$ rpki-client -vvf repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.mft File: DE39DBDBFB23D179870083C94A086E2890E8B7AD.mft (raw, json) Hash identifier: pUgEuD3/b8pB2FmXZGbo+qWxDVUbtJ7UcR+Go0Zylhs= Subject key identifier: F7:0D:D6:DD:07:51:61:36:4A:9D:A2:DA:FF:CD:97:03:FB:22:72:1C Authority key identifier: DE:39:DB:DB:FB:23:D1:79:87:00:83:C9:4A:08:6E:28:90:E8:B7:AD Certificate issuer: /CN=DE39DBDBFB23D179870083C94A086E2890E8B7AD Certificate serial: 623B785C127FB2710946E6A4B621AFE6993CA5D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE39DBDBFB23D179870083C94A086E2890E8B7AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.mft Manifest number: 0131 Signing time: Wed 07 May 2025 06:12:16 +0000 Manifest this update: Wed 07 May 2025 06:07:16 +0000 Manifest next update: Sat 10 May 2025 11:52:16 +0000 Files and hashes: 1: DE39DBDBFB23D179870083C94A086E2890E8B7AD.crl (hash: FsvcLE1XQAxkjJcIfVcXaszaLvXVsCj1/Wu2wfm0v94=) 2: 323030313a6466323a376234303a3a2f34382d3438203d3e20313530323636.roa (hash: yQ+O0JgELxkJNBYJ1Ujm9yhO9nL92pk3Pdtypqzo9H4=) 3: 3130332e39312e3133372e302f32342d3234203d3e20313530323636.roa (hash: PmPPRQTTkJqVTyMLWeDylYP3YNddNNCX4NFRmE7faZ4=) 4: 3130332e3231382e3138332e302f32342d3234203d3e20313530323636.roa (hash: O7ET++3mrznHJVvRoGpVQYJjcUAO15sAg0dKj486xb0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.crl rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE39DBDBFB23D179870083C94A086E2890E8B7AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 11:52:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:3b:78:5c:12:7f:b2:71:09:46:e6:a4:b6:21:af:e6:99:3c:a5:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE39DBDBFB23D179870083C94A086E2890E8B7AD Validity Not Before: May 7 06:07:16 2025 GMT Not After : May 10 11:52:16 2025 GMT Subject: CN=F70DD6DD075161364A9DA2DAFFCD9703FB22721C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:21:c0:5f:51:49:dc:9a:f4:4e:27:ac:9f:f7: ad:19:4c:23:24:25:10:07:96:4d:bf:85:40:08:16: 67:8e:50:ee:3e:30:aa:06:34:c0:9b:bc:8e:ff:42: d4:c6:8d:4c:1e:dd:c0:9e:71:18:54:fb:bc:71:d0: 97:79:b9:89:91:72:cb:73:29:32:ff:8b:0e:66:67: 2a:b8:4a:8e:be:f7:b6:b5:3e:37:6b:ca:bd:c3:2b: 0d:17:e0:2f:98:6a:78:4b:e0:ce:4c:57:9c:7d:39: 23:17:ad:9b:f8:74:02:fb:eb:fb:ca:2f:be:5a:6a: 59:2a:e8:d3:f7:5d:9f:9c:b9:0d:53:e0:1a:f4:6a: 56:51:4a:4e:74:ba:17:2c:00:41:3f:55:74:49:98: ac:0f:80:be:2e:8e:84:1e:12:41:fa:9b:0d:05:be: 46:cb:16:71:c6:21:4f:fc:3e:4e:b2:dc:09:eb:e8: 14:b1:12:f1:86:20:82:7e:d5:fd:eb:eb:be:f9:fd: 6d:19:6d:b0:7a:a3:2d:c0:16:6e:6d:23:cd:f5:03: 9a:9a:94:c5:c4:38:59:e6:6e:c6:bd:9b:b3:d5:b2: 7d:f0:49:9c:de:d4:c8:85:f2:e5:bf:3e:dd:69:55: 24:e7:98:c0:c2:f3:c6:f0:4b:91:07:84:e5:ce:67: a0:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:0D:D6:DD:07:51:61:36:4A:9D:A2:DA:FF:CD:97:03:FB:22:72:1C