$ rpki-client -vvf repo-rpki.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/D85F6D41E807D8825356A681A7518FA27664A965.mft File: D85F6D41E807D8825356A681A7518FA27664A965.mft (raw, json) Hash identifier: 2xUaKG04E+rOijra+VoNtVjpcTwpRSfpNknFT7Gsxxs= Subject key identifier: 62:B4:9D:36:FE:9A:F5:03:6C:37:F6:1A:A6:CC:D4:80:A8:F8:6D:4A Authority key identifier: D8:5F:6D:41:E8:07:D8:82:53:56:A6:81:A7:51:8F:A2:76:64:A9:65 Certificate issuer: /CN=D85F6D41E807D8825356A681A7518FA27664A965 Certificate serial: 2BC31AEADD3D0C8197B69A723F7DE20B3D78315B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85F6D41E807D8825356A681A7518FA27664A965.cer Subject info access: rsync://repo-rpki.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/D85F6D41E807D8825356A681A7518FA27664A965.mft Manifest number: 0125 Signing time: Thu 03 Apr 2025 21:32:12 +0000 Manifest this update: Thu 03 Apr 2025 21:27:12 +0000 Manifest next update: Sun 06 Apr 2025 22:50:12 +0000 Files and hashes: 1: 3130332e3136372e3137312e302f32342d3234203d3e20313431393833.roa (hash: PE4d1Sx+WsN4vxilmC3MyByH3VGT69g5rGzqbcN4kf4=) 2: D85F6D41E807D8825356A681A7518FA27664A965.crl (hash: 5C0ZrL8yUTE6MVXLMvdtM2jRKRSDBSY9Hv0hf9xA6Wg=) 3: 3130332e3136372e3137302e302f32342d3234203d3e20313431393833.roa (hash: mZ6vyY+OcErKST+t+GHENxpGibSosO9+n5lwjCocgRo=) 4: 3130332e3136372e3137302e302f32332d3233203d3e20313431393833.roa (hash: jdquvIdRpu3jRDtlUtAlf7M9qmyq8LXS+xBVkBGfDag=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/D85F6D41E807D8825356A681A7518FA27664A965.crl rsync://repo-rpki.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/D85F6D41E807D8825356A681A7518FA27664A965.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85F6D41E807D8825356A681A7518FA27664A965.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 22:50:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:c3:1a:ea:dd:3d:0c:81:97:b6:9a:72:3f:7d:e2:0b:3d:78:31:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D85F6D41E807D8825356A681A7518FA27664A965 Validity Not Before: Apr 3 21:27:12 2025 GMT Not After : Apr 6 22:50:12 2025 GMT Subject: CN=62B49D36FE9AF5036C37F61AA6CCD480A8F86D4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:eb:d7:9d:42:70:64:1b:28:24:4f:76:35:1c: c5:1a:27:39:9c:77:af:31:04:75:05:0e:ce:d7:99: a8:96:3e:b1:17:03:0b:bf:3a:1c:99:6d:1d:64:3b: 00:2e:69:0b:41:5c:1b:cc:10:76:63:bd:cc:73:7b: 09:1b:9b:db:6a:0f:3f:a8:1f:73:55:ae:cd:d1:01: 47:fc:66:8b:87:78:aa:7a:bb:28:e3:41:25:ba:db: 4f:22:ee:91:1c:3f:67:59:27:5a:45:b4:52:e2:6b: fa:67:cd:bf:36:7f:b0:2e:73:d1:08:40:c4:44:1d: 98:9f:0c:ae:43:db:4d:d6:13:6d:bc:c6:9b:b9:a0: 34:68:9d:40:6e:b7:7c:f3:ce:ba:f6:5d:94:6d:6b: 17:47:d5:91:c5:76:50:8c:b5:57:fa:05:3d:dd:df: 57:3d:d1:90:6b:bd:14:26:29:c5:a7:84:8a:fc:a7: 58:6d:86:ef:50:13:d3:42:7a:63:75:14:24:bb:96: 50:9f:20:95:5b:02:f8:60:de:89:56:a4:15:ea:c0: b3:e6:29:45:52:41:b2:f6:c4:74:44:53:d0:5a:68: c1:80:cf:8a:be:cf:b1:65:db:87:8e:ea:94:97:26: 5c:5d:df:a7:d1:16:66:49:0c:37:79:96:83:02:79: 1b:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 62:B4:9D:36:FE:9A:F5:03:6C:37:F6:1A:A6:CC:D4:80:A8:F8:6D:4A X509v3 Authority Key Identifier: keyid:D8:5F:6D:41:E8:07:D8:82:53:56:A6:81:A7:51:8F:A2:76:64:A9:65 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/D85F6D41E807D8825356A681A7518FA27664A965.