$ rpki-client -vvf repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft File: D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft (raw, json) Hash identifier: nLvSIGHWDvYQqie4y+djm7BlxmUjgeYjU8RwYKFA4Xw= Subject key identifier: 1C:81:99:08:0D:AB:95:4D:D3:94:DE:C1:46:EA:E2:FA:71:B9:51:5C Authority key identifier: D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28 Certificate issuer: /CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428 Certificate serial: 4BA724B8AC9E70160C42D2307B26AB06B7664CF7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft Manifest number: 030C Signing time: Wed 07 May 2025 08:50:57 +0000 Manifest this update: Wed 07 May 2025 08:45:57 +0000 Manifest next update: Sat 10 May 2025 12:32:57 +0000 Files and hashes: 1: 3130332e38322e3138302e302f32342d3234203d3e20313336303631.roa (hash: vrTITHbJ7Z89V7LCGHxYnSOAw5dei/ElVg8Aq8hclwk=) 2: D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl (hash: LUFqmpWkOTR2IJcMlrw2LzvYFmgLcHS3HpPRBg9bNrk=) 3: 3130332e38322e3138322e302f32342d3234203d3e20313336303631.roa (hash: 07yh7hfVKVGF6Yffm3aMOKeO+ClRWm+M1+obA5h32mQ=) 4: 3130332e38322e3138332e302f32342d3234203d3e20313336303631.roa (hash: Fob1/hoaxI1PmxjmOmJBrnjoUBlYNNau0pJudnAPUXY=) 5: 3130332e38322e3138322e302f32342d3234203d3e203535303032.roa (hash: Gb4dk6cIFWpDm7yOXj9wMvU+xey+IEOR2MYqhzLU7AE=) 6: 3130332e38322e3138312e302f32342d3234203d3e20313336303631.roa (hash: hn9BpZ4mJ7xZ4KfEXMzBILbMuvOXYpPzh4YpRCquyqk=) 7: 3130332e38322e3138332e302f32342d3234203d3e203535303032.roa (hash: N+Ot/inKVcA4yr7n4GNYrMxfbDoZyZlvEVliFyH2+mQ=) 8: 3130332e38322e3138302e302f32332d3233203d3e203535303032.roa (hash: MargjL84nTzHz8ChojHD7+4RMOnc9Fhif/pdgboFtAQ=) 9: 3130332e38322e3138302e302f32332d3233203d3e20313336303631.roa (hash: vos4wfbgWit9CPIZhtiH7kwDHAjtl0eqL3m94EaJcso=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 12:32:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:a7:24:b8:ac:9e:70:16:0c:42:d2:30:7b:26:ab:06:b7:66:4c:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428 Validity Not Before: May 7 08:45:57 2025 GMT Not After : May 10 12:32:57 2025 GMT Subject: CN=1C8199080DAB954DD394DEC146EAE2FA71B9515C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:c9:e8:0a:35:24:c8:c8:42:3d:9b:c2:2a:3a: e7:ab:c1:b4:76:39:96:b7:28:8b:25:b0:80:6a:3f: 0a:83:43:a2:3f:3e:39:3c:6d:18:f2:d7:32:d6:1a: 2a:0d:4b:28:8c:f6:2f:8e:8e:73:0b:ec:7d:84:25: 33:7e:3c:95:0e:af:6d:8d:20:65:9d:88:6f:59:f6: 1d:f9:99:6d:a5:02:83:8b:4e:dd:7b:05:13:13:8b: 57:69:24:56:3a:97:dd:35:71:a5:0a:48:82:6b:b7: 0b:2c:af:e7:94:39:ae:31:63:d3:57:6a:85:8e:5a: 3a:3e:9b:00:56:ce:9c:18:23:ea:ca:04:0b:60:76: 21:60:73:e5:9a:22:08:ca:77:9a:fd:fa:22:73:cf: 5a:ea:9b:38:eb:54:21:78:50:53:8c:35:16:40:e5: e4:93:de:99:5d:64:d6:91:f8:b0:bf:98:9d:53:91: fc:07:09:e1:59:cb:61:5d:c2:24:63:32:36:b0:93: e6:07:30:11:8b:9e:9f:92:a6:f2:f9:66:cf:40:7c: f9:9d:f9:03:15:59:3f:c1:3b:e2:44:41:4d:a4:e8: 10:9b:8b:16:20:c9:08:d8:73:4c:b3:3d:21:4b:ca: 14:ed:de:ee:24:b8:36:47:53:07:59:0c:49:a3:5e: 66:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1C:81:99:08:0D:AB:95:4D:D3:94:DE:C1:46:EA:E2:FA:71:B9:51:5C X509v3 Authority Key Identifier: keyid:D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:2e:b9:01:f7:8b:2b:21:d1:11:59:83:b7:37:14:91:3a:74: e9:97:3a:94:97:39:b0:f6:2d:0a:a0:1d:83:5d:10:55:2a:16: d5:05:2f:50:75:37:8c:7c:40:9c:49:b8:b6:21:97:1b:2f:1a: 9c:e7:92:23:ad:04:70:9f:75:26:32:2b:a2:29:91:16:7c:e8: 7c:2e:b1:0c:3f:b4:ce:ca:12:12:63:0c:13:6a:ee:1e:c1:d4: ac:ba:70:c8:e9:1b:9e:61:64:72:7e:ff:26:5f:56:4f:a7:2c: b8:75:b8:9f:be:93:2a:09:fc:5e:ba:5b:47:e9:18:8f:f8:47: 59:a5:c5:64:11:c9:f3:5f:35:68:ec:d8:d2:eb:91:20:d5:d4: 5a:cd:79:8d:65:ad:5f:c5:e6:12:75:f8:dc:64:7f:5f:a4:c1: 01:a7:a2:fa:42:4d:fc:f5:cf:fe:7b:28:22:31:67:43:ac:9c: cb:ef:a4:2f:9f:0c:e5:f5:e4:80:53:ba:26:19:3d:cd:56:3e: a1:76:b4:df:8a:3e:9a:4c:26:33:ee:62:23:aa:d9:79:0f:b3: 6d:c4:9e:9f:1d:59:eb:f9:7b:dc:ae:95:46:bf:8e:8b:9a:62: fa:7e:77:81:2f:e2:f9:09:24:64:4a:8f:94:bf:ad:53:b3:cc: 9a:f2:c0:f9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUS6ckuKyecBYMQtIweyarBrdmTPcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFDRTRFRjkxMENBQjc4NEVGMjkzRDI2RDk4M0E5MkZD QjNBMzQyODAeFw0yNTA1MDcwODQ1NTdaFw0yNTA1MTAxMjMyNTdaMDMxMTAvBgNV BAMTKDFDODE5OTA4MERBQjk1NEREMzk0REVDMTQ2RUFFMkZBNzFCOTUxNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWyegKNSTIyEI9m8IqOuerwbR2 OZa3KIslsIBqPwqDQ6I/Pjk8bRjy1zLWGioNSyiM9i+OjnML7H2EJTN+PJUOr22N IGWdiG9Z9h35mW2lAoOLTt17BRMTi1dpJFY6l901caUKSIJrtwssr+eUOa4xY9NX aoWOWjo+mwBWzpwYI+rKBAtgdiFgc+WaIgjKd5r9+iJzz1rqmzjrVCF4UFOMNRZA 5eST3pldZNaR+LC/mJ1TkfwHCeFZy2FdwiRjMjawk+YHMBGLnp+SpvL5Zs9AfPmd +QMVWT/BO+JEQU2k6BCbixYgyQjYc0yzPSFLyhTt3u4kuDZHUwdZDEmjXmaHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHIGZCA2rlU3TlN7BRuri+nG5UVwwHwYDVR0j BBgwFoAU0c5O+RDKt4TvKT0m2YOpL8s6NCgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDc1OGYxNS01ZGU4LTQ4N2QtOTk0NS1jM2VhMjA3ZTQ0YWQvMC9EMUNFNEVGOTEw Q0FCNzg0RUYyOTNEMjZEOTgzQTkyRkNCM0EzNDI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDFDRTRFRjkxMENBQjc4NEVGMjkzRDI2RDk4M0E5MkZDQjNB MzQyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODA3NThmMTUtNWRlOC00ODdkLTk5 NDUtYzNlYTIwN2U0NGFkLzAvRDFDRTRFRjkxMENBQjc4NEVGMjkzRDI2RDk4M0E5 MkZDQjNBMzQyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACcuuQH3iysh0RFZg7c3FJE6dOmXOpSXObD2 LQqgHYNdEFUqFtUFL1B1N4x8QJxJuLYhlxsvGpznkiOtBHCfdSYyK6IpkRZ86Hwu sQw/tM7KEhJjDBNq7h7B1Ky6cMjpG55hZHJ+/yZfVk+nLLh1uJ++kyoJ/F66W0fp GI/4R1mlxWQRyfNfNWjs2NLrkSDV1FrNeY1lrV/F5hJ1+Nxkf1+kwQGnovpCTfz1 z/57KCIxZ0OsnMvvpC+fDOX15IBTuiYZPc1WPqF2tN+KPppMJjPuYiOq2XkPs23E np8dWev5e9yulUa/jouaYvp+d4Ev4vkJJGRKj5S/rVOzzJrywPk= -----END CERTIFICATE-----Generated at Thu May 8 07:10:23 2025 by rpki-client