$ rpki-client -vvf repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.mft File: DBF597EA29EF8A70656446AF75CF33F0618E8282.mft (raw, json) Hash identifier: 6WPYSCXF2GyvIBseuKFR8hX+63cn7Jw0NAb8T0z7XQQ= Subject key identifier: A3:1D:96:25:E6:BB:E1:82:19:3A:46:8E:A5:F4:C8:61:21:07:B0:DE Authority key identifier: DB:F5:97:EA:29:EF:8A:70:65:64:46:AF:75:CF:33:F0:61:8E:82:82 Certificate issuer: /CN=DBF597EA29EF8A70656446AF75CF33F0618E8282 Certificate serial: 4301E3A369488B9682267B1D8E68FC2C73F0B23F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF597EA29EF8A70656446AF75CF33F0618E8282.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.mft Manifest number: 04CF Signing time: Thu 08 May 2025 02:52:11 +0000 Manifest this update: Thu 08 May 2025 02:47:11 +0000 Manifest next update: Sun 11 May 2025 07:00:11 +0000 Files and hashes: 1: DBF597EA29EF8A70656446AF75CF33F0618E8282.crl (hash: nn8dOSnvSJHVvHePZOA/3Q6QhTb1K76Bmt8pHBJYd1Y=) 2: 3131372e3130322e3232342e302f31392d3234203d3e203233373536.roa (hash: hkjarDn9mLD3pYLM9+FCm3xKAyZZb8KbslY3PfkSGdQ=) 3: 3230322e362e3232342e302f32302d3234203d3e203233373536.roa (hash: yoojfMzQKh4mJ5yJkpKCOee+XIAQV6Uq1iQBpPZ4uAE=) 4: 3130332e3234322e3230342e302f32322d3234203d3e203233373536.roa (hash: UpSXaQL4hvamZB7sMVEVrvvzWIfPbsCxCjFg7VirCfM=) 5: 323430363a363230303a3a2f33322d3438203d3e203233373536.roa (hash: PMaf9YrAeTdzm+l6puGPGAXV1wZZdjOv5Pgvb9K+9Zo=) 6: 3135302e3130372e3133322e302f32322d3234203d3e203233373536.roa (hash: HKdDrsWDkAEnJ6eI7ZqOPeb8e5bF+cd3+bp0HL/Z/po=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.crl rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF597EA29EF8A70656446AF75CF33F0618E8282.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 07:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 43:01:e3:a3:69:48:8b:96:82:26:7b:1d:8e:68:fc:2c:73:f0:b2:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBF597EA29EF8A70656446AF75CF33F0618E8282 Validity Not Before: May 8 02:47:11 2025 GMT Not After : May 11 07:00:11 2025 GMT Subject: CN=A31D9625E6BBE182193A468EA5F4C8612107B0DE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a2:58:a7:b9:7c:47:ef:f5:9a:7d:5c:21:c0: d4:08:f7:85:71:83:ab:93:c8:7a:6a:cc:62:90:81: 1c:f9:7c:1c:16:07:bf:49:b4:d0:7c:7e:c3:4d:b9: 89:f6:16:c3:20:fc:7b:ec:08:8f:30:aa:8e:24:4e: 65:b7:e7:62:61:b5:4d:10:90:17:65:bc:40:7d:05: 5c:5d:8c:cb:f8:9d:31:4a:b8:6d:58:1d:3c:7c:6d: f3:ee:e8:26:b0:6e:93:cd:ca:96:bf:93:c1:a9:01: 0c:f9:12:fa:5f:3a:ed:c1:ad:11:88:60:e8:4f:9c: d5:8f:37:e6:45:b4:63:0d:db:23:e1:a7:89:3a:79: ea:36:8d:46:4f:f5:a4:d4:27:81:22:e8:87:3b:72: ee:be:14:ed:2f:b2:81:19:3c:5e:1e:95:88:63:00: f7:76:6b:30:07:b5:02:dc:b1:91:c2:d8:22:52:ff: 9d:7b:0c:1b:91:be:e6:95:78:a7:68:81:98:ca:be: 38:78:11:55:23:cf:b2:ac:0f:cf:f6:c4:25:5b:33: bb:f5:a4:9e:19:11:22:50:81:59:61:95:3b:77:df: 1a:81:8a:1b:9c:14:4a:19:00:b8:1f:97:f2:e9:6c: 08:4c:7c:61:85:d7:f9:b5:dd:d4:2f:e6:96:16:47: 7e:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:1D:96:25:E6:BB:E1:82:19:3A:46:8E:A5:F4:C8:61:21:07:B0:DE X509v3 Authority Key Identifier: keyid:DB:F5:97:EA:29:EF:8A:70:65:64:46:AF:75:CF:33:F0:61:8E:82:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF597EA29EF8A70656446AF75CF33F0618E8282.