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D85F6D41E807D8825356A681A7518FA27664A965.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/06bedf3a-d7d1-49a6-93ed-b277f1f7a6eb/0/D85F6D41E807D8825356A681A7518FA27664A965.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:78:a1:32:cb:89:c0:74:e0:e3:9d:b8:68:af:7a:70:2d:95: 20:01:6c:ce:c7:31:89:ea:23:8d:65:ac:63:6f:a3:df:91:15: 79:59:2b:13:e4:c5:97:4b:f5:8a:e9:c3:41:c6:e6:3d:f0:db: ba:df:de:f4:be:64:f3:a8:eb:b7:16:99:ef:6b:9a:d3:ee:44: d2:2b:ae:72:7f:67:d3:34:37:aa:33:83:a9:e8:e6:75:d6:da: 48:ba:b3:2e:21:0c:8f:da:56:67:44:92:76:5d:26:36:e1:12: 5e:c7:55:fe:27:22:1d:3d:6a:6e:85:ef:d4:a2:77:9e:a5:d9: 0d:22:f1:d0:82:88:cc:65:de:0d:4e:ac:16:b3:59:4c:46:e8: 0b:d8:b5:6d:9c:1c:8b:0b:f9:db:02:54:4f:cc:8a:ad:b1:58: ff:94:65:83:68:84:f1:28:a0:10:1b:d1:2d:09:f7:41:94:23: 3e:f0:91:e1:ca:e8:4b:c0:b5:c6:b9:e2:9f:06:a8:45:ec:22: d4:cf:aa:40:3c:42:44:14:4d:15:73:fa:1d:83:dc:4d:a9:0e: 42:11:f6:f5:e2:a8:20:25:bb:94:06:70:d3:97:3e:43:a1:46: 0e:58:1b:c4:25:48:93:b8:1e:e5:c8:6c:60:ed:cd:bf:cf:c1: fd:45:81:b9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK8Ma6t09DIGXtppyP33iCz14MVswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDg1RjZENDFFODA3RDg4MjUzNTZBNjgxQTc1MThGQTI3 NjY0QTk2NTAeFw0yNTA0MDMyMTI3MTJaFw0yNTA0MDYyMjUwMTJaMDMxMTAvBgNV BAMTKDYyQjQ5RDM2RkU5QUY1MDM2QzM3RjYxQUE2Q0NENDgwQThGODZENEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw69edQnBkGygkT3Y1HMUaJzmc d68xBHUFDs7XmaiWPrEXAwu/OhyZbR1kOwAuaQtBXBvMEHZjvcxzewkbm9tqDz+o H3NVrs3RAUf8ZouHeKp6uyjjQSW6208i7pEcP2dZJ1pFtFLia/pnzb82f7Auc9EI QMREHZifDK5D203WE228xpu5oDRonUBut3zzzrr2XZRtaxdH1ZHFdlCMtVf6BT3d 31c90ZBrvRQmKcWnhIr8p1hthu9QE9NCemN1FCS7llCfIJVbAvhg3olWpBXqwLPm KUVSQbL2xHREU9BaaMGAz4q+z7Fl24eO6pSXJlxd36fRFmZJDDd5loMCeRtJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYrSdNv6a9QNsN/YapszUgKj4bUowHwYDVR0j BBgwFoAU2F9tQegH2IJTVqaBp1GPonZkqWUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NmJlZGYzYS1kN2QxLTQ5YTYtOTNlZC1iMjc3ZjFmN2E2ZWIvMC9EODVGNkQ0MUU4 MDdEODgyNTM1NkE2ODFBNzUxOEZBMjc2NjRBOTY1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDg1RjZENDFFODA3RDg4MjUzNTZBNjgxQTc1MThGQTI3NjY0 QTk2NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDZiZWRmM2EtZDdkMS00OWE2LTkz ZWQtYjI3N2YxZjdhNmViLzAvRDg1RjZENDFFODA3RDg4MjUzNTZBNjgxQTc1MThG QTI3NjY0QTk2NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGh4oTLLicB04OOduGivenAtlSABbM7HMYnq I41lrGNvo9+RFXlZKxPkxZdL9Yrpw0HG5j3w27rf3vS+ZPOo67cWme9rmtPuRNIr rnJ/Z9M0N6ozg6no5nXW2ki6sy4hDI/aVmdEknZdJjbhEl7HVf4nIh09am6F79Si d56l2Q0i8dCCiMxl3g1OrBazWUxG6AvYtW2cHIsL+dsCVE/Miq2xWP+UZYNohPEo oBAb0S0J90GUIz7wkeHK6EvAtca54p8GqEXsItTPqkA8QkQUTRVz+h2D3E2pDkIR 9vXiqCAlu5QGcNOXPkOhRg5YG8QlSJO4HuXIbGDtzb/Pwf1Fgbk= -----END CERTIFICATE-----Generated at Sat Apr 5 16:45:27 2025 by rpki-client