$ rpki-client -vvf repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft File: DE871A367510652B50812EF1D04572635502AD6E.mft (raw, json) Hash identifier: mtWlNX9KTnqCAcUmpxE8c/x78KH7GQuTziUuzkp7Xkc= Subject key identifier: B2:4B:5A:54:F8:FB:D2:AD:12:FF:2C:0D:27:F6:39:68:8E:E1:DB:20 Authority key identifier: DE:87:1A:36:75:10:65:2B:50:81:2E:F1:D0:45:72:63:55:02:AD:6E Certificate issuer: /CN=DE871A367510652B50812EF1D04572635502AD6E Certificate serial: 63AE44C317B7D0CF7BF8C73A4AF40AE61708C13A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE871A367510652B50812EF1D04572635502AD6E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft Manifest number: 0225 Signing time: Thu 03 Apr 2025 07:51:04 +0000 Manifest this update: Thu 03 Apr 2025 07:46:04 +0000 Manifest next update: Sun 06 Apr 2025 18:37:04 +0000 Files and hashes: 1: 3130332e3137342e36332e302f32342d3234203d3e20313437303935.roa (hash: JddBvr2E4qhvXzTnvB8cueVnBYtFb2jGcnwSz88frMs=) 2: 3130332e3137342e36322e302f32342d3234203d3e20313437303935.roa (hash: PDdq8e3i59EuZ/OY6T2ikv6WPALtg9Yb+GzE/u464Cg=) 3: DE871A367510652B50812EF1D04572635502AD6E.crl (hash: sczanjyporGdhk2nOHrL0MLXREVJz74pbprbBIXKMDA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.crl rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE871A367510652B50812EF1D04572635502AD6E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 18:37:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:ae:44:c3:17:b7:d0:cf:7b:f8:c7:3a:4a:f4:0a:e6:17:08:c1:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE871A367510652B50812EF1D04572635502AD6E Validity Not Before: Apr 3 07:46:04 2025 GMT Not After : Apr 6 18:37:04 2025 GMT Subject: CN=B24B5A54F8FBD2AD12FF2C0D27F639688EE1DB20 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:3a:28:99:19:82:65:8b:6e:a2:92:91:3e:b6: 92:37:98:c4:50:ed:f7:53:51:44:26:87:14:2b:a0: 6a:bd:ff:3a:fb:90:4f:18:5e:ed:27:dd:ae:d1:d0: f9:8e:10:8e:02:64:2c:93:68:d5:bb:49:3c:5c:f1: dc:f8:01:5e:3e:16:5c:d5:9c:59:5f:18:a9:01:a0: e5:36:f4:78:bb:df:72:e6:d5:28:48:66:c3:b7:3d: aa:44:10:32:8e:87:8b:63:8d:69:e2:7e:b8:06:23: e2:1c:28:2f:13:f9:ec:03:74:f3:95:7f:e8:05:72: 2d:83:ff:92:d3:7b:7c:63:b7:2e:b2:32:b7:7a:05: 2f:58:eb:63:a7:c4:42:e7:35:fa:29:e3:5b:06:36: 41:e8:42:71:5d:26:1e:ad:95:c5:10:23:28:68:5c: 6a:f0:d3:ac:b5:6d:98:27:c3:4e:4d:64:97:b5:b5: f2:a1:78:c2:ee:23:65:a2:3d:9f:55:4f:e0:de:64: d6:be:20:17:e9:ec:c3:c4:97:d5:8d:5a:28:38:80: 61:db:4d:55:fc:62:ba:84:3d:cd:bc:f1:8d:7d:33: ba:5b:67:9a:9a:5c:c0:af:8e:f5:a0:35:ab:82:75: a4:9a:78:d8:94:b8:5c:b2:83:f3:5b:cc:b8:bf:5c: fe:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:4B:5A:54:F8:FB:D2:AD:12:FF:2C:0D:27:F6:39:68:8E:E1:DB:20 X509v3 Authority Key Identifier: