$ rpki-client -vvf repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft File: D0DE430E423B23AB634EBCF0195F1126B44A525E.mft (raw, json) Hash identifier: 6w4n1NkzfEIbYfQD6m8tbuFBc6LAemaARs0nSyMYc9s= Subject key identifier: 9C:65:56:C8:78:D2:9A:CE:80:93:CD:70:F0:6D:D6:46:97:07:76:1E Authority key identifier: D0:DE:43:0E:42:3B:23:AB:63:4E:BC:F0:19:5F:11:26:B4:4A:52:5E Certificate issuer: /CN=D0DE430E423B23AB634EBCF0195F1126B44A525E Certificate serial: 18143C8CB93D17EAC700334AA2F9BFCCB852B7EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0DE430E423B23AB634EBCF0195F1126B44A525E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft Manifest number: EF Signing time: Thu 08 May 2025 13:51:54 +0000 Manifest this update: Thu 08 May 2025 13:46:54 +0000 Manifest next update: Sun 11 May 2025 16:36:54 +0000 Files and hashes: 1: 34352e3132332e3134322e302f32342d3234203d3e20313532303236.roa (hash: 8z2b+xp92tURTGvnf0C6XQM1zDU3t1HFgqr8ucYFBOU=) 2: D0DE430E423B23AB634EBCF0195F1126B44A525E.crl (hash: YzambWUNbvx3Fk6976xkgqBLUKzFzb6Copci+wjXHXs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.crl rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0DE430E423B23AB634EBCF0195F1126B44A525E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 11 May 2025 15:40:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:14:3c:8c:b9:3d:17:ea:c7:00:33:4a:a2:f9:bf:cc:b8:52:b7:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0DE430E423B23AB634EBCF0195F1126B44A525E Validity Not Before: May 8 13:46:54 2025 GMT Not After : May 11 16:36:54 2025 GMT Subject: CN=9C6556C878D29ACE8093CD70F06DD6469707761E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:ec:ce:11:9b:5d:e3:30:0d:c7:49:7d:ee:62: 56:7c:2c:0b:5b:dc:11:9a:5a:e7:50:42:e5:ff:a2: 32:41:34:51:dc:7b:d0:44:21:57:2b:b0:c4:a5:6c: 6a:8b:d5:82:65:e1:6f:99:e3:bb:9a:e2:3a:64:a2: c9:7d:6d:9b:e9:2f:e6:2d:8f:e2:f8:00:0d:a8:e0: 58:cf:0d:75:2d:f0:79:7e:74:d7:70:59:6a:82:20: 2d:47:c4:9d:7f:2a:20:22:88:2c:28:e8:52:7a:bd: 31:97:40:87:12:19:5e:6f:c3:dc:e0:ed:ee:73:f1: 34:64:e9:66:68:4c:30:26:e3:a1:40:a4:89:c6:f7: 22:cb:27:5b:6d:2c:c4:92:f9:a6:11:45:ba:f3:07: 60:f2:c0:46:c2:7b:fa:c7:76:59:b7:83:f7:b9:8e: 22:af:58:0c:f1:6a:54:da:a5:67:ed:76:78:68:48: 1a:30:08:0a:32:5e:03:19:0e:a5:c2:cf:b2:5f:0a: d7:46:9e:c7:36:7b:c9:05:45:39:6d:3a:ad:b8:af: d0:3a:f0:1c:60:f1:5f:b5:f6:44:23:fd:5a:c2:14: 67:dd:dc:15:72:7f:1b:65:e0:43:09:a7:04:77:6f: 2a:58:89:a8:9c:d8:52:85:41:08:7f:55:08:d6:86: 8d:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:65:56:C8:78:D2:9A:CE:80:93:CD:70:F0:6D:D6:46:97:07:76:1E X509v3 Authority Key Identifier: