$ rpki-client -vvf repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.mft File: DC80860022A4D5D14DB78082BAC705E0C1B0F915.mft (raw, json) Hash identifier: eNkbiCWz6/sYcWYmUC/Uyxqy4jRY03QLL7wLQqZO+5c= Subject key identifier: 0C:18:50:9C:4D:43:4D:DA:03:0C:18:66:E5:E7:26:43:29:A6:1B:26 Authority key identifier: DC:80:86:00:22:A4:D5:D1:4D:B7:80:82:BA:C7:05:E0:C1:B0:F9:15 Certificate issuer: /CN=DC80860022A4D5D14DB78082BAC705E0C1B0F915 Certificate serial: 51AB2720AC62852589703EBA93344F1F77FFE2C6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC80860022A4D5D14DB78082BAC705E0C1B0F915.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.mft Manifest number: 04CE Signing time: Sun 11 May 2025 00:31:40 +0000 Manifest this update: Sun 11 May 2025 00:26:40 +0000 Manifest next update: Wed 14 May 2025 08:13:40 +0000 Files and hashes: 1: 3130332e3130362e3131322e302f32322d3234203d3e20313336383830.roa (hash: ZCH3XXiTrQMOGAjRhT39z3F568gOjmz+EgX36Ate/V4=) 2: DC80860022A4D5D14DB78082BAC705E0C1B0F915.crl (hash: An80Va6xMUeibd4k/vcBp+By64/WVQgUtI7JajBXGLA=) 3: 323430323a343234303a3a2f33322d3332203d3e20313336383830.roa (hash: 8mQYzB1g0N9/kAIrWX3si1LgH6siHpQM/MErsP7sMDw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.crl rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC80860022A4D5D14DB78082BAC705E0C1B0F915.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 14 May 2025 08:13:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:ab:27:20:ac:62:85:25:89:70:3e:ba:93:34:4f:1f:77:ff:e2:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC80860022A4D5D14DB78082BAC705E0C1B0F915 Validity Not Before: May 11 00:26:40 2025 GMT Not After : May 14 08:13:40 2025 GMT Subject: CN=0C18509C4D434DDA030C1866E5E7264329A61B26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:c0:7d:f1:3a:59:87:3d:17:61:5c:e1:d2:1f: 64:91:d2:b3:2f:e1:a0:2c:93:a6:93:f0:37:f4:83: 39:86:7b:32:54:24:c1:f5:ef:4c:57:26:42:d3:76: 9f:db:f2:d5:77:2d:ca:e3:4b:d1:63:d5:3d:ce:95: b3:c7:35:d6:40:f6:e6:9e:4d:78:65:67:1b:d5:25: 52:33:f1:18:22:6f:0a:cd:5e:47:ae:63:5d:38:53: c6:7d:c1:b7:9d:55:59:60:22:ae:fc:73:2a:5b:30: 02:2f:f8:8b:ee:db:4d:19:f1:f6:27:17:55:b8:7a: 99:dd:f8:13:a7:af:d5:8f:b7:7b:44:31:64:3b:b6: 29:3f:2d:e4:b7:0a:7a:9e:5d:12:d2:08:0b:45:69: 2c:ca:32:7a:52:f6:09:33:42:35:8c:51:fd:87:57: 07:ba:04:01:bf:f5:82:4f:35:30:15:2b:4f:08:43: 36:ec:df:3d:86:a8:4f:5a:a6:b7:a9:fa:f8:d4:d2: 46:2d:41:59:45:14:4b:79:3d:dc:d3:ee:34:b4:8f: e6:41:fd:59:81:b8:5f:91:33:c2:36:b7:cb:ef:a7: 96:dc:60:36:04:3a:b1:a3:b7:ab:90:e3:99:4c:ac: fc:7a:03:5d:09:33:58:73:f4:c5:24:ed:71:fd:4a: a3:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:18:50:9C:4D:43:4D:DA:03:0C:18:66:E5:E7:26:43:29:A6:1B:26 X509v3 Authority Key Identifier: keyid:DC:80:86:00:22:A4:D5:D1:4D:B7:80:82:BA:C7:05:E0:C1:B0:F9:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC80860022A4D5D14DB78082BAC705E0C1B0F915.