$ rpki-client -vvf repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft File: DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft (raw, json) Hash identifier: hTFPVdDLbISgT7dBlirfT4VpWdUtEm4THfmFpm8cE0I= Subject key identifier: 87:76:C1:25:7B:65:7F:49:3C:9F:36:FC:B7:07:98:10:41:C7:84:93 Authority key identifier: DE:76:C6:11:73:80:1C:DB:71:8B:A5:8B:1A:4A:40:B5:C9:4E:9C:70 Certificate issuer: /CN=DE76C61173801CDB718BA58B1A4A40B5C94E9C70 Certificate serial: 7E8CFC4D4BCEE8FD10B815627CA1A0ECF93A660E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft Manifest number: B1 Signing time: Fri 04 Apr 2025 20:20:02 +0000 Manifest this update: Fri 04 Apr 2025 20:15:02 +0000 Manifest next update: Tue 08 Apr 2025 06:26:02 +0000 Files and hashes: 1: DE76C61173801CDB718BA58B1A4A40B5C94E9C70.crl (hash: /raeWBfRykhLBbT6nIX7dFMePqTo6/M7fuPoHzYal4o=) 2: 3130332e38302e3234302e302f32322d3234203d3e20313336303534.roa (hash: rxBcvYlSzsa7LvAtTgr9iAlrA1pyphm/JuM/Rkc6s+c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.crl rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:8c:fc:4d:4b:ce:e8:fd:10:b8:15:62:7c:a1:a0:ec:f9:3a:66:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE76C61173801CDB718BA58B1A4A40B5C94E9C70 Validity Not Before: Apr 4 20:15:02 2025 GMT Not After : Apr 8 06:26:02 2025 GMT Subject: CN=8776C1257B657F493C9F36FCB707981041C78493 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:87:24:78:c7:a6:26:6d:ae:3a:51:e5:dd:d2: cd:15:3f:7d:44:e1:0c:fe:5f:1f:80:f1:4b:17:04: de:25:66:65:31:bc:13:8e:5e:41:5a:b0:5d:19:57: f8:68:79:19:ab:72:d0:d0:66:8e:f0:82:e9:b7:20: be:f7:69:5b:13:25:6b:7c:22:b2:7c:6a:37:05:6a: 1b:5b:81:a7:d6:ac:d9:af:bf:74:0f:80:34:bc:fd: 60:ae:a7:a9:83:3a:3c:d0:ef:57:b0:eb:39:e9:0c: a1:55:79:9b:f9:c3:53:af:bf:11:37:43:62:19:2e: 0b:81:c3:fa:a6:ff:46:4f:1f:a1:3d:19:42:6c:08: 43:96:09:f5:e9:ad:b8:be:bd:25:9e:86:79:af:67: 15:bc:a5:72:c7:11:0c:89:84:7c:f8:49:c3:32:e3: f1:c4:a3:33:e8:be:c7:eb:8e:00:a9:c7:50:1d:76: 84:6f:f1:a6:60:31:5f:f2:c8:c5:ba:0f:e4:3c:97: 8c:f9:69:e5:c8:06:ef:5b:d1:1c:79:25:42:de:d0: 13:b5:3f:02:10:87:23:62:18:e7:c5:85:b7:63:f6: 92:d7:e4:44:1d:6a:13:c9:69:42:87:0e:1c:a8:e2: c1:8a:77:61:58:22:cc:5e:ac:34:35:18:e7:16:8f: d4:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:76:C1:25:7B:65:7F:49:3C:9F:36:FC:B7:07:98:10:41:C7:84:93 X509v3 Authority Key Identifier: keyid:DE:76:C6:11:73:80:1C:DB:71:8B:A5:8B:1A:4A:40:B5:C9:4E:9C:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:30:e7:ee:9c:3d:da:ae:df:a6:06:fe:43:c7:95:e5:8b:4d: 