$ rpki-client -vvf repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft File: DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft (raw, json) Hash identifier: 4m5wGpBZBIyiFNZJ6Xjn32xFQsSOXuMXUaqTq8W+uHY= Subject key identifier: B8:2A:4A:C0:74:F8:86:AA:0B:D4:53:4B:61:56:6E:10:CE:DB:DB:B1 Authority key identifier: DA:6C:3D:41:56:C0:5B:74:E3:B5:C0:49:F7:98:B0:0D:C6:34:2B:70 Certificate issuer: /CN=DA6C3D4156C05B74E3B5C049F798B00DC6342B70 Certificate serial: 555D07A44AF55F99CD13A439FC09200CDD053896 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft Manifest number: E3 Signing time: Sun 04 May 2025 06:31:41 +0000 Manifest this update: Sun 04 May 2025 06:26:41 +0000 Manifest next update: Wed 07 May 2025 15:25:41 +0000 Files and hashes: 1: DA6C3D4156C05B74E3B5C049F798B00DC6342B70.crl (hash: CyIXG08cLINn2uttF2/gsQcIXpbdpKmVOL4YepvVUzo=) 2: 3130332e3234392e3232362e302f32342d3234203d3e20313531353236.roa (hash: d/FCKrPQVsgurMvNGz2oQ2iPyKXsXoRnlEaxs4nJ5ko=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.crl rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 15:25:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:5d:07:a4:4a:f5:5f:99:cd:13:a4:39:fc:09:20:0c:dd:05:38:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA6C3D4156C05B74E3B5C049F798B00DC6342B70 Validity Not Before: May 4 06:26:41 2025 GMT Not After : May 7 15:25:41 2025 GMT Subject: CN=B82A4AC074F886AA0BD4534B61566E10CEDBDBB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ad:52:31:ae:96:8b:d6:db:f0:23:d9:10:54: d2:29:2d:d5:78:b3:84:0d:f8:70:1d:a8:00:17:45: b4:dc:e8:3c:f5:35:fa:19:e7:05:01:82:89:09:dc: 76:dc:bd:58:84:a0:12:8a:fd:e2:dd:97:56:3c:8c: 0d:dd:44:48:1e:26:3f:e1:47:53:ce:20:a1:ef:fb: d8:4e:c3:6f:0a:d7:16:62:a9:2d:50:54:b3:c6:6d: 77:c9:77:58:99:3b:78:2c:3a:c6:21:42:de:92:c6: 81:7e:3e:98:52:fc:e8:1a:61:99:11:bf:00:3f:2c: c9:e5:31:5b:8a:30:b6:03:93:5e:6d:e6:e6:da:76: 3c:73:66:08:31:58:fe:bb:cb:5b:b3:5a:7c:bf:76: a5:b8:ed:15:82:9b:ed:03:6c:02:21:92:89:81:02: b5:86:20:24:9f:69:47:69:e5:2c:4a:39:3a:35:80: e3:fc:20:ea:ae:a6:90:70:78:f7:84:6a:c7:5e:75: 24:be:34:ba:49:5d:81:ab:f4:28:76:3e:a7:e8:ad: a5:d6:59:27:44:63:3f:08:13:97:ef:cb:b9:85:45: 4e:54:c5:c0:3d:59:6c:c3:c2:31:8d:6a:09:a5:bb: 1d:bb:4d:f0:92:67:42:80:0d:3b:41:65:ed:d6:ac: c1:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:2A:4A:C0:74:F8:86:AA:0B:D4:53:4B:61:56:6E:10:CE:DB:DB:B1 X509v3 Authority Key Identifier: keyid:DA:6C:3D:41:56:C0:5B:74:E3:B5:C0:49:F7:98:B0:0D:C6:34:2B:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:5f:53:04:59:42:02:14:4d:75:52:55:ae:56:98:43:36:34: 