$ rpki-client -vvf repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.mft File: D681DB990E904642A480AE9546646329FF5D0162.mft (raw, json) Hash identifier: AQLdvaVHaeRG68bZ/X+MONjCqxfsDu7B7t5e/wKp1wk= Subject key identifier: DF:37:6A:15:48:93:0F:F8:77:7D:6C:DC:0D:D2:4F:3E:D3:FF:06:6F Authority key identifier: D6:81:DB:99:0E:90:46:42:A4:80:AE:95:46:64:63:29:FF:5D:01:62 Certificate issuer: /CN=D681DB990E904642A480AE9546646329FF5D0162 Certificate serial: 03C78ABD2D296846F0E90F98973B3DFDB6F878D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D681DB990E904642A480AE9546646329FF5D0162.cer Subject info access: rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.mft Manifest number: 0209 Signing time: Fri 09 May 2025 20:11:41 +0000 Manifest this update: Fri 09 May 2025 20:06:41 +0000 Manifest next update: Tue 13 May 2025 03:12:41 +0000 Files and hashes: 1: D681DB990E904642A480AE9546646329FF5D0162.crl (hash: wW0FfkQVE2oqhtaksLRJQjEUOon9puUQ77p4w08DlPE=) 2: 3130332e3134352e33352e302f32342d3234203d3e20313339343439.roa (hash: 8k5DQdShfF1LLL6tlnALBNsa0H5JvdmBz45qLP8B2NI=) 3: 3130332e3134352e33342e302f32332d3234203d3e20313339343439.roa (hash: LHa8Gk6p3lZ7S7/Rp7IyQ5LobLYaYL270fNDeWRq1/Y=) 4: 323430353a373763303a3a2f33322d3438203d3e20313339343439.roa (hash: f8MRJxlhbcY8EbEiwgi+/SKPemoWVlSCLt+ZroHUs4Q=) 5: 3130332e3134352e33342e302f32342d3234203d3e20313339343439.roa (hash: 6sNUHy3rsTArTsGqkY6I4FLyCbpPnknKrCUS7UYl4FU=) 6: 323430353a373763303a313030303a3a2f34382d3438203d3e20313339343439.roa (hash: S46aE/ncRXMf/O3Dr/ibsClJZkbck2hq6Vl5nt7lzws=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.crl rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D681DB990E904642A480AE9546646329FF5D0162.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 03:12:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:c7:8a:bd:2d:29:68:46:f0:e9:0f:98:97:3b:3d:fd:b6:f8:78:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D681DB990E904642A480AE9546646329FF5D0162 Validity Not Before: May 9 20:06:41 2025 GMT Not After : May 13 03:12:41 2025 GMT Subject: CN=DF376A1548930FF8777D6CDC0DD24F3ED3FF066F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:82:82:4a:c1:9c:ac:33:79:16:c5:c9:5d:7d: e7:fd:7f:2a:fc:90:f6:d8:82:24:76:bc:4a:a7:1c: 10:d3:fb:78:72:3d:7a:37:da:8c:4f:7d:86:af:81: a2:64:bc:27:75:d7:7d:22:a1:cc:82:ae:84:f2:d0: 57:ef:8b:e0:b8:a6:a1:51:f8:1f:45:2f:48:3e:99: 88:1e:50:04:ca:b4:f2:e8:48:6a:72:d1:9e:f4:91: be:40:b7:c9:d7:2d:ca:93:1d:a5:ac:11:a9:4d:d2: 8e:a7:7e:62:a8:7b:b4:93:0c:0f:85:62:c1:f9:f1: d7:0d:d0:78:73:ae:ee:d0:7a:6b:19:92:45:ca:32: e7:d0:fd:cf:6c:8f:1e:06:26:25:f2:14:16:45:8d: 47:da:c3:94:7b:80:d9:38:a4:9a:59:97:69:42:9c: eb:17:f0:f1:da:52:aa:a8:01:48:af:6a:41:07:5c: 10:c4:ca:ad:14:cb:ca:f3:7f:25:14:a9:86:1f:12: 01:48:73:89:df:38:6a:70:8e:86:22:39:1e:94:1a: 1d:2c:c2:3b:f2:e7:fe:3d:af:41:09:b3:92:54:58: df:fc:ed:04:de:5f:e5:78:2e:a8:2f:67:9f:b0:0d: b3:35:07:8b:79:7c:d0:b9:94:cc:2b:21:42:3c:1d: 53:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:37:6A:15:48:93:0F:F8:77:7D:6C:DC:0D:D2:4F:3E:D3:FF:06:6F X509v3 Authority Key Identifier: keyid:D6:81:DB:99:0E:90:46:42:A4:80:AE:95:46:64:63:29:FF:5D:01:62 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D681DB990E904642A480AE9546646329FF5D0162.