$ rpki-client -vvf repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft File: DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft (raw, json) Hash identifier: uq0aPOGkZ9+epgKtO0lOxNGxFZnsKnBGkuu2tZwgKdI= Subject key identifier: 2D:EE:91:BE:CD:A3:0E:67:86:9C:CB:CC:7C:9E:DD:47:91:78:C5:86 Authority key identifier: DC:34:C8:B5:F4:38:B8:D4:CB:13:F2:45:1A:D1:F0:95:5E:5F:7F:BB Certificate issuer: /CN=DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB Certificate serial: 305E730E8C828100FD5E6B3E3C8656B050BE9496 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft Manifest number: 044A Signing time: Fri 18 Apr 2025 08:11:33 +0000 Manifest this update: Fri 18 Apr 2025 08:06:33 +0000 Manifest next update: Mon 21 Apr 2025 18:55:33 +0000 Files and hashes: 1: DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.crl (hash: ueb2lcmIwTxnm7I1SpMIhBynW2L4HlFlqAHf6jbtAZQ=) 2: 323030313a6466363a313830303a3a2f34382d3438203d3e20313331373535.roa (hash: HGlDA4/8VVAgy1tfZNlAnPXlJMICAK8Z05H6MVK5yJM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.crl rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 18:55:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:5e:73:0e:8c:82:81:00:fd:5e:6b:3e:3c:86:56:b0:50:be:94:96 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB Validity Not Before: Apr 18 08:06:33 2025 GMT Not After : Apr 21 18:55:33 2025 GMT Subject: CN=2DEE91BECDA30E67869CCBCC7C9EDD479178C586 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:61:48:9a:fd:9a:f3:36:fd:48:c7:be:51:35: 5c:4d:15:03:0a:a6:fd:9c:f5:aa:e4:30:31:29:ec: 47:f6:d1:08:38:3c:c1:29:78:39:b8:78:10:9e:b4: 2c:2c:8c:b0:2b:6b:cf:4d:0e:bd:32:f3:5d:05:a7: e9:24:84:8f:9b:94:77:07:40:28:af:0a:24:ef:7d: 30:68:33:3e:ba:86:4a:a2:e5:0b:6f:e1:26:0d:87: ae:ea:26:57:5f:cb:7d:da:02:b5:81:43:4c:f7:62: 19:33:53:d9:6e:87:89:db:ae:1e:ed:46:be:94:a8: e4:85:51:be:38:66:d6:b8:02:ea:9b:8e:be:d9:5a: bd:0c:83:46:4f:08:70:3d:5f:2e:7d:03:ba:9b:e5: 24:44:02:a1:b4:2f:b2:9b:e0:ef:17:c9:be:82:e1: 84:ca:dd:84:aa:8f:59:21:a4:96:73:87:bd:fb:8e: 45:27:c2:1a:43:57:9c:37:9a:2f:43:86:a4:82:c2: d7:8a:b5:34:b5:21:ad:d0:71:ff:89:e6:c0:77:0d: f0:79:0b:d5:1a:76:79:19:60:e6:05:32:4e:e4:45: 12:c8:9a:e3:61:f2:08:28:e9:b6:e1:40:75:24:0d: 77:4f:10:66:49:79:57:fa:e1:05:db:a4:29:34:fe: 9f:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:EE:91:BE:CD:A3:0E:67:86:9C:CB:CC:7C:9E:DD:47:91:78:C5:86 X509v3 Authority Key Identifier: keyid:DC:34:C8:B5:F4:38:B8:D4:CB:13:F2:45:1A:D1:F0:95:5E:5F:7F:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:65:17:c3:7d:4e:ba:1f:e7:61:3b:30:bc:a8:b9:82:e4:da: 