5e:b3:db:46:87:01:87:43:91:fa:ef:d4:88:72:3f:4e:09:8f: 7c:35:ed:5b:d1:f7:84:fe:eb:e1:67:29:2a:d7:52:11:56:1e: 64:63:c8:78:0d:43:36:07:07:23:1a:3c:c9:7b:0e:10:62:a2: b5:18:b3:5a:06:f1:c4:18:bb:1b:46:0a:fc:bd:6a:6a:ee:52: 66:cf:1b:9a:eb:99:72:17:b8:c1:52:5a:cd:73:c0:1e:3b:a7: f5:86:f0:22:03:44:15:7e:47:bc:83:ca:b3:08:5c:1f:ca:5e: 85:1d:8a:6b:07:47:39:92:02:f2:04:47:8d:a6:4d:73:a7:64: 36:50:dd:24:9c:74:7e:11:a7:8b:91:a0:9c:5e:21:ca:a5:47: 5f:91:67:86:83:5d:27:82:05:c0:0a:a7:bb:a6:8c:1c:f4:4f: e3:e6:8f:f0:85:1a:ea:8e:e7:a9:7b:ee:af:94:0a:73:e4:09: 4b:87:03:63:91:ae:8d:a0:59:3b:11:48:56:f6:cc:cd:30:b0: 47:5e:14:10:14:1e:5f:33:93:22:70:05:bd:88:78:94:62:5a: 71:6d:d4:f2:49:c9:8b:5b:27:91:fc:bb:53:b4:64:65:54:c7: 34:5f:7c:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVV0HpEr1X5nNE6Q5/AkgDN0FOJYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE2QzNENDE1NkMwNUI3NEUzQjVDMDQ5Rjc5OEIwMERD NjM0MkI3MDAeFw0yNTA1MDQwNjI2NDFaFw0yNTA1MDcxNTI1NDFaMDMxMTAvBgNV BAMTKEI4MkE0QUMwNzRGODg2QUEwQkQ0NTM0QjYxNTY2RTEwQ0VEQkRCQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOrVIxrpaL1tvwI9kQVNIpLdV4 s4QN+HAdqAAXRbTc6Dz1NfoZ5wUBgokJ3HbcvViEoBKK/eLdl1Y8jA3dREgeJj/h R1POIKHv+9hOw28K1xZiqS1QVLPGbXfJd1iZO3gsOsYhQt6SxoF+PphS/OgaYZkR vwA/LMnlMVuKMLYDk15t5ubadjxzZggxWP67y1uzWny/dqW47RWCm+0DbAIhkomB ArWGICSfaUdp5SxKOTo1gOP8IOquppBwePeEasdedSS+NLpJXYGr9Ch2PqforaXW WSdEYz8IE5fvy7mFRU5UxcA9WWzDwjGNagmlux27TfCSZ0KADTtBZe3WrMHJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuCpKwHT4hqoL1FNLYVZuEM7b27EwHwYDVR0j BBgwFoAU2mw9QVbAW3TjtcBJ95iwDcY0K3AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NzhhOGIzOS0zYWUzLTRkZTctOTM2Ni0yMWY5ZWEwNDMyNWEvMC9EQTZDM0Q0MTU2 QzA1Qjc0RTNCNUMwNDlGNzk4QjAwREM2MzQyQjcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREE2QzNENDE1NkMwNUI3NEUzQjVDMDQ5Rjc5OEIwMERDNjM0 MkI3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTc4YThiMzktM2FlMy00ZGU3LTkz NjYtMjFmOWVhMDQzMjVhLzAvREE2QzNENDE1NkMwNUI3NEUzQjVDMDQ5Rjc5OEIw MERDNjM0MkI3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFZfUwRZQgIUTXVSVa5WmEM2NF6z20aHAYdD kfrv1IhyP04Jj3w17VvR94T+6+FnKSrXUhFWHmRjyHgNQzYHByMaPMl7DhBiorUY s1oG8cQYuxtGCvy9amruUmbPG5rrmXIXuMFSWs1zwB47p/WG8CIDRBV+R7yDyrMI XB/KXoUdimsHRzmSAvIER42mTXOnZDZQ3SScdH4Rp4uRoJxeIcqlR1+RZ4aDXSeC BcAKp7umjBz0T+Pmj/CFGuqO56l77q+UCnPkCUuHA2ORro2gWTsRSFb2zM0wsEde FBAUHl8zkyJwBb2IeJRiWnFt1PJJyYtbJ5H8u1O0ZGVUxzRffDs= -----END CERTIFICATE-----Generated at Tue May 6 20:16:08 2025 by rpki-client