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:e0:6b:10:cd:67:e4:dd:c5:fe:6c:c2:ed:dd:04:52:3f:0a: 6d:b1:c8:cf:a6:b6:ff:bd:5f:7e:92:37:73:4a:4b:24:d1:d3: 64:a1:e4:4a:9e:35:6a:49:79:b5:fb:37:dd:f3:a9:a7:52:8b: 95:a9:a4:f9:f5:4e:f9:f4:5f:cb:8c:15:a0:6a:fa:16:0a:c9: ba:c8:b3:bc:d9:fa:5e:ef:c9:ad:3e:48:87:0b:d4:5e:c5:c2: ae:07:6d:98:f3:69:ef:ad:79:48:e6:27:e7:01:6f:39:39:a3: 5e:a9:3f:63:ca:ab:2f:0f:1c:ea:da:93:aa:12:6e:51:2c:ed: a3:43:c2:36:1e:d7:f3:ce:fe:0c:b4:fb:81:cc:c4:b8:d4:89: c2:c2:1f:3c:41:6c:0a:0c:06:72:96:0b:52:4c:72:e2:d7:15: c1:ce:5b:2d:95:fa:54:de:ca:11:c6:71:90:a9:81:68:c7:a9: 29:a0:5b:75:3e:49:ae:78:5b:24:4c:c1:67:1a:8b:2b:48:e0: 79:be:54:5b:4b:c9:92:2d:0d:24:ec:94:7a:ff:48:6c:ce:8a: e2:13:22:9c:e2:4e:f8:58:b3:4c:ae:bf:fe:1c:11:37:d7:42: 20:d7:da:91:6f:2b:19:e1:a6:7c:a9:bf:e4:8b:66:11:6d:68: 80:41:dd:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQwHjo2lIi5aCJnsdjmj8LHPwsj8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJGNTk3RUEyOUVGOEE3MDY1NjQ0NkFGNzVDRjMzRjA2 MThFODI4MjAeFw0yNTA1MDgwMjQ3MTFaFw0yNTA1MTEwNzAwMTFaMDMxMTAvBgNV BAMTKEEzMUQ5NjI1RTZCQkUxODIxOTNBNDY4RUE1RjRDODYxMjEwN0IwREUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWolinuXxH7/WafVwhwNQI94Vx g6uTyHpqzGKQgRz5fBwWB79JtNB8fsNNuYn2FsMg/HvsCI8wqo4kTmW352JhtU0Q kBdlvEB9BVxdjMv4nTFKuG1YHTx8bfPu6CawbpPNypa/k8GpAQz5EvpfOu3BrRGI YOhPnNWPN+ZFtGMN2yPhp4k6eeo2jUZP9aTUJ4Ei6Ic7cu6+FO0vsoEZPF4elYhj APd2azAHtQLcsZHC2CJS/517DBuRvuaVeKdogZjKvjh4EVUjz7KsD8/2xCVbM7v1 pJ4ZESJQgVlhlTt33xqBihucFEoZALgfl/LpbAhMfGGF1/m13dQv5pYWR34/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUox2WJea74YIZOkaOpfTIYSEHsN4wHwYDVR0j BBgwFoAU2/WX6invinBlZEavdc8z8GGOgoIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZDBmMWE2ZS04M2I2LTQ1MzQtOTY3ZC1mOGRiM2MzNzExZjQvMC9EQkY1OTdFQTI5 RUY4QTcwNjU2NDQ2QUY3NUNGMzNGMDYxOEU4MjgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREJGNTk3RUEyOUVGOEE3MDY1NjQ0NkFGNzVDRjMzRjA2MThF ODI4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWQwZjFhNmUtODNiNi00NTM0LTk2 N2QtZjhkYjNjMzcxMWY0LzAvREJGNTk3RUEyOUVGOEE3MDY1NjQ0NkFGNzVDRjMz RjA2MThFODI4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF3gaxDNZ+Tdxf5swu3dBFI/Cm2xyM+mtv+9 X36SN3NKSyTR02Sh5EqeNWpJebX7N93zqadSi5WppPn1Tvn0X8uMFaBq+hYKybrI s7zZ+l7vya0+SIcL1F7Fwq4HbZjzae+teUjmJ+cBbzk5o16pP2PKqy8PHOrak6oS blEs7aNDwjYe1/PO/gy0+4HMxLjUicLCHzxBbAoMBnKWC1JMcuLXFcHOWy2V+lTe yhHGcZCpgWjHqSmgW3U+Sa54WyRMwWcaiytI4Hm+VFtLyZItDSTslHr/SGzOiuIT IpziTvhYs0yuv/4cETfXQiDX2pFvKxnhpnypv+SLZhFtaIBB3f8= -----END CERTIFICATE-----Generated at Thu May 8 03:57:20 2025 by rpki-client