$ rpki-client -vvf repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft File: DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft (raw, json) Hash identifier: uU6tFn+TvyH3CGzD3NgrStNRc+wS/6Ffmlbpi2uDzNY= Subject key identifier: 2A:3C:BA:2C:37:D6:33:95:4B:72:E4:26:AB:97:7D:DD:5A:09:8F:EF Authority key identifier: DB:F7:1D:6F:8C:24:BD:B8:0D:69:2B:E8:6D:6F:7A:D3:95:1B:6C:EE Certificate issuer: /CN=DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE Certificate serial: 0E4CE07D606352A7C3DE9C646F284FA2BB6F6E76 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft Manifest number: 2A Signing time: Sat 05 Apr 2025 03:21:43 +0000 Manifest this update: Sat 05 Apr 2025 03:16:43 +0000 Manifest next update: Tue 08 Apr 2025 07:58:43 +0000 Files and hashes: 1: 323030313a6466353a323730303a3a2f34382d3438203d3e20313337333631.roa (hash: lAwEnKyw5OHxCplSawk5HVEotvU+5HwJxxtoSxrjtdo=) 2: DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.crl (hash: TmrthTwB+qgoJSccgjLVB3f47pXs6lRhz3coxLvw2VI=) 3: 3130332e3131352e3130342e302f32342d3234203d3e20313337333631.roa (hash: 6mL7Avaab4glDlpMGnON/Jhq6VFk/42559+PiNPAoXE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.crl rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:4c:e0:7d:60:63:52:a7:c3:de:9c:64:6f:28:4f:a2:bb:6f:6e:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE Validity Not Before: Apr 5 03:16:43 2025 GMT Not After : Apr 8 07:58:43 2025 GMT Subject: CN=2A3CBA2C37D633954B72E426AB977DDD5A098FEF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:03:8e:9f:0d:7f:c7:c8:db:90:28:f6:db:c7: 33:98:ea:c0:65:4e:7e:b9:95:6d:bd:d7:24:8e:48: 90:99:cb:fc:dd:8f:3b:95:86:db:e7:ee:6f:58:7a: f9:84:af:26:7d:08:ab:f2:48:7c:3e:03:ad:25:e2: c7:c8:07:a4:7a:c8:04:b2:38:20:49:90:59:55:c0: f8:38:06:2a:68:2d:cd:ae:f1:a2:c8:87:94:d8:90: 7a:45:9f:c9:fd:af:f2:0a:66:78:19:db:25:ba:69: ae:95:2b:47:71:b5:3e:49:6b:3e:18:65:55:14:49: f9:05:7e:0c:95:12:07:0e:0c:f3:ee:3b:04:07:f6: 69:4d:96:ed:99:3c:cd:84:3f:13:37:b3:cb:bf:f1: b2:ac:da:6e:75:60:5d:29:6f:7c:8a:66:8a:f8:4b: 9c:4a:73:cd:b4:d6:60:30:50:74:ba:c5:fe:c3:4c: 5b:67:a8:2f:57:3f:b3:25:1a:45:0e:4b:8d:b2:67: b6:25:c4:ba:64:93:5d:3f:0a:61:7c:d7:fc:87:4c: 03:0e:f4:48:0f:3b:06:e9:cd:ee:e2:67:db:6c:62: 93:fa:cc:0a:d5:d8:7e:7a:34:07:75:55:3e:d7:1b: 2c:6d:0c:e2:2c:c3:a4:22:df:aa:fb:1d:59:9b:69: 4b:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:3C:BA:2C:37:D6:33:95:4B:72:E4:26:AB:97:7D:DD:5A:09:8F:EF X509v3 Authority Key Identifier: