$ rpki-client -vvf repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.mft File: DC0680824B7F80117B62C239676444B0691128B8.mft (raw, json) Hash identifier: L1ibK37/ckR5vqIspMVhGfrP7C4j1k4qiYwgndshUHE= Subject key identifier: D7:B4:70:4C:B8:36:DA:4F:18:D2:E9:56:3A:0B:71:2C:7D:4E:2B:4F Authority key identifier: DC:06:80:82:4B:7F:80:11:7B:62:C2:39:67:64:44:B0:69:11:28:B8 Certificate issuer: /CN=DC0680824B7F80117B62C239676444B0691128B8 Certificate serial: 4DE2AF6D6A324EF38DA246E29E64DC0BD1D1E02E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DC0680824B7F80117B62C239676444B0691128B8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.mft Manifest number: 40 Signing time: Tue 08 Apr 2025 13:41:38 +0000 Manifest this update: Tue 08 Apr 2025 13:36:38 +0000 Manifest next update: Fri 11 Apr 2025 14:47:38 +0000 Files and hashes: 1: 3136302e3139312e3130362e302f32332d3234203d3e20313533313433.roa (hash: iw17DMpgfD2nYIWjQL2ZNOlw/a2YjINch68eFMNeuo0=) 2: DC0680824B7F80117B62C239676444B0691128B8.crl (hash: ETB9vyl3LWufQWg3+qZmpkY5OLppQdnBDODWXQNAOPA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.crl rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DC0680824B7F80117B62C239676444B0691128B8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 14:47:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:e2:af:6d:6a:32:4e:f3:8d:a2:46:e2:9e:64:dc:0b:d1:d1:e0:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC0680824B7F80117B62C239676444B0691128B8 Validity Not Before: Apr 8 13:36:38 2025 GMT Not After : Apr 11 14:47:38 2025 GMT Subject: CN=D7B4704CB836DA4F18D2E9563A0B712C7D4E2B4F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:de:fd:1d:70:3c:d5:fe:aa:78:08:f1:ef:27:af: fd:27:89:62:e1:93:49:7f:be:7d:d4:98:bf:90:b7: 18:0f:d4:b9:57:37:f0:e2:03:10:b1:fa:7c:af:e1: 22:fc:73:47:07:4e:ac:26:bf:08:3f:e9:21:3d:29: 49:b8:bf:1a:37:cc:c9:8a:d7:15:ab:4d:b1:79:2b: 5c:f8:66:0d:42:0b:ff:62:2a:c5:ad:17:ad:6c:61: 87:0c:c4:06:f2:88:18:3b:87:19:d5:06:c2:87:bf: ec:92:96:69:6f:21:d9:46:c0:ad:56:08:11:7b:8b: ed:5e:02:13:7d:38:c7:c6:43:8d:1e:17:83:61:5c: 87:39:99:64:5e:e4:33:a6:0c:f9:e1:77:73:1c:a5: 50:50:e5:15:55:fa:2c:7e:d3:43:05:b1:4e:14:19: 72:ef:a6:b3:f3:fb:6e:00:25:6e:85:72:c1:c4:dd: dd:3f:dc:87:6a:d2:5f:3b:29:b0:65:54:83:34:ab: c4:be:27:26:a8:86:97:f4:c4:e4:e1:36:aa:dc:5a: b6:83:da:7e:db:2e:98:a9:2e:06:b1:56:90:36:24: 77:63:82:66:b6:b5:7d:90:7a:0b:93:4d:fc:a1:70: 9a:56:fc:69:05:95:79:d6:b6:7c:f4:6c:7b:ba:cc: 7d:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:B4:70:4C:B8:36:DA:4F:18:D2:E9:56:3A:0B:71:2C:7D:4E:2B:4F X509v3 Authority Key Identifier: