$ rpki-client -vvf repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft File: DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft (raw, json) Hash identifier: q5FReyFZ+tmrxg9MdXDNLxLLTBCsLQZ5txT5E7hfhqY= Subject key identifier: 6E:FA:35:20:A5:13:E9:C9:58:B3:E0:AD:F9:17:4F:18:05:C9:63:1D Authority key identifier: DB:1B:D7:85:1F:D1:A4:87:B0:12:83:F6:AE:4B:46:E0:E4:93:5A:3C Certificate issuer: /CN=DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C Certificate serial: 74768A6281B9E59143D25E6BE9381E820A5CE587 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft Manifest number: 0199 Signing time: Sat 10 May 2025 06:21:36 +0000 Manifest this update: Sat 10 May 2025 06:16:36 +0000 Manifest next update: Tue 13 May 2025 11:24:36 +0000 Files and hashes: 1: DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.crl (hash: mhg5ro2wXlkLDDOJzwCL8YPv7qZEk9xHXBHvW1sXKDo=) 2: 3130332e36362e33382e302f32342d3234203d3e20313530323431.roa (hash: 1Ff4VDmA+7r6oXDzZnPzt9JuYQ1xqWexxGkdvnwFLiQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.crl rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 11:24:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:76:8a:62:81:b9:e5:91:43:d2:5e:6b:e9:38:1e:82:0a:5c:e5:87 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C Validity Not Before: May 10 06:16:36 2025 GMT Not After : May 13 11:24:36 2025 GMT Subject: CN=6EFA3520A513E9C958B3E0ADF9174F1805C9631D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:26:27:5f:ca:58:fc:03:91:18:b3:32:97:5d: f2:8b:1b:69:55:5b:b9:cc:7f:cf:d5:28:f1:09:d5: f9:05:9a:de:d3:3d:e5:47:83:4d:b6:d7:1b:cf:39: e5:6b:6e:76:86:4a:1c:68:48:4b:05:bd:c4:20:8d: 37:8b:79:bd:a2:88:ad:f5:c3:a8:3f:c3:9e:32:a3: 06:15:a9:03:bf:13:8b:69:d0:ba:cf:dd:39:b1:bd: 4e:7f:5d:8a:e9:e7:bd:1c:b4:e6:d9:5f:cf:2b:bc: 72:0a:3c:49:f0:03:7c:60:a2:67:61:fd:68:ef:f1: 88:34:e0:8e:7c:35:4f:b3:01:b4:d0:d8:d8:54:18: 05:8d:85:42:e2:db:ca:b3:13:e5:2f:4e:c6:32:66: e6:9e:44:b7:25:6f:71:e9:0f:e1:af:e0:d6:73:12: 69:97:2b:d3:b3:6d:15:f1:be:24:f0:e3:de:8a:eb: 58:6e:18:f4:55:6b:46:27:dd:1a:bf:12:4b:29:33: 11:9a:85:fe:79:75:68:f0:d7:97:35:78:91:f0:4b: 96:42:a9:ca:2d:ad:a4:60:6b:19:c1:24:a9:ba:bf: 6e:c2:64:33:6b:2b:0b:c0:68:2a:17:96:a8:50:94: 34:c8:fd:e0:4e:24:a4:4c:59:3c:75:01:8d:8d:71: 1c:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:FA:35:20:A5:13:E9:C9:58:B3:E0:AD:F9:17:4F:18:05:C9:63:1D X509v3 Authority Key Identifier: keyid:DB:1B:D7:85:1F:D1:A4:87:B0:12:83:F6:AE:4B:46:E0:E4:93:5A:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:d0:8f:1e:f5:7c:f5:0d:e7:22:d0:64:03:16:9c:06:99:cb: 