$ rpki-client -vvf repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft File: DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft (raw, json) Hash identifier: 43fxJtl58Fu5+3f4jVrbBqbhE14IrKWRo679DmJ2QnQ= Subject key identifier: 55:26:58:DF:06:0A:1B:C2:5A:04:B6:D2:B9:B2:C3:1D:34:F5:57:49 Authority key identifier: DF:0A:C6:ED:AE:FC:E4:FE:D1:EE:8A:4C:0A:7B:C4:EF:D6:22:FB:2E Certificate issuer: /CN=DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E Certificate serial: 67E04EF8BFBFCD5A80D0412A6D0BB46BB65A0EEF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft Manifest number: 0141 Signing time: Sat 03 May 2025 03:41:35 +0000 Manifest this update: Sat 03 May 2025 03:36:35 +0000 Manifest next update: Tue 06 May 2025 15:34:35 +0000 Files and hashes: 1: DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.crl (hash: OgGKloaqNWwRWUBHEsHOzhI4Ktv7WnyQVEVelqOvsPY=) 2: 3130332e3132372e3130362e302f32332d3234203d3e20313530393731.roa (hash: lW1DAyCSTgRvB6XQz9p6ZQqRRWcAHTlnodsMGbhnNcU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.crl rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 May 2025 15:34:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:e0:4e:f8:bf:bf:cd:5a:80:d0:41:2a:6d:0b:b4:6b:b6:5a:0e:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E Validity Not Before: May 3 03:36:35 2025 GMT Not After : May 6 15:34:35 2025 GMT Subject: CN=552658DF060A1BC25A04B6D2B9B2C31D34F55749 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:71:21:02:d1:ec:4d:10:90:d1:43:b1:4a:8f: 84:10:1e:6c:2f:73:90:ab:3f:33:d3:a0:ed:21:6e: 39:67:25:91:54:0f:e8:6e:4d:88:ff:6b:4d:44:2f: 97:5c:2b:b8:77:fd:7e:ad:26:9a:b9:1a:67:2b:59: 6c:4e:41:c7:6c:13:96:21:9b:2d:d5:2a:20:5f:c7: 1f:1c:03:17:03:6d:ae:09:34:92:c7:61:de:e7:a8: a0:8c:f2:fb:fb:67:b6:14:3f:eb:3e:34:b2:bb:67: e0:c8:49:08:f7:63:6e:f9:61:57:e8:aa:c3:be:4a: c5:6e:c5:40:bb:53:9d:f5:bd:64:bc:3b:c5:0b:b2: 2c:94:9e:d0:35:0f:f3:78:74:44:7b:00:4d:7f:9e: dc:8e:f0:1e:34:d4:40:b2:b5:8f:1c:ba:1e:4b:40: 64:a1:12:c5:f1:30:a7:1f:55:5f:ac:0b:0f:55:f2: 7c:8e:2c:91:a7:2a:fb:08:b3:4f:a5:84:f9:cd:0a: 28:8f:64:56:bf:44:0c:f1:8c:51:97:de:0e:fa:a1: af:e7:1a:cd:95:dc:9e:1d:8d:9c:e8:c1:b1:f0:09: 43:5d:49:c2:fa:f8:a7:45:a3:ff:58:d9:83:7c:94: cf:6a:20:4f:b6:26:84:6a:64:29:b3:79:ec:b2:9f: 42:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 55:26:58:DF:06:0A:1B:C2:5A:04:B6:D2:B9:B2:C3:1D:34:F5:57:49 X509v3 Authority Key Identifier: keyid:DF:0A:C6:ED:AE:FC:E4:FE:D1:EE:8A:4C:0A:7B:C4:EF:D6:22:FB:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8d:ed:95:d3:10:d0:69:90:af:68:23:0c:0a:44:62:d2:78:af: