$ rpki-client -vvf repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.mft File: DF1CEA0313DA7500D70AE089169B4BBEE54CA859.mft (raw, json) Hash identifier: GO4c4ZD4JMynQY2iVn/ajQ4LTHG4oLFrGev5H1T6MDU= Subject key identifier: 4C:D9:95:2C:16:25:A5:68:FC:EB:F3:A8:CB:52:B9:F3:B1:06:EA:73 Authority key identifier: DF:1C:EA:03:13:DA:75:00:D7:0A:E0:89:16:9B:4B:BE:E5:4C:A8:59 Certificate issuer: /CN=DF1CEA0313DA7500D70AE089169B4BBEE54CA859 Certificate serial: 04C0C5C410AEA59687F6BFC6054F94BBC5A0CA57 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.mft Manifest number: 04B9 Signing time: Sat 05 Apr 2025 13:41:14 +0000 Manifest this update: Sat 05 Apr 2025 13:36:14 +0000 Manifest next update: Tue 08 Apr 2025 15:07:14 +0000 Files and hashes: 1: 34332e3235322e3134342e302f32332d3234203d3e203536323333.roa (hash: DYNELf9QNXD54CkouWHTSPB4IedLMvPnvTBJhut8CJ0=) 2: 3130332e31342e3131302e302f32332d3234203d3e203536323333.roa (hash: uOtYMqTZ6uxvD75CjDzgKIMtqTuljhnUzaL//5Qb6nY=) 3: 3130332e3233332e38382e302f32332d3234203d3e203536323333.roa (hash: 0RrPfbpk+xcbyzgWiGEqZ6C13BPi43+NYiRziFVAs1Q=) 4: DF1CEA0313DA7500D70AE089169B4BBEE54CA859.crl (hash: x0yFRcSaqovb3u8XwFtT2i2mI239yh2ZN8GhUDQW2Hs=) 5: 3139322e3134302e3232342e302f32332d3234203d3e203536323333.roa (hash: QN3Se42fDrnzH/Sn6RV3bdT6iaS+SIN59XlBOIPV4Lw=) 6: 3132302e38392e39342e302f32332d3234203d3e203536323333.roa (hash: 9VPlWeet/QEh1f7qU/XboyNf8q0IIDBUTh5mcRRM4R4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.crl rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:c0:c5:c4:10:ae:a5:96:87:f6:bf:c6:05:4f:94:bb:c5:a0:ca:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF1CEA0313DA7500D70AE089169B4BBEE54CA859 Validity Not Before: Apr 5 13:36:14 2025 GMT Not After : Apr 8 15:07:14 2025 GMT Subject: CN=4CD9952C1625A568FCEBF3A8CB52B9F3B106EA73 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:ca:6a:eb:7d:12:a0:b1:eb:ee:02:08:14:eb: 41:a2:27:07:c3:ff:b6:41:12:fd:b5:26:b3:7f:67: e3:60:76:a1:f0:a1:28:e1:95:36:79:7b:12:af:60: 9a:fc:a6:98:3f:ff:65:59:16:97:86:4e:8c:88:37: c5:02:7e:5d:2e:5c:6f:65:da:1a:42:7b:fc:84:3d: 2d:ab:d3:17:44:6e:d5:c2:cf:94:03:2e:01:be:3e: 64:0a:fd:d2:ac:43:f1:ef:51:c5:77:21:73:76:12: a8:23:9c:b4:0f:20:f5:73:b2:95:8d:b7:7e:57:aa: 38:9f:61:f4:28:6a:c9:40:b6:7e:50:68:57:27:d9: 9c:1a:04:6c:d4:11:bd:a5:c1:e2:e6:c3:7d:ca:7b: 35:d3:00:cd:e1:cb:e9:a9:57:c9:ea:b1:46:1f:1b: 99:a2:79:7d:c1:23:4c:8b:94:a5:9d:fe:7e:93:83: 4e:c0:8a:f1:b9:c5:05:fc:a8:7c:dd:fb:2f:17:ce: 5e:89:a1:b6:89:cd:cf:c6:7d:cb:70:8b:3d:03:03: 1b:96:2a:39:7b:25:e6:ee:15:c7:a3:e4:db:40:56: 49:66:01:78:f3:ab:9c:7d:43:4f:84:c1:b8:8a:fc: 71:2b:25:47:7a:e7:a7:75:99:48:59:3d:09:f4:bd: fe:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:D9:95:2C:16:25:A5:68:FC:EB:F3:A8:CB:52:B9:F3:B1:06:EA:73 