$ rpki-client -vvf repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.mft File: DEB4279F0D4CD8368462787573162FB753A9B04B.mft (raw, json) Hash identifier: KaKdU3sSnblqnz74Kv52yNAFvtLsrMvBEulj6CLNtuU= Subject key identifier: C2:A2:6C:49:E8:BC:B4:4D:8A:4A:C8:38:A2:7D:93:FC:98:83:6F:85 Authority key identifier: DE:B4:27:9F:0D:4C:D8:36:84:62:78:75:73:16:2F:B7:53:A9:B0:4B Certificate issuer: /CN=DEB4279F0D4CD8368462787573162FB753A9B04B Certificate serial: 675E4B64BFE66F5D8223557CD2687FC0D8132068 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEB4279F0D4CD8368462787573162FB753A9B04B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.mft Manifest number: 019A Signing time: Sat 10 May 2025 19:51:00 +0000 Manifest this update: Sat 10 May 2025 19:46:00 +0000 Manifest next update: Wed 14 May 2025 05:06:00 +0000 Files and hashes: 1: 3130332e33312e3234302e302f32342d3234203d3e20313339393532.roa (hash: 28zVUwIfauOaNkqHnh0ZLVPJlAu2ZRa+tGqxdNY0Rgo=) 2: DEB4279F0D4CD8368462787573162FB753A9B04B.crl (hash: sZ2UwtSZzOGjnR0QvATN/jzUusqQJWS9pxZ+fQgU4F0=) 3: 3130332e33312e3234312e302f32342d3234203d3e20313339393532.roa (hash: G08Zsb0m7nLFy8P1hWnzM0k+V4xtFf95Ynj7WmJyU4w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.crl rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEB4279F0D4CD8368462787573162FB753A9B04B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 05:06:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:5e:4b:64:bf:e6:6f:5d:82:23:55:7c:d2:68:7f:c0:d8:13:20:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEB4279F0D4CD8368462787573162FB753A9B04B Validity Not Before: May 10 19:46:00 2025 GMT Not After : May 14 05:06:00 2025 GMT Subject: CN=C2A26C49E8BCB44D8A4AC838A27D93FC98836F85 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:0a:2f:11:b6:48:ac:90:19:7a:5b:71:b0:b5: f6:51:92:19:ee:a1:3f:24:d7:55:97:95:2a:1b:9a: f7:29:44:aa:7f:32:65:af:02:9a:6a:80:9b:a2:ae: 4e:bb:29:de:cb:f2:4e:3e:de:7c:93:da:aa:e2:d5: 36:f1:85:cf:cd:ac:2e:14:97:3c:8c:1a:12:be:2c: 7f:47:8b:7b:63:9a:74:19:d4:b7:3d:96:06:79:49: dd:e2:8c:1f:54:31:f7:01:1f:65:74:7c:99:c0:1c: 1b:76:ae:62:91:4b:50:26:e5:0f:12:a2:ae:df:2b: 06:5c:aa:b9:e6:05:a4:91:20:8a:cc:c8:3d:39:1f: f0:28:b8:1d:2a:65:3b:9d:5d:dd:31:3b:3b:ee:b4: d8:75:6b:7c:62:3a:b3:c2:c1:38:2e:f3:f3:3a:0f: b6:10:93:ab:0c:ca:43:80:96:62:ff:69:95:8b:9f: 5b:15:e2:04:fb:d6:64:85:ee:c4:5d:90:99:dd:7b: b7:5f:7e:9a:cf:49:ba:ea:d9:8f:cf:9f:22:89:ab: c9:49:c2:8c:23:52:59:77:d5:32:cd:f1:c3:ed:b3: 71:80:67:00:41:37:db:75:85:30:50:20:7a:7b:b8: 8f:1d:6a:f2:2f:39:e7:e5:28:2d:e5:b4:4d:b3:d4: 87:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:A2:6C:49:E8:BC:B4:4D:8A:4A:C8:38:A2:7D:93:FC:98:83:6F:85 X509v3 Authority Key Identifier: