$ rpki-client -vvf repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft File: DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft (raw, json) Hash identifier: kR/ikJCZP8gnyRdBFQCj9HIUOo/O4Z1At9Ye4YYzg4g= Subject key identifier: 85:43:D1:A9:B8:71:AB:B1:C5:53:A1:2C:54:81:F4:BB:75:9A:C1:E2 Authority key identifier: DB:1B:D7:85:1F:D1:A4:87:B0:12:83:F6:AE:4B:46:E0:E4:93:5A:3C Certificate issuer: /CN=DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C Certificate serial: 14634138B02FCD5A11D0F68A26DD80B045AF7DF4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft Manifest number: 01A4 Signing time: Wed 04 Jun 2025 02:31:35 +0000 Manifest this update: Wed 04 Jun 2025 02:26:35 +0000 Manifest next update: Sat 07 Jun 2025 09:44:35 +0000 Files and hashes: 1: DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.crl (hash: hDqPNEHLnZoy3VJaiojwiDBZnQSgFe1WrutcXg0hyNc=) 2: 3130332e36362e33382e302f32342d3234203d3e20313530323431.roa (hash: 1Ff4VDmA+7r6oXDzZnPzt9JuYQ1xqWexxGkdvnwFLiQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.crl rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 09:44:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:63:41:38:b0:2f:cd:5a:11:d0:f6:8a:26:dd:80:b0:45:af:7d:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C Validity Not Before: Jun 4 02:26:35 2025 GMT Not After : Jun 7 09:44:35 2025 GMT Subject: CN=8543D1A9B871ABB1C553A12C5481F4BB759AC1E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:40:44:d8:5a:a0:75:51:e6:8d:fd:dc:33:b2: 0d:c7:79:16:c7:07:1f:6b:b0:82:02:44:75:42:7f: 79:04:6c:83:3f:18:24:ff:eb:8a:35:9f:06:d9:05: 3d:ca:79:43:16:59:29:aa:cb:3f:fa:b2:10:20:e7: 08:cd:67:7a:8d:58:b4:18:71:55:02:e4:bf:96:4a: d8:eb:70:d9:12:12:80:e7:92:28:53:da:52:52:f2: e9:b9:d9:61:3c:9f:d7:15:a1:6b:3a:09:d8:d1:79: 37:46:59:44:2f:b2:ca:04:7d:35:2c:f4:aa:44:b4: 76:1b:c1:aa:82:b9:78:0d:77:51:08:9b:d6:b5:93: d7:bc:5b:c4:8c:2f:b8:6c:58:53:f8:b2:44:f0:bd: a8:db:66:7d:e0:60:38:6c:02:04:a8:11:0e:cd:ff: 7c:57:0e:34:80:14:ac:20:0d:b6:e1:e3:53:e8:f2: 04:73:f4:43:ed:a2:41:47:52:ee:3f:7d:69:a0:85: 98:58:2d:e2:68:78:38:a7:df:5f:dd:ff:46:87:c0: c1:a2:95:72:d4:e2:2c:c9:6f:a6:c4:f6:f3:14:7a: ed:21:43:62:cb:81:55:12:dc:1a:d0:ac:69:19:7f: 4e:46:26:bf:16:3d:87:ef:f9:c7:07:25:de:8a:bf: de:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:43:D1:A9:B8:71:AB:B1:C5:53:A1:2C:54:81:F4:BB:75:9A:C1:E2 X509v3 Authority Key Identifier: keyid:DB:1B:D7:85:1F:D1:A4:87:B0:12:83:F6:AE:4B:46:E0:E4:93:5A:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:ac:6f:06:a8:27:9b:ba:a1:cb:7f:31:da:6c:66:b0:4d:3b: ee:1f:27:aa:12:6c:71:f0:f0:c9:35:3b:05:6a:ab:22:12:1a: fa:2d:d5:c3:89:23:e0:ba:7b:1d:df:3d:49:81:70:6b:ba:40: f8:2a:98:14:71:8b:a6:c8:d0:5b:a4:85:0a:4c:8f:a0:0f:44: 69:7c:0d:9e:d4:59:95:e4:7d:17:03:89:ce:15:13:a7:4a:a3: 8a:45:a3:57:61:89:63:90:28:f1:bc:52:b0:e2:39:d8:d1:ae: a1:a1:e6:ce:e2:4e:8d:70:8e:8d:f2:c6:28:8b:e2:6f:2f:1a: 94:73:43:cf:9a:ae:96:5e:e4:1b:dd:16:fe:60:e3:f4:f0:d6: ab:bb:13:2f:d8:fe:6b:cc:26:b6:22:26:d7:f7:91:3a:05:80: ba:9e:37:33:1c:4d:66:0c:98:74:40:da:7c:d5:4f:84:83:02: 8a:ff:d2:75:b2:13:3f:b1:a3:22:77:b1:9d:b8:9d:ce:59:1f: 3e:25:9e:d7:ee:2c:2e:b2:2f:70:09:bf:a9:fb:62:49:91:2f: 21:0e:2c:36:c7:c9:0b:86:57:bd:17:04:48:9b:b4:4b:91:96: c8:8b:de:20:3a:8e:8e:6e:d6:f3:9a:65:cf:93:ab:67:8e:a0: 28:71:82:5a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFGNBOLAvzVoR0PaKJt2AsEWvffQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIxQkQ3ODUxRkQxQTQ4N0IwMTI4M0Y2QUU0QjQ2RTBF NDkzNUEzQzAeFw0yNTA2MDQwMjI2MzVaFw0yNTA2MDcwOTQ0MzVaMDMxMTAvBgNV BAMTKDg1NDNEMUE5Qjg3MUFCQjFDNTUzQTEyQzU0ODFGNEJCNzU5QUMxRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmQETYWqB1UeaN/dwzsg3HeRbH Bx9rsIICRHVCf3kEbIM/GCT/64o1nwbZBT3KeUMWWSmqyz/6shAg5wjNZ3qNWLQY cVUC5L+WStjrcNkSEoDnkihT2lJS8um52WE8n9cVoWs6CdjReTdGWUQvssoEfTUs 9KpEtHYbwaqCuXgNd1EIm9a1k9e8W8SML7hsWFP4skTwvajbZn3gYDhsAgSoEQ7N /3xXDjSAFKwgDbbh41Po8gRz9EPtokFHUu4/fWmghZhYLeJoeDin31/d/0aHwMGi lXLU4izJb6bE9vMUeu0hQ2LLgVUS3BrQrGkZf05GJr8WPYfv+ccHJd6Kv97NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhUPRqbhxq7HFU6EsVIH0u3WaweIwHwYDVR0j BBgwFoAU2xvXhR/RpIewEoP2rktG4OSTWjwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2IyZWU3NC04YzNjLTRiYzMtYjZmYi1mMzViMjAwYTIwZWIvMC9EQjFCRDc4NTFG RDFBNDg3QjAxMjgzRjZBRTRCNDZFMEU0OTM1QTNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREIxQkQ3ODUxRkQxQTQ4N0IwMTI4M0Y2QUU0QjQ2RTBFNDkz NUEzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNiMmVlNzQtOGMzYy00YmMzLWI2 ZmItZjM1YjIwMGEyMGViLzAvREIxQkQ3ODUxRkQxQTQ4N0IwMTI4M0Y2QUU0QjQ2 RTBFNDkzNUEzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA6sbwaoJ5u6oct/MdpsZrBNO+4fJ6oSbHHw 8Mk1OwVqqyISGvot1cOJI+C6ex3fPUmBcGu6QPgqmBRxi6bI0FukhQpMj6APRGl8 DZ7UWZXkfRcDic4VE6dKo4pFo1dhiWOQKPG8UrDiOdjRrqGh5s7iTo1wjo3yxiiL 4m8vGpRzQ8+arpZe5BvdFv5g4/Tw1qu7Ey/Y/mvMJrYiJtf3kToFgLqeNzMcTWYM mHRA2nzVT4SDAor/0nWyEz+xoyJ3sZ24nc5ZHz4lntfuLC6yL3AJv6n7YkmRLyEO LDbHyQuGV70XBEibtEuRlsiL3iA6jo5u1vOaZc+Tq2eOoChxglo= -----END CERTIFICATE-----Generated at Thu Jun 5 18:11:31 2025 by rpki-client