$ rpki-client -vvf repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft File: DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft (raw, json) Hash identifier: wvyCierLc8CwHT43OfJrY2zG8YFM1lnvQQWj8jr1sBI= Subject key identifier: 5D:AB:BE:EC:5D:28:13:34:56:DA:6E:0C:AB:A7:35:E5:29:6A:94:2D Authority key identifier: DB:E9:15:60:EB:E5:8F:31:F0:1F:54:3D:75:1B:03:FC:02:EA:7D:9E Certificate issuer: /CN=DBE91560EBE58F31F01F543D751B03FC02EA7D9E Certificate serial: 199D2A419D7372B32A342451A64DC5CD93BE79C4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft Manifest number: 04CC Signing time: Fri 09 May 2025 09:11:22 +0000 Manifest this update: Fri 09 May 2025 09:06:22 +0000 Manifest next update: Mon 12 May 2025 15:33:22 +0000 Files and hashes: 1: DBE91560EBE58F31F01F543D751B03FC02EA7D9E.crl (hash: +SG14SUnMMhs4w6XAzNNxCHxr04TVSYswqToInNrP0E=) 2: 323030313a6466333a666438303a3a2f34382d3438203d3e20313430343432.roa (hash: kic57aXXLWATxjKS0QIxUZVlZJ5rlzeUQ8B0nZVuNJE=) 3: 3130332e3135322e37322e302f32332d3234203d3e20313430343432.roa (hash: yQ8r9aTimM+1fU3cDxtTiC5piuG7uhQf6ZdHLgllIPI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.crl rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 15:33:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 19:9d:2a:41:9d:73:72:b3:2a:34:24:51:a6:4d:c5:cd:93:be:79:c4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBE91560EBE58F31F01F543D751B03FC02EA7D9E Validity Not Before: May 9 09:06:22 2025 GMT Not After : May 12 15:33:22 2025 GMT Subject: CN=5DABBEEC5D28133456DA6E0CABA735E5296A942D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:5f:58:b7:32:31:da:af:a9:9a:85:e4:f9:2f: af:91:f9:4f:ba:27:52:ff:c1:73:19:c9:d8:17:30: 00:f9:7a:81:e1:73:02:03:fe:74:0f:5f:f2:e3:23: 02:30:9e:0d:6e:7b:ce:54:78:7d:61:94:95:c6:02: 0f:01:ff:05:b1:95:54:fd:f5:ed:bf:a4:cd:26:03: 69:b2:29:2c:c5:25:ad:9f:33:90:63:ff:5e:25:1d: 8b:5c:75:ea:b7:45:5b:30:d3:8c:97:7e:35:3a:e4: 1a:fa:fd:d0:a7:a2:b2:8e:fe:16:b6:7d:93:83:6a: 43:78:56:0c:8b:3d:e6:2e:c2:1d:65:05:c2:60:98: 52:50:cc:5f:50:a5:21:d6:40:c1:41:b7:94:a1:21: d3:ec:57:ce:d3:7e:c9:b9:00:a6:d5:3d:cb:6f:8d: 5b:28:07:6f:11:70:34:da:a3:3b:c4:70:67:4e:07: e1:73:93:21:9a:6c:83:4a:2c:dd:ed:1c:f1:29:63: 07:e7:51:5d:62:18:2a:71:6c:6f:02:f4:ea:50:80: e6:60:cf:c4:c4:92:b8:6d:6e:af:bf:35:1b:f0:0b: 04:8e:3c:85:5b:1b:2b:f8:76:0b:d3:b2:68:0c:b0: f5:12:7b:97:0c:a8:28:97:da:17:e4:6d:c5:a0:fb: f1:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:AB:BE:EC:5D:28:13:34:56:DA:6E:0C:AB:A7:35:E5:29:6A:94:2D X509v3 Authority Key Identifier: keyid:DB:E9:15:60:EB:E5:8F:31:F0:1F:54:3D:75:1B:03:FC:02:EA:7D:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:26:d8:1d:c8:51:c8:4e:52:3c:30:4a:19:55:bf:f3:e4:80: 41:29:53:eb:40:b5:44:4d:57:36:2f:d0:60:1a:2e:53:20:1d: 7b:ad:45:9e:1e:24:77:cf:df:92:b2:f6:cf:3c:0a:97:35:aa: 46:5f:12:a7:ea:11:54:f3:16:1a:ee:c6:4c:ed:2a:eb:d5:34: 00:cf:7c:b2:7e:a3:37:b9:f0:89:6b:a3:4e:61:37:62:00:1c: 2e:aa:42:e1:49:11:32:5f:61:49:21:db:a0:b3:4e:61:8b:fa: b8:2c:02:91:1a:74:6c:90:de:f4:62:76:3d:c1:59:f6:e4:4a: 5d:a9:35:6f:85:15:2e:0d:08:72:b9:c2:3c:17:33:c3:04:67: ef:3b:b9:ae:eb:c2:4f:28:be:c5:e6:9d:f5:7a:a0:ef:89:db: 2c:f6:15:37:98:51:3b:22:b2:f9:bf:87:97:ee:bf:74:f3:c2: 02:cb:84:db:37:f7:bd:76:79:62:24:19:32:22:7e:10:c5:ea: 89:ab:70:15:88:26:c1:a7:7f:75:1f:d0:6d:b4:00:8b:ba:1c: 3d:eb:5b:ff:f9:88:86:ef:54:48:2d:aa:7a:5c:9c:4b:29:5c: 47:bf:c9:53:79:b6:19:59:bd:71:79:2e:0f:53:cf:59:16:e7: 05:a8:06:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGZ0qQZ1zcrMqNCRRpk3FzZO+ecQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJFOTE1NjBFQkU1OEYzMUYwMUY1NDNENzUxQjAzRkMw MkVBN0Q5RTAeFw0yNTA1MDkwOTA2MjJaFw0yNTA1MTIxNTMzMjJaMDMxMTAvBgNV BAMTKDVEQUJCRUVDNUQyODEzMzQ1NkRBNkUwQ0FCQTczNUU1Mjk2QTk0MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6X1i3MjHar6maheT5L6+R+U+6 J1L/wXMZydgXMAD5eoHhcwID/nQPX/LjIwIwng1ue85UeH1hlJXGAg8B/wWxlVT9 9e2/pM0mA2myKSzFJa2fM5Bj/14lHYtcdeq3RVsw04yXfjU65Br6/dCnorKO/ha2 fZODakN4VgyLPeYuwh1lBcJgmFJQzF9QpSHWQMFBt5ShIdPsV87Tfsm5AKbVPctv jVsoB28RcDTaozvEcGdOB+FzkyGabINKLN3tHPEpYwfnUV1iGCpxbG8C9OpQgOZg z8TEkrhtbq+/NRvwCwSOPIVbGyv4dgvTsmgMsPUSe5cMqCiX2hfkbcWg+/FNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXau+7F0oEzRW2m4Mq6c15SlqlC0wHwYDVR0j BBgwFoAU2+kVYOvljzHwH1Q9dRsD/ALqfZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NzI4Yzc3Yi0yMTAwLTRmMmEtOTBkOS0wOGM1M2U4NDFlMWIvMC9EQkU5MTU2MEVC RTU4RjMxRjAxRjU0M0Q3NTFCMDNGQzAyRUE3RDlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREJFOTE1NjBFQkU1OEYzMUYwMUY1NDNENzUxQjAzRkMwMkVB N0Q5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjcyOGM3N2ItMjEwMC00ZjJhLTkw ZDktMDhjNTNlODQxZTFiLzAvREJFOTE1NjBFQkU1OEYzMUYwMUY1NDNENzUxQjAz RkMwMkVBN0Q5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJom2B3IUchOUjwwShlVv/PkgEEpU+tAtURN VzYv0GAaLlMgHXutRZ4eJHfP35Ky9s88Cpc1qkZfEqfqEVTzFhruxkztKuvVNADP fLJ+oze58Ilro05hN2IAHC6qQuFJETJfYUkh26CzTmGL+rgsApEadGyQ3vRidj3B WfbkSl2pNW+FFS4NCHK5wjwXM8MEZ+87ua7rwk8ovsXmnfV6oO+J2yz2FTeYUTsi svm/h5fuv3TzwgLLhNs39712eWIkGTIifhDF6omrcBWIJsGnf3Uf0G20AIu6HD3r W//5iIbvVEgtqnpcnEspXEe/yVN5thlZvXF5Lg9Tz1kW5wWoBts= -----END CERTIFICATE-----Generated at Sat May 10 15:14:21 2025 by rpki-client