$ rpki-client -vvf repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.mft File: D2EF21DBD545255BED30EEC34623F204A3E12D23.mft (raw, json) Hash identifier: ri87A4Xua5vjPB1hRqGgNkyle1b3d/UXW0VF9O8Iado= Subject key identifier: B8:A7:61:2F:31:BA:31:41:60:51:DE:28:66:90:07:04:11:73:03:38 Authority key identifier: D2:EF:21:DB:D5:45:25:5B:ED:30:EE:C3:46:23:F2:04:A3:E1:2D:23 Certificate issuer: /CN=D2EF21DBD545255BED30EEC34623F204A3E12D23 Certificate serial: 08F9E9D2529892A21BC4643ECA26D04C56029290 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EF21DBD545255BED30EEC34623F204A3E12D23.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.mft Manifest number: 04CC Signing time: Thu 08 May 2025 13:51:10 +0000 Manifest this update: Thu 08 May 2025 13:46:10 +0000 Manifest next update: Sun 11 May 2025 17:50:10 +0000 Files and hashes: 1: 3130332e3130342e3230362e302f32342d3234203d3e20313336383639.roa (hash: 5DrcuSL2kj2578vfxL+VIIRLyXGA+oCNPnvjmoU21cs=) 2: 3130332e3130342e3230372e302f32342d3234203d3e20313336383639.roa (hash: D3QpbLwBuqBnzghQzR94brnrZBQs5SslJENq3gZzkrM=) 3: 3130332e3130342e3230352e302f32342d3234203d3e20313336383639.roa (hash: iNjcB0kWnopXWaRjUuHXoGmYpnB3R6bix+q7nd5LKus=) 4: 323430323a316134303a3a2f33322d3332203d3e20313336383639.roa (hash: M8G7fg26FDnNwWV4HPrq23C/br3Zk2rCpobcnxBUCyY=) 5: D2EF21DBD545255BED30EEC34623F204A3E12D23.crl (hash: I3Cgn63M7Ju64NpCUAWZgLIH/QA9YCdyZFjmw5j6R20=) 6: 3130332e3130342e3230342e302f32342d3234203d3e20313336383639.roa (hash: hQDC9v2yWbYZiHxog5fWu9s3/ZtDVdDk75QTAxXB7es=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.crl rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EF21DBD545255BED30EEC34623F204A3E12D23.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 17:50:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:f9:e9:d2:52:98:92:a2:1b:c4:64:3e:ca:26:d0:4c:56:02:92:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D2EF21DBD545255BED30EEC34623F204A3E12D23 Validity Not Before: May 8 13:46:10 2025 GMT Not After : May 11 17:50:10 2025 GMT Subject: CN=B8A7612F31BA31416051DE286690070411730338 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:cd:ff:26:3b:a6:1a:5c:6e:11:14:d4:00:10: 51:18:3c:20:2b:23:8c:9e:7f:4c:c0:da:cc:01:24: e0:6f:25:07:c8:c2:b1:e8:bd:35:96:17:f9:5d:b9: 5a:6d:2c:f6:08:5c:e2:c6:b2:9d:32:a5:80:77:58: 19:56:b0:12:09:93:7e:b1:a4:e3:fc:b5:23:4a:ff: f8:0d:58:74:2b:98:db:4a:98:b4:05:2f:05:57:58: 6f:0f:b6:b5:4c:f0:e4:3f:2c:82:fc:11:87:89:5d: 87:c5:d6:d1:d0:b4:8a:16:40:84:ac:f6:81:92:d3: ea:ac:a6:13:40:85:e5:0f:4d:33:db:5c:c9:d1:0e: 13:92:ba:4d:d9:d1:03:d0:43:ef:49:54:57:1a:d1: ff:d0:3c:46:53:58:81:de:5b:c6:8f:06:67:9f:f5: 73:03:79:00:b8:30:97:8b:9a:65:9f:21:e6:8e:43: cd:ad:34:78:6d:18:e7:9d:2b:c1:42:48:e2:77:7d: a1:4d:e0:d9:8e:79:63:b1:c3:01:f0:06:40:0a:94: 96:b0:2f:47:e9:0b:37:a3:01:e1:2f:49:0e:64:56: 50:8b:0e:b6:aa:f7:1d:c1:b8:b8:64:ae:02:ff:95: 5e:63:43:38:c7:88:e0:29:2d:dd:a8:36:70:fc:8a: d3:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:A7:61:2F:31:BA:31:41:60:51:DE:28:66:90:07:04:11:73:03:38 X509v3 Authority Key Identifier: keyid:D2:EF:21:DB:D5:45:25:5B:ED:30:EE:C3:46:23:F2:04:A3:E1:2D:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D2EF21DBD545255BED30EEC34623F204A3E12D23.