$ rpki-client -vvf repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft File: D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft (raw, json) Hash identifier: hdWzFLKXu2JKUMnQzwVdJeKpkVvHbxoN+uLF/W8AeLE= Subject key identifier: C7:AC:1B:01:25:B8:C8:16:C4:31:ED:7F:20:78:0C:B5:DE:2D:32:8F Authority key identifier: D8:5B:24:E8:18:A4:DA:C3:88:41:5F:B8:C9:69:05:DF:03:C8:D6:EA Certificate issuer: /CN=D85B24E818A4DAC388415FB8C96905DF03C8D6EA Certificate serial: 02A63E32EC6B966A74A774E826C3E4FB394CC4E9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft Manifest number: 016B Signing time: Mon 12 May 2025 03:11:54 +0000 Manifest this update: Mon 12 May 2025 03:06:54 +0000 Manifest next update: Thu 15 May 2025 04:54:54 +0000 Files and hashes: 1: D85B24E818A4DAC388415FB8C96905DF03C8D6EA.crl (hash: EZDCl3CeRaqfZ6vbz9/v8LQk1IMLudST/gTw3gRK8Xc=) 2: 3130332e3131382e3132312e302f32342d3234203d3e20313530323033.roa (hash: uRWbiNeHPsQtBG/4Fu8zjLX2ho1cleaNvsV0GTgbsAs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.crl rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 15 May 2025 04:54:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:a6:3e:32:ec:6b:96:6a:74:a7:74:e8:26:c3:e4:fb:39:4c:c4:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D85B24E818A4DAC388415FB8C96905DF03C8D6EA Validity Not Before: May 12 03:06:54 2025 GMT Not After : May 15 04:54:54 2025 GMT Subject: CN=C7AC1B0125B8C816C431ED7F20780CB5DE2D328F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:0a:f5:e1:85:74:6c:11:51:01:16:ce:04:16: 34:27:59:74:f9:31:ba:9a:ac:f1:1b:e7:18:65:a8: 33:bf:e4:70:26:fc:11:27:0d:c4:f6:32:9b:98:cf: cf:45:f7:37:b3:97:ae:63:f2:09:ec:e8:b8:f1:0f: 5f:a2:de:ff:17:20:38:b2:9a:c4:f1:88:72:47:a4: 95:0c:04:a4:b7:a6:5f:9e:7e:5f:02:39:6c:e2:47: d1:88:8d:a8:28:af:01:b6:2e:a1:97:18:09:af:54: 07:52:15:16:db:8f:2c:e7:86:d3:f7:95:63:d0:7d: 21:13:b1:3c:1e:11:94:e8:fd:4a:23:a3:19:ce:36: 70:71:b7:c8:4f:a2:7b:83:24:0e:1c:26:3d:45:af: 0c:a1:11:f7:d7:8a:26:3b:4c:0e:36:39:4c:f3:56: 21:b3:d5:28:04:6b:bf:10:1d:5a:ff:02:86:ea:20: 38:08:40:f7:f5:02:95:49:b2:1e:2a:27:15:da:09: 2b:56:ec:df:0e:b6:67:4e:83:b5:38:f7:01:35:33: cf:16:84:06:87:05:09:47:ab:04:ec:9c:0d:73:8f: 39:7d:51:e6:ce:67:56:ac:39:f4:23:3b:ed:cd:af: d1:49:3f:00:f7:1d:fc:40:1c:90:e9:60:1a:d8:91: 38:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:AC:1B:01:25:B8:C8:16:C4:31:ED:7F:20:78:0C:B5:DE:2D:32:8F X509v3 Authority Key Identifier: keyid:D8:5B:24:E8:18:A4:DA:C3:88:41:5F:B8:C9:69:05:DF:03:C8:D6:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e2f6a39f-2940-4ccc-8c1f-9d559c47a79b/0/D85B24E818A4DAC388415FB8C96905DF03C8D6EA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6e:8b:86:f5:ca:e1:f9:d6:da:32:9a:71:ac:11:9c:3e:3d:9e: 