X509v3 Authority Key Identifier: keyid:DF:1C:EA:03:13:DA:75:00:D7:0A:E0:89:16:9B:4B:BE:E5:4C:A8:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:cc:02:00:02:01:c2:51:ab:c9:63:19:52:84:e1:ba:a7:5d: ac:0e:44:75:27:98:72:75:44:d6:d8:31:72:f4:b0:68:8d:4a: 9c:fd:b3:74:e5:89:0e:9d:05:bd:98:21:64:88:49:8b:bb:c7: 3e:74:d0:35:6a:8b:2c:dc:05:c6:f1:55:b7:6b:87:b1:db:cb: d6:7e:4c:d8:f9:cc:63:72:f3:88:f9:bc:9b:eb:c9:7f:14:84: a2:43:9e:97:81:86:46:b4:3c:35:c5:23:ee:c3:5d:78:28:ab: 63:76:dc:bc:09:f3:0b:c2:dc:86:76:91:a6:e0:06:fc:1a:b6: 50:31:d1:f4:7b:44:e8:53:7c:0f:b2:43:6a:09:15:cd:68:b7: da:be:c9:cc:52:4c:cf:3c:4b:2a:f3:18:f4:67:bf:0e:0c:d4: 77:f1:c0:76:c7:4d:b5:a0:7c:db:91:59:08:8a:c6:7d:d9:c9: b7:91:71:24:b7:89:51:32:e7:ad:b8:60:a7:29:90:29:72:44: 16:79:da:76:d1:ed:79:c8:f5:4b:c6:8a:ad:d6:28:1a:19:94: 1f:f8:e7:7b:87:9a:6a:aa:bf:86:a1:86:cd:b7:1e:c3:95:51: 35:9d:3d:56:76:ec:1b:84:19:ac:32:fe:9b:0a:e3:5f:5a:3d: 33:46:b2:67 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBMDFxBCupZaH9r/GBU+Uu8WgylcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYxQ0VBMDMxM0RBNzUwMEQ3MEFFMDg5MTY5QjRCQkVF NTRDQTg1OTAeFw0yNTA0MDUxMzM2MTRaFw0yNTA0MDgxNTA3MTRaMDMxMTAvBgNV BAMTKDRDRDk5NTJDMTYyNUE1NjhGQ0VCRjNBOENCNTJCOUYzQjEwNkVBNzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7ymrrfRKgsevuAggU60GiJwfD /7ZBEv21JrN/Z+NgdqHwoSjhlTZ5exKvYJr8ppg//2VZFpeGToyIN8UCfl0uXG9l 2hpCe/yEPS2r0xdEbtXCz5QDLgG+PmQK/dKsQ/HvUcV3IXN2EqgjnLQPIPVzspWN t35XqjifYfQoaslAtn5QaFcn2ZwaBGzUEb2lweLmw33KezXTAM3hy+mpV8nqsUYf G5mieX3BI0yLlKWd/n6Tg07AivG5xQX8qHzd+y8Xzl6JobaJzc/Gfctwiz0DAxuW Kjl7JebuFcej5NtAVklmAXjzq5x9Q0+EwbiK/HErJUd656d1mUhZPQn0vf63AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTNmVLBYlpWj86/Ooy1K587EG6nMwHwYDVR0j BBgwFoAU3xzqAxPadQDXCuCJFptLvuVMqFkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NGZkNGJjMi00MWQ0LTQyZTYtYTdmZi01OTQ5Mzg4NTEyNmEvMC9ERjFDRUEwMzEz REE3NTAwRDcwQUUwODkxNjlCNEJCRUU1NENBODU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREYxQ0VBMDMxM0RBNzUwMEQ3MEFFMDg5MTY5QjRCQkVFNTRD QTg1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDRmZDRiYzItNDFkNC00MmU2LWE3 ZmYtNTk0OTM4ODUxMjZhLzAvREYxQ0VBMDMxM0RBNzUwMEQ3MEFFMDg5MTY5QjRC QkVFNTRDQTg1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALzMAgACAcJRq8ljGVKE4bqnXawORHUnmHJ1 RNbYMXL0sGiNSpz9s3TliQ6dBb2YIWSISYu7xz500DVqiyzcBcbxVbdrh7Hby9Z+ TNj5zGNy84j5vJvryX8UhKJDnpeBhka0PDXFI+7DXXgoq2N23LwJ8wvC3IZ2kabg BvwatlAx0fR7ROhTfA+yQ2oJFc1ot9q+ycxSTM88SyrzGPRnvw4M1HfxwHbHTbWg fNuRWQiKxn3ZybeRcSS3iVEy5624YKcpkClyRBZ52nbR7XnI9UvGiq3WKBoZlB/4 53uHmmqqv4ahhs23HsOVUTWdPVZ27BuEGawy/psK419aPTNGsmc= -----END CERTIFICATE-----Generated at Sat Apr 5 21:18:40 2025 by rpki-client