$ rpki-client -vvf repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.mft File: DA8C840CB41D2668581983C2C4E964E67EF2D6A1.mft (raw, json) Hash identifier: jb0JE0TtklZjJ0+Z1hLi2/xTg1PklEaDqIj2utz4mTs= Subject key identifier: D1:83:CE:AB:4C:93:9F:77:E5:90:56:DC:98:CD:C2:1D:C7:61:14:86 Authority key identifier: DA:8C:84:0C:B4:1D:26:68:58:19:83:C2:C4:E9:64:E6:7E:F2:D6:A1 Certificate issuer: /CN=DA8C840CB41D2668581983C2C4E964E67EF2D6A1 Certificate serial: 472B363056D4B411A1312C09310F40E68E520866 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.mft Manifest number: 021A Signing time: Tue 15 Apr 2025 16:21:40 +0000 Manifest this update: Tue 15 Apr 2025 16:16:40 +0000 Manifest next update: Sat 19 Apr 2025 03:15:40 +0000 Files and hashes: 1: 3130332e3137392e3231342e302f32332d3234203d3e20313439333735.roa (hash: ufTh3NuQ02tKvK6+AzJYb6zEYLra1UIfIsPq97spTJM=) 2: DA8C840CB41D2668581983C2C4E964E67EF2D6A1.crl (hash: 3k7Y2tQgVkKBRj4SV4kVm7xC34kPStjtgltr+Ay+tDE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.crl rsync://repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 19 Apr 2025 03:15:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:2b:36:30:56:d4:b4:11:a1:31:2c:09:31:0f:40:e6:8e:52:08:66 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA8C840CB41D2668581983C2C4E964E67EF2D6A1 Validity Not Before: Apr 15 16:16:40 2025 GMT Not After : Apr 19 03:15:40 2025 GMT Subject: CN=D183CEAB4C939F77E59056DC98CDC21DC7611486 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:75:1e:fb:b7:b0:79:42:b4:bb:65:7e:f0:a6: 12:ff:50:5a:9e:3d:ab:af:2c:04:cf:ca:dc:df:56: 82:b4:c4:d2:55:c9:5a:20:92:10:62:67:2d:3f:74: 76:a6:6f:20:0d:31:3e:63:5c:86:48:27:95:d1:00: b3:5a:66:11:57:c0:08:20:7b:57:2a:66:ba:66:7c: 90:b2:8c:ab:84:80:9e:42:3b:07:90:ef:18:1a:dd: 2f:56:0f:67:29:88:2d:36:a9:88:81:8b:41:3d:47: 3b:b6:9d:bd:aa:22:a7:4b:7d:c3:ae:d5:89:66:df: 26:05:3e:f1:68:56:d8:bf:3e:19:0f:3f:f5:4e:0c: 19:27:95:29:ef:b1:69:bd:06:bb:76:ec:3b:d3:55: 85:dc:a3:94:37:22:95:7e:9a:60:2a:20:95:c3:e5: 18:0d:cd:15:7f:3d:2e:d1:73:e8:c8:d7:8b:39:23: 34:a6:48:91:eb:04:54:09:6c:16:b9:c5:a2:f7:68: 2d:f8:10:2e:01:39:f5:4f:b5:73:b1:c8:2a:8b:48: 2e:b9:fe:1d:20:81:8b:fb:4a:e5:54:7b:57:d6:e4: 58:f2:18:c9:70:4e:f7:a9:fe:70:97:15:ab:1d:1f: f4:c0:f1:b7:a8:78:14:19:36:ea:94:5c:ac:a1:c2: 4d:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:83:CE:AB:4C:93:9F:77:E5:90:56:DC:98:CD:C2:1D:C7:61:14:86 X509v3 Authority Key Identifier: keyid:DA:8C:84:0C:B4:1D:26:68:58:19:83:C2:C4:E9:64:E6:7E:F2:D6:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:8b:ce:c5:77:a4:ae:f3:9c:78:7e:e6:cd:2a:81:a1:ed:d3: 