$ rpki-client -vvf repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.mft File: DCD5207AC33E109E31052BBB7F811DBF6DA180BB.mft (raw, json) Hash identifier: rHJozC4uXmiXlbcPZY9BYLcIQomKslkdOI8zo0hc5u0= Subject key identifier: 82:4F:83:84:1F:5A:DF:C0:D4:0F:C8:2C:99:B8:15:D5:60:3F:AF:DF Authority key identifier: DC:D5:20:7A:C3:3E:10:9E:31:05:2B:BB:7F:81:1D:BF:6D:A1:80:BB Certificate issuer: /CN=DCD5207AC33E109E31052BBB7F811DBF6DA180BB Certificate serial: 09AAD032AC354EA1C753F9F06DD5506261A782C8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.mft Manifest number: 37 Signing time: Thu 08 May 2025 19:21:53 +0000 Manifest this update: Thu 08 May 2025 19:16:53 +0000 Manifest next update: Mon 12 May 2025 03:10:53 +0000 Files and hashes: 1: 3136302e32322e3130312e302f32342d3234203d3e20313532383039.roa (hash: mizXQiZMhSS2dg4DmWjoCSbZiybtKsfGNPxNOZ0yF9I=) 2: DCD5207AC33E109E31052BBB7F811DBF6DA180BB.crl (hash: UoZpE7EnVJZEJ9pLTM48zGypGBsyKoDuzh/lTitGUlM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.crl rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 03:10:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:aa:d0:32:ac:35:4e:a1:c7:53:f9:f0:6d:d5:50:62:61:a7:82:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCD5207AC33E109E31052BBB7F811DBF6DA180BB Validity Not Before: May 8 19:16:53 2025 GMT Not After : May 12 03:10:53 2025 GMT Subject: CN=824F83841F5ADFC0D40FC82C99B815D5603FAFDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:b5:84:61:93:04:74:43:0a:28:3d:c5:3e:25: 6a:11:96:9d:e0:14:83:03:76:7e:f4:c3:66:f1:91: 89:fb:fd:a3:32:4b:54:e1:c0:93:22:03:ff:63:71: 6c:01:12:fa:bd:b8:05:4f:4d:85:f3:02:8f:77:f1: e9:f3:d3:e5:b6:1f:80:a5:01:a5:a6:36:18:44:2d: 8a:f2:69:05:bd:d7:7c:87:ba:ed:5c:8b:f6:37:e4: 60:49:a5:e9:2b:77:da:8c:64:ed:f3:dc:34:03:b9: 47:0c:63:d1:3d:75:2a:f5:e0:62:26:41:0e:11:9b: 72:6c:77:d1:64:f5:83:28:cc:19:be:32:4b:60:48: e9:e5:7d:a5:d5:9a:17:cb:0c:cd:f3:f9:1d:60:6d: d6:4d:0e:cc:36:1c:19:e9:58:5e:aa:56:98:e6:ba: a8:30:cc:64:de:33:b0:b5:f0:bc:ec:0a:eb:38:a1: 42:76:36:21:07:2c:01:d1:4a:46:fe:46:a4:a6:df: c7:0b:1d:89:25:0b:cc:ab:c0:44:a8:a5:10:d7:8f: 2c:2b:d6:e5:85:ce:d5:72:d2:84:d7:9d:b6:e7:6a: a9:4f:dc:b4:a2:e0:20:e7:ec:ae:ec:f7:30:15:48: 1d:f6:84:5f:fd:06:be:9a:31:25:e1:5d:f1:71:7c: b7:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:4F:83:84:1F:5A:DF:C0:D4:0F:C8:2C:99:B8:15:D5:60:3F:AF:DF X509v3 Authority Key Identifier: keyid:DC:D5:20:7A:C3:3E:10:9E:31:05:2B:BB:7F:81:1D:BF:6D:A1:80:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption da:1b:7a:f6:ff:4f:b4:89:b6:87:c2:d4:5d:97:6a:73:0b:cf: cf:be:32:4e:f9:ad:2a:49:98:2b:8f:a8:cc:34:7b:fa:fe:19: 70:c5:79:5e:2f:a3:48:16:54:e1:0b:be:0e:75:30:36:dd:23: 56:cd:a7:7a:73:29:f7:f5:34:29:91:45:0e:3e:fc:3a:7e:3a: ce:0d:27:b2:f1:de:7c:2e:70:07:db:50:66:20:bc:a3:01:b1: d9:82:08:27:91:1a:9c:2e:c4:eb:5d:8b:02:37:9e:6f:b6:b4: 27:83:e7:37:34:eb:fd:0f:4f:38:9a:85:aa:ef:9a:97:6e:98: 1f:4f:a1:c8:04:97:ee:14:a2:54:3b:dd:3c:5b:8e:f0:64:3e: c9:7d:c2:34:20:96:eb:ca:4b:98:a3:5d:06:06:36:ae:c8:38: 17:f7:84:5b:21:3a:7c:76:9b:17:83:9c:13:01:54:3c:c7:06: cc:c7:02:0e:db:59:5c:21:0d:9d:cc:eb:a4:4f:09:f1:34:02: f5:19:ed:62:73:33:00:64:92:64:bf:26:71:69:f2:ad:ac:59: 90:7e:b3:9f:a7:3d:5c:8f:fd:2e:eb:b0:6c:20:d5:b0:96:f4: 3a:05:d6:ed:a8:1f:c6:9d:3b:08:31:fd:00:85:a0:32:06:af: 04:f6:3a:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCarQMqw1TqHHU/nwbdVQYmGngsgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENENTIwN0FDMzNFMTA5RTMxMDUyQkJCN0Y4MTFEQkY2 REExODBCQjAeFw0yNTA1MDgxOTE2NTNaFw0yNTA1MTIwMzEwNTNaMDMxMTAvBgNV BAMTKDgyNEY4Mzg0MUY1QURGQzBENDBGQzgyQzk5QjgxNUQ1NjAzRkFGREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDptYRhkwR0QwooPcU+JWoRlp3g FIMDdn70w2bxkYn7/aMyS1ThwJMiA/9jcWwBEvq9uAVPTYXzAo938enz0+W2H4Cl AaWmNhhELYryaQW913yHuu1ci/Y35GBJpekrd9qMZO3z3DQDuUcMY9E9dSr14GIm QQ4Rm3Jsd9Fk9YMozBm+MktgSOnlfaXVmhfLDM3z+R1gbdZNDsw2HBnpWF6qVpjm uqgwzGTeM7C18LzsCus4oUJ2NiEHLAHRSkb+RqSm38cLHYklC8yrwESopRDXjywr 1uWFztVy0oTXnbbnaqlP3LSi4CDn7K7s9zAVSB32hF/9Br6aMSXhXfFxfLenAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgk+DhB9a38DUD8gsmbgV1WA/r98wHwYDVR0j BBgwFoAU3NUgesM+EJ4xBSu7f4Edv22hgLswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDhlZjExOS03ZGRmLTQ1ZTUtODYzNC0zOGI3NzI1OGNiY2MvMC9EQ0Q1MjA3QUMz M0UxMDlFMzEwNTJCQkI3RjgxMURCRjZEQTE4MEJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRENENTIwN0FDMzNFMTA5RTMxMDUyQkJCN0Y4MTFEQkY2REEx ODBCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ4ZWYxMTktN2RkZi00NWU1LTg2 MzQtMzhiNzcyNThjYmNjLzAvRENENTIwN0FDMzNFMTA5RTMxMDUyQkJCN0Y4MTFE QkY2REExODBCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANobevb/T7SJtofC1F2XanMLz8++Mk75rSpJ mCuPqMw0e/r+GXDFeV4vo0gWVOELvg51MDbdI1bNp3pzKff1NCmRRQ4+/Dp+Os4N J7Lx3nwucAfbUGYgvKMBsdmCCCeRGpwuxOtdiwI3nm+2tCeD5zc06/0PTziaharv mpdumB9PocgEl+4UolQ73TxbjvBkPsl9wjQgluvKS5ijXQYGNq7IOBf3hFshOnx2 mxeDnBMBVDzHBszHAg7bWVwhDZ3M66RPCfE0AvUZ7WJzMwBkkmS/JnFp8q2sWZB+ s5+nPVyP/S7rsGwg1bCW9DoF1u2oH8adOwgx/QCFoDIGrwT2OsE= -----END CERTIFICATE-----Generated at Sat May 10 22:41:43 2025 by rpki-client