$ rpki-client -vvf repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.mft File: DCD5207AC33E109E31052BBB7F811DBF6DA180BB.mft (raw, json) Hash identifier: gJg82IS4g7zP+dOMnxqceYnuYQyuh9JjJrcEuBNa0C8= Subject key identifier: E6:2F:BF:B3:92:EE:EB:95:55:60:5F:0B:B0:0B:27:B2:BB:DA:F2:9D Authority key identifier: DC:D5:20:7A:C3:3E:10:9E:31:05:2B:BB:7F:81:1D:BF:6D:A1:80:BB Certificate issuer: /CN=DCD5207AC33E109E31052BBB7F811DBF6DA180BB Certificate serial: 4B25983E7ADC698339D0E4EDB8CE3AC879BCBF72 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.mft Manifest number: 2A Signing time: Tue 08 Apr 2025 20:11:55 +0000 Manifest this update: Tue 08 Apr 2025 20:06:55 +0000 Manifest next update: Sat 12 Apr 2025 03:28:55 +0000 Files and hashes: 1: 3136302e32322e3130312e302f32342d3234203d3e20313532383039.roa (hash: mizXQiZMhSS2dg4DmWjoCSbZiybtKsfGNPxNOZ0yF9I=) 2: DCD5207AC33E109E31052BBB7F811DBF6DA180BB.crl (hash: 6S1SdHhgItvqfnamY3JvtJm5gWX5GSeLNa2xXcogoH0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.crl rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 03:28:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4b:25:98:3e:7a:dc:69:83:39:d0:e4:ed:b8:ce:3a:c8:79:bc:bf:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCD5207AC33E109E31052BBB7F811DBF6DA180BB Validity Not Before: Apr 8 20:06:55 2025 GMT Not After : Apr 12 03:28:55 2025 GMT Subject: CN=E62FBFB392EEEB9555605F0BB00B27B2BBDAF29D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:a1:7b:a0:d3:74:3f:ce:ae:90:ed:8d:41:85: b2:75:fc:e8:39:6c:fe:99:91:69:83:ee:ec:e9:28: c2:7b:db:75:cb:d6:75:68:8a:f8:45:b1:60:24:fa: 97:27:3c:0a:cc:7d:fc:1f:03:75:d1:8b:b1:8f:9b: 72:2e:0d:62:45:60:bf:2d:fa:d5:f6:ea:bf:5b:b1: b7:04:58:f6:a7:0e:78:ab:94:b8:48:8b:0d:c1:11: 8a:ba:1c:b5:ab:56:c7:97:c8:27:6c:f0:b6:82:2f: ba:b7:d4:76:68:3b:ac:c2:5a:14:f0:8d:ac:57:09: 32:c9:41:9f:02:80:66:01:00:19:d0:e5:c2:fd:be: fb:0d:21:07:3d:21:48:8f:14:c8:53:d4:05:4a:af: d8:b8:4f:9d:49:58:3d:82:db:99:c9:04:a2:dd:53: 49:fa:7b:2d:bf:43:9d:3b:60:8d:c8:f1:0f:cd:04: 82:95:9a:72:f6:2f:f9:bd:38:d9:06:f2:73:c5:28: c2:44:06:e5:41:f5:86:99:94:40:1a:49:d7:d2:52: d9:ec:4b:96:92:b2:50:67:51:14:8a:a9:87:24:9a: 83:8f:34:fd:15:96:12:43:11:b1:db:a5:35:62:5b: 90:30:5c:94:49:5b:07:d3:ff:d8:3c:8f:e1:ef:91: 57:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:2F:BF:B3:92:EE:EB:95:55:60:5F:0B:B0:0B:27:B2:BB:DA:F2:9D X509v3 Authority Key Identifier: keyid:DC:D5:20:7A:C3:3E:10:9E:31:05:2B:BB:7F:81:1D:BF:6D:A1:80:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption e6:a7:c2:5e:1b:f7:a3:1e:40:bf:f3:b8:86:03:5f:62:ab:ca: 00:b2:71:c6:d4:c6:06:fe:37:e1:af:2d:d0:28:b7:02:e5:9b: d9:41:3d:1d:c6:67:ea:bf:44:9f:4e:13:1b:7a:e0:79:b6:b0: 10:b9:ee:70:88:2f:e9:9f:e0:26:3e:2d:3b:43:29:94:d5:1a: 62:82:e7:ee:fe:53:48:30:51:12:2c:26:6a:e9:0e:ba:1d:40: ff:66:9e:f7:e2:b7:37:a0:78:ac:dd:7a:3b:5d:dd:3d:2e:35: 7c:15:03:3d:99:06:02:38:a2:cf:36:b0:35:8d:d0:ba:74:f7: 03:da:cb:7e:56:32:b7:2c:00:ba:86:cb:08:c7:31:88:2f:68: 7b:78:4c:fb:4d:af:78:7f:0f:2d:6a:35:b9:81:c2:43:2f:47: 76:8b:a2:c7:83:a7:68:31:29:44:31:ce:ac:2a:1a:5a:5d:4f: d8:c4:03:b6:22:fd:4f:04:00:52:4b:66:8c:89:2b:38:2d:54: 5a:bf:ff:02:ac:ca:ea:9e:26:76:65:57:0b:bb:50:b4:45:49: 1b:48:4d:80:f4:07:4b:42:e8:4a:35:e4:57:32:90:a1:6c:f2: 02:e5:2d:c0:a3:99:a0:45:15:f6:bb:82:fb:ae:43:02:77:ae: 1d:47:1a:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSyWYPnrcaYM50OTtuM46yHm8v3IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENENTIwN0FDMzNFMTA5RTMxMDUyQkJCN0Y4MTFEQkY2 REExODBCQjAeFw0yNTA0MDgyMDA2NTVaFw0yNTA0MTIwMzI4NTVaMDMxMTAvBgNV BAMTKEU2MkZCRkIzOTJFRUVCOTU1NTYwNUYwQkIwMEIyN0IyQkJEQUYyOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnoXug03Q/zq6Q7Y1BhbJ1/Og5 bP6ZkWmD7uzpKMJ723XL1nVoivhFsWAk+pcnPArMffwfA3XRi7GPm3IuDWJFYL8t +tX26r9bsbcEWPanDnirlLhIiw3BEYq6HLWrVseXyCds8LaCL7q31HZoO6zCWhTw jaxXCTLJQZ8CgGYBABnQ5cL9vvsNIQc9IUiPFMhT1AVKr9i4T51JWD2C25nJBKLd U0n6ey2/Q507YI3I8Q/NBIKVmnL2L/m9ONkG8nPFKMJEBuVB9YaZlEAaSdfSUtns S5aSslBnURSKqYckmoOPNP0VlhJDEbHbpTViW5AwXJRJWwfT/9g8j+HvkVeRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5i+/s5Lu65VVYF8LsAsnsrva8p0wHwYDVR0j BBgwFoAU3NUgesM+EJ4xBSu7f4Edv22hgLswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDhlZjExOS03ZGRmLTQ1ZTUtODYzNC0zOGI3NzI1OGNiY2MvMC9EQ0Q1MjA3QUMz M0UxMDlFMzEwNTJCQkI3RjgxMURCRjZEQTE4MEJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRENENTIwN0FDMzNFMTA5RTMxMDUyQkJCN0Y4MTFEQkY2REEx ODBCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ4ZWYxMTktN2RkZi00NWU1LTg2 MzQtMzhiNzcyNThjYmNjLzAvRENENTIwN0FDMzNFMTA5RTMxMDUyQkJCN0Y4MTFE QkY2REExODBCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOanwl4b96MeQL/zuIYDX2KrygCyccbUxgb+ N+GvLdAotwLlm9lBPR3GZ+q/RJ9OExt64Hm2sBC57nCIL+mf4CY+LTtDKZTVGmKC 5+7+U0gwURIsJmrpDrodQP9mnvfitzegeKzdejtd3T0uNXwVAz2ZBgI4os82sDWN 0Lp09wPay35WMrcsALqGywjHMYgvaHt4TPtNr3h/Dy1qNbmBwkMvR3aLoseDp2gx KUQxzqwqGlpdT9jEA7Yi/U8EAFJLZoyJKzgtVFq//wKsyuqeJnZlVwu7ULRFSRtI TYD0B0tC6Eo15FcykKFs8gLlLcCjmaBFFfa7gvuuQwJ3rh1HGug= -----END CERTIFICATE-----Generated at Wed Apr 9 17:29:51 2025 by rpki-client