2b:ab:d8:60:08:61:2d:ed:0f:35:0d:97:dd:24:c4:9f:8a:52: 90:85:25:49:df:21:35:6b:de:b8:29:5e:5f:b1:dc:0d:e5:e1: 47:3d:13:88:db:19:d8:92:d3:66:ff:85:3f:6f:5a:24:83:da: b7:32:c3:f0:a0:f3:ca:cd:16:28:d2:06:05:8a:f3:48:0f:ea: 4f:7c:6f:74:75:b6:3b:0e:51:5b:47:78:cc:3e:c0:24:df:ac: 10:43:d5:7a:14:df:39:6b:60:a9:82:bc:ae:38:9b:70:d9:bb: 1c:b9:b8:8f:ee:73:a8:bb:77:78:10:5c:a5:51:7c:9d:a5:64: 7b:ac:6f:07:3f:8a:df:af:9a:6d:e4:b4:6d:6b:79:46:40:ae: 6b:00:2f:86:db:0b:6f:97:6f:aa:15:1b:71:c4:6e:2a:0d:30: 69:05:d5:6d:1f:9e:26:65:3c:38:d9:08:56:48:f5:53:de:30: 56:d1:5c:bb:7c:54:92:9a:05:1f:a9:92:3e:63:25:ed:f9:2f: ac:2d:a4:f3:e5:78:41:66:52:0c:90:64:05:ba:dc:2a:f0:28: d8:5b:93:ba:e9:2b:4d:7f:55:3f:13:89:1a:29:7c:01:2e:a2: 8d:09:8b:35 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMF5zDoyCgQD9Xms+PIZWsFC+lJYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMzNEM4QjVGNDM4QjhENENCMTNGMjQ1MUFEMUYwOTU1 RTVGN0ZCQjAeFw0yNTA0MTgwODA2MzNaFw0yNTA0MjExODU1MzNaMDMxMTAvBgNV BAMTKDJERUU5MUJFQ0RBMzBFNjc4NjlDQ0JDQzdDOUVERDQ3OTE3OEM1ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsYUia/ZrzNv1Ix75RNVxNFQMK pv2c9arkMDEp7Ef20Qg4PMEpeDm4eBCetCwsjLAra89NDr0y810Fp+kkhI+blHcH QCivCiTvfTBoMz66hkqi5Qtv4SYNh67qJldfy33aArWBQ0z3YhkzU9luh4nbrh7t Rr6UqOSFUb44Zta4Auqbjr7ZWr0Mg0ZPCHA9Xy59A7qb5SREAqG0L7Kb4O8Xyb6C 4YTK3YSqj1khpJZzh737jkUnwhpDV5w3mi9DhqSCwteKtTS1Ia3Qcf+J5sB3DfB5 C9UadnkZYOYFMk7kRRLImuNh8ggo6bbhQHUkDXdPEGZJeVf64QXbpCk0/p/9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQULe6Rvs2jDmeGnMvMfJ7dR5F4xYYwHwYDVR0j BBgwFoAU3DTItfQ4uNTLE/JFGtHwlV5ff7swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YThmMDQzNS00ZDM4LTQ3ZWYtODUwZi01MWJhNDYxN2ZiM2QvMC9EQzM0QzhCNUY0 MzhCOEQ0Q0IxM0YyNDUxQUQxRjA5NTVFNUY3RkJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREMzNEM4QjVGNDM4QjhENENCMTNGMjQ1MUFEMUYwOTU1RTVG N0ZCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE4ZjA0MzUtNGQzOC00N2VmLTg1 MGYtNTFiYTQ2MTdmYjNkLzAvREMzNEM4QjVGNDM4QjhENENCMTNGMjQ1MUFEMUYw OTU1RTVGN0ZCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADdlF8N9Trof52E7MLyouYLk2iur2GAIYS3t DzUNl90kxJ+KUpCFJUnfITVr3rgpXl+x3A3l4Uc9E4jbGdiS02b/hT9vWiSD2rcy w/Cg88rNFijSBgWK80gP6k98b3R1tjsOUVtHeMw+wCTfrBBD1XoU3zlrYKmCvK44 m3DZuxy5uI/uc6i7d3gQXKVRfJ2lZHusbwc/it+vmm3ktG1reUZArmsAL4bbC2+X b6oVG3HEbioNMGkF1W0fniZlPDjZCFZI9VPeMFbRXLt8VJKaBR+pkj5jJe35L6wt pPPleEFmUgyQZAW63CrwKNhbk7rpK01/VT8TiRopfAEuoo0JizU= -----END CERTIFICATE-----Generated at Sat Apr 19 12:08:57 2025 by rpki-client