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d231e6b1-1841-476d-b46b-b44b9cb968b0/0/D2EF21DBD545255BED30EEC34623F204A3E12D23.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:08:5e:00:19:80:5a:b2:79:05:21:15:64:7d:36:40:66:bd: 9f:0e:16:91:4f:f8:ba:2b:ca:ce:00:72:07:4a:c8:3e:13:25: 4b:1f:03:86:6a:d5:59:08:d1:17:b2:a5:1a:bf:ac:63:18:77: 5b:bb:05:a1:61:c5:d5:53:ce:8b:1b:16:d4:48:cf:c4:9d:9c: b0:42:c9:44:f3:42:b1:15:c6:d6:86:6e:d9:49:6b:dc:66:c0: ae:3b:06:dc:08:81:bd:9c:1a:91:1e:0a:24:f3:47:91:d0:2f: d9:71:de:b6:18:2f:04:97:ff:c5:a3:80:2c:f4:f4:f8:32:7a: a0:4b:c3:a8:cf:ae:a6:98:a6:02:b5:9b:56:64:0d:0d:a2:fe: e6:cc:68:12:59:53:e1:b3:e9:13:3c:99:c2:18:91:e3:c5:7f: c2:b6:9f:ee:7b:b5:b9:0f:53:d8:c9:61:fd:dc:51:b2:ae:ad: b6:92:a7:5f:c0:3d:7c:e0:d1:c4:9a:9a:06:f7:11:9d:d1:33: ee:bb:62:f5:c2:7b:1d:e9:6b:b2:27:81:23:27:78:1b:8c:5f: db:5f:20:9c:79:65:1c:45:d4:74:59:b4:a6:18:c9:91:7d:81: 81:56:d7:95:38:1d:72:e0:54:94:d8:af:3e:dc:3b:af:f0:0f: ab:ea:bb:03 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCPnp0lKYkqIbxGQ+yibQTFYCkpAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDJFRjIxREJENTQ1MjU1QkVEMzBFRUMzNDYyM0YyMDRB M0UxMkQyMzAeFw0yNTA1MDgxMzQ2MTBaFw0yNTA1MTExNzUwMTBaMDMxMTAvBgNV BAMTKEI4QTc2MTJGMzFCQTMxNDE2MDUxREUyODY2OTAwNzA0MTE3MzAzMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQzf8mO6YaXG4RFNQAEFEYPCAr I4yef0zA2swBJOBvJQfIwrHovTWWF/lduVptLPYIXOLGsp0ypYB3WBlWsBIJk36x pOP8tSNK//gNWHQrmNtKmLQFLwVXWG8PtrVM8OQ/LIL8EYeJXYfF1tHQtIoWQISs 9oGS0+qsphNAheUPTTPbXMnRDhOSuk3Z0QPQQ+9JVFca0f/QPEZTWIHeW8aPBmef 9XMDeQC4MJeLmmWfIeaOQ82tNHhtGOedK8FCSOJ3faFN4NmOeWOxwwHwBkAKlJaw L0fpCzejAeEvSQ5kVlCLDraq9x3BuLhkrgL/lV5jQzjHiOApLd2oNnD8itMNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuKdhLzG6MUFgUd4oZpAHBBFzAzgwHwYDVR0j BBgwFoAU0u8h29VFJVvtMO7DRiPyBKPhLSMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MjMxZTZiMS0xODQxLTQ3NmQtYjQ2Yi1iNDRiOWNiOTY4YjAvMC9EMkVGMjFEQkQ1 NDUyNTVCRUQzMEVFQzM0NjIzRjIwNEEzRTEyRDIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDJFRjIxREJENTQ1MjU1QkVEMzBFRUMzNDYyM0YyMDRBM0Ux MkQyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDIzMWU2YjEtMTg0MS00NzZkLWI0 NmItYjQ0YjljYjk2OGIwLzAvRDJFRjIxREJENTQ1MjU1QkVEMzBFRUMzNDYyM0Yy MDRBM0UxMkQyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKwIXgAZgFqyeQUhFWR9NkBmvZ8OFpFP+Lor ys4AcgdKyD4TJUsfA4Zq1VkI0ReypRq/rGMYd1u7BaFhxdVTzosbFtRIz8SdnLBC yUTzQrEVxtaGbtlJa9xmwK47BtwIgb2cGpEeCiTzR5HQL9lx3rYYLwSX/8WjgCz0 9PgyeqBLw6jPrqaYpgK1m1ZkDQ2i/ubMaBJZU+Gz6RM8mcIYkePFf8K2n+57tbkP U9jJYf3cUbKurbaSp1/APXzg0cSamgb3EZ3RM+67YvXCex3pa7IngSMneBuMX9tf IJx5ZRxF1HRZtKYYyZF9gYFW15U4HXLgVJTYrz7cO6/wD6vquwM= -----END CERTIFICATE-----Generated at Fri May 9 22:02:20 2025 by rpki-client