keyid:D0:DE:43:0E:42:3B:23:AB:63:4E:BC:F0:19:5F:11:26:B4:4A:52:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0DE430E423B23AB634EBCF0195F1126B44A525E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:ea:94:31:5c:ef:61:28:bb:e4:40:70:7a:fb:a4:e1:b8:3d: 50:f2:90:e2:a4:16:ad:7e:be:e6:82:b6:fd:80:17:69:61:a2: 1a:34:0f:71:39:ab:58:a3:ff:15:97:5e:51:c7:b3:59:28:3c: c4:62:e1:db:6e:ec:94:9f:62:3f:c9:d0:34:b3:16:8a:ca:32: dd:76:d2:4c:fe:1a:57:7f:9e:d7:4d:bc:8d:5d:46:a0:e5:a4: b6:35:71:2c:ef:82:2b:c2:7c:db:da:cc:4b:b7:dd:81:13:f4: 04:3d:3f:bf:70:d9:ac:d5:93:b3:4f:09:9b:2f:33:cc:92:df: fe:3e:d4:79:46:bb:e5:45:9d:e3:e0:95:dc:a5:7b:b6:c1:33: 95:db:03:17:23:b8:f3:72:34:04:a6:c8:c9:ca:01:3f:d0:9e: 92:04:94:66:0c:7b:1c:13:83:10:7d:27:19:0c:fe:47:e5:24: 77:d2:97:a2:01:40:d3:f2:d3:2a:1a:d9:84:de:c0:51:92:bd: 0b:a8:c0:fe:40:3a:7f:15:c5:b3:1b:63:09:d6:7c:cb:f3:b6: 4f:ea:f8:2e:db:da:22:ae:31:d6:37:d4:0b:0b:af:04:b3:77: 94:65:e1:4f:bd:8c:da:e3:6c:8e:2a:89:77:16:3c:b6:e3:13: 48:ed:c6:f4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGBQ8jLk9F+rHADNKovm/zLhSt+4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBERTQzMEU0MjNCMjNBQjYzNEVCQ0YwMTk1RjExMjZC NDRBNTI1RTAeFw0yNTA1MDgxMzQ2NTRaFw0yNTA1MTExNjM2NTRaMDMxMTAvBgNV BAMTKDlDNjU1NkM4NzhEMjlBQ0U4MDkzQ0Q3MEYwNkRENjQ2OTcwNzc2MUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDL7M4Rm13jMA3HSX3uYlZ8LAtb 3BGaWudQQuX/ojJBNFHce9BEIVcrsMSlbGqL1YJl4W+Z47ua4jpkosl9bZvpL+Yt j+L4AA2o4FjPDXUt8Hl+dNdwWWqCIC1HxJ1/KiAiiCwo6FJ6vTGXQIcSGV5vw9zg 7e5z8TRk6WZoTDAm46FApInG9yLLJ1ttLMSS+aYRRbrzB2DywEbCe/rHdlm3g/e5 jiKvWAzxalTapWftdnhoSBowCAoyXgMZDqXCz7JfCtdGnsc2e8kFRTltOq24r9A6 8Bxg8V+19kQj/VrCFGfd3BVyfxtl4EMJpwR3bypYiaic2FKFQQh/VQjWho1hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnGVWyHjSms6Ak81w8G3WRpcHdh4wHwYDVR0j BBgwFoAU0N5DDkI7I6tjTrzwGV8RJrRKUl4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzRhMTUyNy01YzhlLTRiZDMtYTFjNy05ZDFlZDJkMjNlMTQvMC9EMERFNDMwRTQy M0IyM0FCNjM0RUJDRjAxOTVGMTEyNkI0NEE1MjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBERTQzMEU0MjNCMjNBQjYzNEVCQ0YwMTk1RjExMjZCNDRB NTI1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDc0YTE1MjctNWM4ZS00YmQzLWEx YzctOWQxZWQyZDIzZTE0LzAvRDBERTQzMEU0MjNCMjNBQjYzNEVCQ0YwMTk1RjEx MjZCNDRBNTI1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHjqlDFc72Eou+RAcHr7pOG4PVDykOKkFq1+ vuaCtv2AF2lhoho0D3E5q1ij/xWXXlHHs1koPMRi4dtu7JSfYj/J0DSzForKMt12 0kz+Gld/ntdNvI1dRqDlpLY1cSzvgivCfNvazEu33YET9AQ9P79w2azVk7NPCZsv M8yS3/4+1HlGu+VFnePgldyle7bBM5XbAxcjuPNyNASmyMnKAT/QnpIElGYMexwT gxB9JxkM/kflJHfSl6IBQNPy0yoa2YTewFGSvQuowP5AOn8VxbMbYwnWfMvztk/q +C7b2iKuMdY31AsLrwSzd5Rl4U+9jNrjbI4qiXcWPLbjE0jtxvQ= -----END CERTIFICATE-----Generated at Thu May 8 20:21:50 2025 by rpki-client