$ rpki-client -vvf repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft File: DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft (raw, json) Hash identifier: iBdeaBjY8budD+OHF+CAbK4PuEdaQjInz6geUOtIEpg= Subject key identifier: 12:B8:CE:17:45:C0:0D:BB:F3:3B:2B:C2:06:02:6A:35:20:06:C4:0A Authority key identifier: DD:5A:CD:C0:B2:D0:91:54:5E:18:5E:B1:FA:80:C0:00:7C:9A:FA:16 Certificate issuer: /CN=DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16 Certificate serial: 54A12280C93B290B318CCDAE58BF587BF86AE7D4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft Manifest number: 0148 Signing time: Fri 09 May 2025 05:01:58 +0000 Manifest this update: Fri 09 May 2025 04:56:58 +0000 Manifest next update: Mon 12 May 2025 08:49:58 +0000 Files and hashes: 1: DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl (hash: tcDkbr8cjawGZZj+rS3sXak/AL8L/JtbVzogYvASKMg=) 2: 3130332e37302e3132332e302f32342d3234203d3e20313530393830.roa (hash: aPx9nZD1wRsR+YuJsPrgngjz+ATISfbMPyPoqRV/0hM=) 3: 3130332e37302e3132322e302f32332d3233203d3e20313530393830.roa (hash: 9NdE9Yt64lHcZmHfcp/BPdUY3C5A8B6IZ0IM6khU6pM=) 4: 3130332e37302e3132322e302f32342d3234203d3e20313530393830.roa (hash: 6+zEkFvJJLps0Ow0oFFDpd+JwPXLZVdctd3PSfCUG8Q=) 5: 323030313a6466323a373463303a3a2f34382d3438203d3e20313530393830.roa (hash: aNAiE73cD/v7tVb+4UuVcbAAh3drncSjCMcGBLb2SJ4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 08:49:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:a1:22:80:c9:3b:29:0b:31:8c:cd:ae:58:bf:58:7b:f8:6a:e7:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16 Validity Not Before: May 9 04:56:58 2025 GMT Not After : May 12 08:49:58 2025 GMT Subject: CN=12B8CE1745C00DBBF33B2BC206026A352006C40A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:1b:f0:f3:e8:79:70:52:be:cb:8e:b1:f2:6b: ee:94:40:7e:4f:87:9f:81:a8:c2:f2:41:0f:36:da: a5:e5:93:6e:47:13:94:f1:3c:78:4e:1d:ff:cb:e4: c7:c6:90:07:28:fc:8b:18:a9:03:89:8c:91:bd:5b: 6c:5a:12:99:90:0b:71:c7:46:88:1c:e1:fa:25:85: cf:48:a4:38:1b:1c:89:2a:8f:fe:fb:c9:c3:86:9a: e3:53:cb:08:9d:a0:5c:e7:5e:01:e8:1d:0b:68:e1: a8:78:b2:57:19:81:e7:07:df:8d:a5:0d:1f:58:4c: a0:33:6a:24:d9:52:b4:ca:02:e6:15:bc:dc:41:0e: 8e:5d:34:b7:bb:06:3c:df:7c:e6:81:bd:ab:33:56: 1c:1e:5e:0e:19:4a:c6:4a:8b:a1:32:32:51:56:15: ce:41:a1:24:bc:0d:b7:bf:9a:0b:67:5e:06:b6:1e: ad:5c:7f:0d:65:ee:d0:a7:96:69:32:9c:03:8d:92: 77:4e:8e:a2:b3:dc:2b:87:5a:ac:a4:f7:11:f7:c1: a1:38:8e:15:37:2d:23:96:de:15:2d:22:7f:bc:b4: 88:b5:d3:68:73:55:b5:49:1c:55:39:6e:16:6e:18: 01:9a:fd:c2:97:91:c7:9b:5b:a5:45:23:2e:18:33: 6a:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:B8:CE:17:45:C0:0D:BB:F3:3B:2B:C2:06:02:6A:35:20:06:C4:0A