$ rpki-client -vvf repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft File: D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft (raw, json) Hash identifier: 3iynjGaaNM4bOyb3KgLyzlVhwExwmpZKO6zcFBtVU2M= Subject key identifier: 94:A0:C8:64:2B:75:CA:E5:E7:EF:0C:A4:97:94:1F:96:3B:05:E6:A1 Authority key identifier: D1:F7:2E:67:DA:9C:CE:09:04:4F:A4:20:4E:A9:93:AE:93:D1:96:D6 Certificate issuer: /CN=D1F72E67DA9CCE09044FA4204EA993AE93D196D6 Certificate serial: 3AD6E92CAF130FCA666EEB53F26E07C2413116ED Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft Manifest number: 0100 Signing time: Wed 07 May 2025 09:51:02 +0000 Manifest this update: Wed 07 May 2025 09:46:02 +0000 Manifest next update: Sat 10 May 2025 16:49:02 +0000 Files and hashes: 1: D1F72E67DA9CCE09044FA4204EA993AE93D196D6.crl (hash: wRndVN2XQYRrW5CFS0Iiuf3x9KY9KIux0CUhnBYQsxs=) 2: 3130332e3138322e37382e302f32342d3234203d3e20313439363635.roa (hash: LAATNsnHcnoJWKciQROoRwDYWcBiokYiUiwzyLuS2UY=) 3: 3130332e3138322e37382e302f32332d3234203d3e20313439363635.roa (hash: gY0MYBLnrNGMInBtjBk2fVW/5Y8HTuVN7KMpfZNbvwM=) 4: 3130332e3138322e37392e302f32342d3234203d3e20313439363635.roa (hash: dJaS59sTNR5P0zfWxcM9Q8SeRwLPq4ilnHYQElEDNMo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.crl rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 10 May 2025 16:49:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:d6:e9:2c:af:13:0f:ca:66:6e:eb:53:f2:6e:07:c2:41:31:16:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1F72E67DA9CCE09044FA4204EA993AE93D196D6 Validity Not Before: May 7 09:46:02 2025 GMT Not After : May 10 16:49:02 2025 GMT Subject: CN=94A0C8642B75CAE5E7EF0CA497941F963B05E6A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:a7:de:38:77:d3:1f:45:ce:c2:37:db:33:b1: 27:04:a6:ee:fa:8d:20:9d:d8:49:f8:e8:a8:ac:a4: 91:3c:c2:86:8a:7d:5b:51:5c:cd:21:01:ec:46:5e: 67:ce:81:28:32:82:71:15:57:66:cf:46:87:d2:bf: c4:fe:fd:1d:98:1d:0e:ef:63:42:3b:20:d7:15:fd: 5d:3f:d5:31:91:51:02:fb:08:cc:c5:02:12:69:bd: 69:91:1e:d4:df:84:59:4d:a0:38:68:6a:fa:a5:e2: 52:71:28:85:2e:71:d5:0f:c0:cb:55:d5:e1:c5:c6: aa:ba:8b:3b:62:d0:11:2f:11:cb:3f:79:7c:4e:01: 6b:51:64:81:0e:d8:35:a6:09:2d:22:35:bc:e9:d0: d9:ef:62:91:ab:7b:a9:72:35:fe:39:7d:ba:f8:fe: f8:05:ac:6a:45:4c:13:54:80:55:24:24:f1:c8:17: 7c:63:cf:e7:73:6c:3e:d0:2a:aa:49:e4:1a:9c:87: f2:cf:b5:03:a9:be:8b:bf:e1:b6:a0:5a:e2:11:7d: 02:87:e0:3f:d9:09:56:c9:94:69:7b:3b:a7:8b:70: a1:59:94:c9:11:b2:42:19:2a:e4:3e:e6:3f:a3:cb: 0f:eb:b5:a1:2a:58:dc:9b:80:0d:cb:96:65:a8:a7: e2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:A0:C8:64:2B:75:CA:E5:E7:EF:0C:A4:97:94:1F:96:3B:05:E6:A1 X509v3 Authority