$ rpki-client -vvf repo-rpki.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.mft File: DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.mft (raw, json) Hash identifier: 3TZDgEUvQM/LHigxBylkj1xOQqEt1bpmV/WjMGlMSjQ= Subject key identifier: 3A:FA:D9:1F:19:22:13:7A:82:1C:E6:27:D1:35:B9:96:6A:B0:9D:78 Authority key identifier: DB:9B:4D:12:79:E6:C6:4B:0C:DD:F5:93:FB:00:6B:39:92:D5:DF:6F Certificate issuer: /CN=DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F Certificate serial: 77AF7B871706A1B226A184CC6A8140BF8D549014 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.mft Manifest number: 81 Signing time: Sat 03 May 2025 17:00:49 +0000 Manifest this update: Sat 03 May 2025 16:55:49 +0000 Manifest next update: Tue 06 May 2025 17:12:49 +0000 Files and hashes: 1: 3130332e3138352e3139362e302f32342d3234203d3e20313333383136.roa (hash: rry2+zEAQCTnnp1DT6Cb11gc7Z2XdYT6O/X9Xn/Cg1E=) 2: DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.crl (hash: 5Kp+vL7toSJa+u/1RE9IKMkOU6cwerJgHPxl1Qcur4o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.crl rsync://repo-rpki.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 06 May 2025 17:12:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:af:7b:87:17:06:a1:b2:26:a1:84:cc:6a:81:40:bf:8d:54:90:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F Validity Not Before: May 3 16:55:49 2025 GMT Not After : May 6 17:12:49 2025 GMT Subject: CN=3AFAD91F1922137A821CE627D135B9966AB09D78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:3b:ef:5c:69:df:43:1e:6b:b4:d2:06:52:77: 50:08:de:c4:08:e4:2e:d3:23:60:dc:68:6b:ea:65: b8:1f:2d:de:6b:3a:05:69:8a:7f:a9:74:c8:8e:b8: 43:9f:ce:6e:97:32:13:e8:b9:e3:e0:0a:ce:7f:65: 40:60:9d:9b:39:42:33:25:3e:12:9f:24:f3:99:46: f0:51:6f:0c:ad:03:35:6d:f8:d6:ee:dc:f6:00:f0: 54:a8:6c:be:12:10:f7:7f:92:3a:08:49:90:16:28: 43:40:da:d2:2c:78:91:b0:a0:80:a2:44:8f:38:6d: 19:40:34:08:ca:c5:b6:83:a8:52:be:2a:1e:7a:25: 0c:79:58:4d:05:01:e5:62:85:ea:1b:31:a6:16:db: 4d:3c:7e:a6:8e:69:93:31:16:9b:79:86:48:73:86: bd:13:c4:1d:95:f4:47:2c:dd:c1:9b:62:36:6c:5a: b6:96:8d:a3:03:bd:5f:3d:dc:32:d4:4e:f0:c1:4d: ff:f2:b1:81:21:45:0d:92:e3:ea:1c:40:f7:0a:5e: 9b:bc:95:20:fa:f4:22:34:01:6a:46:7a:90:80:e0: c7:68:2e:67:94:3b:46:ad:db:3b:a6:8b:c0:c7:2b: 9f:59:28:e2:6f:99:81:31:c1:f0:d3:6a:5e:0a:df: 0c:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:FA:D9:1F:19:22:13:7A:82:1C:E6:27:D1:35:B9:96:6A:B0:9D:78 X509v3 Authority Key Identifier: keyid:DB:9B:4D:12:79:E6:C6:4B:0C:DD:F5:93:FB:00:6B:39:92:D5:DF:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:c3:4c:b1:c0:23:04:59:7e:fa:96:99:7c:e4:a9:78:23:5a: 