4d:d2:c6:45:a1:98:c3:4f:f0:5e:51:cf:b6:6f:ee:1d:e3:b3: f4:bc:5b:97:3d:47:b7:a9:0f:bd:b7:0b:2d:83:87:99:c3:25: 89:0c:90:6d:e2:ab:8e:2f:c6:3e:b5:a2:0f:62:92:26:ef:0d: 63:63:70:2b:52:78:98:93:49:39:b5:10:b0:d4:26:a0:cb:d6: 0a:ce:c2:c0:09:4b:5f:7f:29:75:41:db:39:07:b1:1c:5a:f1: c8:f4:c2:58:e0:ac:da:07:66:4a:5d:81:a6:24:72:92:6c:8e: ef:cc:bc:5a:e6:da:0a:54:e6:bc:0c:3f:f8:8b:f6:e9:ea:d7: f6:a3:ce:98:30:18:7e:b9:a4:79:87:0d:02:b3:c2:21:31:75: 37:1e:a7:0d:9e:4f:f4:8d:e5:8a:06:9b:a4:a5:72:97:c1:43: 0d:0b:61:0c:90:47:36:90:48:65:26:c1:6b:72:3d:06:2e:ba: 13:f2:ec:b3:24:72:3d:f2:dd:25:e9:26:c5:82:f0:f3:16:e1: da:ff:5b:4b:aa:a2:a4:c6:af:37:a0:a7:71:18:fb:f1:33:c8: 62:96:e7:d8:2a:8a:9a:af:cc:31:64:06:b9:17:46:c9:1f:b4: f2:36:f3:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfoz8TUvO6P0QuBVifKGg7Pk6Zg4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU3NkM2MTE3MzgwMUNEQjcxOEJBNThCMUE0QTQwQjVD OTRFOUM3MDAeFw0yNTA0MDQyMDE1MDJaFw0yNTA0MDgwNjI2MDJaMDMxMTAvBgNV BAMTKDg3NzZDMTI1N0I2NTdGNDkzQzlGMzZGQ0I3MDc5ODEwNDFDNzg0OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8hyR4x6Ymba46UeXd0s0VP31E 4Qz+Xx+A8UsXBN4lZmUxvBOOXkFasF0ZV/hoeRmrctDQZo7wgum3IL73aVsTJWt8 IrJ8ajcFahtbgafWrNmvv3QPgDS8/WCup6mDOjzQ71ew6znpDKFVeZv5w1OvvxE3 Q2IZLguBw/qm/0ZPH6E9GUJsCEOWCfXprbi+vSWehnmvZxW8pXLHEQyJhHz4ScMy 4/HEozPovsfrjgCpx1AddoRv8aZgMV/yyMW6D+Q8l4z5aeXIBu9b0Rx5JULe0BO1 PwIQhyNiGOfFhbdj9pLX5EQdahPJaUKHDhyo4sGKd2FYIsxerDQ1GOcWj9THAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh3bBJXtlf0k8nzb8tweYEEHHhJMwHwYDVR0j BBgwFoAU3nbGEXOAHNtxi6WLGkpAtclOnHAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjA5Y2JiOS0xYWFkLTRiMWEtYmQ0ZS0wNmZkODQ0NzJmZDcvMC9ERTc2QzYxMTcz ODAxQ0RCNzE4QkE1OEIxQTRBNDBCNUM5NEU5QzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU3NkM2MTE3MzgwMUNEQjcxOEJBNThCMUE0QTQwQjVDOTRF OUM3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGYwOWNiYjktMWFhZC00YjFhLWJk NGUtMDZmZDg0NDcyZmQ3LzAvREU3NkM2MTE3MzgwMUNEQjcxOEJBNThCMUE0QTQw QjVDOTRFOUM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG8w5+6cPdqu36YG/kPHleWLTU3SxkWhmMNP 8F5Rz7Zv7h3js/S8W5c9R7epD723Cy2Dh5nDJYkMkG3iq44vxj61og9ikibvDWNj cCtSeJiTSTm1ELDUJqDL1grOwsAJS19/KXVB2zkHsRxa8cj0wljgrNoHZkpdgaYk cpJsju/MvFrm2gpU5rwMP/iL9unq1/ajzpgwGH65pHmHDQKzwiExdTcepw2eT/SN 5YoGm6SlcpfBQw0LYQyQRzaQSGUmwWtyPQYuuhPy7LMkcj3y3SXpJsWC8PMW4dr/ W0uqoqTGrzegp3EY+/EzyGKW59gqipqvzDFkBrkXRskftPI288A= -----END CERTIFICATE-----Generated at Sat Apr 5 23:15:15 2025 by rpki-client