keyid:DC:06:80:82:4B:7F:80:11:7B:62:C2:39:67:64:44:B0:69:11:28:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DC0680824B7F80117B62C239676444B0691128B8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2e:51:22:53:34:da:fb:6e:fb:70:ed:f9:94:8d:b1:53:90:06: 8c:7e:86:18:a0:34:43:80:e0:01:9f:de:98:f1:39:c9:2b:4e: 13:3c:27:53:90:50:5c:51:80:ef:9f:da:18:d1:e9:8b:51:38: 28:31:29:89:33:b6:07:e8:81:2e:3e:d6:9a:22:14:a2:30:93: 02:2d:86:46:1f:09:06:e7:8d:e3:a9:66:a1:4b:57:18:91:65: 2b:39:c6:a7:a2:0e:fb:db:f8:f0:58:32:76:8f:0a:61:39:47: dc:a7:c5:d9:42:e2:ff:9a:ca:78:dc:7f:fd:77:40:7b:e5:57: 8d:c5:e0:c4:79:40:95:d9:65:3c:e8:8d:a2:c1:af:10:d9:d1: 3e:53:6b:b5:a5:c1:fc:78:2e:d5:57:80:0a:81:10:37:f5:ac: 0a:d2:a5:4f:fd:6a:a6:08:1d:06:3e:6d:8d:7b:c9:4c:da:1d: ec:13:31:f6:c8:5d:04:a2:63:8e:1a:c9:d3:3c:ad:c3:e0:61: d2:37:91:1f:d5:7d:c9:cf:0e:68:e5:c8:77:86:b8:d0:0d:9a: 2b:2e:e4:2f:00:58:e9:3c:7f:9d:bc:c1:61:89:2e:59:cf:99: f9:06:dc:33:a6:66:29:4f:4f:ee:93:de:f9:64:91:be:0b:42: b1:0a:e6:54 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTeKvbWoyTvONokbinmTcC9HR4C4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMwNjgwODI0QjdGODAxMTdCNjJDMjM5Njc2NDQ0QjA2 OTExMjhCODAeFw0yNTA0MDgxMzM2MzhaFw0yNTA0MTExNDQ3MzhaMDMxMTAvBgNV BAMTKEQ3QjQ3MDRDQjgzNkRBNEYxOEQyRTk1NjNBMEI3MTJDN0Q0RTJCNEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe/R1wPNX+qngI8e8nr/0niWLh k0l/vn3UmL+QtxgP1LlXN/DiAxCx+nyv4SL8c0cHTqwmvwg/6SE9KUm4vxo3zMmK 1xWrTbF5K1z4Zg1CC/9iKsWtF61sYYcMxAbyiBg7hxnVBsKHv+ySlmlvIdlGwK1W CBF7i+1eAhN9OMfGQ40eF4NhXIc5mWRe5DOmDPnhd3McpVBQ5RVV+ix+00MFsU4U GXLvprPz+24AJW6FcsHE3d0/3Idq0l87KbBlVIM0q8S+Jyaohpf0xOThNqrcWraD 2n7bLpipLgaxVpA2JHdjgma2tX2QeguTTfyhcJpW/GkFlXnWtnz0bHu6zH1lAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU17RwTLg22k8Y0ulWOgtxLH1OK08wHwYDVR0j BBgwFoAU3AaAgkt/gBF7YsI5Z2REsGkRKLgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTg1NWU4YS0zZmY4LTQ3ZmYtYWFlYy00OGQ4YjM4MGE5MDQvMC9EQzA2ODA4MjRC N0Y4MDExN0I2MkMyMzk2NzY0NDRCMDY5MTEyOEI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvREMwNjgwODI0QjdGODAxMTdCNjJDMjM5Njc2NDQ0QjA2OTEx MjhCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWU4NTVlOGEtM2ZmOC00N2ZmLWFh ZWMtNDhkOGIzODBhOTA0LzAvREMwNjgwODI0QjdGODAxMTdCNjJDMjM5Njc2NDQ0 QjA2OTExMjhCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAC5RIlM02vtu+3Dt+ZSNsVOQBox+hhigNEOA 4AGf3pjxOckrThM8J1OQUFxRgO+f2hjR6YtROCgxKYkztgfogS4+1poiFKIwkwIt hkYfCQbnjeOpZqFLVxiRZSs5xqeiDvvb+PBYMnaPCmE5R9ynxdlC4v+aynjcf/13 QHvlV43F4MR5QJXZZTzojaLBrxDZ0T5Ta7Wlwfx4LtVXgAqBEDf1rArSpU/9aqYI HQY+bY17yUzaHewTMfbIXQSiY44aydM8rcPgYdI3kR/VfcnPDmjlyHeGuNANmisu 5C8AWOk8f528wWGJLlnPmfkG3DOmZilPT+6T3vlkkb4LQrEK5lQ= -----END CERTIFICATE-----Generated at Wed Apr 9 16:45:56 2025 by rpki-client