8c:65:fc:7a:e3:6f:28:f6:0d:57:4f:0a:63:d9:6d:ac:e4:8f: e8:a2:06:d3:01:37:a9:e2:6b:25:f0:8b:e4:17:67:86:19:74: 13:41:a2:ec:ee:b6:0a:26:ab:ac:e2:3b:b2:70:83:f4:1c:b9: 64:05:d9:a2:be:d9:92:e4:3d:de:fe:86:f3:09:12:61:53:88: 0a:f9:f1:89:5c:05:3a:c6:e1:0e:09:1d:c4:2d:34:99:c1:8f: 1a:3c:2d:87:5d:41:86:50:db:db:ba:df:1c:b7:06:55:41:29: 33:ab:d8:9f:81:27:a1:1e:67:a8:80:50:d1:05:69:1b:c6:e1: 69:e4:3c:2d:79:2e:d9:20:78:fc:b0:1c:c9:97:f0:6d:e4:16: 73:5f:9b:1d:c5:04:d2:ae:62:10:74:c8:a5:2d:a2:f9:a7:55: 72:5d:11:ff:38:8c:e9:94:0f:83:c3:85:ea:20:b9:a3:17:51: 1d:5b:6d:5f:e7:f7:d2:c1:1e:14:0b:be:34:54:d4:7c:dd:16: 24:71:cc:ef:0d:93:9c:53:f6:f9:10:08:1f:21:4b:55:ef:42: 94:35:bd:f4:a4:75:26:0b:f9:ae:8e:60:7e:16:c6:bb:52:3d: 60:68:26:92 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd697hxcGobImoYTMaoFAv41UkBQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI5QjREMTI3OUU2QzY0QjBDRERGNTkzRkIwMDZCMzk5 MkQ1REY2RjAeFw0yNTA1MDMxNjU1NDlaFw0yNTA1MDYxNzEyNDlaMDMxMTAvBgNV BAMTKDNBRkFEOTFGMTkyMjEzN0E4MjFDRTYyN0QxMzVCOTk2NkFCMDlENzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZO+9cad9DHmu00gZSd1AI3sQI 5C7TI2DcaGvqZbgfLd5rOgVpin+pdMiOuEOfzm6XMhPouePgCs5/ZUBgnZs5QjMl PhKfJPOZRvBRbwytAzVt+Nbu3PYA8FSobL4SEPd/kjoISZAWKENA2tIseJGwoICi RI84bRlANAjKxbaDqFK+Kh56JQx5WE0FAeViheobMaYW2008fqaOaZMxFpt5hkhz hr0TxB2V9Ecs3cGbYjZsWraWjaMDvV893DLUTvDBTf/ysYEhRQ2S4+ocQPcKXpu8 lSD69CI0AWpGepCA4MdoLmeUO0at2zumi8DHK59ZKOJvmYExwfDTal4K3wzbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOvrZHxkiE3qCHOYn0TW5lmqwnXgwHwYDVR0j BBgwFoAU25tNEnnmxksM3fWT+wBrOZLV328wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZTlhYmIxYS1kNmMwLTQ1NGYtODcwYS04YmVlZGQ4MWZjZDIvMC9EQjlCNEQxMjc5 RTZDNjRCMENEREY1OTNGQjAwNkIzOTkyRDVERjZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREI5QjREMTI3OUU2QzY0QjBDRERGNTkzRkIwMDZCMzk5MkQ1 REY2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGU5YWJiMWEtZDZjMC00NTRmLTg3 MGEtOGJlZWRkODFmY2QyLzAvREI5QjREMTI3OUU2QzY0QjBDRERGNTkzRkIwMDZC Mzk5MkQ1REY2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACjDTLHAIwRZfvqWmXzkqXgjWoxl/Hrjbyj2 DVdPCmPZbazkj+iiBtMBN6niayXwi+QXZ4YZdBNBouzutgomq6ziO7Jwg/QcuWQF 2aK+2ZLkPd7+hvMJEmFTiAr58YlcBTrG4Q4JHcQtNJnBjxo8LYddQYZQ29u63xy3 BlVBKTOr2J+BJ6EeZ6iAUNEFaRvG4WnkPC15LtkgePywHMmX8G3kFnNfmx3FBNKu YhB0yKUtovmnVXJdEf84jOmUD4PDheoguaMXUR1bbV/n99LBHhQLvjRU1HzdFiRx zO8Nk5xT9vkQCB8hS1XvQpQ1vfSkdSYL+a6OYH4WxrtSPWBoJpI= -----END CERTIFICATE-----Generated at Tue May 6 12:15:14 2025 by rpki-client