$ rpki-client -vvf repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.mft File: DA680D591E9E6B4622614F94CF255933B6749212.mft (raw, json) Hash identifier: O3twVlM9EsiGbVFNWOdxCk3E+jrGEycLjWk0koN8Uno= Subject key identifier: BC:96:58:D5:9E:9A:EA:43:E0:CA:13:C9:DC:63:B1:C6:8B:9C:2D:65 Authority key identifier: DA:68:0D:59:1E:9E:6B:46:22:61:4F:94:CF:25:59:33:B6:74:92:12 Certificate issuer: /CN=DA680D591E9E6B4622614F94CF255933B6749212 Certificate serial: 485A62E0D5A0C38D3C6E6E0E030599F1B3B40889 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DA680D591E9E6B4622614F94CF255933B6749212.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.mft Manifest number: C0 Signing time: Tue 08 Apr 2025 20:31:44 +0000 Manifest this update: Tue 08 Apr 2025 20:26:44 +0000 Manifest next update: Sat 12 Apr 2025 05:13:44 +0000 Files and hashes: 1: 3135372e31302e3138322e302f32342d3234203d3e20313532333434.roa (hash: zo0q/Qyr9+OM0Fi4S3qemAqF/9QAiZg3ou4qqrAMiyU=) 2: 3135372e31302e3138332e302f32342d3234203d3e20313532333434.roa (hash: bW5GhG+n2gDC7aNS0QQfawXhWxcHV8PEi1pP/7l6eDw=) 3: 3135372e31302e3138322e302f32332d3234203d3e20313532333434.roa (hash: i0rS2o3mTh9+/ZMOMUuCXL7VcRhfm2ZL+vmQMK6r/AQ=) 4: DA680D591E9E6B4622614F94CF255933B6749212.crl (hash: 6iomHbSmFckaSF5qy4Hz/CwfyGW5cMRp99cAYm4+/2A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.crl rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DA680D591E9E6B4622614F94CF255933B6749212.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 12 Apr 2025 05:13:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:5a:62:e0:d5:a0:c3:8d:3c:6e:6e:0e:03:05:99:f1:b3:b4:08:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA680D591E9E6B4622614F94CF255933B6749212 Validity Not Before: Apr 8 20:26:44 2025 GMT Not After : Apr 12 05:13:44 2025 GMT Subject: CN=BC9658D59E9AEA43E0CA13C9DC63B1C68B9C2D65 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fa:09:f4:fe:32:dd:88:8e:00:7a:5f:c6:b0: 6d:36:3e:40:d0:42:6b:97:ec:1c:00:b1:52:c0:5b: 14:95:ad:2e:e0:02:27:ed:68:4b:15:2a:7e:b9:7f: 1b:11:fe:67:1f:75:64:dc:84:f2:ec:d2:5c:50:17: 7e:b5:2f:da:ec:1c:2f:ac:6d:1b:08:53:e7:48:53: 5d:0e:fb:bb:af:68:61:95:65:32:ae:1e:bc:21:c8: f2:e7:ad:28:52:8d:e5:99:c0:59:a3:4d:73:37:63: 8c:fd:70:49:6c:e0:7b:be:f7:f6:c3:cb:08:ec:36: 9f:e4:91:b4:2a:7c:cd:c4:fa:20:21:38:be:de:f5: 54:6d:c5:90:d0:2a:e2:48:6b:89:02:23:12:ea:1f: ad:26:40:4a:3d:ba:5e:6f:58:7c:2d:56:2b:32:1e: c4:74:2d:0c:6e:09:dc:7b:22:50:29:ac:95:c4:a8: 8b:0c:a8:85:55:05:a2:c2:ac:92:5d:19:ef:fb:d1: f4:b5:6e:ad:a8:18:dc:18:ee:55:96:e6:10:63:34: bf:3f:f1:14:6b:d2:8a:53:c5:7c:4a:d1:46:5e:d7: eb:0d:a4:e6:dc:72:40:c6:88:57:5a:86:c2:bb:0b: f2:94:cf:34:24:13:00:cd:ef:52:46:00:e8:f4:46: 62:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:96:58:D5:9E:9A:EA:43:E0:CA:13:C9:DC:63:B1:C6:8B:9C:2D:65 X509v3 Authority Key Identifier: keyid:DA:68:0D:59:1E:9E:6B:46:22:61:4F:94:CF:25:59:33:B6:74:92:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DA680D591E9E6B4622614F94CF255933B6749212.