$ rpki-client -vvf repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.mft File: DC935B44A30F5AECC1B1A1508E4B812572AB769B.mft (raw, json) Hash identifier: lHoE8Q3rDPwGntmcO7bH3kvQC30DU4KXdNYs2HKoSl0= Subject key identifier: 4A:86:BC:47:A8:EA:CF:C3:18:17:84:0B:51:37:91:86:9A:94:AE:F6 Authority key identifier: DC:93:5B:44:A3:0F:5A:EC:C1:B1:A1:50:8E:4B:81:25:72:AB:76:9B Certificate issuer: /CN=DC935B44A30F5AECC1B1A1508E4B812572AB769B Certificate serial: 128FE1D4DF37DAD0B54BBF8371C1E3EE8D85279A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.mft Manifest number: 04C5 Signing time: Thu 03 Apr 2025 06:31:20 +0000 Manifest this update: Thu 03 Apr 2025 06:26:20 +0000 Manifest next update: Sun 06 Apr 2025 15:57:20 +0000 Files and hashes: 1: 3130332e34392e3232302e302f32322d3232203d3e203234323131.roa (hash: jn5ELD9d7J3S6Is4OuoIa81jRUPNRS7VH/L2BxODy7U=) 2: 3230332e3139302e3234342e302f32332d3233203d3e203234323131.roa (hash: rUMnL5o4jfF8Xk23x+nY13Og9gVdfKtim/VgsCTFYWA=) 3: 3230332e3139302e3234322e302f32332d3233203d3e203234323131.roa (hash: KORoMdmEFellsQ4EIixNWtMn2mdrwHcMnMt2u7bRdgA=) 4: 323430323a613030303a343030303a3a2f33342d3334203d3e203234323131.roa (hash: da6VPzKks75GP7axUBrN1Ezhq6y+B/pfersv+H6tZ8s=) 5: 3130332e34392e3232302e302f32332d3233203d3e203234323131.roa (hash: VU7yTZJJzE9+CKf+7CWEBUbMLNLkqTfujFALCx1f38Y=) 6: DC935B44A30F5AECC1B1A1508E4B812572AB769B.crl (hash: sf71VEttBacplRkdk9HI1LvDabOEoGNhy7xLW92de8w=) 7: 3230332e3139302e3234302e302f32312d3231203d3e203234323131.roa (hash: einwJ3TMLG60eX8vOb8BP75bS+iG2kasu0kVBXw/aA0=) 8: 3230332e3139302e3234362e302f32332d3233203d3e203234323131.roa (hash: D73qWtixS2k2vo+e7xc07gepRtYm2z1PcaFmujji1Q8=) 9: 3130332e34392e3232322e302f32332d3233203d3e203234323131.roa (hash: eEzhgEkeswxEJB6cH8f720KKqD00kZq88ScuJtLKf4Q=) 10: 3230332e3139302e3234362e302f32342d3234203d3e203234323131.roa (hash: Px+0ZRxXqTaYuiAQpr845u2JpmHBGtqVxsdEAa7WjAw=) 11: 323430323a613030303a383030303a3a2f33342d3334203d3e203234323131.roa (hash: tDWHyBWQyv76eGBvUmmlMgh4YlyJb04q9W1lGaYrzss=) 12: 3230332e3139302e3234372e302f32342d3234203d3e203234323131.roa (hash: fbwTq+MNHXCM846ONnkdFzthRjFibT/sGY17CU4maLM=) 13: 323430323a613030303a3a2f33342d3334203d3e203234323131.roa (hash: 2FlS11/c/x3Ynfk/ZVrKJLiDsOp9Gs66TvBDURO1NdY=) 14: 323430323a613030303a633030303a3a2f33342d3334203d3e203234323131.roa (hash: rnq9VA9UYxMUHx8T910m/pq5BuKXy74cv5MKvie9m3M=) 15: 3230332e3139302e3234302e302f32332d3233203d3e203234323131.roa (hash: XuClycGrR46sx6e0k5i1gqFyr8XtkjJjo7XVCOwHej8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.crl rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 15:57:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:8f:e1:d4:df:37:da:d0:b5:4b:bf:83:71:c1:e3:ee:8d:85:27:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC935B44A30F5AECC1B1A1508E4B812572AB769B Validity Not Before: Apr 3 06:26:20 2025 GMT Not After : Apr 6 15:57:20 2025 GMT Subject: CN=4A86BC47A8EACFC31817840B513791869A94AEF6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:8c:be:a5:9b:93:e5:f2:c6:4b:99:55:82:63: 74:8c:96:8b:83:38:14:f6:5f:57:18:93:d8:b3:cb: 33:b5:0f:b3:b6:0c:1f:1f:fc:2d:ca:da:7c:be:d1: 20:a8:e5:26:ff:ea:b3:df:55:bd:47:f4:1d:b2:e8: 4d:6f:78:a7:92:ce:a9:e0:7f:f5:cb:13:6f:44:29: de:e7:f4:ed:80:b6:50:96:4e:4b:96:6e:2a:fd:55: