$ rpki-client -vvf repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft File: DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft (raw, json) Hash identifier: B94gnLKqSnj+VwhPdPn58eymXqVWr4y3aQIoFjc7I2c= Subject key identifier: B9:2E:C0:CF:C1:B6:81:E8:70:E5:3E:36:F4:B2:CD:CA:F0:AC:61:F3 Authority key identifier: DD:5A:CD:C0:B2:D0:91:54:5E:18:5E:B1:FA:80:C0:00:7C:9A:FA:16 Certificate issuer: /CN=DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16 Certificate serial: 77CCA37B9C123A83FA0F7F104E573B6E61CE7A28 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer Subject info access: rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft Manifest number: 013C Signing time: Sat 12 Apr 2025 18:01:52 +0000 Manifest this update: Sat 12 Apr 2025 17:56:52 +0000 Manifest next update: Tue 15 Apr 2025 22:26:52 +0000 Files and hashes: 1: DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl (hash: M8fvXjpR2lN82mKLMei1JEhPRsLoS9YpUVW1sNQzCPo=) 2: 3130332e37302e3132332e302f32342d3234203d3e20313530393830.roa (hash: aPx9nZD1wRsR+YuJsPrgngjz+ATISfbMPyPoqRV/0hM=) 3: 323030313a6466323a373463303a3a2f34382d3438203d3e20313530393830.roa (hash: aNAiE73cD/v7tVb+4UuVcbAAh3drncSjCMcGBLb2SJ4=) 4: 3130332e37302e3132322e302f32342d3234203d3e20313530393830.roa (hash: 6+zEkFvJJLps0Ow0oFFDpd+JwPXLZVdctd3PSfCUG8Q=) 5: 3130332e37302e3132322e302f32332d3233203d3e20313530393830.roa (hash: 9NdE9Yt64lHcZmHfcp/BPdUY3C5A8B6IZ0IM6khU6pM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 15 Apr 2025 22:26:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:cc:a3:7b:9c:12:3a:83:fa:0f:7f:10:4e:57:3b:6e:61:ce:7a:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16 Validity Not Before: Apr 12 17:56:52 2025 GMT Not After : Apr 15 22:26:52 2025 GMT Subject: CN=B92EC0CFC1B681E870E53E36F4B2CDCAF0AC61F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:fd:cf:04:eb:8c:31:fc:c1:92:18:ae:73:86: ae:f6:6d:54:c2:3a:f5:91:3a:83:e4:85:df:f8:15: 5a:b4:93:06:24:11:70:0a:74:eb:49:65:4c:8d:05: e7:dc:0d:cc:db:c5:31:73:49:c1:06:f3:32:0a:32: 3e:3d:ba:ac:cd:6c:e2:4c:50:78:c9:71:61:97:f7: 41:6e:ca:bf:9b:2c:b5:2d:5b:55:8e:42:07:0b:f2: 69:2e:65:df:1b:e6:b1:a5:a6:3d:de:28:c7:a9:3d: 6b:f4:4d:fc:6d:32:33:d3:f7:af:73:e1:61:43:bc: cd:70:72:3b:77:e6:83:58:30:be:44:43:88:36:7c: 9d:0f:b2:0a:07:ff:fa:10:59:86:95:fc:aa:dd:72: b5:c9:5e:b3:d4:51:be:8e:8b:de:f1:bb:57:43:07: 86:12:9e:2b:07:d4:85:48:65:c0:03:6f:86:75:a8: 44:b2:c9:4e:67:95:d3:a3:36:ae:0b:81:05:33:53: 19:71:00:d2:df:10:15:ea:40:85:0a:ca:fe:94:4d: 5c:f6:e8:19:5c:17:94:00:f5:bf:69:c0:ac:f7:f4: c5:ca:73:2d:44:35:3b:f8:87:cb:62:c2:32:32:0d: f0:d9:00:0b:aa:3d:69:27:37:af:f6:11:ec:f8:ab: d3:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B9:2E:C0:CF:C1:B6:81:E8:70:E5:3E:36:F4:B2:CD:CA:F0:AC:61:F3 X509v3 Authority Key Identifier: keyid:DD:5A:CD:C0:B2:D0:91:54:5E:18:5E:B1:FA:80:C0:00:7C:9A:FA:16 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53250662-3eef-4aa9-9ede-5629d5b6ea95/0/DD5ACDC0B2D091545E185EB1FA80C0007C9AFA16.