keyid:DE:87:1A:36:75:10:65:2B:50:81:2E:F1:D0:45:72:63:55:02:AD:6E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE871A367510652B50812EF1D04572635502AD6E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/813645d4-543b-444b-a3a5-fdcd41811c21/0/DE871A367510652B50812EF1D04572635502AD6E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:95:d6:03:32:59:0b:6a:a4:1a:c1:3e:f5:fa:7a:98:b4:75: 59:b2:81:b2:fa:1c:3e:bf:7b:0f:b9:6d:a5:72:f6:f6:df:cf: 08:1a:ee:0f:1c:2f:a0:30:fe:1a:a5:90:4c:7e:86:3f:ce:1c: a8:fb:e5:21:c1:19:44:39:35:f0:1d:20:d9:43:90:06:83:92: d8:cf:cf:0c:f6:5c:b9:db:af:e8:1a:8a:8c:70:2d:3f:7b:75: 96:1a:f0:ad:81:59:31:4f:01:56:5d:df:98:0c:81:2a:63:7d: ee:65:8b:65:cd:01:39:de:ad:d5:ea:09:3b:44:1f:ef:29:83: 67:69:eb:a2:4a:33:d2:bc:91:70:96:7e:4f:ac:7b:c4:c4:87: 8e:2a:34:dc:f3:79:c2:32:82:7f:4d:d8:7b:b1:e5:8c:4e:67: c9:a0:c8:49:c7:29:f9:69:13:dd:30:05:a7:44:68:5c:71:ca: 0d:09:a7:c9:17:f1:bc:bf:a4:e5:13:b3:c8:19:f0:7d:5f:32: 32:fd:ed:6f:47:eb:e5:b7:a9:9a:24:6b:af:59:03:a2:6a:ce: 82:c4:ee:f2:6e:af:c8:f5:43:bd:fe:39:58:17:ba:2a:11:25: 24:b0:d7:47:74:2a:bd:1c:ad:33:a0:ac:c2:ef:93:f4:20:0a: f7:a4:34:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY65Ewxe30M97+Mc6SvQK5hcIwTowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU4NzFBMzY3NTEwNjUyQjUwODEyRUYxRDA0NTcyNjM1 NTAyQUQ2RTAeFw0yNTA0MDMwNzQ2MDRaFw0yNTA0MDYxODM3MDRaMDMxMTAvBgNV BAMTKEIyNEI1QTU0RjhGQkQyQUQxMkZGMkMwRDI3RjYzOTY4OEVFMURCMjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSOiiZGYJli26ikpE+tpI3mMRQ 7fdTUUQmhxQroGq9/zr7kE8YXu0n3a7R0PmOEI4CZCyTaNW7STxc8dz4AV4+FlzV nFlfGKkBoOU29Hi733Lm1ShIZsO3PapEEDKOh4tjjWnifrgGI+IcKC8T+ewDdPOV f+gFci2D/5LTe3xjty6yMrd6BS9Y62OnxELnNfop41sGNkHoQnFdJh6tlcUQIyho XGrw06y1bZgnw05NZJe1tfKheMLuI2WiPZ9VT+DeZNa+IBfp7MPEl9WNWig4gGHb TVX8YrqEPc288Y19M7pbZ5qaXMCvjvWgNauCdaSaeNiUuFyyg/NbzLi/XP77AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsktaVPj70q0S/ywNJ/Y5aI7h2yAwHwYDVR0j BBgwFoAU3ocaNnUQZStQgS7x0EVyY1UCrW4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MTM2NDVkNC01NDNiLTQ0NGItYTNhNS1mZGNkNDE4MTFjMjEvMC9ERTg3MUEzNjc1 MTA2NTJCNTA4MTJFRjFEMDQ1NzI2MzU1MDJBRDZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU4NzFBMzY3NTEwNjUyQjUwODEyRUYxRDA0NTcyNjM1NTAy QUQ2RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODEzNjQ1ZDQtNTQzYi00NDRiLWEz YTUtZmRjZDQxODExYzIxLzAvREU4NzFBMzY3NTEwNjUyQjUwODEyRUYxRDA0NTcy NjM1NTAyQUQ2RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALCV1gMyWQtqpBrBPvX6epi0dVmygbL6HD6/ ew+5baVy9vbfzwga7g8cL6Aw/hqlkEx+hj/OHKj75SHBGUQ5NfAdINlDkAaDktjP zwz2XLnbr+gaioxwLT97dZYa8K2BWTFPAVZd35gMgSpjfe5li2XNATnerdXqCTtE H+8pg2dp66JKM9K8kXCWfk+se8TEh44qNNzzecIygn9N2Hux5YxOZ8mgyEnHKflp E90wBadEaFxxyg0Jp8kX8by/pOUTs8gZ8H1fMjL97W9H6+W3qZoka69ZA6JqzoLE 7vJur8j1Q73+OVgXuioRJSSw10d0Kr0crTOgrMLvk/QgCvekNLU= -----END CERTIFICATE-----Generated at Sat Apr 5 16:41:57 2025 by rpki-client