$ rpki-client -vvf repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft File: D3BDA2123144839640DA280D6B971C12D0C9C929.mft (raw, json) Hash identifier: 6tAXHzG9Dz5e0YpM/si3CHyMSLLVMteyrxwXstsSwuY= Subject key identifier: 94:80:42:F0:44:0D:B0:76:53:19:5F:DD:C3:1F:DF:BD:81:E5:82:60 Authority key identifier: D3:BD:A2:12:31:44:83:96:40:DA:28:0D:6B:97:1C:12:D0:C9:C9:29 Certificate issuer: /CN=D3BDA2123144839640DA280D6B971C12D0C9C929 Certificate serial: 0F0148011E8F5EB147425EA7EEDE0E41EEA6AF82 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3BDA2123144839640DA280D6B971C12D0C9C929.cer Subject info access: rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft Manifest number: 01A4 Signing time: Tue 03 Jun 2025 15:21:40 +0000 Manifest this update: Tue 03 Jun 2025 15:16:40 +0000 Manifest next update: Fri 06 Jun 2025 23:39:40 +0000 Files and hashes: 1: D3BDA2123144839640DA280D6B971C12D0C9C929.crl (hash: IdcW0wz/hA+s4H05/NRdLmzW2LkArG7YSSYXnr5AKZE=) 2: 3130332e3130342e3133302e302f32342d3234203d3e20313336383731.roa (hash: LgwwS+fgDKg25QWDtuUlSa123O0j3oTaPddVCPibVQw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.crl rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3BDA2123144839640DA280D6B971C12D0C9C929.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 23:39:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:01:48:01:1e:8f:5e:b1:47:42:5e:a7:ee:de:0e:41:ee:a6:af:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3BDA2123144839640DA280D6B971C12D0C9C929 Validity Not Before: Jun 3 15:16:40 2025 GMT Not After : Jun 6 23:39:40 2025 GMT Subject: CN=948042F0440DB07653195FDDC31FDFBD81E58260 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:af:a9:3e:80:77:1c:9d:f6:e3:b5:8d:bf:ca: 97:c6:32:d9:78:8c:d5:26:67:eb:5e:fe:87:b2:ad: e3:b3:be:c2:4e:ea:60:11:ca:d5:fb:ac:cf:9d:7e: 0b:ff:30:cf:7f:d0:88:c5:a7:ae:41:a2:d0:c1:fb: f5:d9:13:d9:f3:57:45:09:ef:83:c6:b2:ca:6d:57: 29:3b:fc:e8:b0:e1:8c:5e:bc:f7:ae:1f:00:6b:19: 83:d9:58:1d:c4:e4:53:89:4f:22:bd:8c:4a:13:2b: bf:71:f5:f8:a7:d7:92:6d:d0:30:be:71:7e:41:28: da:48:2a:6c:a0:95:f3:20:11:30:85:97:5a:c4:fe: 0f:41:07:ff:e2:ee:60:b8:0e:e9:b0:f0:56:7b:6b: b0:a9:6c:97:2a:a2:1a:aa:38:30:7e:73:3b:25:55: 02:d6:82:ab:45:3a:53:74:3a:4f:46:42:85:d3:d3: 46:12:2c:03:04:b4:30:ec:9f:53:0d:78:1f:4f:8c: c3:ad:03:e8:0e:48:ee:f8:1f:35:d4:2f:53:8a:6b: 2e:b8:7d:4c:df:e2:ec:15:12:51:44:b0:76:0c:f4: 81:07:2f:32:6e:75:53:b5:20:41:1b:82:f4:42:07: c9:24:06:86:0f:07:6d:d3:5c:b3:aa:07:b8:75:07: 0f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:80:42:F0:44:0D:B0:76:53:19:5F:DD:C3:1F:DF:BD:81:E5:82:60 X509v3 Authority Key Identifier: keyid:D3:BD:A2:12:31:44:83:96:40:DA:28:0D:6B:97:1C:12:D0:C9:C9:29 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D3BDA2123144839640DA280D6B971C12D0C9C929.