$ rpki-client -vvf repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft File: D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft (raw, json) Hash identifier: o9y8poUO3RIblu5egYpTuVNE8PFt1xbZ2xHtA1R7Fss= Subject key identifier: 98:20:3B:B0:B9:68:2F:0E:E6:A8:6B:3C:C9:75:87:B6:76:7A:4F:78 Authority key identifier: D0:D1:DD:92:25:32:1E:1D:4D:1D:2F:63:A7:E0:88:0B:35:F6:83:7E Certificate issuer: /CN=D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E Certificate serial: 0518AF643233E4CC5B01A432575ADB2EBC79A85B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft Manifest number: 0189 Signing time: Sun 20 Apr 2025 15:31:34 +0000 Manifest this update: Sun 20 Apr 2025 15:26:34 +0000 Manifest next update: Wed 23 Apr 2025 21:52:34 +0000 Files and hashes: 1: D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.crl (hash: bKnR4oreEM+lJ4IDlBQLgJ21/hlVLoU3gfiKdJg0ZEk=) 2: 3130332e33352e3135342e302f32342d3234203d3e20313430343635.roa (hash: 6AB5bq4lxkpATYu0rKSJdzLFkqGQhdfrOpLg4Tu8L9I=) 3: 3130332e33352e3135352e302f32342d3234203d3e20313430343635.roa (hash: pF0XX8iGUNaEAPEmdUcwKZzSPnUJMqKA+lJt2x8Gm7M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.crl rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Apr 2025 21:52:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:18:af:64:32:33:e4:cc:5b:01:a4:32:57:5a:db:2e:bc:79:a8:5b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E Validity Not Before: Apr 20 15:26:34 2025 GMT Not After : Apr 23 21:52:34 2025 GMT Subject: CN=98203BB0B9682F0EE6A86B3CC97587B6767A4F78 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:44:66:f7:ef:44:0e:6d:fb:45:f0:be:9d:c4: 62:4f:16:5d:fa:0b:cf:55:61:51:fd:2a:4e:63:6b: 63:23:c3:e2:a0:2a:7f:3b:83:ec:db:59:8b:2a:9b: 20:a8:a7:55:5b:16:e7:2c:ab:7f:81:e2:fa:c6:f9: 66:81:17:89:69:b0:c9:ab:84:d3:aa:cd:cb:6f:cb: a1:cd:07:8a:69:34:1c:25:2e:d8:e2:77:21:79:bd: 6a:26:ed:3e:39:9c:a2:84:8a:f6:fc:98:b1:75:8a: a3:c4:64:68:fe:bc:04:4f:34:6e:7d:29:26:d6:be: ce:5b:f6:59:cc:e8:ab:65:f7:f4:46:70:e7:ac:b4: bf:f2:65:64:5a:13:3a:d7:31:27:d3:c4:fd:80:f3: 1c:0f:18:79:5d:b9:0c:7d:f2:35:af:7e:5c:1c:5f: 47:ee:b8:3a:b0:e8:6b:cb:93:f0:d1:9f:e0:dc:78: 07:29:71:9b:9e:89:a1:50:5c:31:01:eb:5a:03:37: 3e:0c:88:3b:fa:23:b4:62:31:0f:2e:d5:44:c4:a4: 94:7f:bd:f1:33:61:75:67:4c:e0:b7:11:47:7b:f8: 0c:3f:e5:bd:5d:09:f8:b9:80:57:d1:a3:0c:91:77: 6d:38:28:7d:d0:1f:58:f0:85:6a:38:03:e3:2d:85: 2f:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:20:3B:B0:B9:68:2F:0E:E6:A8:6B:3C:C9:75:87:B6:76:7A:4F:78 X509v3 Authority Key Identifier: keyid:D0:D1:DD:92:25:32:1E:1D:4D:1D:2F:63:A7:E0:88:0B:35:F6:83:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/229329cf-3123-4ce0-a687-0a03cd758738/0/D0D1DD9225321E1D4D1D2F63A7E0880B35F6837E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:58:2f:76:f4:39:e2:9c:e0:7f:a8:51:63:33:6a:b6:74:5b: cc:71:5f:de:2e:a0:f6:1b:97:53:39:f5:0e:a5:b7:34:3c:bd: d2:d9:33:2d:a9:4a:f6:04:3e:ef:e2:88:7c:da:3c:98:69:3a: b3:25:af:e7:e1:ab:6e:0a:84:ef:5d:48:5e:ec:11:d0:7d:11: 4d:ff:4a:c5:d7:5e:e2:ed:91:2d:cf:20:a9:9e:9e:e3:ff:07: 31:ff:2e:7d:3d:55:80:16:c7:81:47:eb:70:66:4e:33:78:41: 24:67:1c:50:dc:c0:d6:9d:dc:ce:4a:c4:d5:e8:e2:4a:c8:9b: 6f:8a:1b:92:46:5e:e8:41:20:f7:69:27:a0:2c:9e:53:c9:c7: 77:96:fa:33:a7:6e:8c:61:4d:c9:11:46:03:48:6e:18:62:bd: b2:18:93:86:0d:94:8c:7b:2e:bd:2a:74:d1:ec:0b:c0:80:1c: 6d:6a:2c:15:a5:63:91:0a:a6:b0:d5:de:df:69:ba:77:25:54: 91:95:29:fa:8c:ba:e0:c6:70:d4:1f:cf:fd:84:05:1c:9d:ff: 8e:ca:40:d7:c5:67:a5:25:a9:e2:0f:17:bb:79:b9:b0:1e:a0: b8:ba:28:5d:c8:95:2d:ac:da:d5:d0:c5:11:68:94:09:34:05: 33:4f:1a:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBRivZDIz5MxbAaQyV1rbLrx5qFswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBEMUREOTIyNTMyMUUxRDREMUQyRjYzQTdFMDg4MEIz NUY2ODM3RTAeFw0yNTA0MjAxNTI2MzRaFw0yNTA0MjMyMTUyMzRaMDMxMTAvBgNV BAMTKDk4MjAzQkIwQjk2ODJGMEVFNkE4NkIzQ0M5NzU4N0I2NzY3QTRGNzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvRGb370QObftF8L6dxGJPFl36 C89VYVH9Kk5ja2Mjw+KgKn87g+zbWYsqmyCop1VbFucsq3+B4vrG+WaBF4lpsMmr hNOqzctvy6HNB4ppNBwlLtjidyF5vWom7T45nKKEivb8mLF1iqPEZGj+vARPNG59 KSbWvs5b9lnM6Ktl9/RGcOestL/yZWRaEzrXMSfTxP2A8xwPGHlduQx98jWvflwc X0fuuDqw6GvLk/DRn+DceAcpcZueiaFQXDEB61oDNz4MiDv6I7RiMQ8u1UTEpJR/ vfEzYXVnTOC3EUd7+Aw/5b1dCfi5gFfRowyRd204KH3QH1jwhWo4A+MthS/XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmCA7sLloLw7mqGs8yXWHtnZ6T3gwHwYDVR0j BBgwFoAU0NHdkiUyHh1NHS9jp+CICzX2g34wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MjkzMjljZi0zMTIzLTRjZTAtYTY4Ny0wYTAzY2Q3NTg3MzgvMC9EMEQxREQ5MjI1 MzIxRTFENEQxRDJGNjNBN0UwODgwQjM1RjY4MzdFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBEMUREOTIyNTMyMUUxRDREMUQyRjYzQTdFMDg4MEIzNUY2 ODM3RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjI5MzI5Y2YtMzEyMy00Y2UwLWE2 ODctMGEwM2NkNzU4NzM4LzAvRDBEMUREOTIyNTMyMUUxRDREMUQyRjYzQTdFMDg4 MEIzNUY2ODM3RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ1YL3b0OeKc4H+oUWMzarZ0W8xxX94uoPYb l1M59Q6ltzQ8vdLZMy2pSvYEPu/iiHzaPJhpOrMlr+fhq24KhO9dSF7sEdB9EU3/ SsXXXuLtkS3PIKmenuP/BzH/Ln09VYAWx4FH63BmTjN4QSRnHFDcwNad3M5KxNXo 4krIm2+KG5JGXuhBIPdpJ6AsnlPJx3eW+jOnboxhTckRRgNIbhhivbIYk4YNlIx7 Lr0qdNHsC8CAHG1qLBWlY5EKprDV3t9punclVJGVKfqMuuDGcNQfz/2EBRyd/47K QNfFZ6UlqeIPF7t5ubAeoLi6KF3IlS2s2tXQxRFolAk0BTNPGtg= -----END CERTIFICATE-----Generated at Mon Apr 21 10:50:31 2025 by rpki-client