$ rpki-client -vvf repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft File: D065D2A0A105660C70D0A89385A33A61750ED7E8.mft (raw, json) Hash identifier: b5sJUxbxt6P5pKBTmMIPr3ovrvS3k3ATaLlfmtwk2v8= Subject key identifier: 3B:A2:0F:AA:7F:3E:A5:CA:D3:E7:28:85:61:5A:9B:94:43:AF:73:36 Authority key identifier: D0:65:D2:A0:A1:05:66:0C:70:D0:A8:93:85:A3:3A:61:75:0E:D7:E8 Certificate issuer: /CN=D065D2A0A105660C70D0A89385A33A61750ED7E8 Certificate serial: 463882A8738134DB4D2946D1E8A13E1433418CC1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D065D2A0A105660C70D0A89385A33A61750ED7E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft Manifest number: 01A2 Signing time: Fri 09 May 2025 22:42:20 +0000 Manifest this update: Fri 09 May 2025 22:37:20 +0000 Manifest next update: Tue 13 May 2025 03:59:20 +0000 Files and hashes: 1: 3130332e3137342e36362e302f32342d3234203d3e20313431363138.roa (hash: 6/pSy7z7eY7tiFM1qTKt66H7MbktwVP3GS8euOTpVH0=) 2: D065D2A0A105660C70D0A89385A33A61750ED7E8.crl (hash: 8vlRMVn2rOPesQEBAmhMGpb45Xzf9X1Z88FaQ4moGig=) 3: 3130332e3136312e3130392e302f32342d3234203d3e20313431363138.roa (hash: WfS+hJt0MRHreGBYJWQj9QwW51lq/cgm3WlkvKr1/Is=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.crl rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D065D2A0A105660C70D0A89385A33A61750ED7E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 03:59:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:38:82:a8:73:81:34:db:4d:29:46:d1:e8:a1:3e:14:33:41:8c:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D065D2A0A105660C70D0A89385A33A61750ED7E8 Validity Not Before: May 9 22:37:20 2025 GMT Not After : May 13 03:59:20 2025 GMT Subject: CN=3BA20FAA7F3EA5CAD3E72885615A9B9443AF7336 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:55:08:15:f8:99:a3:8d:6e:07:da:55:bf:0a: 2b:7f:ff:9d:3d:3d:0e:2d:81:13:52:9f:ce:33:be: 0f:d2:b5:81:d4:f8:46:b4:fe:19:09:c6:e8:7e:0c: eb:14:31:cb:90:b4:4d:05:0d:6a:6a:10:85:59:5d: 90:86:b7:72:a8:aa:08:4b:7e:e6:31:53:c6:c5:8d: 12:e2:2b:fe:e4:ea:7c:3b:40:cb:48:15:b0:85:80: dc:55:2a:6e:e9:d9:1c:f3:0d:9b:ad:3f:a8:9d:d5: bf:de:b6:df:a9:67:66:ab:7f:72:cc:cc:09:a6:d1: e1:61:d3:7b:17:81:1f:ed:ee:7c:55:34:d5:f0:cd: c1:e7:64:91:f0:b5:20:46:74:dd:86:80:3d:23:5c: f1:a7:31:9c:56:93:89:36:42:cc:3c:5e:5c:8d:a5: b9:0d:ad:c3:e3:cd:34:70:5a:4f:f3:90:a5:30:b8: e3:d1:3a:61:b9:ad:d3:54:b4:0f:3c:61:55:14:2e: 33:6e:6a:1b:f2:84:18:de:18:1b:68:20:71:f0:b2: ee:8a:9e:a6:a7:ed:82:ce:2a:cf:9a:be:e7:96:a2: b0:a3:9e:2d:7f:8d:69:f1:ab:bf:8b:16:bb:15:7e: 47:a9:20:5e:5b:d0:71:1a:d1:bf:ce:44:85:ea:8d: 86:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:A2:0F:AA:7F:3E:A5:CA:D3:E7:28:85:61:5A:9B:94:43:AF:73:36 X509v3 Authority Key Identifier: keyid:D0:65:D2:A0:A1:05:66:0C:70:D0:A8:93:85:A3:3A:61:75:0E:D7:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D065D2A0A105660C70D0A89385A33A61750ED7E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:78:d9:d6:03:1e:81:6b:9d:6f:3d:ff:69:c7:e2:30:60:45: b2:f7:17:e6:f1:9e:cb:a0:a5:ea:c8:1a:d3:f4:e5:61:7c:84: bd:67:25:03:49:68:5f:53:76:61:f4:16:5c:2f:f0:4f:13:0b: 03:ca:be:65:cc:b4:63:2b:d2:6e:3c:47:c1:c5:fe:a9:83:13: 2b:2c:98:cf:40:7d:7d:a2:65:e7:3e:75:6f:49:d1:b6:34:99: 57:ce:c4:7a:33:61:06:e5:63:4e:19:a8:db:d5:36:76:e9:3d: 9f:f6:9a:97:4c:cd:72:7a:3f:81:86:2b:d3:0d:76:14:5e:13: 75:39:08:ae:e0:8c:f3:f6:91:06:99:0a:2b:03:02:d7:02:ee: ca:5c:dc:2d:09:aa:ee:aa:37:cd:1b:e5:d9:3b:ad:9f:f1:bb: 80:16:15:be:6b:4d:49:98:e1:e2:e6:66:72:82:1c:c1:b2:fd: 76:60:c1:4a:c5:5c:18:8a:49:a3:5f:05:56:2a:eb:e7:8e:39: e7:11:b5:af:50:70:07:cb:e3:8a:6f:9c:8d:ae:4e:45:14:07: 6d:e3:99:3b:3c:e4:8a:89:55:38:a5:90:16:a3:60:0b:8f:b0: ad:5f:03:2c:a6:dc:5b:1c:6d:96:dc:dd:f5:66:21:15:1f:cd: d0:27:af:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURjiCqHOBNNtNKUbR6KE+FDNBjMEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA2NUQyQTBBMTA1NjYwQzcwRDBBODkzODVBMzNBNjE3 NTBFRDdFODAeFw0yNTA1MDkyMjM3MjBaFw0yNTA1MTMwMzU5MjBaMDMxMTAvBgNV BAMTKDNCQTIwRkFBN0YzRUE1Q0FEM0U3Mjg4NTYxNUE5Qjk0NDNBRjczMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYVQgV+JmjjW4H2lW/Cit//509 PQ4tgRNSn84zvg/StYHU+Ea0/hkJxuh+DOsUMcuQtE0FDWpqEIVZXZCGt3KoqghL fuYxU8bFjRLiK/7k6nw7QMtIFbCFgNxVKm7p2RzzDZutP6id1b/ett+pZ2arf3LM zAmm0eFh03sXgR/t7nxVNNXwzcHnZJHwtSBGdN2GgD0jXPGnMZxWk4k2Qsw8XlyN pbkNrcPjzTRwWk/zkKUwuOPROmG5rdNUtA88YVUULjNuahvyhBjeGBtoIHHwsu6K nqan7YLOKs+avueWorCjni1/jWnxq7+LFrsVfkepIF5b0HEa0b/ORIXqjYYBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO6IPqn8+pcrT5yiFYVqblEOvczYwHwYDVR0j BBgwFoAU0GXSoKEFZgxw0KiThaM6YXUO1+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MGJhOTdlZi03YmM4LTQ1YjgtODJhYi1mODU1MzNjYWVkZjQvMC9EMDY1RDJBMEEx MDU2NjBDNzBEMEE4OTM4NUEzM0E2MTc1MEVEN0U4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDA2NUQyQTBBMTA1NjYwQzcwRDBBODkzODVBMzNBNjE3NTBF RDdFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTBiYTk3ZWYtN2JjOC00NWI4LTgy YWItZjg1NTMzY2FlZGY0LzAvRDA2NUQyQTBBMTA1NjYwQzcwRDBBODkzODVBMzNB NjE3NTBFRDdFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALV42dYDHoFrnW89/2nH4jBgRbL3F+bxnsug perIGtP05WF8hL1nJQNJaF9TdmH0Flwv8E8TCwPKvmXMtGMr0m48R8HF/qmDEyss mM9AfX2iZec+dW9J0bY0mVfOxHozYQblY04ZqNvVNnbpPZ/2mpdMzXJ6P4GGK9MN dhReE3U5CK7gjPP2kQaZCisDAtcC7spc3C0Jqu6qN80b5dk7rZ/xu4AWFb5rTUmY 4eLmZnKCHMGy/XZgwUrFXBiKSaNfBVYq6+eOOecRta9QcAfL44pvnI2uTkUUB23j mTs85IqJVTilkBajYAuPsK1fAyym3FscbZbc3fVmIRUfzdAnr4U= -----END CERTIFICATE-----Generated at Sun May 11 15:36:33 2025 by rpki-client