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/060744b1-2529-4ae2-b5d5-5d499d3f52c2/0/D3BDA2123144839640DA280D6B971C12D0C9C929.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:36:88:9c:2c:36:63:d5:bd:50:86:2e:ca:de:f2:14:cd:b6: 45:91:32:fa:0e:dc:59:da:9e:09:f7:63:a2:41:3a:c4:45:88: 1b:d9:ea:1f:81:02:35:97:59:03:53:b9:32:e9:33:25:db:46: a3:dd:34:fd:a0:91:c0:da:56:e5:08:8e:c7:34:64:41:2d:65: 6d:a9:fc:7b:fe:9c:08:28:26:6c:25:d8:09:1f:93:a9:5b:11: 5b:fd:18:77:66:3b:b6:70:12:87:82:32:96:7a:bf:cc:2d:43: e4:80:fe:87:de:57:11:e6:1e:6e:51:02:57:13:0e:57:f4:79: 85:20:31:59:f4:f2:a9:88:62:36:c8:69:6b:31:e1:b8:83:e5: 4f:21:79:78:f4:34:6d:bf:88:fc:5e:09:16:46:24:3d:30:7a: ba:19:51:48:0a:61:a5:fc:7c:65:4f:5b:12:17:6b:54:c7:de: 2f:0e:51:df:b9:e7:c7:c1:dd:4a:15:37:64:62:c4:b5:83:4a: 3b:7d:c3:f5:bf:e4:f1:d6:d8:20:f4:5a:1c:65:92:d1:cb:1a: ed:b4:95:87:e9:c8:45:b8:41:6e:b0:f5:97:4d:80:97:80:64: 04:1c:40:e0:f2:c6:f6:5c:80:6c:67:f9:43:56:c3:d5:a1:a4: ed:0b:4f:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDwFIAR6PXrFHQl6n7t4OQe6mr4IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNCREEyMTIzMTQ0ODM5NjQwREEyODBENkI5NzFDMTJE MEM5QzkyOTAeFw0yNTA2MDMxNTE2NDBaFw0yNTA2MDYyMzM5NDBaMDMxMTAvBgNV BAMTKDk0ODA0MkYwNDQwREIwNzY1MzE5NUZEREMzMUZERkJEODFFNTgyNjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAr6k+gHccnfbjtY2/ypfGMtl4 jNUmZ+te/oeyreOzvsJO6mARytX7rM+dfgv/MM9/0IjFp65BotDB+/XZE9nzV0UJ 74PGssptVyk7/Oiw4YxevPeuHwBrGYPZWB3E5FOJTyK9jEoTK79x9fin15Jt0DC+ cX5BKNpIKmyglfMgETCFl1rE/g9BB//i7mC4Dumw8FZ7a7CpbJcqohqqODB+czsl VQLWgqtFOlN0Ok9GQoXT00YSLAMEtDDsn1MNeB9PjMOtA+gOSO74HzXUL1OKay64 fUzf4uwVElFEsHYM9IEHLzJudVO1IEEbgvRCB8kkBoYPB23TXLOqB7h1Bw+VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlIBC8EQNsHZTGV/dwx/fvYHlgmAwHwYDVR0j BBgwFoAU072iEjFEg5ZA2igNa5ccEtDJySkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NjA3NDRiMS0yNTI5LTRhZTItYjVkNS01ZDQ5OWQzZjUyYzIvMC9EM0JEQTIxMjMx NDQ4Mzk2NDBEQTI4MEQ2Qjk3MUMxMkQwQzlDOTI5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDNCREEyMTIzMTQ0ODM5NjQwREEyODBENkI5NzFDMTJEMEM5 QzkyOS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDYwNzQ0YjEtMjUyOS00YWUyLWI1 ZDUtNWQ0OTlkM2Y1MmMyLzAvRDNCREEyMTIzMTQ0ODM5NjQwREEyODBENkI5NzFD MTJEMEM5QzkyOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJs2iJwsNmPVvVCGLsre8hTNtkWRMvoO3Fna ngn3Y6JBOsRFiBvZ6h+BAjWXWQNTuTLpMyXbRqPdNP2gkcDaVuUIjsc0ZEEtZW2p /Hv+nAgoJmwl2Akfk6lbEVv9GHdmO7ZwEoeCMpZ6v8wtQ+SA/ofeVxHmHm5RAlcT Dlf0eYUgMVn08qmIYjbIaWsx4biD5U8heXj0NG2/iPxeCRZGJD0weroZUUgKYaX8 fGVPWxIXa1TH3i8OUd+558fB3UoVN2RixLWDSjt9w/W/5PHW2CD0WhxlktHLGu20 lYfpyEW4QW6w9ZdNgJeAZAQcQODyxvZcgGxn+UNWw9WhpO0LTzk= -----END CERTIFICATE-----Generated at Tue Jun 3 23:43:11 2025 by rpki-client