X509v3 Authority Key Identifier: keyid:DE:39:DB:DB:FB:23:D1:79:87:00:83:C9:4A:08:6E:28:90:E8:B7:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE39DBDBFB23D179870083C94A086E2890E8B7AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:4c:93:63:ca:a8:b6:28:a7:68:45:a2:a0:58:02:d9:d4:e4: 64:16:c2:14:95:21:d5:e8:fa:c0:91:e8:7f:8f:1d:20:52:6d: 83:e7:c4:0f:1a:da:58:9d:80:c6:d0:97:e7:09:39:ce:52:1e: 4a:13:75:75:fb:10:d1:73:94:a2:df:b5:28:d7:cb:7f:97:8b: da:bb:ec:c1:56:df:74:7b:1e:c1:46:86:dc:d7:2c:bd:4d:46: 06:91:2f:8c:9d:9f:8f:3e:70:cc:74:31:0e:24:63:fe:85:e3: 69:cc:b7:84:db:91:48:73:7a:32:cd:f9:19:64:54:c8:ef:f2: 8e:74:48:27:4a:8f:80:51:f3:5a:8f:c7:71:14:fc:48:4b:71: af:f2:32:10:5a:cf:26:e8:28:a9:f9:b0:d6:38:73:58:fc:7e: 57:d4:56:56:f7:9b:78:c5:b7:05:dd:a5:e7:66:8e:b0:63:fb: 71:00:84:f4:f6:33:b1:b6:89:b2:bb:01:87:c0:42:cf:c7:55: 91:f8:69:54:27:8a:fe:cd:bb:d7:79:a1:c6:8f:7f:17:6d:3a: 94:d8:f1:59:18:c6:e3:61:c4:b2:d4:db:12:38:30:d9:ed:73: 54:fe:5f:1b:0f:09:31:9a:c1:f5:d5:6b:29:a4:5b:df:c8:e5: a8:fe:db:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYjt4XBJ/snEJRuaktiGv5pk8pdUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUzOURCREJGQjIzRDE3OTg3MDA4M0M5NEEwODZFMjg5 MEU4QjdBRDAeFw0yNTA1MDcwNjA3MTZaFw0yNTA1MTAxMTUyMTZaMDMxMTAvBgNV BAMTKEY3MERENkREMDc1MTYxMzY0QTlEQTJEQUZGQ0Q5NzAzRkIyMjcyMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxIcBfUUncmvROJ6yf960ZTCMk JRAHlk2/hUAIFmeOUO4+MKoGNMCbvI7/QtTGjUwe3cCecRhU+7xx0Jd5uYmRcstz KTL/iw5mZyq4So6+97a1Pjdryr3DKw0X4C+YanhL4M5MV5x9OSMXrZv4dAL76/vK L75aalkq6NP3XZ+cuQ1T4Br0alZRSk50uhcsAEE/VXRJmKwPgL4ujoQeEkH6mw0F vkbLFnHGIU/8Pk6y3Anr6BSxEvGGIIJ+1f3r6775/W0ZbbB6oy3AFm5tI831A5qa lMXEOFnmbsa9m7PVsn3wSZze1MiF8uW/Pt1pVSTnmMDC88bwS5EHhOXOZ6DdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9w3W3QdRYTZKnaLa/82XA/sichwwHwYDVR0j BBgwFoAU3jnb2/sj0XmHAIPJSghuKJDot60wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NTJiZWFlMS0zNDgwLTRlOTItYTNhOS01YTU0ZmJiYWNkMmQvMC9ERTM5REJEQkZC MjNEMTc5ODcwMDgzQzk0QTA4NkUyODkwRThCN0FELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREUzOURCREJGQjIzRDE3OTg3MDA4M0M5NEEwODZFMjg5MEU4 QjdBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTUyYmVhZTEtMzQ4MC00ZTkyLWEz YTktNWE1NGZiYmFjZDJkLzAvREUzOURCREJGQjIzRDE3OTg3MDA4M0M5NEEwODZF Mjg5MEU4QjdBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABZMk2PKqLYop2hFoqBYAtnU5GQWwhSVIdXo +sCR6H+PHSBSbYPnxA8a2lidgMbQl+cJOc5SHkoTdXX7ENFzlKLftSjXy3+Xi9q7 7MFW33R7HsFGhtzXLL1NRgaRL4ydn48+cMx0MQ4kY/6F42nMt4TbkUhzejLN+Rlk VMjv8o50SCdKj4BR81qPx3EU/EhLca/yMhBazyboKKn5sNY4c1j8flfUVlb3m3jF twXdpedmjrBj+3EAhPT2M7G2ibK7AYfAQs/HVZH4aVQniv7Nu9d5ocaPfxdtOpTY 8VkYxuNhxLLU2xI4MNntc1T+XxsPCTGawfXVaymkW9/I5aj+20Q= -----END CERTIFICATE-----Generated at Thu May 8 18:34:44 2025 by rpki-client