d0:16:18:2d:cc:1b:63:79:3b:87:99:5e:7e:d3:37: 86:bf:cc:c5:a4:e9:98:ff:21:46:b9:83:bf:fd:87: 07:0c:78:b0:d0:97:e4:99:4d:45:ed:cb:b1:e0:70: 3d:ac:e6:34:ce:90:97:71:7b:20:9d:55:65:ea:c4: dd:87:d4:81:52:9e:1a:89:df:6a:59:0e:c8:b3:9c: 58:7f:d8:0e:70:0f:cd:58:96:88:20:d8:64:65:3e: d1:6e:38:ea:3d:69:00:c3:eb:80:d3:d8:52:91:18: 03:a6:44:ca:a0:32:e6:87:50:57:9b:b4:3d:31:81: da:c2:5e:e7:da:71:87:d1:1d:0d:d0:44:ba:c9:bd: 1e:38:9d:1e:b0:5b:50:01:67:2e:c5:ca:f7:99:32: b5:ae:04:ad:13:ba:ed:96:b1:d8:6e:98:8d:25:ba: 12:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:86:BC:47:A8:EA:CF:C3:18:17:84:0B:51:37:91:86:9A:94:AE:F6 X509v3 Authority Key Identifier: keyid:DC:93:5B:44:A3:0F:5A:EC:C1:B1:A1:50:8E:4B:81:25:72:AB:76:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:8d:34:7d:76:a4:e3:63:94:8d:15:c9:b4:39:46:03:8a:05: 29:9a:35:60:0c:52:aa:f3:af:35:02:5a:54:5c:79:5c:d3:17: 93:c1:bf:cd:d1:50:b4:04:b7:53:d5:0d:36:b9:a5:a8:de:bf: 0e:39:a2:19:12:e2:64:a5:9c:f5:96:99:00:76:47:4e:15:b9: fb:18:58:8a:7e:0d:d8:6b:a9:ab:40:3c:fa:96:b4:8a:b1:4c: 05:98:f0:7b:0c:a4:3d:8b:fc:05:b5:79:72:8c:b5:cf:ce:7c: 74:a2:4a:87:09:e7:cc:57:a8:a5:aa:bc:9e:ea:2c:b6:2a:31: b0:26:78:9a:cb:6a:d0:3f:14:87:fa:3b:eb:c8:ea:a5:86:9e: 5a:e7:2d:52:e4:23:c4:e2:12:71:91:71:41:cd:d7:4c:44:7b: 26:d7:20:4f:31:95:f7:a1:f4:60:82:a7:e4:38:49:8f:b3:8e: 8c:13:04:3b:fb:45:93:3d:78:95:8e:4d:58:20:01:fa:31:5d: e4:53:1e:42:97:ed:bb:35:d2:87:8b:e2:0c:22:92:d5:57:69: bc:82:7d:b7:06:e7:0e:c2:55:a7:5d:27:9e:d7:8b:6a:fc:99: b1:3d:e7:32:5f:3b:0a:71:3e:f2:a3:0c:87:a2:b8:0c:71:db: 63:83:d2:71 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEo/h1N832tC1S7+DccHj7o2FJ5owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREM5MzVCNDRBMzBGNUFFQ0MxQjFBMTUwOEU0QjgxMjU3 MkFCNzY5QjAeFw0yNTA0MDMwNjI2MjBaFw0yNTA0MDYxNTU3MjBaMDMxMTAvBgNV BAMTKDRBODZCQzQ3QThFQUNGQzMxODE3ODQwQjUxMzc5MTg2OUE5NEFFRjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCojL6lm5Pl8sZLmVWCY3SMlouD OBT2X1cYk9izyzO1D7O2DB8f/C3K2ny+0SCo5Sb/6rPfVb1H9B2y6E1veKeSzqng f/XLE29EKd7n9O2AtlCWTkuWbir9VdAWGC3MG2N5O4eZXn7TN4a/zMWk6Zj/IUa5 g7/9hwcMeLDQl+SZTUXty7HgcD2s5jTOkJdxeyCdVWXqxN2H1IFSnhqJ32pZDsiz nFh/2A5wD81Ylogg2GRlPtFuOOo9aQDD64DT2FKRGAOmRMqgMuaHUFebtD0xgdrC XufacYfRHQ3QRLrJvR44nR6wW1ABZy7FyveZMrWuBK0Tuu2WsdhumI0luhKVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSoa8R6jqz8MYF4QLUTeRhpqUrvYwHwYDVR0j BBgwFoAU3JNbRKMPWuzBsaFQjkuBJXKrdpswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWYwMTNmOS1iNGY3LTQ1OGMtYWFjNS0wODA0MWIzZjY1ZTYvMC9EQzkzNUI0NEEz MEY1QUVDQzFCMUExNTA4RTRCODEyNTcyQUI3NjlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREM5MzVCNDRBMzBGNUFFQ0MxQjFBMTUwOEU0QjgxMjU3MkFC NzY5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTlmMDEzZjktYjRmNy00NThjLWFh YzUtMDgwNDFiM2Y2NWU2LzAvREM5MzVCNDRBMzBGNUFFQ0MxQjFBMTUwOEU0Qjgx MjU3MkFCNzY5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHGNNH12pONjlI0VybQ5RgOKBSmaNWAMUqrz rzUCWlRceVzTF5PBv83RULQEt1PVDTa5pajevw45ohkS4mSlnPWWmQB2R04VufsY WIp+DdhrqatAPPqWtIqxTAWY8HsMpD2L/AW1eXKMtc/OfHSiSocJ58xXqKWqvJ7q LLYqMbAmeJrLatA/FIf6O+vI6qWGnlrnLVLkI8TiEnGRcUHN10xEeybXIE8xlfeh 9GCCp+Q4SY+zjowTBDv7RZM9eJWOTVggAfoxXeRTHkKX7bs10oeL4gwiktVXabyC fbcG5w7CVaddJ57Xi2r8mbE95zJfOwpxPvKjDIeiuAxx22OD0nE= -----END CERTIFICATE-----Generated at Sat Apr 5 16:39:43 2025 by rpki-client