$ rpki-client -vvf repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft File: DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft (raw, json) Hash identifier: 0EFWlRrDgtY6ZfEmmCTDKQwi3aqKKR+15WpCWvHnLdg= Subject key identifier: 5D:E1:99:AF:6C:87:6F:7E:C4:05:B6:81:C7:2B:E6:0A:CE:BE:29:E9 Authority key identifier: DC:1F:CA:69:CA:5B:7A:3A:3E:48:25:B3:CA:FC:C3:BD:1B:C0:6E:B7 Certificate issuer: /CN=DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7 Certificate serial: 22D6A5AE98352CB8E553F5D94CE4D90723592179 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft Manifest number: 04D1 Signing time: Fri 09 May 2025 15:20:38 +0000 Manifest this update: Fri 09 May 2025 15:15:38 +0000 Manifest next update: Tue 13 May 2025 00:17:38 +0000 Files and hashes: 1: 3230322e35362e3136302e302f32322d3234203d3e203435323837.roa (hash: 0zHHmymmAg7KzILmxTwSb0pVLlyNqlqsvk/nikoNMwE=) 2: DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl (hash: XPjnIHzUb3wxr95j/VQk1RWENFTHyncrMgT5rHOUGEg=) 3: 3130332e33312e3131302e302f32332d3234203d3e203435323837.roa (hash: 4PaQM0H/onjaHT/Kh1zZPEAnjrQ5QUcaM+Ku8Nb2uPM=) 4: 3137352e3137362e3136302e302f32312d3234203d3e203435323837.roa (hash: 9x98XoLgB5n+u7mpQXGTvRK2RowXcZ6wi/CQh+FfyR8=) 5: 3135302e3132392e35362e302f32322d3234203d3e203435323837.roa (hash: tqUKv7tErLGQvp6ntAe6oI+l6KjJLTNQkTevpmkwiwA=) 6: 3230332e39392e3133302e302f32332d3234203d3e203435323837.roa (hash: uRRS1BI3sCqvIVYrv7xZEsjdYK2j2pu3KFfDFYmGVqg=) 7: 323430363a323430303a3a2f33322d3438203d3e203435323837.roa (hash: gYKpABPCZPAwfSakQwPekqx1ImCAYMUVjZIaoSefgv8=) 8: 3131312e36382e3131322e302f32302d3234203d3e203435323837.roa (hash: qB5I9SZzbVoPygBuyJA1K93AyAMM3PavIllsE1xXJ8Y=) 9: 3130332e32332e3230302e302f32322d3234203d3e203435323837.roa (hash: 5BVtDmEV06VuIEBqGHWc5TU1extMlSEbp67LFRJHJ4M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 00:17:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:d6:a5:ae:98:35:2c:b8:e5:53:f5:d9:4c:e4:d9:07:23:59:21:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7 Validity Not Before: May 9 15:15:38 2025 GMT Not After : May 13 00:17:38 2025 GMT Subject: CN=5DE199AF6C876F7EC405B681C72BE60ACEBE29E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:b6:0e:2f:9a:86:de:fc:15:c4:7a:ea:9f:76: be:f6:83:c6:20:4f:8f:cc:de:57:37:99:90:ec:82: a7:39:10:c4:5a:a8:53:08:37:36:d9:ad:d7:25:43: 0f:dd:61:15:83:4b:fd:77:f3:12:77:f4:db:e5:68: 7a:85:fc:cf:e7:be:d5:7e:49:a6:13:32:01:e5:25: ad:86:6b:0e:b8:81:64:ec:41:c7:07:02:1c:61:cd: a6:15:ee:36:10:62:a2:02:57:4f:4f:5a:45:50:7d: 00:e1:02:6d:da:8b:1a:91:9f:55:9a:b1:d1:86:ba: d2:76:2e:f7:f6:bd:b1:18:8d:42:40:8e:83:7d:9b: b6:1f:fa:eb:6a:9b:01:a3:e6:02:f9:c8:b4:cf:cc: 92:f9:61:33:87:f5:98:85:b9:f4:08:8b:2b:68:50: 71:0c:fe:cd:59:b9:f5:ca:28:fa:e2:36:bb:63:ac: 44:91:56:6f:66:fd:ac:94:e2:e0:8b:5c:fb:55:a6: 0b:41:08:4a:cb:9d:b5:cf:06:41:5b:56:6b:51:2b: 52:aa:f4:05:f9:d7:35:0e:5a:3b:08:26:47:ef:ff: e8:5f:d4:9a:84:37:f7:a9:df:6a:ad:c5:62:43:70: e4:0d:bf:dc:48:37:03:16:ff:ff:83:fe:10:e5:60: 4d:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:E1:99:AF:6C:87:6F:7E:C4:05:B6:81:C7:2B:E6:0A:CE:BE:29:E9 X509v3 Authority Key Identifier: keyid:DC:1F:CA:69:CA:5B:7A:3A:3E:48:25:B3:CA:FC:C3:BD:1B:C0:6E:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:67:49:6f:c8:68:7b:6d:cf:d1:47:b2:67:51:fa:ed:dd:8a: 53:59:09:d2:60:18:1a:39:40:9d:5f:2f:c1:bf:05:47:21:1f: 0f:f1:b6:b4:ff:e5:e5:49:a3:37:61:c0:8c:ff:8c:11:44:85: 96:a7:7e:04:72:c0:dd:3a:f7:3f:ab:38:04:62:51:a8:d8:f2: c2:ff:73:3b:dd:77:dd:32:70:89:ca:92:67:4f:11:fb:31:dd: 24:9c:d2:19:00:cc:4a:e4:4b:34:ac:c2:a3:63:70:08:31:77: 69:ca:2b:78:a5:65:9f:a5:be:28:b1:4c:7b:51:02:ee:90:df: 30:00:df:9c:f9:b5:eb:7c:64:4f:7b:b2:2f:f2:81:ac:c4:b5: 9d:c4:ef:40:06:31:a6:16:1a:67:03:9d:9c:36:e9:44:d8:dc: f5:e0:d5:bd:28:86:0e:3e:4e:0d:8a:4d:80:ef:a2:7b:66:2d: e6:c6:d4:ff:17:58:2a:ae:8b:72:c9:48:2e:39:16:48:70:64: ed:df:65:69:30:94:ed:a9:87:f9:e0:4f:c2:7e:d6:2c:97:ce: 8d:7f:15:8b:d9:b2:a5:06:d6:dc:54:34:3b:c9:52:70:3c:70: 01:93:be:72:12:22:3f:24:ee:7f:2c:a5:0b:47:92:a8:4f:19: d1:7b:18:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUItalrpg1LLjlU/XZTOTZByNZIXkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMxRkNBNjlDQTVCN0EzQTNFNDgyNUIzQ0FGQ0MzQkQx QkMwNkVCNzAeFw0yNTA1MDkxNTE1MzhaFw0yNTA1MTMwMDE3MzhaMDMxMTAvBgNV BAMTKDVERTE5OUFGNkM4NzZGN0VDNDA1QjY4MUM3MkJFNjBBQ0VCRTI5RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxtg4vmobe/BXEeuqfdr72g8Yg T4/M3lc3mZDsgqc5EMRaqFMINzbZrdclQw/dYRWDS/138xJ39NvlaHqF/M/nvtV+ SaYTMgHlJa2Gaw64gWTsQccHAhxhzaYV7jYQYqICV09PWkVQfQDhAm3aixqRn1Wa sdGGutJ2Lvf2vbEYjUJAjoN9m7Yf+utqmwGj5gL5yLTPzJL5YTOH9ZiFufQIiyto UHEM/s1ZufXKKPriNrtjrESRVm9m/ayU4uCLXPtVpgtBCErLnbXPBkFbVmtRK1Kq 9AX51zUOWjsIJkfv/+hf1JqEN/ep32qtxWJDcOQNv9xINwMW//+D/hDlYE2/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUXeGZr2yHb37EBbaBxyvmCs6+KekwHwYDVR0j BBgwFoAU3B/Kacpbejo+SCWzyvzDvRvAbrcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODI0OWZjMy02Yzg0LTRlOTEtYjA2Ny1hMGM2YTg0MGEzYTkvMC9EQzFGQ0E2OUNB NUI3QTNBM0U0ODI1QjNDQUZDQzNCRDFCQzA2RUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREMxRkNBNjlDQTVCN0EzQTNFNDgyNUIzQ0FGQ0MzQkQxQkMw NkVCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTgyNDlmYzMtNmM4NC00ZTkxLWIw NjctYTBjNmE4NDBhM2E5LzAvREMxRkNBNjlDQTVCN0EzQTNFNDgyNUIzQ0FGQ0Mz QkQxQkMwNkVCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJdnSW/IaHttz9FHsmdR+u3dilNZCdJgGBo5 QJ1fL8G/BUchHw/xtrT/5eVJozdhwIz/jBFEhZanfgRywN069z+rOARiUajY8sL/ czvdd90ycInKkmdPEfsx3SSc0hkAzErkSzSswqNjcAgxd2nKK3ilZZ+lviixTHtR Au6Q3zAA35z5tet8ZE97si/ygazEtZ3E70AGMaYWGmcDnZw26UTY3PXg1b0ohg4+ Tg2KTYDvontmLebG1P8XWCqui3LJSC45FkhwZO3fZWkwlO2ph/ngT8J+1iyXzo1/ FYvZsqUG1txUNDvJUnA8cAGTvnISIj8k7n8spQtHkqhPGdF7GMU= -----END CERTIFICATE-----Generated at Sat May 10 20:14:01 2025 by rpki-client