$ rpki-client -vvf repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.mft File: DD77382BD9E8634AEF9E93D763B0149D915502F5.mft (raw, json) Hash identifier: UOpF4txkFlftuMDrupeMesIOBFUau22ZzuUVNaq1ojk= Subject key identifier: 4F:E1:86:88:C8:A6:2A:B4:86:D6:BC:6C:C6:66:C8:AE:01:6D:69:3D Authority key identifier: DD:77:38:2B:D9:E8:63:4A:EF:9E:93:D7:63:B0:14:9D:91:55:02:F5 Certificate issuer: /CN=DD77382BD9E8634AEF9E93D763B0149D915502F5 Certificate serial: 39EDE308901CAAA865D604D066AC7FCA4CC23AE4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD77382BD9E8634AEF9E93D763B0149D915502F5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.mft Manifest number: 03A9 Signing time: Fri 09 May 2025 21:21:20 +0000 Manifest this update: Fri 09 May 2025 21:16:20 +0000 Manifest next update: Tue 13 May 2025 02:30:20 +0000 Files and hashes: 1: 3130332e3135352e3136382e302f32332d3233203d3e20313431303635.roa (hash: Y/t7s83TrJfcnDGlxRGeWKMHBRcUwBBITgOCbUYiXEc=) 2: 3130332e3135352e3136392e302f32342d3234203d3e20313431303635.roa (hash: c3TzylCEjs5xy8RF441nXx1uAnBKNVsy3aYQ1eehMFs=) 3: 3130332e3135352e3136382e302f32342d3234203d3e20313431303635.roa (hash: K3vShF0D9bPRn6sv5SW8yGmWNIRGvlLBsD0vPKS9a4E=) 4: DD77382BD9E8634AEF9E93D763B0149D915502F5.crl (hash: 88DvC/8NIN7FaUj7/bqfiWXYwHwzpfghGhUpb9ylAoM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.crl rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD77382BD9E8634AEF9E93D763B0149D915502F5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 02:30:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:ed:e3:08:90:1c:aa:a8:65:d6:04:d0:66:ac:7f:ca:4c:c2:3a:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD77382BD9E8634AEF9E93D763B0149D915502F5 Validity Not Before: May 9 21:16:20 2025 GMT Not After : May 13 02:30:20 2025 GMT Subject: CN=4FE18688C8A62AB486D6BC6CC666C8AE016D693D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:cd:55:5a:88:c4:5f:c0:87:4e:a1:df:38:ad: db:be:5e:58:d7:52:d6:a0:85:e9:6f:66:4f:9b:d4: 28:3b:3c:db:f3:67:9f:02:64:e2:65:a0:00:77:14: 8c:24:42:96:75:0d:b4:ab:8a:e6:91:8f:47:bc:15: f8:0a:8b:5b:6a:c1:86:3a:0f:a8:a2:ef:37:c1:07: 42:d6:fd:3d:27:b9:82:d1:d2:9e:6f:74:ee:f4:a1: e0:58:0c:ef:fd:54:75:c8:a2:a1:d8:f2:a8:dc:80: 5c:15:24:37:fe:ee:13:0d:9f:85:40:98:0c:bf:81: b3:ba:bb:eb:1d:07:86:2f:62:a1:f3:59:92:6e:51: 48:84:fb:db:e8:9c:2b:0c:21:e0:20:53:e0:0a:5d: 18:d5:2e:24:5a:03:94:21:16:fb:85:22:61:ad:ba: 97:14:07:0d:a9:e0:34:79:26:a8:f2:d2:f7:61:8b: b9:ea:c8:d8:bc:cd:af:da:8d:22:e5:e3:6f:d8:f3: 19:3d:b8:19:59:13:67:b3:f9:e7:ce:a9:ff:24:d3: 53:cb:27:d2:e7:a1:2c:58:87:e6:a4:c0:30:14:52: 65:1b:2e:ce:44:8b:9c:29:c6:47:cc:17:c6:d3:b3: c3:6f:d1:3b:79:0c:06:1e:5f:6f:c3:fd:f6:84:cd: 13:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:E1:86:88:C8:A6:2A:B4:86:D6:BC:6C:C6:66:C8:AE:01:6D:69:3D X509v3 Authority Key Identifier: keyid:DD:77:38:2B:D9:E8:63:4A:EF:9E:93:D7:63:B0:14:9D:91:55:02:F5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD77382BD9E8634AEF9E93D763B0149D915502F5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6ff8f4ab-1ab8-4894-b758-d9bce3803e4c/0/DD77382BD9E8634AEF9E93D763B0149D915502F5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:cd:fe:13:07:ff:dc:06:e5:7e:d4:f3:3e:62:92:c5:37:55: 75:73:0c:93:e0:51:dd:f8:cc:08:04:a3:47:61:41:31:b6:fd: c2:7e:49:4a:17:9e:2f:9b:84:63:d7:2b:58:b1:32:e0:f9:37: 34:0a:a7:e1:53:00:9e:6f:fd:e0:a7:37:b9:da:86:5c:86:d6: 03:92:39:12:5a:20:3f:16:34:9a:68:1f:1b:7b:c0:14:3f:50: 6f:c4:92:9b:08:ca:2e:c9:a3:6b:a1:ac:24:88:54:1c:31:e3: 6e:82:12:ff:70:c0:6f:0f:25:76:cc:dc:af:55:dc:a0:22:18: 89:7e:a3:7d:40:05:8f:5c:d8:4f:c8:70:e1:33:18:3b:57:8a: 4c:71:88:d9:60:e1:a0:85:dd:5d:ca:6b:c7:16:00:61:84:ba: 5b:5a:f4:df:a2:0d:c6:76:ab:0f:ab:0c:29:6b:5b:99:a1:3f: 4a:e3:9a:e2:72:b5:ca:be:cb:46:1e:dd:2b:7c:be:0d:4c:4e: b2:05:13:8c:72:77:9b:c2:4f:0a:5a:8e:69:7e:f3:78:37:02: 46:ba:ab:8d:07:ff:f5:7b:f7:de:38:e7:e9:9c:d4:5e:ca:be: f9:25:6f:85:8b:8b:a6:f6:a8:a9:44:d2:2f:3f:6a:e0:e2:9d: 74:cb:57:97 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOe3jCJAcqqhl1gTQZqx/ykzCOuQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ3NzM4MkJEOUU4NjM0QUVGOUU5M0Q3NjNCMDE0OUQ5 MTU1MDJGNTAeFw0yNTA1MDkyMTE2MjBaFw0yNTA1MTMwMjMwMjBaMDMxMTAvBgNV BAMTKDRGRTE4Njg4QzhBNjJBQjQ4NkQ2QkM2Q0M2NjZDOEFFMDE2RDY5M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrzVVaiMRfwIdOod84rdu+XljX UtaghelvZk+b1Cg7PNvzZ58CZOJloAB3FIwkQpZ1DbSriuaRj0e8FfgKi1tqwYY6 D6ii7zfBB0LW/T0nuYLR0p5vdO70oeBYDO/9VHXIoqHY8qjcgFwVJDf+7hMNn4VA mAy/gbO6u+sdB4YvYqHzWZJuUUiE+9vonCsMIeAgU+AKXRjVLiRaA5QhFvuFImGt upcUBw2p4DR5Jqjy0vdhi7nqyNi8za/ajSLl42/Y8xk9uBlZE2ez+efOqf8k01PL J9LnoSxYh+akwDAUUmUbLs5Ei5wpxkfMF8bTs8Nv0Tt5DAYeX2/D/faEzRM3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUT+GGiMimKrSG1rxsxmbIrgFtaT0wHwYDVR0j BBgwFoAU3Xc4K9noY0rvnpPXY7AUnZFVAvUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 ZmY4ZjRhYi0xYWI4LTQ4OTQtYjc1OC1kOWJjZTM4MDNlNGMvMC9ERDc3MzgyQkQ5 RTg2MzRBRUY5RTkzRDc2M0IwMTQ5RDkxNTUwMkY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ3NzM4MkJEOUU4NjM0QUVGOUU5M0Q3NjNCMDE0OUQ5MTU1 MDJGNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmZmOGY0YWItMWFiOC00ODk0LWI3 NTgtZDliY2UzODAzZTRjLzAvREQ3NzM4MkJEOUU4NjM0QUVGOUU5M0Q3NjNCMDE0 OUQ5MTU1MDJGNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGjN/hMH/9wG5X7U8z5iksU3VXVzDJPgUd34 zAgEo0dhQTG2/cJ+SUoXni+bhGPXK1ixMuD5NzQKp+FTAJ5v/eCnN7nahlyG1gOS ORJaID8WNJpoHxt7wBQ/UG/EkpsIyi7Jo2uhrCSIVBwx426CEv9wwG8PJXbM3K9V 3KAiGIl+o31ABY9c2E/IcOEzGDtXikxxiNlg4aCF3V3Ka8cWAGGEulta9N+iDcZ2 qw+rDClrW5mhP0rjmuJytcq+y0Ye3St8vg1MTrIFE4xyd5vCTwpajml+83g3Aka6 q40H//V799445+mc1F7Kvvklb4WLi6b2qKlE0i8/auDinXTLV5c= -----END CERTIFICATE-----Generated at Sat May 10 08:55:12 2025 by rpki-client