38:50:c0:b5:fc:88:a7:49:90:80:bd:4a:51:ae:3b:7c:72:36: a5:e7:bd:59:cc:3d:7c:3a:70:04:a3:2f:a2:d4:18:20:3c:e8: 23:24:a3:c3:e9:d7:2c:8d:4e:fa:3a:ec:8e:c8:b6:1f:25:fc: 5e:6c:65:60:ab:1b:e3:60:79:45:dc:8a:50:37:27:77:82:2f: 13:48:84:bc:fe:45:3e:67:3e:9a:66:b4:fd:d2:53:95:6b:00: 50:c0:2e:94:b7:d7:d4:49:00:2d:85:1e:52:d7:67:3d:03:fc: ae:6c:ea:92:e4:88:d3:5e:c1:e2:6d:54:0b:a8:f6:0a:ae:93: 54:9e:b9:89:c9:c5:fc:b8:3b:2e:ef:22:d0:07:22:0e:fc:f5: 55:f8:f1:ae:6e:41:d1:4d:73:f0:d0:65:f3:65:88:28:73:22: 7f:08:a4:2a:b9:91:bb:b9:95:4b:eb:5e:d3:e2:4a:c8:7c:28: 1c:d9:df:be:ee:49:77:d6:8b:e8:42:2f:e5:ab:a7:f4:58:d4: ac:81:6e:43:f3:01:af:92:c6:9f:7e:30:a6:92:f6:51:c4:ec: b0:02:f7:32:16:f6:8d:ee:48:77:49:8a:db:7d:56:97:3e:c7: 66:a6:1e:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAqY+Muxrlmp0p3ToJsPk+zlMxOkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1QjI0RTgxOEE0REFDMzg4NDE1RkI4Qzk2OTA1REYw M0M4RDZFQTAeFw0yNTA1MTIwMzA2NTRaFw0yNTA1MTUwNDU0NTRaMDMxMTAvBgNV BAMTKEM3QUMxQjAxMjVCOEM4MTZDNDMxRUQ3RjIwNzgwQ0I1REUyRDMyOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyCvXhhXRsEVEBFs4EFjQnWXT5 MbqarPEb5xhlqDO/5HAm/BEnDcT2MpuYz89F9zezl65j8gns6LjxD1+i3v8XIDiy msTxiHJHpJUMBKS3pl+efl8COWziR9GIjagorwG2LqGXGAmvVAdSFRbbjyznhtP3 lWPQfSETsTweEZTo/UojoxnONnBxt8hPonuDJA4cJj1FrwyhEffXiiY7TA42OUzz ViGz1SgEa78QHVr/AobqIDgIQPf1ApVJsh4qJxXaCStW7N8OtmdOg7U49wE1M88W hAaHBQlHqwTsnA1zjzl9UebOZ1asOfQjO+3Nr9FJPwD3HfxAHJDpYBrYkTjhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUx6wbASW4yBbEMe1/IHgMtd4tMo8wHwYDVR0j BBgwFoAU2Fsk6Bik2sOIQV+4yWkF3wPI1uowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MmY2YTM5Zi0yOTQwLTRjY2MtOGMxZi05ZDU1OWM0N2E3OWIvMC9EODVCMjRFODE4 QTREQUMzODg0MTVGQjhDOTY5MDVERjAzQzhENkVBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDg1QjI0RTgxOEE0REFDMzg4NDE1RkI4Qzk2OTA1REYwM0M4 RDZFQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTJmNmEzOWYtMjk0MC00Y2NjLThj MWYtOWQ1NTljNDdhNzliLzAvRDg1QjI0RTgxOEE0REFDMzg4NDE1RkI4Qzk2OTA1 REYwM0M4RDZFQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG6LhvXK4fnW2jKacawRnD49njhQwLX8iKdJ kIC9SlGuO3xyNqXnvVnMPXw6cASjL6LUGCA86CMko8Pp1yyNTvo67I7Ith8l/F5s ZWCrG+NgeUXcilA3J3eCLxNIhLz+RT5nPppmtP3SU5VrAFDALpS319RJAC2FHlLX Zz0D/K5s6pLkiNNeweJtVAuo9gquk1SeuYnJxfy4Oy7vItAHIg789VX48a5uQdFN c/DQZfNliChzIn8IpCq5kbu5lUvrXtPiSsh8KBzZ377uSXfWi+hCL+Wrp/RY1KyB bkPzAa+Sxp9+MKaS9lHE7LAC9zIW9o3uSHdJitt9Vpc+x2amHoc= -----END CERTIFICATE-----Generated at Mon May 12 13:45:35 2025 by rpki-client