92:b4:2c:97:6d:42:1f:cd:dd:bf:fc:fb:a1:34:cd:29:1c:2c: 1f:a0:e8:c1:e2:34:ce:f7:3e:22:37:d3:b0:d2:fa:26:46:c3: 0d:c1:7f:f0:c7:54:a3:c6:e4:a8:60:6c:5f:55:06:88:62:b3: 11:38:6a:01:4c:5d:97:c2:c4:d1:ae:66:3a:d1:f0:ad:fa:6a: 0c:a3:9d:8e:4f:cb:46:e9:0a:cf:ce:0e:65:51:0d:10:2f:f9: ba:25:ca:76:b9:e5:db:21:20:f6:56:2d:c3:5c:95:5e:87:7e: 80:61:c7:5e:b6:2a:6c:0e:43:a3:83:82:af:bb:fe:48:52:13: 69:2c:28:d9:9a:fa:55:ee:a2:2c:ea:ea:d8:66:87:06:09:93: 33:0c:42:fd:eb:4b:0a:c4:68:07:a5:80:f2:e6:23:48:b6:f5: 6a:1c:3a:8f:21:96:e8:c0:ea:c1:4d:67:55:33:23:04:2f:42: aa:e9:31:7e:e0:e0:92:a5:f9:c1:bd:13:23:76:bc:ce:41:f7: bf:aa:d6:9f:ab:7e:00:72:7e:cb:3c:6e:c6:bf:9e:65:2e:a2: 52:8b:e7:4d:84:02:75:06:7e:1d:26:66:e6:3e:19:f5:b5:70: bc:b8:69:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURys2MFbUtBGhMSwJMQ9A5o5SCGYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE4Qzg0MENCNDFEMjY2ODU4MTk4M0MyQzRFOTY0RTY3 RUYyRDZBMTAeFw0yNTA0MTUxNjE2NDBaFw0yNTA0MTkwMzE1NDBaMDMxMTAvBgNV BAMTKEQxODNDRUFCNEM5MzlGNzdFNTkwNTZEQzk4Q0RDMjFEQzc2MTE0ODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/dR77t7B5QrS7ZX7wphL/UFqe PauvLATPytzfVoK0xNJVyVogkhBiZy0/dHambyANMT5jXIZIJ5XRALNaZhFXwAgg e1cqZrpmfJCyjKuEgJ5COweQ7xga3S9WD2cpiC02qYiBi0E9Rzu2nb2qIqdLfcOu 1Ylm3yYFPvFoVti/PhkPP/VODBknlSnvsWm9Brt27DvTVYXco5Q3IpV+mmAqIJXD 5RgNzRV/PS7Rc+jI14s5IzSmSJHrBFQJbBa5xaL3aC34EC4BOfVPtXOxyCqLSC65 /h0ggYv7SuVUe1fW5FjyGMlwTvep/nCXFasdH/TA8beoeBQZNuqUXKyhwk2XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0YPOq0yTn3flkFbcmM3CHcdhFIYwHwYDVR0j BBgwFoAU2oyEDLQdJmhYGYPCxOlk5n7y1qEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDgyN2NiOC0xYjJjLTQ0YjEtODE5MC05ODVkODIwNWE0NjQvMC9EQThDODQwQ0I0 MUQyNjY4NTgxOTgzQzJDNEU5NjRFNjdFRjJENkExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREE4Qzg0MENCNDFEMjY2ODU4MTk4M0MyQzRFOTY0RTY3RUYy RDZBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODA4MjdjYjgtMWIyYy00NGIxLTgx OTAtOTg1ZDgyMDVhNDY0LzAvREE4Qzg0MENCNDFEMjY2ODU4MTk4M0MyQzRFOTY0 RTY3RUYyRDZBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGmLzsV3pK7znHh+5s0qgaHt05K0LJdtQh/N 3b/8+6E0zSkcLB+g6MHiNM73PiI307DS+iZGww3Bf/DHVKPG5KhgbF9VBohisxE4 agFMXZfCxNGuZjrR8K36agyjnY5Py0bpCs/ODmVRDRAv+bolyna55dshIPZWLcNc lV6HfoBhx162KmwOQ6ODgq+7/khSE2ksKNma+lXuoizq6thmhwYJkzMMQv3rSwrE aAelgPLmI0i29WocOo8hlujA6sFNZ1UzIwQvQqrpMX7g4JKl+cG9EyN2vM5B97+q 1p+rfgByfss8bsa/nmUuolKL502EAnUGfh0mZuY+GfW1cLy4aT8= -----END CERTIFICATE-----Generated at Fri Apr 18 04:11:14 2025 by rpki-client