$ rpki-client -vvf repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft File: D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft (raw, json) Hash identifier: YiFFOnvO/C1khp5LnOgoLg3SeyVmc4Xw3bTHz+hsqIw= Subject key identifier: FC:D1:40:AD:F4:1F:28:68:AC:88:4C:87:02:2D:12:B3:F2:58:E9:C6 Authority key identifier: D7:6C:F6:4B:32:F2:3D:8C:4E:BF:A0:28:11:D0:B0:8A:78:C6:12:D0 Certificate issuer: /CN=D76CF64B32F23D8C4EBFA02811D0B08A78C612D0 Certificate serial: 0CC9866F2BDC403C03B9AC76552D10400B0DD401 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft Manifest number: 01AD Signing time: Tue 06 May 2025 05:21:42 +0000 Manifest this update: Tue 06 May 2025 05:16:42 +0000 Manifest next update: Fri 09 May 2025 15:01:42 +0000 Files and hashes: 1: D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.crl (hash: B/YuE1s1kBpOthWB9utLzcTnkrBcdbSewzmgZwFw3kE=) 2: 3130332e3136392e362e302f32332d3234203d3e20313431313037.roa (hash: LxMwNxJqtsDAew6t2HZWJN3elxDUrVZNuiLgSdrPlIM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.crl rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 09 May 2025 15:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:c9:86:6f:2b:dc:40:3c:03:b9:ac:76:55:2d:10:40:0b:0d:d4:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D76CF64B32F23D8C4EBFA02811D0B08A78C612D0 Validity Not Before: May 6 05:16:42 2025 GMT Not After : May 9 15:01:42 2025 GMT Subject: CN=FCD140ADF41F2868AC884C87022D12B3F258E9C6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:c0:84:56:12:05:34:a7:c9:ef:3b:8f:0f:a4: 5c:0e:c5:91:a5:ac:bd:95:03:e0:b4:df:21:de:8d: ad:d2:0f:ad:21:28:de:b0:c9:bb:a7:9c:5f:fa:c1: 7f:29:8f:c1:75:f1:c7:7a:e7:3d:4f:62:8f:38:21: d1:f0:c6:c0:53:bf:c9:c0:e2:33:4e:4b:5f:92:bc: 99:8a:80:72:5c:c3:55:2e:7e:3e:ee:23:22:ad:7d: 59:6c:d3:7a:1e:e4:10:9f:37:cb:d4:e6:1e:5e:33: 50:27:36:3a:61:71:19:9e:43:80:a6:5b:7a:c6:03: 75:6f:6c:d4:9d:49:3c:ef:cd:91:0b:99:61:30:67: f2:53:e3:04:b8:d1:ae:34:2b:1e:dc:44:33:4b:51: 82:17:8b:6a:7c:2c:03:34:64:32:6d:0a:93:a4:bb: 7e:64:85:b7:c9:47:8c:3b:14:79:c6:0c:f9:8a:5a: 3f:eb:ea:71:b2:d9:59:ad:33:e7:38:ea:97:ad:3a: ee:0e:92:ed:d5:72:ad:62:07:3f:e7:e4:47:e0:cf: 56:e9:95:07:24:28:e1:95:49:0f:08:53:e2:6b:84: f3:11:6f:93:65:d9:24:e0:61:95:70:9e:d2:24:f8: da:b4:b2:9a:65:94:a4:46:e0:8e:cd:42:ed:3b:ec: 5b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:D1:40:AD:F4:1F:28:68:AC:88:4C:87:02:2D:12:B3:F2:58:E9:C6 X509v3 Authority Key Identifier: keyid:D7:6C:F6:4B:32:F2:3D:8C:4E:BF:A0:28:11:D0:B0:8A:78:C6:12:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d53e4af5-aaf5-46ce-b119-d7e76dae20b8/0/D76CF64B32F23D8C4EBFA02811D0B08A78C612D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:70:61:72:1a:9e:b1:1a:e4:a4:ff:69:a9:e0:ab:b6:43:e3: 