keyid:DB:F7:1D:6F:8C:24:BD:B8:0D:69:2B:E8:6D:6F:7A:D3:95:1B:6C:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:62:23:75:68:85:e6:8f:25:47:91:c4:1c:18:8a:94:96:d9: dd:28:40:68:06:d7:17:91:4d:a4:e9:77:bb:12:68:e2:14:06: 51:e1:33:61:7a:39:39:6a:2a:1b:f5:30:96:d1:8b:f8:2c:5b: 30:59:7d:07:41:86:7f:33:b3:ce:be:c8:77:dd:53:82:ac:d1: 39:f0:3e:75:fa:19:73:ee:3c:d8:df:11:46:f3:68:2b:0b:92: 76:ce:b0:d8:3f:6d:ea:36:03:8b:0c:3b:80:62:b7:1a:bf:78: f4:5c:f7:ca:74:b0:ae:b4:f6:ce:a4:d6:46:1a:8c:8c:81:fe: 26:ec:35:ae:be:5e:83:7a:04:21:25:be:89:29:df:5a:80:9b: fb:d2:7d:27:b3:1d:c3:33:e0:01:19:84:be:2f:2d:2d:fc:b1: 30:2e:1c:12:21:48:c5:cb:16:0a:13:e0:a6:d1:be:ab:1a:6f: e4:b5:30:d8:a8:36:5b:cb:5f:ae:68:27:09:5b:e1:91:78:67: 0e:d2:2c:f4:42:f6:76:a2:88:d2:0a:37:d0:a6:c9:90:c3:88: cd:e4:ba:9b:37:a7:cc:6f:6b:05:d0:a6:c9:05:dd:a4:2a:d0: 03:0e:02:d2:9d:36:84:c0:9d:0e:d0:fc:4b:61:8f:5c:26:06: 92:fa:ae:59 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDkzgfWBjUqfD3pxkbyhPortvbnYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJGNzFENkY4QzI0QkRCODBENjkyQkU4NkQ2RjdBRDM5 NTFCNkNFRTAeFw0yNTA0MDUwMzE2NDNaFw0yNTA0MDgwNzU4NDNaMDMxMTAvBgNV BAMTKDJBM0NCQTJDMzdENjMzOTU0QjcyRTQyNkFCOTc3RERENUEwOThGRUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJA46fDX/HyNuQKPbbxzOY6sBl Tn65lW291ySOSJCZy/zdjzuVhtvn7m9YevmEryZ9CKvySHw+A60l4sfIB6R6yASy OCBJkFlVwPg4BipoLc2u8aLIh5TYkHpFn8n9r/IKZngZ2yW6aa6VK0dxtT5Jaz4Y ZVUUSfkFfgyVEgcODPPuOwQH9mlNlu2ZPM2EPxM3s8u/8bKs2m51YF0pb3yKZor4 S5xKc8201mAwUHS6xf7DTFtnqC9XP7MlGkUOS42yZ7YlxLpkk10/CmF81/yHTAMO 9EgPOwbpze7iZ9tsYpP6zArV2H56NAd1VT7XGyxtDOIsw6Qi36r7HVmbaUsRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKjy6LDfWM5VLcuQmq5d93VoJj+8wHwYDVR0j BBgwFoAU2/cdb4wkvbgNaSvobW9605UbbO4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MzJjYWUzZi1iMzI5LTQ0MWItOTdmYy01YmI5ZmNjMDUxZDIvMC9EQkY3MUQ2RjhD MjRCREI4MEQ2OTJCRTg2RDZGN0FEMzk1MUI2Q0VFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREJGNzFENkY4QzI0QkRCODBENjkyQkU4NkQ2RjdBRDM5NTFC NkNFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDMyY2FlM2YtYjMyOS00NDFiLTk3 ZmMtNWJiOWZjYzA1MWQyLzAvREJGNzFENkY4QzI0QkRCODBENjkyQkU4NkQ2RjdB RDM5NTFCNkNFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABBiI3VoheaPJUeRxBwYipSW2d0oQGgG1xeR TaTpd7sSaOIUBlHhM2F6OTlqKhv1MJbRi/gsWzBZfQdBhn8zs86+yHfdU4Ks0Tnw PnX6GXPuPNjfEUbzaCsLknbOsNg/beo2A4sMO4Bitxq/ePRc98p0sK609s6k1kYa jIyB/ibsNa6+XoN6BCElvokp31qAm/vSfSezHcMz4AEZhL4vLS38sTAuHBIhSMXL FgoT4KbRvqsab+S1MNioNlvLX65oJwlb4ZF4Zw7SLPRC9naiiNIKN9CmyZDDiM3k ups3p8xvawXQpskF3aQq0AMOAtKdNoTAnQ7Q/Ethj1wmBpL6rlk= -----END CERTIFICATE-----Generated at Sat Apr 5 16:38:33 2025 by rpki-client