$ rpki-client -vvf repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft File: 0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft (raw, json) Hash identifier: gB21mKgUUjCPEIT6Q3W9OYIDArZolKAeRVC9YYwjieI= Subject key identifier: FB:40:01:99:0B:2E:0B:C6:7A:07:7F:FE:68:A5:AC:0F:66:C6:90:E5 Authority key identifier: 0D:F8:1F:0E:E9:9B:2E:06:DB:6C:AE:E0:5C:C3:01:BE:3A:23:D1:37 Certificate issuer: /CN=0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137 Certificate serial: 0E36F8D4D23AF0B8E70B12FB5A1A99CDCD4D0AFF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft Manifest number: 04C7 Signing time: Wed 16 Apr 2025 21:31:48 +0000 Manifest this update: Wed 16 Apr 2025 21:26:48 +0000 Manifest next update: Sun 20 Apr 2025 07:38:48 +0000 Files and hashes: 1: 0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.crl (hash: Hxz0LjZJZvc+x5EH9VLU7nwOuCHGSj9BrPiuFuYxjCk=) 2: 3130332e3132362e32382e302f32322d3234203d3e20313338313139.roa (hash: vaCug1qVwQYV4Eir0Vlivt2Eyx887UV2TVWoqX0yQVI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.crl rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 20 Apr 2025 07:38:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:36:f8:d4:d2:3a:f0:b8:e7:0b:12:fb:5a:1a:99:cd:cd:4d:0a:ff Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137 Validity Not Before: Apr 16 21:26:48 2025 GMT Not After : Apr 20 07:38:48 2025 GMT Subject: CN=FB4001990B2E0BC67A077FFE68A5AC0F66C690E5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:4a:b8:3a:02:62:f9:d7:47:00:71:6b:c7:9d: e5:1c:61:55:02:11:ec:a9:e0:8b:26:63:b9:40:57: cd:7c:12:8e:2a:fb:8d:5e:66:90:89:76:3f:ba:e1: bd:1f:75:58:d1:ea:90:39:b8:f2:65:dd:ea:17:88: bf:8a:fc:77:9d:ac:e9:b3:f2:f4:d2:10:c8:e8:94: 86:21:53:0b:67:33:0d:05:a0:d1:05:35:72:d3:a1: 6d:0f:bf:44:f7:c8:f5:d1:d8:b0:72:88:94:be:48: c5:f6:95:44:a8:78:72:9e:a3:2e:23:73:e8:52:f3: 30:75:f2:01:a3:d7:02:16:5c:45:84:32:83:41:36: 48:90:14:91:fe:bb:ec:9f:bb:7a:56:06:6a:34:62: 4e:eb:a1:e1:24:da:dd:ea:fc:b2:11:8d:c2:4a:d4: b0:81:02:af:48:fb:5d:e9:2b:c0:8d:a3:66:c3:19: 8a:75:93:8f:be:74:0c:cb:4b:3e:37:e5:89:b0:bb: fc:58:93:2b:e7:b4:8c:3b:c4:f6:75:08:53:a4:d6: 27:66:8c:0e:e3:5e:39:95:42:35:e9:b7:8a:23:eb: 13:9f:98:26:cc:b8:3a:99:2e:19:9f:d9:3c:2e:8e: 76:74:ba:ad:f8:29:c4:6e:d8:23:3e:e5:9d:33:ec: 50:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:40:01:99:0B:2E:0B:C6:7A:07:7F:FE:68:A5:AC:0F:66:C6:90:E5 X509v3 Authority Key Identifier: keyid:0D:F8:1F:0E:E9:9B:2E:06:DB:6C:AE:E0:5C:C3:01:BE:3A:23:D1:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:5e:3b:2e:a5:72:e3:df:59:27:a6:8c:4c:32:11:07:c2:cb: b5:94:81:95:06:bd:2c:78:d0:a2:94:f8:28:8d:b8:02:98:04: c8:f5:de:60:eb:0d:a3:78:e8:80:f8:0e:7e:07:25:16:03:d9: 7d:d6:d0:72:95:2b:3b:b4:9c:5a:1a:12:6e:ba:61:97:aa:66: ee:7c:65:b9:f2:c1:18:c3:1f:6d:f1:bd:12:7e:a5:da:ab:4a: f1:98:4b:25:ef:d7:7c:59:21:41:38:82:f8:e6:26:70:5e:96: 72:75:ba:2a:5e:a6:5a:c7:0a:28:1f:6b:7a:e2:81:cc:53:b5: 16:50:1a:d0:c6:44:af:d9:51:d3:e8:fa:96:c7:37:1e:1c:a4: 06:7f:71:92:5c:6e:dd:7d:81:d4:25:4b:a1:f7:51:1e:ea:6b: 3a:b3:cc:14:9e:30:eb:c9:a5:48:a8:6a:83:94:7c:57:c8:52: 03:ce:4e:f9:61:bd:fb:ab:58:f3:27:54:fa:09:91:92:af:5f: ab:63:87:61:ed:ff:f6:59:1a:c8:70:28:54:07:78:ff:b6:87: bb:14:9b:76:61:dc:93:e7:11:5f:08:4f:e0:37:20:37:9c:a7: c9:74:12:6b:c1:1f:ce:a0:b8:79:02:ab:49:ac:cb:c6:f8:b0: 55:ec:ca:1f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDjb41NI68LjnCxL7WhqZzc1NCv8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERGODFGMEVFOTlCMkUwNkRCNkNBRUUwNUNDMzAxQkUz QTIzRDEzNzAeFw0yNTA0MTYyMTI2NDhaFw0yNTA0MjAwNzM4NDhaMDMxMTAvBgNV BAMTKEZCNDAwMTk5MEIyRTBCQzY3QTA3N0ZGRTY4QTVBQzBGNjZDNjkwRTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaSrg6AmL510cAcWvHneUcYVUC Eeyp4IsmY7lAV818Eo4q+41eZpCJdj+64b0fdVjR6pA5uPJl3eoXiL+K/HedrOmz 8vTSEMjolIYhUwtnMw0FoNEFNXLToW0Pv0T3yPXR2LByiJS+SMX2lUSoeHKeoy4j c+hS8zB18gGj1wIWXEWEMoNBNkiQFJH+u+yfu3pWBmo0Yk7roeEk2t3q/LIRjcJK 1LCBAq9I+13pK8CNo2bDGYp1k4++dAzLSz435Ymwu/xYkyvntIw7xPZ1CFOk1idm jA7jXjmVQjXpt4oj6xOfmCbMuDqZLhmf2TwujnZ0uq34KcRu2CM+5Z0z7FADAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+0ABmQsuC8Z6B3/+aKWsD2bGkOUwHwYDVR0j BBgwFoAUDfgfDumbLgbbbK7gXMMBvjoj0TcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZjZlYTIyMS03N2I3LTQ3OTEtYThhOC1iNTE2NGIwMGYxYzUvMC8wREY4MUYwRUU5 OUIyRTA2REI2Q0FFRTA1Q0MzMDFCRTNBMjNEMTM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMERGODFGMEVFOTlCMkUwNkRCNkNBRUUwNUNDMzAxQkUzQTIz RDEzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2Y2ZWEyMjEtNzdiNy00NzkxLWE4 YTgtYjUxNjRiMDBmMWM1LzAvMERGODFGMEVFOTlCMkUwNkRCNkNBRUUwNUNDMzAx QkUzQTIzRDEzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD5eOy6lcuPfWSemjEwyEQfCy7WUgZUGvSx4 0KKU+CiNuAKYBMj13mDrDaN46ID4Dn4HJRYD2X3W0HKVKzu0nFoaEm66YZeqZu58 ZbnywRjDH23xvRJ+pdqrSvGYSyXv13xZIUE4gvjmJnBelnJ1uipeplrHCigfa3ri gcxTtRZQGtDGRK/ZUdPo+pbHNx4cpAZ/cZJcbt19gdQlS6H3UR7qazqzzBSeMOvJ pUioaoOUfFfIUgPOTvlhvfurWPMnVPoJkZKvX6tjh2Ht//ZZGshwKFQHeP+2h7sU m3Zh3JPnEV8IT+A3IDecp8l0EmvBH86guHkCq0msy8b4sFXsyh8= -----END CERTIFICATE-----Generated at Fri Apr 18 03:58:33 2025 by rpki-client