Key Identifier: keyid:D1:F7:2E:67:DA:9C:CE:09:04:4F:A4:20:4E:A9:93:AE:93:D1:96:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:9c:1a:84:13:8e:46:17:f6:52:4d:9c:e3:20:2b:8c:38:2c: 10:15:90:2f:73:94:74:03:d3:fe:d3:21:8a:19:b4:30:45:c3: 09:f0:aa:7a:14:65:29:4b:f5:5c:0f:ec:30:59:87:0e:6e:0a: 8d:fb:50:bd:f2:48:ab:55:57:4b:ab:77:bc:77:8b:f5:e7:6a: e8:7f:a0:76:4f:4f:a9:62:54:be:51:a5:2e:1a:7c:53:3c:57: f8:e2:4d:0e:84:cc:a3:61:16:fe:80:1b:e0:bc:b6:28:08:41: d8:ae:85:ef:16:d4:d3:79:4b:16:59:82:b0:1a:5e:cb:b1:c2: 58:c5:df:c5:0c:6c:a5:f4:51:7e:cc:32:4f:0d:ff:6b:bb:86: d2:90:7f:13:22:8c:a4:39:6a:ac:6e:11:33:01:28:0f:aa:05: 13:e2:95:88:d3:e5:3d:d4:65:88:e4:a2:b1:0e:5e:43:8f:9d: 4d:42:7f:43:86:10:fe:9c:dd:d4:1e:37:6a:35:6c:e3:ce:6f: 8e:41:da:b6:53:77:9b:e0:b3:f5:55:6e:e5:fc:21:24:83:f6: db:05:73:7e:32:09:1a:f1:72:2a:b1:fa:6d:df:1d:63:12:65: 8b:67:52:0a:a8:1c:67:da:b4:cd:9b:4d:26:39:47:27:04:47: 6c:0b:d2:f6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOtbpLK8TD8pmbutT8m4HwkExFu0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFGNzJFNjdEQTlDQ0UwOTA0NEZBNDIwNEVBOTkzQUU5 M0QxOTZENjAeFw0yNTA1MDcwOTQ2MDJaFw0yNTA1MTAxNjQ5MDJaMDMxMTAvBgNV BAMTKDk0QTBDODY0MkI3NUNBRTVFN0VGMENBNDk3OTQxRjk2M0IwNUU2QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZp944d9MfRc7CN9szsScEpu76 jSCd2En46KispJE8woaKfVtRXM0hAexGXmfOgSgygnEVV2bPRofSv8T+/R2YHQ7v Y0I7INcV/V0/1TGRUQL7CMzFAhJpvWmRHtTfhFlNoDhoavql4lJxKIUucdUPwMtV 1eHFxqq6izti0BEvEcs/eXxOAWtRZIEO2DWmCS0iNbzp0NnvYpGre6lyNf45fbr4 /vgFrGpFTBNUgFUkJPHIF3xjz+dzbD7QKqpJ5Bqch/LPtQOpvou/4bagWuIRfQKH 4D/ZCVbJlGl7O6eLcKFZlMkRskIZKuQ+5j+jyw/rtaEqWNybgA3LlmWop+KJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlKDIZCt1yuXn7wykl5QfljsF5qEwHwYDVR0j BBgwFoAU0fcuZ9qczgkET6QgTqmTrpPRltYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzRjMzNiOC05ZDQyLTQyMDgtOGFjNC1mMTcyYTE0NGQ4NjgvMC9EMUY3MkU2N0RB OUNDRTA5MDQ0RkE0MjA0RUE5OTNBRTkzRDE5NkQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDFGNzJFNjdEQTlDQ0UwOTA0NEZBNDIwNEVBOTkzQUU5M0Qx OTZENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjM0YzMzYjgtOWQ0Mi00MjA4LThh YzQtZjE3MmExNDRkODY4LzAvRDFGNzJFNjdEQTlDQ0UwOTA0NEZBNDIwNEVBOTkz QUU5M0QxOTZENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH6cGoQTjkYX9lJNnOMgK4w4LBAVkC9zlHQD 0/7TIYoZtDBFwwnwqnoUZSlL9VwP7DBZhw5uCo37UL3ySKtVV0urd7x3i/Xnauh/ oHZPT6liVL5RpS4afFM8V/jiTQ6EzKNhFv6AG+C8tigIQdiuhe8W1NN5SxZZgrAa XsuxwljF38UMbKX0UX7MMk8N/2u7htKQfxMijKQ5aqxuETMBKA+qBRPilYjT5T3U ZYjkorEOXkOPnU1Cf0OGEP6c3dQeN2o1bOPOb45B2rZTd5vgs/VVbuX8ISSD9tsF c34yCRrxciqx+m3fHWMSZYtnUgqoHGfatM2bTSY5RycER2wL0vY= -----END CERTIFICATE-----Generated at Thu May 8 12:03:35 2025 by rpki-client