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:9c:34:e3:e3:0b:db:58:40:c2:93:4f:33:e8:46:3b:04:0a: e9:c5:21:8f:a5:ba:00:87:eb:82:44:92:d2:f5:1f:72:7e:e4: 6a:6e:b5:ef:98:74:bc:ea:3a:71:0c:f7:fc:ef:f3:18:36:99: a5:22:8d:81:1d:ff:af:3e:73:62:99:17:e9:fa:ff:0b:f1:d7: 38:63:48:1d:71:3e:ce:b3:6d:30:b0:7c:8b:d4:48:8b:a7:1c: 53:67:27:76:47:6a:a8:0c:19:38:25:90:bd:ef:c4:bc:f7:56: 55:1b:3d:a7:80:f8:b2:c3:ce:95:0c:00:6b:f7:85:b2:9f:94: 96:5e:80:e0:a4:6f:3a:eb:38:cb:07:14:39:51:dc:ca:de:5c: b4:f8:82:0f:4c:3c:75:14:85:bc:b4:9d:78:32:1f:fe:11:4f: 2d:cd:74:de:e7:ed:e6:85:7b:ed:c7:e5:87:dd:da:13:f5:cf: 40:b9:04:ba:09:31:8b:06:33:14:7f:86:bf:01:e3:9b:17:ee: 4f:4f:13:d8:97:0d:e5:14:02:24:f7:3f:f6:22:60:03:d7:35: 0b:12:bd:b8:36:cf:56:5f:9e:cf:03:e3:d4:5e:c9:91:ac:30: d4:ef:b9:f4:36:42:a7:43:b1:31:8e:6e:13:5a:60:7d:d7:0d: 7d:2b:a7:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUasnIKxihSWJcD66kzRPH3f/4sYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREM4MDg2MDAyMkE0RDVEMTREQjc4MDgyQkFDNzA1RTBD MUIwRjkxNTAeFw0yNTA1MTEwMDI2NDBaFw0yNTA1MTQwODEzNDBaMDMxMTAvBgNV BAMTKDBDMTg1MDlDNEQ0MzREREEwMzBDMTg2NkU1RTcyNjQzMjlBNjFCMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEwH3xOlmHPRdhXOHSH2SR0rMv 4aAsk6aT8Df0gzmGezJUJMH170xXJkLTdp/b8tV3LcrjS9Fj1T3OlbPHNdZA9uae TXhlZxvVJVIz8RgibwrNXkeuY104U8Z9wbedVVlgIq78cypbMAIv+Ivu200Z8fYn F1W4epnd+BOnr9WPt3tEMWQ7tik/LeS3CnqeXRLSCAtFaSzKMnpS9gkzQjWMUf2H Vwe6BAG/9YJPNTAVK08IQzbs3z2GqE9aprep+vjU0kYtQVlFFEt5PdzT7jS0j+ZB /VmBuF+RM8I2t8vvp5bcYDYEOrGjt6uQ45lMrPx6A10JM1hz9MUk7XH9SqPHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDBhQnE1DTdoDDBhm5ecmQymmGyYwHwYDVR0j BBgwFoAU3ICGACKk1dFNt4CCuscF4MGw+RUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YjA3YjM3Yy0wNTA3LTQ5MTMtODMyOS0zZjE2MWI2YWZmNTYvMC9EQzgwODYwMDIy QTRENUQxNERCNzgwODJCQUM3MDVFMEMxQjBGOTE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREM4MDg2MDAyMkE0RDVEMTREQjc4MDgyQkFDNzA1RTBDMUIw RjkxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmIwN2IzN2MtMDUwNy00OTEzLTgz MjktM2YxNjFiNmFmZjU2LzAvREM4MDg2MDAyMkE0RDVEMTREQjc4MDgyQkFDNzA1 RTBDMUIwRjkxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFqcNOPjC9tYQMKTTzPoRjsECunFIY+lugCH 64JEktL1H3J+5Gpute+YdLzqOnEM9/zv8xg2maUijYEd/68+c2KZF+n6/wvx1zhj SB1xPs6zbTCwfIvUSIunHFNnJ3ZHaqgMGTglkL3vxLz3VlUbPaeA+LLDzpUMAGv3 hbKflJZegOCkbzrrOMsHFDlR3MreXLT4gg9MPHUUhby0nXgyH/4RTy3NdN7n7eaF e+3H5Yfd2hP1z0C5BLoJMYsGMxR/hr8B45sX7k9PE9iXDeUUAiT3P/YiYAPXNQsS vbg2z1Zfns8D49ReyZGsMNTvufQ2QqdDsTGObhNaYH3XDX0rp/Q= -----END CERTIFICATE-----Generated at Mon May 12 15:49:35 2025 by rpki-client