:34:C8:B5:F4:38:B8:D4:CB:13:F2:45:1A:D1:F0:95:5E:5F:7F:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:ec:d3:b7:b4:89:b9:11:a5:17:d5:3c:b7:3e:2e:95:b1:37: cf:c8:15:62:c0:30:83:a8:fa:9c:60:b8:ce:00:34:91:43:a3: 8e:06:61:2b:55:77:ee:c5:96:43:1c:49:b3:a4:85:3f:f3:91: 25:e1:5e:6d:6e:96:39:7a:3e:d1:67:3b:17:6b:dd:6d:72:7f: 3f:c1:fe:3c:40:b1:13:9b:b5:02:0e:72:b4:87:75:99:ac:84: e1:70:ae:87:10:de:14:2f:a7:77:22:1e:e7:7a:9a:07:27:f1: a7:27:b1:3e:ae:0d:47:fa:25:0c:98:fb:9f:0a:18:84:3d:cb: 8d:43:bd:d1:27:b4:12:5a:68:17:38:20:ac:a2:a2:4a:e8:26: 37:b7:b4:11:55:b3:e1:6e:64:8d:65:11:8a:08:50:eb:52:6f: 3b:59:04:02:ca:cd:b6:b5:ae:eb:bc:85:3c:31:88:75:9f:70: 50:b3:db:33:69:13:29:da:12:78:98:5f:82:8d:47:06:7e:54: c7:68:68:26:b8:26:6c:6f:1f:a7:a2:f4:7e:6d:ff:e1:0d:bf: 80:95:6b:87:7e:88:db:00:9f:6d:f7:c6:ea:40:6e:81:d7:6f: 5a:38:9d:f3:66:92:9c:ef:66:d6:5f:7e:28:f8:df:cb:97:d9: 3a:0b:39:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS7MvwywkyReRO6uPjiY19+Bse4IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMzNEM4QjVGNDM4QjhENENCMTNGMjQ1MUFEMUYwOTU1 RTVGN0ZCQjAeFw0yNTA1MDkxMzE2MzRaFw0yNTA1MTIyMjM5MzRaMDMxMTAvBgNV BAMTKEIxMEUxRkQwRDg1RDNGNDg2MjZFRTgyMzJCRThERkYxMTI2QUFFRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1mYW1ZcytngIpUvEnwP9fMhfl tYN4AGdWJLu4fEAvKKpKfkucjdQ7W9hpsmNb04MIFbsUMZEO4TilQAQzEkxrvjzO FbDm40P1xyO3FVrnXtpaw0Lql4Yz1Amsshl6wNPVZ11ADXZXEG6pXlNoe/3hARru Bnc20RPXUjZWDu8+psaZDB2XjR25jS1ZP3b0GrPAVpg/QDLWXAkqELZh0SBTjtlv VdDH7DAuCWTZiwrt6vn21YVzRMtFsyxOsbe0gQBcArWxkoFX5MIHZaHc5H03K4pP m3DUfxMbQLt5NopzD7VelzTVLpTzIc2CCMI9JIt5xxftl3enSNkxuZE+uvTxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsQ4f0NhdP0hibugjK+jf8RJqruEwHwYDVR0j BBgwFoAU3DTItfQ4uNTLE/JFGtHwlV5ff7swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YThmMDQzNS00ZDM4LTQ3ZWYtODUwZi01MWJhNDYxN2ZiM2QvMC9EQzM0QzhCNUY0 MzhCOEQ0Q0IxM0YyNDUxQUQxRjA5NTVFNUY3RkJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREMzNEM4QjVGNDM4QjhENENCMTNGMjQ1MUFEMUYwOTU1RTVG N0ZCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE4ZjA0MzUtNGQzOC00N2VmLTg1 MGYtNTFiYTQ2MTdmYjNkLzAvREMzNEM4QjVGNDM4QjhENENCMTNGMjQ1MUFEMUYw OTU1RTVGN0ZCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEDs07e0ibkRpRfVPLc+LpWxN8/IFWLAMIOo +pxguM4ANJFDo44GYStVd+7FlkMcSbOkhT/zkSXhXm1uljl6PtFnOxdr3W1yfz/B /jxAsRObtQIOcrSHdZmshOFwrocQ3hQvp3ciHud6mgcn8acnsT6uDUf6JQyY+58K GIQ9y41DvdEntBJaaBc4IKyiokroJje3tBFVs+FuZI1lEYoIUOtSbztZBALKzba1 ruu8hTwxiHWfcFCz2zNpEynaEniYX4KNRwZ+VMdoaCa4JmxvH6ei9H5t/+ENv4CV a4d+iNsAn233xupAboHXb1o4nfNmkpzvZtZffij438uX2ToLOfk= -----END CERTIFICATE-----Generated at Sun May 11 20:22:41 2025 by rpki-client