$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft File: DFE92467290F9E190072585C1045251D6F8B05A3.mft (raw, json) Hash identifier: OOsnZGyNU/T+wInSKkidtTEXTx7V/fJheVJvl1SqU44= Subject key identifier: A5:61:07:A9:91:C2:E0:62:5B:A7:BE:31:E0:11:FF:8E:5D:56:0E:15 Authority key identifier: DF:E9:24:67:29:0F:9E:19:00:72:58:5C:10:45:25:1D:6F:8B:05:A3 Certificate issuer: /CN=DFE92467290F9E190072585C1045251D6F8B05A3 Certificate serial: 573C14DCB878533CDC3A39D7BED9350668CAD28B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFE92467290F9E190072585C1045251D6F8B05A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft Manifest number: 01EB Signing time: Fri 04 Apr 2025 05:22:18 +0000 Manifest this update: Fri 04 Apr 2025 05:17:18 +0000 Manifest next update: Mon 07 Apr 2025 16:14:18 +0000 Files and hashes: 1: DFE92467290F9E190072585C1045251D6F8B05A3.crl (hash: KzmsKbRCh/iTg2m9Ot6Qrh3aUCQPcIrgeQaFbGVamgI=) 2: 3130332e3138352e35322e302f32332d3234203d3e20313339343536.roa (hash: haaSHQN0sWh09iak7Jfz/FWXF5gl4JL5L2Lm/giP904=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.crl rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFE92467290F9E190072585C1045251D6F8B05A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 16:14:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:3c:14:dc:b8:78:53:3c:dc:3a:39:d7:be:d9:35:06:68:ca:d2:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFE92467290F9E190072585C1045251D6F8B05A3 Validity Not Before: Apr 4 05:17:18 2025 GMT Not After : Apr 7 16:14:18 2025 GMT Subject: CN=A56107A991C2E0625BA7BE31E011FF8E5D560E15 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:5e:e9:b9:06:55:da:50:26:a3:a2:ec:ac:89: fa:f3:33:ba:da:a6:40:17:1f:9b:ce:6f:d7:01:03: 06:c3:37:c8:6d:94:bc:fe:5a:39:8a:da:47:a4:7b: e1:f2:03:30:4c:07:ad:63:e5:2f:a7:51:9c:45:c9: 70:e7:05:c6:4f:7a:0b:20:54:8f:75:e2:cc:5e:32: 26:e0:ea:96:b3:5d:d3:d7:17:c8:7e:cd:ee:c6:fe: a7:f3:39:7a:fb:c6:78:d9:b3:0f:fd:5c:4f:48:1f: c0:76:f3:4b:ab:ba:ce:55:e3:a3:02:dc:1f:6e:22: 78:79:ba:59:0a:da:6a:47:3b:06:6d:6b:46:55:5f: 45:57:20:3e:5b:33:b7:eb:38:e1:8b:11:89:ec:34: 81:60:19:82:75:a5:55:a8:16:d1:85:af:b0:c3:4a: 09:c7:93:fc:01:7e:21:ae:f6:b4:7f:47:4e:4a:af: 47:cc:27:b5:d7:29:2e:a0:c1:e4:3e:62:f0:2f:77: 60:ed:55:32:01:81:28:89:e4:1c:ac:51:0c:ec:af: be:c2:d1:0e:f7:9b:40:d1:d0:05:28:89:76:94:5a: 7d:33:3b:34:18:e0:c3:10:3b:e9:cc:c2:b9:82:ad: 56:a4:0f:43:3d:ab:93:43:0b:3f:ab:47:ab:a6:ac: b0:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:61:07:A9:91:C2:E0:62:5B:A7:BE:31:E0:11:FF:8E:5D:56:0E:15 X509v3 Authority Key Identifier: keyid:DF:E9:24:67:29:0F:9E:19:00:72:58:5C:10:45:25:1D:6F:8B:05:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFE92467290F9E190072585C1045251D6F8B05A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 18:06:7b:35:ef:a1:a1:10:37:f8:75:15:9a:10:2c:36:c2:05: fe:1a:53:df:77:d4:92:36:dc:8e:da:10:6a:83:f0:1d:fa:8f: 11:61:08:d7:65:23:0e:02:55:90:38:b1:5a:31:ab:d0:3c:e9: d4:f9:cb:cc:f9:b8:1f:af:6d:3a:8c:b9:67:6d:b5:86:bf:f6: a6:02:e5:c8:df:95:86:83:11:18:39:a6:c6:e3:23:b2:ae:d6: 00:ad:44:af:d9:b4:0c:c7:4f:bc:fa:4b:c6:00:91:cf:bb:70: 14:e4:b8:df:01:84:55:c1:77:2f:0a:52:fc:5b:41:c9:be:c0: 00:f9:c7:78:b9:eb:c1:67:cc:c9:8f:bf:c6:40:be:51:cc:5d: 77:17:49:eb:03:35:e7:aa:29:6b:a3:81:36:13:29:1b:ee:2c: 98:16:13:6d:fd:52:86:8f:ed:55:03:13:22:48:52:78:42:c3: f4:81:a3:ff:c0:04:f7:67:d7:1e:db:65:46:c0:18:b5:c6:09: 87:48:5f:ab:66:88:2b:54:86:5f:55:d4:a5:39:9b:7e:3c:05: 91:c5:b7:91:20:d3:64:52:25:66:fc:75:82:6a:35:1f:cf:51: 38:61:f3:ad:e8:6e:02:b9:0b:4f:80:60:4b:a2:f2:37:7a:51: 49:05:e7:7e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVzwU3Lh4UzzcOjnXvtk1BmjK0oswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZFOTI0NjcyOTBGOUUxOTAwNzI1ODVDMTA0NTI1MUQ2 RjhCMDVBMzAeFw0yNTA0MDQwNTE3MThaFw0yNTA0MDcxNjE0MThaMDMxMTAvBgNV BAMTKEE1NjEwN0E5OTFDMkUwNjI1QkE3QkUzMUUwMTFGRjhFNUQ1NjBFMTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCXum5BlXaUCajouysifrzM7ra pkAXH5vOb9cBAwbDN8htlLz+WjmK2keke+HyAzBMB61j5S+nUZxFyXDnBcZPegsg VI914sxeMibg6pazXdPXF8h+ze7G/qfzOXr7xnjZsw/9XE9IH8B280urus5V46MC 3B9uInh5ulkK2mpHOwZta0ZVX0VXID5bM7frOOGLEYnsNIFgGYJ1pVWoFtGFr7DD SgnHk/wBfiGu9rR/R05Kr0fMJ7XXKS6gweQ+YvAvd2DtVTIBgSiJ5BysUQzsr77C 0Q73m0DR0AUoiXaUWn0zOzQY4MMQO+nMwrmCrVakD0M9q5NDCz+rR6umrLAZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpWEHqZHC4GJbp74x4BH/jl1WDhUwHwYDVR0j BBgwFoAU3+kkZykPnhkAclhcEEUlHW+LBaMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YzQ1NzRlMi0zYjk0LTQxNjAtOGViOC04ZjA5YWFkODJjMmMvMC9ERkU5MjQ2NzI5 MEY5RTE5MDA3MjU4NUMxMDQ1MjUxRDZGOEIwNUEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREZFOTI0NjcyOTBGOUUxOTAwNzI1ODVDMTA0NTI1MUQ2RjhC MDVBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmM0NTc0ZTItM2I5NC00MTYwLThl YjgtOGYwOWFhZDgyYzJjLzAvREZFOTI0NjcyOTBGOUUxOTAwNzI1ODVDMTA0NTI1 MUQ2RjhCMDVBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABgGezXvoaEQN/h1FZoQLDbCBf4aU9931JI2 3I7aEGqD8B36jxFhCNdlIw4CVZA4sVoxq9A86dT5y8z5uB+vbTqMuWdttYa/9qYC 5cjflYaDERg5psbjI7Ku1gCtRK/ZtAzHT7z6S8YAkc+7cBTkuN8BhFXBdy8KUvxb Qcm+wAD5x3i568FnzMmPv8ZAvlHMXXcXSesDNeeqKWujgTYTKRvuLJgWE239UoaP 7VUDEyJIUnhCw/SBo//ABPdn1x7bZUbAGLXGCYdIX6tmiCtUhl9V1KU5m348BZHF t5Eg02RSJWb8dYJqNR/PUThh863obgK5C0+AYEui8jd6UUkF534= -----END CERTIFICATE-----Generated at Sat Apr 5 19:06:49 2025 by rpki-client