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:1e:46:c5:e1:db:4f:86:c8:6a:da:e5:53:af:25:df:ef:da: ac:09:28:11:ac:21:30:e7:dc:a8:6b:8b:c1:6f:c7:46:dd:85: a2:97:9c:12:e8:99:56:30:3a:23:f6:81:bc:45:eb:72:48:4f: ae:d1:9c:6c:e4:ed:c9:38:2a:c3:a8:a4:95:6d:a7:23:d0:e2: 73:50:66:d9:47:6f:f2:43:58:22:b2:f0:b1:03:be:ec:ca:5e: c7:69:d1:fc:10:22:8e:cc:46:b5:5f:2c:23:01:d6:72:e8:0d: cb:df:c2:04:0b:a5:4b:28:ca:f4:bf:21:8d:5f:5c:0f:f0:73: dd:8f:15:d9:42:ce:64:f1:d3:ab:5a:16:68:26:d6:6b:73:75: 07:6d:a1:6f:7f:4d:08:ae:dd:64:8a:7a:59:75:23:78:52:69: 57:b6:34:39:aa:ea:82:61:07:f9:93:af:68:f4:98:28:fa:af: 6d:da:3b:6d:09:16:3c:94:5d:b8:2b:e8:e9:dc:9d:b2:56:ed: 73:cf:55:ef:90:de:1e:be:1e:f7:3f:b4:86:06:cb:7a:b7:d7: 83:c7:0c:0a:59:14:ee:f1:f3:08:f0:48:5d:18:8d:f1:3e:a2: 31:8b:a5:13:7f:4b:cc:77:9f:0b:cb:e6:7a:da:6f:5f:11:76: 21:20:86:e4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSFpi4NWgw408bm4OAwWZ8bO0CIkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE2ODBENTkxRTlFNkI0NjIyNjE0Rjk0Q0YyNTU5MzNC Njc0OTIxMjAeFw0yNTA0MDgyMDI2NDRaFw0yNTA0MTIwNTEzNDRaMDMxMTAvBgNV BAMTKEJDOTY1OEQ1OUU5QUVBNDNFMENBMTNDOURDNjNCMUM2OEI5QzJENjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA+gn0/jLdiI4Ael/GsG02PkDQ QmuX7BwAsVLAWxSVrS7gAiftaEsVKn65fxsR/mcfdWTchPLs0lxQF361L9rsHC+s bRsIU+dIU10O+7uvaGGVZTKuHrwhyPLnrShSjeWZwFmjTXM3Y4z9cEls4Hu+9/bD ywjsNp/kkbQqfM3E+iAhOL7e9VRtxZDQKuJIa4kCIxLqH60mQEo9ul5vWHwtVisy HsR0LQxuCdx7IlAprJXEqIsMqIVVBaLCrJJdGe/70fS1bq2oGNwY7lWW5hBjNL8/ 8RRr0opTxXxK0UZe1+sNpObcckDGiFdahsK7C/KUzzQkEwDN71JGAOj0RmJtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvJZY1Z6a6kPgyhPJ3GOxxoucLWUwHwYDVR0j BBgwFoAU2mgNWR6ea0YiYU+UzyVZM7Z0khIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWRhMjNlOS04NGJlLTRhNTQtYmNhMC1lOWEwY2FmZDE2ZmUvMC9EQTY4MEQ1OTFF OUU2QjQ2MjI2MTRGOTRDRjI1NTkzM0I2NzQ5MjEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvREE2ODBENTkxRTlFNkI0NjIyNjE0Rjk0Q0YyNTU5MzNCNjc0 OTIxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFkYTIzZTktODRiZS00YTU0LWJj YTAtZTlhMGNhZmQxNmZlLzAvREE2ODBENTkxRTlFNkI0NjIyNjE0Rjk0Q0YyNTU5 MzNCNjc0OTIxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJUeRsXh20+GyGra5VOvJd/v2qwJKBGsITDn 3Khri8Fvx0bdhaKXnBLomVYwOiP2gbxF63JIT67RnGzk7ck4KsOopJVtpyPQ4nNQ ZtlHb/JDWCKy8LEDvuzKXsdp0fwQIo7MRrVfLCMB1nLoDcvfwgQLpUsoyvS/IY1f XA/wc92PFdlCzmTx06taFmgm1mtzdQdtoW9/TQiu3WSKell1I3hSaVe2NDmq6oJh B/mTr2j0mCj6r23aO20JFjyUXbgr6OncnbJW7XPPVe+Q3h6+Hvc/tIYGy3q314PH DApZFO7x8wjwSF0YjfE+ojGLpRN/S8x3nwvL5nrab18RdiEghuQ= -----END CERTIFICATE-----Generated at Thu Apr 10 00:15:57 2025 by rpki-client