X509v3 Authority Key Identifier: keyid:DD:5A:CD:C0:B2:D0:91:54:5E:18:5E:B1:FA:80:C0:00:7C:9A:FA:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:fb:b9:28:3c:d8:32:1e:dc:94:a2:f3:ca:2f:3a:44:27:8a: 63:24:a0:0e:21:30:80:03:d1:01:d2:df:16:19:dc:d4:d1:5d: 96:46:6a:6c:41:dd:38:ee:a1:d1:44:d3:45:85:82:16:1d:af: c1:74:0a:f4:92:df:a3:1e:9f:da:be:c3:d8:1b:4a:17:01:cb: 1f:15:20:bd:90:cf:45:f9:54:f6:7b:f6:73:a9:8b:ba:bd:90: b7:28:8a:52:b5:06:21:ab:e5:b3:74:95:66:4c:58:fe:c5:d8: ba:21:23:06:15:69:eb:cf:2d:75:89:44:94:26:23:8e:74:71: 51:b6:f6:38:81:bb:a2:61:5c:e5:5d:40:a7:ab:92:be:b7:86: 98:c3:f3:2a:00:26:58:2f:6d:55:3e:1c:54:17:ac:0f:8f:a2: 76:01:07:07:1c:be:03:c8:be:8f:9e:24:95:72:61:4c:5f:77: 01:e7:a4:6f:37:4c:50:47:c9:43:43:36:cd:f0:28:40:c5:fb: 2f:97:21:82:e7:78:49:eb:46:d9:4f:95:93:b4:76:e5:2c:58: c3:90:9d:47:41:21:6e:d9:4a:8b:ab:4a:83:2f:46:eb:0f:0e: 8d:ee:22:0b:0e:bc:93:39:c8:71:0f:ec:24:96:b9:4c:f9:e4: 29:44:a1:70 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVKEigMk7KQsxjM2uWL9Ye/hq59QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMwMDA3 QzlBRkExNjAeFw0yNTA1MDkwNDU2NThaFw0yNTA1MTIwODQ5NThaMDMxMTAvBgNV BAMTKDEyQjhDRTE3NDVDMDBEQkJGMzNCMkJDMjA2MDI2QTM1MjAwNkM0MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdG/Dz6HlwUr7LjrHya+6UQH5P h5+BqMLyQQ822qXlk25HE5TxPHhOHf/L5MfGkAco/IsYqQOJjJG9W2xaEpmQC3HH Rogc4folhc9IpDgbHIkqj/77ycOGmuNTywidoFznXgHoHQto4ah4slcZgecH342l DR9YTKAzaiTZUrTKAuYVvNxBDo5dNLe7BjzffOaBvaszVhweXg4ZSsZKi6EyMlFW Fc5BoSS8Dbe/mgtnXga2Hq1cfw1l7tCnlmkynAONkndOjqKz3CuHWqyk9xH3waE4 jhU3LSOW3hUtIn+8tIi102hzVbVJHFU5bhZuGAGa/cKXkcebW6VFIy4YM2qXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUErjOF0XADbvzOyvCBgJqNSAGxAowHwYDVR0j BBgwFoAU3VrNwLLQkVReGF6x+oDAAHya+hYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MzI1MDY2Mi0zZWVmLTRhYTktOWVkZS01NjI5ZDViNmVhOTUvMC9ERDVBQ0RDMEIy RDA5MTU0NUUxODVFQjFGQTgwQzAwMDdDOUFGQTE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMwMDA3QzlB RkExNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTMyNTA2NjItM2VlZi00YWE5LTll ZGUtNTYyOWQ1YjZlYTk1LzAvREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMw MDA3QzlBRkExNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIb7uSg82DIe3JSi88ovOkQnimMkoA4hMIAD 0QHS3xYZ3NTRXZZGamxB3TjuodFE00WFghYdr8F0CvSS36Men9q+w9gbShcByx8V IL2Qz0X5VPZ79nOpi7q9kLcoilK1BiGr5bN0lWZMWP7F2LohIwYVaevPLXWJRJQm I450cVG29jiBu6JhXOVdQKerkr63hpjD8yoAJlgvbVU+HFQXrA+PonYBBwccvgPI vo+eJJVyYUxfdwHnpG83TFBHyUNDNs3wKEDF+y+XIYLneEnrRtlPlZO0duUsWMOQ nUdBIW7ZSourSoMvRusPDo3uIgsOvJM5yHEP7CSWuUz55ClEoXA= -----END CERTIFICATE-----Generated at Sat May 10 05:00:40 2025 by rpki-client