a0:15:77:04:c3:eb:a3:dc:5d:5d:5e:5d:d3:1b:d1:00:57:d7: 50:d4:d2:12:e6:26:67:02:63:83:bd:1b:ff:67:3c:e1:e9:35: 86:1f:be:f7:83:08:9c:4e:d9:de:2a:c4:28:9e:67:7e:f6:99: 6e:49:3f:ea:b6:73:10:4a:42:5c:ce:92:65:b6:1e:d0:54:72: d2:c6:d9:3d:51:26:7f:63:19:f9:d9:d4:b3:dc:b8:47:c8:fe: 45:f4:a3:00:3a:60:42:03:19:0b:40:61:c9:5c:ef:35:dc:af: e9:fa:68:72:57:14:bf:d5:57:7a:87:10:d7:82:82:b0:70:a0: f3:c0:f6:9d:36:cb:58:0f:99:b9:a6:91:68:ba:1a:1f:6f:a4: d0:8f:c0:6a:48:8a:86:dd:73:18:45:82:b9:1c:48:e7:ba:99: fd:63:e1:51:50:98:8f:f1:18:2d:9c:5f:90:60:f9:5c:98:85: 72:83:f4:e3:86:c8:ec:ad:2c:1d:2e:63:74:b7:04:41:dc:d0: 6e:41:c4:2d:73:de:4a:75:cc:7a:06:ff:fc:e8:68:cf:d6:9c: 85:2e:10:5e:33:5b:80:8a:ea:9e:3b:34:d0:ce:62:b6:a6:79: a4:9e:c8:fe -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ+BO+L+/zVqA0EEqbQu0a7ZaDu8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYwQUM2RURBRUZDRTRGRUQxRUU4QTRDMEE3QkM0RUZE NjIyRkIyRTAeFw0yNTA1MDMwMzM2MzVaFw0yNTA1MDYxNTM0MzVaMDMxMTAvBgNV BAMTKDU1MjY1OERGMDYwQTFCQzI1QTA0QjZEMkI5QjJDMzFEMzRGNTU3NDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdcSEC0exNEJDRQ7FKj4QQHmwv c5CrPzPToO0hbjlnJZFUD+huTYj/a01EL5dcK7h3/X6tJpq5GmcrWWxOQcdsE5Yh my3VKiBfxx8cAxcDba4JNJLHYd7nqKCM8vv7Z7YUP+s+NLK7Z+DISQj3Y275YVfo qsO+SsVuxUC7U531vWS8O8ULsiyUntA1D/N4dER7AE1/ntyO8B401ECytY8cuh5L QGShEsXxMKcfVV+sCw9V8nyOLJGnKvsIs0+lhPnNCiiPZFa/RAzxjFGX3g76oa/n Gs2V3J4djZzowbHwCUNdScL6+KdFo/9Y2YN8lM9qIE+2JoRqZCmzeeyyn0L/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUVSZY3wYKG8JaBLbSubLDHTT1V0kwHwYDVR0j BBgwFoAU3wrG7a785P7R7opMCnvE79Yi+y4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OGQ3YTAzOC1mOGExLTRlZDAtYTFhZi01NDk1MmU1NDNjNDMvMC9ERjBBQzZFREFF RkNFNEZFRDFFRThBNEMwQTdCQzRFRkQ2MjJGQjJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREYwQUM2RURBRUZDRTRGRUQxRUU4QTRDMEE3QkM0RUZENjIy RkIyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzhkN2EwMzgtZjhhMS00ZWQwLWEx YWYtNTQ5NTJlNTQzYzQzLzAvREYwQUM2RURBRUZDRTRGRUQxRUU4QTRDMEE3QkM0 RUZENjIyRkIyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI3tldMQ0GmQr2gjDApEYtJ4r6AVdwTD66Pc XV1eXdMb0QBX11DU0hLmJmcCY4O9G/9nPOHpNYYfvveDCJxO2d4qxCieZ372mW5J P+q2cxBKQlzOkmW2HtBUctLG2T1RJn9jGfnZ1LPcuEfI/kX0owA6YEIDGQtAYclc 7zXcr+n6aHJXFL/VV3qHENeCgrBwoPPA9p02y1gPmbmmkWi6Gh9vpNCPwGpIiobd cxhFgrkcSOe6mf1j4VFQmI/xGC2cX5Bg+VyYhXKD9OOGyOytLB0uY3S3BEHc0G5B xC1z3kp1zHoG//zoaM/WnIUuEF4zW4CK6p47NNDOYrameaSeyP4= -----END CERTIFICATE-----Generated at Mon May 5 22:14:27 2025 by rpki-client