9a:70:b1:cf:ac:a7:68:a5:8b:65:a6:a0:09:7e:e2:f4:bf:08: 0b:c8:01:f3:e7:b4:d9:fb:e8:b7:0f:85:78:17:cb:57:46:37: 3b:ac:e3:1a:4e:01:07:e7:b9:da:3f:e2:e6:cd:c5:92:f1:2d: 5f:7d:13:e2:b8:35:3f:0b:f5:96:4f:d3:2a:70:05:3f:98:fc: bc:fd:44:4a:a3:0d:a7:e9:4f:12:09:4b:5e:49:a4:c9:c2:5f: 09:ba:a3:f3:fe:cf:2a:db:44:92:9f:45:33:ae:dc:61:7a:b1: bd:d7:a9:78:18:42:83:64:87:ea:e9:55:e2:5b:e5:82:72:fc: b7:ab:96:52:2b:68:a9:f9:d1:77:a8:2d:e3:d6:5d:2e:b0:c6: b7:5e:e7:69:8f:6c:10:0e:75:ac:d4:49:6b:be:dc:6e:93:67: 19:97:b2:ef:a4:c5:ec:55:0e:68:38:bd:a1:33:cb:b5:7a:d3: 59:67:b6:56:0f:a4:8a:f8:c8:b6:ca:cc:ea:3f:d2:f4:ce:5f: 19:07:33:ec:b8:f4:25:3d:17:e3:07:03:cc:59:42:19:b1:ad: d9:cf:14:50:aa:0c:5f:b8:bf:7a:88:51:2f:40:a8:7d:e5:57: ae:40:11:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdHaKYoG55ZFD0l5r6Tgeggpc5YcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIxQkQ3ODUxRkQxQTQ4N0IwMTI4M0Y2QUU0QjQ2RTBF NDkzNUEzQzAeFw0yNTA1MTAwNjE2MzZaFw0yNTA1MTMxMTI0MzZaMDMxMTAvBgNV BAMTKDZFRkEzNTIwQTUxM0U5Qzk1OEIzRTBBREY5MTc0RjE4MDVDOTYzMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBJidfylj8A5EYszKXXfKLG2lV W7nMf8/VKPEJ1fkFmt7TPeVHg0221xvPOeVrbnaGShxoSEsFvcQgjTeLeb2iiK31 w6g/w54yowYVqQO/E4tp0LrP3TmxvU5/XYrp570ctObZX88rvHIKPEnwA3xgomdh /Wjv8Yg04I58NU+zAbTQ2NhUGAWNhULi28qzE+UvTsYyZuaeRLclb3HpD+Gv4NZz EmmXK9OzbRXxviTw496K61huGPRVa0Yn3Rq/EkspMxGahf55dWjw15c1eJHwS5ZC qcotraRgaxnBJKm6v27CZDNrKwvAaCoXlqhQlDTI/eBOJKRMWTx1AY2NcRyPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbvo1IKUT6clYs+Ct+RdPGAXJYx0wHwYDVR0j BBgwFoAU2xvXhR/RpIewEoP2rktG4OSTWjwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2IyZWU3NC04YzNjLTRiYzMtYjZmYi1mMzViMjAwYTIwZWIvMC9EQjFCRDc4NTFG RDFBNDg3QjAxMjgzRjZBRTRCNDZFMEU0OTM1QTNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREIxQkQ3ODUxRkQxQTQ4N0IwMTI4M0Y2QUU0QjQ2RTBFNDkz NUEzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNiMmVlNzQtOGMzYy00YmMzLWI2 ZmItZjM1YjIwMGEyMGViLzAvREIxQkQ3ODUxRkQxQTQ4N0IwMTI4M0Y2QUU0QjQ2 RTBFNDkzNUEzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIDQjx71fPUN5yLQZAMWnAaZy5pwsc+sp2il i2WmoAl+4vS/CAvIAfPntNn76LcPhXgXy1dGNzus4xpOAQfnudo/4ubNxZLxLV99 E+K4NT8L9ZZP0ypwBT+Y/Lz9REqjDafpTxIJS15JpMnCXwm6o/P+zyrbRJKfRTOu 3GF6sb3XqXgYQoNkh+rpVeJb5YJy/LerllIraKn50XeoLePWXS6wxrde52mPbBAO dazUSWu+3G6TZxmXsu+kxexVDmg4vaEzy7V601lntlYPpIr4yLbKzOo/0vTOXxkH M+y49CU9F+MHA8xZQhmxrdnPFFCqDF+4v3qIUS9AqH3lV65AEYM= -----END CERTIFICATE-----Generated at Mon May 12 10:29:35 2025 by rpki-client