$ rpki-client -vvf repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft File: D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft (raw, json) Hash identifier: sDm4kSzv/55qfTX/dcyHFTxGfrrWB6oJrrfOBhSFbLA= Subject key identifier: 1D:9B:E5:D0:6F:FC:A1:3E:88:E5:E8:BA:D0:D1:61:C6:92:43:43:B5 Authority key identifier: D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28 Certificate issuer: /CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428 Certificate serial: 40C7A1829DE75279E40A9F5C47DFF5849EECB01B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft Manifest number: 031A Signing time: Tue 03 Jun 2025 16:51:17 +0000 Manifest this update: Tue 03 Jun 2025 16:46:17 +0000 Manifest next update: Fri 06 Jun 2025 22:03:17 +0000 Files and hashes: 1: 3130332e38322e3138302e302f32342d3234203d3e20313336303631.roa (hash: vrTITHbJ7Z89V7LCGHxYnSOAw5dei/ElVg8Aq8hclwk=) 2: 3130332e38322e3138322e302f32342d3234203d3e203535303032.roa (hash: TOlmToT6ArG31254ugnepFlJm7GRal9sFalZQtBB9ZU=) 3: 3130332e38322e3138332e302f32342d3234203d3e20313336303631.roa (hash: jcnGTwMxragJZygMI7x8GrOzTkyTrpwEdMq5rorWZ5w=) 4: D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl (hash: L+YXOgyr7m0xnij0gddHZ7A6mF0w2Ckj4YUk3hihy/k=) 5: 3130332e38322e3138332e302f32342d3234203d3e203535303032.roa (hash: fgpsoyfDzLyMcnx59ChelAzY0mutvwsLTeGKdYegbvA=) 6: 3130332e38322e3138322e302f32342d3234203d3e20313336303631.roa (hash: WjIjT3NjVVlR5hMapPhqI5pb0J0MFGcIoHXnqSGNGKM=) 7: 3130332e38322e3138302e302f32332d3233203d3e203535303032.roa (hash: +FTF4nfRYC5wsN7EuNxSdS7IKhjhi49gS7F0z0AapdE=) 8: 3130332e38322e3138302e302f32332d3233203d3e20313336303631.roa (hash: aFm1cy3NmwA8t2HY8uThbjC+zS/PKRo7I8s9/bpxDts=) 9: 3130332e38322e3138312e302f32342d3234203d3e20313336303631.roa (hash: hn9BpZ4mJ7xZ4KfEXMzBILbMuvOXYpPzh4YpRCquyqk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:c7:a1:82:9d:e7:52:79:e4:0a:9f:5c:47:df:f5:84:9e:ec:b0:1b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428 Validity Not Before: Jun 3 16:46:17 2025 GMT Not After : Jun 6 22:03:17 2025 GMT Subject: CN=1D9BE5D06FFCA13E88E5E8BAD0D161C6924343B5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:69:19:a6:b0:e1:b5:20:e4:36:88:de:48:fd: 2b:db:c9:37:02:28:01:f0:c7:1c:53:0d:29:20:a9: b2:13:8a:0e:9e:31:7b:38:cf:7f:2c:12:87:da:86: d5:80:b8:e4:8d:f7:20:7e:6b:27:cf:f1:1c:b5:67: 47:82:03:44:13:cc:0a:bd:e1:75:0e:1a:d5:6c:b7: 5c:f3:97:09:c8:26:e7:2c:cd:a3:69:4b:ea:c1:63: f4:76:38:18:c7:d2:b4:49:99:0d:4a:7d:be:36:f8: 6b:56:9b:b6:a4:84:21:fe:cd:63:3a:a1:46:62:83: 9d:30:50:21:23:b5:44:fd:4a:c3:23:a8:bb:13:a3: 2a:21:b1:b9:9b:cf:f7:f6:42:24:ab:ca:60:7b:e9: 68:9b:7a:3f:f2:f4:00:a1:b0:d4:b9:5a:e7:34:14: 37:0f:39:9c:2b:fc:0b:00:52:a6:04:2b:01:8e:e9: d0:19:c9:ba:23:b9:22:cc:95:93:f5:8e:5e:db:88: 03:c1:28:e9:66:ab:9d:4b:e1:76:a6:1e:e4:ff:78: 70:da:0c:e3:53:b9:2f:a9:7f:66:5d:97:db:ab:06: c3:c8:d7:8a:58:f4:9e:46:70:aa:85:23:85:df:f1: 7a:8b:52:b3:12:59:39:b5:d7:f5:da:68:0c:82:75: 4f:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:9B:E5:D0:6F:FC:A1:3E:88:E5:E8:BA:D0:D1:61:C6:92:43:43:B5 X509v3 Authority Key Identifier: keyid:D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:1c:af:27:78:69:8f:7c:bc:61:3a:f4:a9:2f:64:52:2d:d2: 3b:da:77:0e:f7:0e:5f:05:dc:0f:3f:27:d3:9e:01:04:6d:1a: 4c:29:29:72:1a:12:36:18:d1:bf:17:46:ef:b2:03:4c:97:e9: 3b:b0:a5:16:47:df:64:68:f8:32:be:ac:4c:93:bf:44:e1:e4: 81:ec:53:27:ab:de:bb:ef:5c:fd:00:67:a0:7e:97:ca:7b:b0: 90:21:42:4d:0d:f9:52:dc:0e:e8:3a:5f:97:a6:bb:c2:97:75: e2:d5:06:e2:f9:dd:85:08:37:cb:f7:f8:b5:b7:3e:7f:31:cf: db:0c:6e:d4:13:88:45:ee:b9:f8:11:7e:d2:27:4a:fb:26:8d: ac:35:98:bd:27:78:c6:c3:d8:8c:83:a8:ea:7c:24:2d:9c:b3: 05:e4:97:67:43:7a:a3:bf:c4:34:15:ad:dd:49:f6:ea:b8:2c: 1e:dd:f0:7b:36:29:11:fe:bf:90:98:9b:7b:a1:5a:7a:b7:ca: 0d:58:09:28:f7:38:91:b7:e3:ad:af:5e:cc:39:30:32:f5:65: 9a:b5:dc:c0:0f:20:11:1a:71:a7:55:19:73:91:8d:36:28:55: e8:dd:bc:6b:f0:19:ab:11:f1:53:85:9e:ff:b2:0e:bc:b7:dc: c6:2a:0f:23 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQMehgp3nUnnkCp9cR9/1hJ7ssBswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFDRTRFRjkxMENBQjc4NEVGMjkzRDI2RDk4M0E5MkZD QjNBMzQyODAeFw0yNTA2MDMxNjQ2MTdaFw0yNTA2MDYyMjAzMTdaMDMxMTAvBgNV BAMTKDFEOUJFNUQwNkZGQ0ExM0U4OEU1RThCQUQwRDE2MUM2OTI0MzQzQjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdaRmmsOG1IOQ2iN5I/SvbyTcC KAHwxxxTDSkgqbITig6eMXs4z38sEofahtWAuOSN9yB+ayfP8Ry1Z0eCA0QTzAq9 4XUOGtVst1zzlwnIJucszaNpS+rBY/R2OBjH0rRJmQ1Kfb42+GtWm7akhCH+zWM6 oUZig50wUCEjtUT9SsMjqLsToyohsbmbz/f2QiSrymB76Wibej/y9AChsNS5Wuc0 FDcPOZwr/AsAUqYEKwGO6dAZybojuSLMlZP1jl7biAPBKOlmq51L4XamHuT/eHDa DONTuS+pf2Zdl9urBsPI14pY9J5GcKqFI4Xf8XqLUrMSWTm11/XaaAyCdU+xAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHZvl0G/8oT6I5ei60NFhxpJDQ7UwHwYDVR0j BBgwFoAU0c5O+RDKt4TvKT0m2YOpL8s6NCgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDc1OGYxNS01ZGU4LTQ4N2QtOTk0NS1jM2VhMjA3ZTQ0YWQvMC9EMUNFNEVGOTEw Q0FCNzg0RUYyOTNEMjZEOTgzQTkyRkNCM0EzNDI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDFDRTRFRjkxMENBQjc4NEVGMjkzRDI2RDk4M0E5MkZDQjNB MzQyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODA3NThmMTUtNWRlOC00ODdkLTk5 NDUtYzNlYTIwN2U0NGFkLzAvRDFDRTRFRjkxMENBQjc4NEVGMjkzRDI2RDk4M0E5 MkZDQjNBMzQyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ0cryd4aY98vGE69KkvZFIt0jvadw73Dl8F 3A8/J9OeAQRtGkwpKXIaEjYY0b8XRu+yA0yX6TuwpRZH32Ro+DK+rEyTv0Th5IHs Uyer3rvvXP0AZ6B+l8p7sJAhQk0N+VLcDug6X5emu8KXdeLVBuL53YUIN8v3+LW3 Pn8xz9sMbtQTiEXuufgRftInSvsmjaw1mL0neMbD2IyDqOp8JC2cswXkl2dDeqO/ xDQVrd1J9uq4LB7d8Hs2KRH+v5CYm3uhWnq3yg1YCSj3OJG3462vXsw5MDL1ZZq1 3MAPIBEacadVGXORjTYoVejdvGvwGasR8VOFnv+yDry33MYqDyM= -----END CERTIFICATE-----Generated at Tue Jun 3 23:31:35 2025 by rpki-client