51:39:b5:e0:a9:c6:12:31:93:ec:a5:45:b8:71:d5:bf:18:26: 93:b8:4b:82:b7:c3:a5:ec:f6:f6:ec:28:45:7c:56:51:a4:e4: 54:ca:9b:33:ba:4c:85:b1:13:b3:87:ec:0c:55:8e:13:81:08: c2:c0:ba:f5:8f:0d:7c:ca:8c:c3:a0:eb:24:fb:d5:d5:e7:f7: 98:51:ba:04:06:75:04:ce:f9:92:e2:e2:33:99:7f:29:4c:5c: fa:d8:5d:32:50:3f:61:5e:9c:b1:b3:36:7c:46:14:b0:f6:ae: 65:52:70:8e:b6:85:4e:7c:6e:f9:a5:e8:b8:aa:8c:fe:90:d9: ea:e6:6b:5a:f7:cb:83:2c:0d:d3:e8:0a:38:67:3d:a2:b9:69: 45:13:bb:1b:b5:f6:37:8a:b2:ea:5b:cf:91:98:98:08:c3:7e: 8f:94:38:9c:c2:08:8b:46:4c:6c:4a:25:ff:7b:bf:aa:e9:af: dc:4e:1f:a3:6d:68:7a:48:5c:54:ca:2b:b1:77:be:26:bf:1d: 70:31:aa:6b:89:4c:2a:96:4b:2a:83:46:65:5a:d3:e8:e7:60: b9:ad:f8:3d:de:e0:2a:0e:69:98:61:3b:e0:6b:9c:e3:9c:cd: 17:10:f1:83 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDMmGbyvcQDwDuax2VS0QQAsN1AEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc2Q0Y2NEIzMkYyM0Q4QzRFQkZBMDI4MTFEMEIwOEE3 OEM2MTJEMDAeFw0yNTA1MDYwNTE2NDJaFw0yNTA1MDkxNTAxNDJaMDMxMTAvBgNV BAMTKEZDRDE0MEFERjQxRjI4NjhBQzg4NEM4NzAyMkQxMkIzRjI1OEU5QzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+wIRWEgU0p8nvO48PpFwOxZGl rL2VA+C03yHeja3SD60hKN6wybunnF/6wX8pj8F18cd65z1PYo84IdHwxsBTv8nA 4jNOS1+SvJmKgHJcw1Uufj7uIyKtfVls03oe5BCfN8vU5h5eM1AnNjphcRmeQ4Cm W3rGA3VvbNSdSTzvzZELmWEwZ/JT4wS40a40Kx7cRDNLUYIXi2p8LAM0ZDJtCpOk u35khbfJR4w7FHnGDPmKWj/r6nGy2VmtM+c46petOu4Oku3Vcq1iBz/n5Efgz1bp lQckKOGVSQ8IU+JrhPMRb5Nl2STgYZVwntIk+Nq0sppllKRG4I7NQu077FvJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/NFArfQfKGisiEyHAi0Ss/JY6cYwHwYDVR0j BBgwFoAU12z2SzLyPYxOv6AoEdCwinjGEtAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NTNlNGFmNS1hYWY1LTQ2Y2UtYjExOS1kN2U3NmRhZTIwYjgvMC9ENzZDRjY0QjMy RjIzRDhDNEVCRkEwMjgxMUQwQjA4QTc4QzYxMkQwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDc2Q0Y2NEIzMkYyM0Q4QzRFQkZBMDI4MTFEMEIwOEE3OEM2 MTJEMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDUzZTRhZjUtYWFmNS00NmNlLWIx MTktZDdlNzZkYWUyMGI4LzAvRDc2Q0Y2NEIzMkYyM0Q4QzRFQkZBMDI4MTFEMEIw OEE3OEM2MTJEMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEhwYXIanrEa5KT/aangq7ZD41E5teCpxhIx k+ylRbhx1b8YJpO4S4K3w6Xs9vbsKEV8VlGk5FTKmzO6TIWxE7OH7AxVjhOBCMLA uvWPDXzKjMOg6yT71dXn95hRugQGdQTO+ZLi4jOZfylMXPrYXTJQP2FenLGzNnxG FLD2rmVScI62hU58bvml6LiqjP6Q2erma1r3y4MsDdPoCjhnPaK5aUUTuxu19jeK supbz5GYmAjDfo+UOJzCCItGTGxKJf97v6rpr9xOH6NtaHpIXFTKK7F3via/HXAx qmuJTCqWSyqDRmVa0+jnYLmt+D3e4CoOaZhhO+BrnOOczRcQ8YM= -----END CERTIFICATE-----Generated at Thu May 8 05:55:02 2025 by rpki-client