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:40:f9:a8:97:ba:21:1a:2b:3f:94:0c:e8:90:ea:5f:d9:ef: 5e:62:8d:38:4c:89:85:1f:ee:26:14:a8:d0:a5:6a:3d:a0:be: c9:bf:42:f9:60:00:36:0b:8b:96:85:7a:a1:0b:5f:c3:6c:30: 25:f6:28:22:a6:f6:cc:66:ba:a1:44:3f:d0:cd:0e:c2:48:55: eb:95:c8:0c:61:2f:78:a0:df:c3:46:62:34:5d:8c:a6:1f:76: a4:cf:6a:e5:62:a1:8c:e4:6c:2d:86:a6:6f:7c:cf:69:5c:04: b4:39:60:05:2b:08:4f:8f:42:e0:5f:7a:60:51:98:3e:1c:b0: 56:09:d9:5a:bd:20:c0:3d:5f:6d:c1:8e:8e:f0:03:99:40:26: 99:81:b6:1f:b1:0a:6b:c2:9e:e5:e8:01:c5:1b:6f:52:d5:bc: 8c:1e:a4:4b:85:15:bc:ef:6b:02:86:09:82:36:e9:49:d7:d0: ec:99:77:3a:1d:dc:75:8a:8b:70:cf:d9:ec:37:a1:aa:88:66: 4d:04:76:fb:06:da:62:98:da:c9:57:f4:7e:c5:b1:e5:07:66: 59:31:d6:0b:d9:8f:f1:bb:8f:fa:07:b1:0b:a2:ee:d1:6b:e0: a2:6a:28:07:bf:a7:79:57:a0:ce:2f:5f:6c:a4:b6:15:f6:89: f0:66:ee:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUd8yje5wSOoP6D38QTlc7bmHOeigwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMwMDA3 QzlBRkExNjAeFw0yNTA0MTIxNzU2NTJaFw0yNTA0MTUyMjI2NTJaMDMxMTAvBgNV BAMTKEI5MkVDMENGQzFCNjgxRTg3MEU1M0UzNkY0QjJDRENBRjBBQzYxRjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd/c8E64wx/MGSGK5zhq72bVTC OvWROoPkhd/4FVq0kwYkEXAKdOtJZUyNBefcDczbxTFzScEG8zIKMj49uqzNbOJM UHjJcWGX90Fuyr+bLLUtW1WOQgcL8mkuZd8b5rGlpj3eKMepPWv0TfxtMjPT969z 4WFDvM1wcjt35oNYML5EQ4g2fJ0PsgoH//oQWYaV/KrdcrXJXrPUUb6Oi97xu1dD B4YSnisH1IVIZcADb4Z1qESyyU5nldOjNq4LgQUzUxlxANLfEBXqQIUKyv6UTVz2 6BlcF5QA9b9pwKz39MXKcy1ENTv4h8tiwjIyDfDZAAuqPWknN6/2Eez4q9NHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuS7Az8G2gehw5T429LLNyvCsYfMwHwYDVR0j BBgwFoAU3VrNwLLQkVReGF6x+oDAAHya+hYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 MzI1MDY2Mi0zZWVmLTRhYTktOWVkZS01NjI5ZDViNmVhOTUvMC9ERDVBQ0RDMEIy RDA5MTU0NUUxODVFQjFGQTgwQzAwMDdDOUFGQTE2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMwMDA3QzlB RkExNi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTMyNTA2NjItM2VlZi00YWE5LTll ZGUtNTYyOWQ1YjZlYTk1LzAvREQ1QUNEQzBCMkQwOTE1NDVFMTg1RUIxRkE4MEMw MDA3QzlBRkExNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE5A+aiXuiEaKz+UDOiQ6l/Z715ijThMiYUf 7iYUqNClaj2gvsm/QvlgADYLi5aFeqELX8NsMCX2KCKm9sxmuqFEP9DNDsJIVeuV yAxhL3ig38NGYjRdjKYfdqTPauVioYzkbC2Gpm98z2lcBLQ5YAUrCE+PQuBfemBR mD4csFYJ2Vq9IMA9X23Bjo7wA5lAJpmBth+xCmvCnuXoAcUbb1LVvIwepEuFFbzv awKGCYI26UnX0OyZdzod3HWKi3DP2ew3oaqIZk0EdvsG2mKY2slX9H7FseUHZlkx 1gvZj/G7j/oHsQui7tFr4KJqKAe/p3lXoM4vX2ykthX2ifBm7kI= -----END CERTIFICATE-----Generated at Sun Apr 13 07:47:15 2025 by rpki-client