keyid:DE:B4:27:9F:0D:4C:D8:36:84:62:78:75:73:16:2F:B7:53:A9:B0:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEB4279F0D4CD8368462787573162FB753A9B04B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:08:43:5a:82:33:e8:84:5b:a5:84:90:52:4d:40:17:47:e6: 0d:dd:5f:8a:dd:6b:d8:44:c8:16:ea:e7:ee:b9:e8:15:3f:d2: 9c:52:b2:56:69:f2:70:03:e8:95:60:41:50:ef:4e:01:9f:64: bc:6a:bf:77:43:4a:19:77:c4:33:26:1e:1b:2a:35:b3:e7:7f: e1:20:04:88:c8:b2:c3:17:a5:fc:20:51:6a:c0:54:85:62:59: 08:2d:b5:df:42:a2:0d:b1:85:61:0d:b7:f2:d5:91:a3:13:6d: a8:e2:58:82:da:4d:48:c1:fb:84:37:84:e4:d0:03:79:51:a1: 3c:5f:1e:c4:d3:9e:7b:bf:45:c4:c9:88:d7:11:55:55:66:60: d3:fe:d6:91:81:68:bd:70:bc:ec:be:b0:ba:48:d9:44:83:8c: ca:c4:ce:df:7c:49:5d:bc:7e:74:5d:5d:3c:0d:7d:19:57:bd: 37:d5:46:15:05:5b:8f:bb:a7:de:aa:d3:1e:38:62:39:ad:8f: 23:11:6e:16:b5:ad:78:9d:52:55:f3:fd:e9:43:6e:13:1d:89: e2:76:fc:b6:74:52:a0:91:62:bf:8d:3c:5c:e5:3c:40:13:98: 3b:4f:09:df:31:59:d1:26:3d:1e:a1:19:fa:5d:ca:2c:86:17: f5:7c:6e:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZ15LZL/mb12CI1V80mh/wNgTIGgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVCNDI3OUYwRDRDRDgzNjg0NjI3ODc1NzMxNjJGQjc1 M0E5QjA0QjAeFw0yNTA1MTAxOTQ2MDBaFw0yNTA1MTQwNTA2MDBaMDMxMTAvBgNV BAMTKEMyQTI2QzQ5RThCQ0I0NEQ4QTRBQzgzOEEyN0Q5M0ZDOTg4MzZGODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBCi8RtkiskBl6W3GwtfZRkhnu oT8k11WXlSobmvcpRKp/MmWvAppqgJuirk67Kd7L8k4+3nyT2qri1Tbxhc/NrC4U lzyMGhK+LH9Hi3tjmnQZ1Lc9lgZ5Sd3ijB9UMfcBH2V0fJnAHBt2rmKRS1Am5Q8S oq7fKwZcqrnmBaSRIIrMyD05H/AouB0qZTudXd0xOzvutNh1a3xiOrPCwTgu8/M6 D7YQk6sMykOAlmL/aZWLn1sV4gT71mSF7sRdkJnde7dffprPSbrq2Y/PnyKJq8lJ wowjUll31TLN8cPts3GAZwBBN9t1hTBQIHp7uI8davIvOeflKC3ltE2z1IefAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwqJsSei8tE2KSsg4on2T/JiDb4UwHwYDVR0j BBgwFoAU3rQnnw1M2DaEYnh1cxYvt1OpsEswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDMwMzRhYS1mMzljLTQ4ZjUtODUyZS1kMWJkN2YxN2FhNDIvMC9ERUI0Mjc5RjBE NENEODM2ODQ2Mjc4NzU3MzE2MkZCNzUzQTlCMDRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREVCNDI3OUYwRDRDRDgzNjg0NjI3ODc1NzMxNjJGQjc1M0E5 QjA0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQzMDM0YWEtZjM5Yy00OGY1LTg1 MmUtZDFiZDdmMTdhYTQyLzAvREVCNDI3OUYwRDRDRDgzNjg0NjI3ODc1NzMxNjJG Qjc1M0E5QjA0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH4IQ1qCM+iEW6WEkFJNQBdH5g3dX4rda9hE yBbq5+656BU/0pxSslZp8nAD6JVgQVDvTgGfZLxqv3dDShl3xDMmHhsqNbPnf+Eg BIjIssMXpfwgUWrAVIViWQgttd9Cog2xhWENt/LVkaMTbajiWILaTUjB+4Q3hOTQ A3lRoTxfHsTTnnu/RcTJiNcRVVVmYNP+1pGBaL1wvOy+sLpI2USDjMrEzt98SV28 fnRdXTwNfRlXvTfVRhUFW4+7p96q0x44YjmtjyMRbha1rXidUlXz/elDbhMdieJ2 /LZ0UqCRYr+NPFzlPEATmDtPCd8xWdEmPR6hGfpdyiyGF/V8boc= -----END CERTIFICATE-----Generated at Mon May 12 04:05:35 2025 by rpki-client