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/79fbe088-0d84-4789-b405-25c2e76937f6/0/D681DB990E904642A480AE9546646329FF5D0162.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:23:ca:02:8c:7b:ea:52:3f:68:85:25:e5:80:8f:e7:ec:d7: 2a:db:fe:73:52:21:7f:a9:7e:4d:b3:95:2d:20:ac:23:b0:cf: 5e:d5:30:21:69:d3:0e:79:6a:57:ff:3e:26:2a:02:27:0d:1f: 2e:a0:2a:23:3a:1c:a6:5a:fa:40:a9:0b:85:06:17:c7:09:4c: ed:c4:6e:ce:07:55:5f:b2:82:67:0e:c7:8f:35:1f:c7:3e:68: 4a:bd:9d:e1:49:0a:0c:b7:f5:04:74:ef:8f:59:db:d1:8b:14: 0d:f1:04:f6:9c:91:6d:4a:a7:66:d9:6a:b3:9e:c1:37:1f:eb: fa:69:8f:28:32:3a:d8:83:fe:84:9f:0d:1d:ac:03:e5:c4:09: 4c:5f:86:9e:45:f5:ab:f9:56:b3:64:47:55:f6:e6:55:4d:2c: dc:9c:38:c2:9f:eb:61:7a:9f:20:7f:5f:46:cb:dc:4c:b7:29: e4:08:5e:5a:e3:24:4c:8e:ea:f2:a4:5b:6e:ae:11:66:39:8a: aa:bf:7c:d2:03:df:2e:e6:a2:86:18:2a:d1:7a:e9:d3:60:c2: 88:dd:e2:ee:56:00:92:77:d5:2d:c0:56:3b:e2:ae:25:8b:e8: 70:8b:3d:7d:65:b5:35:2f:88:04:9e:ec:0c:ba:4e:91:ac:85: 5e:02:95:a6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUA8eKvS0paEbw6Q+Ylzs9/bb4eNUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY4MURCOTkwRTkwNDY0MkE0ODBBRTk1NDY2NDYzMjlG RjVEMDE2MjAeFw0yNTA1MDkyMDA2NDFaFw0yNTA1MTMwMzEyNDFaMDMxMTAvBgNV BAMTKERGMzc2QTE1NDg5MzBGRjg3NzdENkNEQzBERDI0RjNFRDNGRjA2NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKgoJKwZysM3kWxcldfef9fyr8 kPbYgiR2vEqnHBDT+3hyPXo32oxPfYavgaJkvCd1130iocyCroTy0Ffvi+C4pqFR +B9FL0g+mYgeUATKtPLoSGpy0Z70kb5At8nXLcqTHaWsEalN0o6nfmKoe7STDA+F YsH58dcN0Hhzru7QemsZkkXKMufQ/c9sjx4GJiXyFBZFjUfaw5R7gNk4pJpZl2lC nOsX8PHaUqqoAUivakEHXBDEyq0Uy8rzfyUUqYYfEgFIc4nfOGpwjoYiOR6UGh0s wjvy5/49r0EJs5JUWN/87QTeX+V4LqgvZ5+wDbM1B4t5fNC5lMwrIUI8HVNpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3zdqFUiTD/h3fWzcDdJPPtP/Bm8wHwYDVR0j BBgwFoAU1oHbmQ6QRkKkgK6VRmRjKf9dAWIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 OWZiZTA4OC0wZDg0LTQ3ODktYjQwNS0yNWMyZTc2OTM3ZjYvMC9ENjgxREI5OTBF OTA0NjQyQTQ4MEFFOTU0NjY0NjMyOUZGNUQwMTYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDY4MURCOTkwRTkwNDY0MkE0ODBBRTk1NDY2NDYzMjlGRjVE MDE2Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzlmYmUwODgtMGQ4NC00Nzg5LWI0 MDUtMjVjMmU3NjkzN2Y2LzAvRDY4MURCOTkwRTkwNDY0MkE0ODBBRTk1NDY2NDYz MjlGRjVEMDE2Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHAjygKMe+pSP2iFJeWAj+fs1yrb/nNSIX+p fk2zlS0grCOwz17VMCFp0w55alf/PiYqAicNHy6gKiM6HKZa+kCpC4UGF8cJTO3E bs4HVV+ygmcOx481H8c+aEq9neFJCgy39QR0749Z29GLFA3xBPackW1Kp2bZarOe wTcf6/ppjygyOtiD/oSfDR2sA+XECUxfhp5F9av5VrNkR1X25lVNLNycOMKf62F6 nyB/X0bL3Ey3KeQIXlrjJEyO6vKkW26uEWY5iqq/fNID3y7mooYYKtF66dNgwojd 4u5WAJJ31S3AVjviriWL6HCLPX1ltTUviASe7Ay6TpGshV4ClaY= -----END CERTIFICATE-----Generated at Sun May 11 00:54:06 2025 by rpki-client