$ rpki-client -vvf repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.mft File: D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.mft (raw, json) Hash identifier: YxXKVbWQctUBfGLrSdRnhqms6BIyA4gOaHE11b13yQ8= Subject key identifier: 8F:6C:04:56:47:43:D8:E4:18:BB:35:1D:7E:0B:90:8B:E0:EB:F6:36 Authority key identifier: D2:8B:A9:D5:E3:21:93:DE:E2:9E:B4:C1:94:4F:35:FC:32:D8:B1:9B Certificate issuer: /CN=D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B Certificate serial: 13EAE5ACB4A6F2BE9D83ED37FBC30A0F743D735E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.mft Manifest number: 77 Signing time: Thu 03 Apr 2025 17:12:00 +0000 Manifest this update: Thu 03 Apr 2025 17:07:00 +0000 Manifest next update: Sun 06 Apr 2025 22:28:00 +0000 Files and hashes: 1: D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.crl (hash: a1jpbfRYmFDtbgMIBzs9H4rDjLDIhIdqOLNeE8tFjrE=) 2: 3130332e38342e3230312e302f32342d3234203d3e20313336303935.roa (hash: ihMnpcM8C+9KA0tMwmz+wN2Pjt87gWD8o1eHc6RRFFs=) 3: 3130332e38342e3230302e302f32342d3234203d3e20313336303935.roa (hash: YzMeBHl/gp0hPsD74Syrnw/fYYcZ9K46SBc/IU62Y+g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.crl rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 22:28:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:ea:e5:ac:b4:a6:f2:be:9d:83:ed:37:fb:c3:0a:0f:74:3d:73:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B Validity Not Before: Apr 3 17:07:00 2025 GMT Not After : Apr 6 22:28:00 2025 GMT Subject: CN=8F6C04564743D8E418BB351D7E0B908BE0EBF636 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:05:a2:ad:83:79:fc:d4:0a:f4:a0:d7:f7:02: 8f:ac:5b:88:69:84:a4:02:2b:ae:36:ff:5c:d1:d9: 77:b7:90:c7:f8:76:5c:f2:65:42:31:43:c4:a4:4a: 70:c5:36:63:23:10:aa:69:d3:12:da:9f:84:2a:0e: cf:b1:c0:72:2a:e2:0d:8e:bb:81:6e:29:93:48:c8: 78:94:42:5a:a7:54:83:e0:1a:cb:e8:f7:e4:37:0d: 67:c3:39:2a:2e:a2:75:b3:87:d2:33:86:1d:12:1c: 0b:f6:3b:3a:82:c6:d6:77:6f:96:09:f7:00:44:9a: c2:7f:50:01:07:99:99:0a:d6:d0:3b:3d:23:2a:7f: 12:0f:08:d6:e0:7b:c1:e6:f6:5d:a6:db:eb:92:87: 02:eb:be:6c:7d:ce:5b:d4:99:d6:a9:60:b5:0c:2e: f3:c6:a7:d5:bd:2f:93:c0:42:73:bf:1c:60:6f:2e: 9f:8d:ec:85:94:8c:15:7d:1d:d0:2b:ad:c7:c0:ea: e9:ee:b6:4e:05:56:28:95:64:a7:6e:42:08:60:ec: 0a:99:8e:93:a5:3a:8f:ed:80:6c:7a:f7:f2:dd:d1: 1e:95:20:1e:79:5d:7c:60:f4:31:a5:ce:82:2f:dc: 1e:dc:65:8e:c1:2f:b0:74:f2:59:ab:2a:30:ef:d5: db:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:6C:04:56:47:43:D8:E4:18:BB:35:1D:7E:0B:90:8B:E0:EB:F6:36 X509v3 Authority Key Identifier: keyid:D2:8B:A9:D5:E3:21:93:DE:E2:9E:B4:C1:94:4F:35:FC:32:D8:B1:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/25e2415c-7d4f-4427-832d-59b4c79aae5a/0/D28BA9D5E32193DEE29EB4C1944F35FC32D8B19B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:4e:71:8c:be:e8:be:fe:84:c8:28:d1:54:e8:ea:4a:de:cf: 09:a3:d0:53:b0:f5:2e:4f:48:85:9b:21:a6:6c:0b:88:dc:7b: 8e:4c:e8:62:41:0e:73:dd:0b:fb:78:aa:90:5a:a8:f9:4a:35: 46:2c:0b:18:29:2f:5d:dd:1e:84:aa:ea:ca:2f:b6:67:95:86: a3:eb:c2:97:6e:94:6e:58:c0:8b:b5:ea:be:42:38:7b:97:87: 4c:36:6d:0b:3d:65:74:44:90:e3:7f:c2:22:32:cf:f1:b7:b3: 36:6f:99:16:0a:20:d2:5b:88:43:6e:af:17:16:dc:e7:80:ce: 88:f4:19:29:a3:44:47:c9:81:e4:59:05:d9:65:1c:df:8e:3f: fd:0b:07:ea:04:7b:44:4a:37:2f:3f:8a:fb:4b:f2:d8:2b:b8: 83:cd:c3:9a:7c:70:12:6d:36:e9:50:5d:81:ca:7b:95:9d:be: 38:40:cd:7f:2e:b8:7b:e9:22:20:af:1e:00:01:3b:03:6c:4c: 21:b2:fd:5a:2e:3d:86:95:43:cd:3a:90:c6:9a:0b:d9:2e:4c: 59:1d:32:aa:84:c3:0d:63:aa:09:68:ee:fc:b5:0e:6c:4d:4a: 50:5c:bf:c9:3a:b4:b2:29:ba:4a:7f:bd:44:4d:bb:03:f6:88: 8c:ec:a7:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE+rlrLSm8r6dg+03+8MKD3Q9c14wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDI4QkE5RDVFMzIxOTNERUUyOUVCNEMxOTQ0RjM1RkMz MkQ4QjE5QjAeFw0yNTA0MDMxNzA3MDBaFw0yNTA0MDYyMjI4MDBaMDMxMTAvBgNV BAMTKDhGNkMwNDU2NDc0M0Q4RTQxOEJCMzUxRDdFMEI5MDhCRTBFQkY2MzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrBaKtg3n81Ar0oNf3Ao+sW4hp hKQCK642/1zR2Xe3kMf4dlzyZUIxQ8SkSnDFNmMjEKpp0xLan4QqDs+xwHIq4g2O u4FuKZNIyHiUQlqnVIPgGsvo9+Q3DWfDOSouonWzh9Izhh0SHAv2OzqCxtZ3b5YJ 9wBEmsJ/UAEHmZkK1tA7PSMqfxIPCNbge8Hm9l2m2+uShwLrvmx9zlvUmdapYLUM LvPGp9W9L5PAQnO/HGBvLp+N7IWUjBV9HdArrcfA6unutk4FViiVZKduQghg7AqZ jpOlOo/tgGx69/Ld0R6VIB55XXxg9DGlzoIv3B7cZY7BL7B08lmrKjDv1dvHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUj2wEVkdD2OQYuzUdfguQi+Dr9jYwHwYDVR0j BBgwFoAU0oup1eMhk97inrTBlE81/DLYsZswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y NWUyNDE1Yy03ZDRmLTQ0MjctODMyZC01OWI0Yzc5YWFlNWEvMC9EMjhCQTlENUUz MjE5M0RFRTI5RUI0QzE5NDRGMzVGQzMyRDhCMTlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDI4QkE5RDVFMzIxOTNERUUyOUVCNEMxOTQ0RjM1RkMzMkQ4 QjE5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjVlMjQxNWMtN2Q0Zi00NDI3LTgz MmQtNTliNGM3OWFhZTVhLzAvRDI4QkE5RDVFMzIxOTNERUUyOUVCNEMxOTQ0RjM1 RkMzMkQ4QjE5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADlOcYy+6L7+hMgo0VTo6krezwmj0FOw9S5P SIWbIaZsC4jce45M6GJBDnPdC/t4qpBaqPlKNUYsCxgpL13dHoSq6sovtmeVhqPr wpdulG5YwIu16r5COHuXh0w2bQs9ZXREkON/wiIyz/G3szZvmRYKINJbiENurxcW 3OeAzoj0GSmjREfJgeRZBdllHN+OP/0LB+oEe0RKNy8/ivtL8tgruIPNw5p8cBJt NulQXYHKe5WdvjhAzX8uuHvpIiCvHgABOwNsTCGy/VouPYaVQ806kMaaC9kuTFkd MqqEww1jqglo7vy1DmxNSlBcv8k6tLIpukp/vURNuwP2iIzsp8Q= -----END CERTIFICATE-----Generated at Sat Apr 5 16:38:19 2025 by rpki-client