$ rpki-client -vvf repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.mft File: DBF597EA29EF8A70656446AF75CF33F0618E8282.mft (raw, json) Hash identifier: ET+j34Sebyo73ENI9dYsa6KADM1TaZKgwOl3x1SzbeU= Subject key identifier: 69:87:40:C1:37:0E:3C:38:6C:C3:04:AE:C6:F8:CA:A3:59:D8:1E:39 Authority key identifier: DB:F5:97:EA:29:EF:8A:70:65:64:46:AF:75:CF:33:F0:61:8E:82:82 Certificate issuer: /CN=DBF597EA29EF8A70656446AF75CF33F0618E8282 Certificate serial: 5748B6FA838613219EB29C99551CA5185A294C4E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF597EA29EF8A70656446AF75CF33F0618E8282.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.mft Manifest number: 04C1 Signing time: Sun 06 Apr 2025 22:42:11 +0000 Manifest this update: Sun 06 Apr 2025 22:37:11 +0000 Manifest next update: Thu 10 Apr 2025 08:35:11 +0000 Files and hashes: 1: 3230322e362e3232342e302f32302d3234203d3e203233373536.roa (hash: yoojfMzQKh4mJ5yJkpKCOee+XIAQV6Uq1iQBpPZ4uAE=) 2: 3131372e3130322e3232342e302f31392d3234203d3e203233373536.roa (hash: hkjarDn9mLD3pYLM9+FCm3xKAyZZb8KbslY3PfkSGdQ=) 3: 3130332e3234322e3230342e302f32322d3234203d3e203233373536.roa (hash: UpSXaQL4hvamZB7sMVEVrvvzWIfPbsCxCjFg7VirCfM=) 4: 323430363a363230303a3a2f33322d3438203d3e203233373536.roa (hash: PMaf9YrAeTdzm+l6puGPGAXV1wZZdjOv5Pgvb9K+9Zo=) 5: 3135302e3130372e3133322e302f32322d3234203d3e203233373536.roa (hash: HKdDrsWDkAEnJ6eI7ZqOPeb8e5bF+cd3+bp0HL/Z/po=) 6: DBF597EA29EF8A70656446AF75CF33F0618E8282.crl (hash: eOAEIWkj8Dov4o6Kz4qZ29kgUHwifQUSc8j4rXJDm+g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.crl rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF597EA29EF8A70656446AF75CF33F0618E8282.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 10 Apr 2025 08:35:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:48:b6:fa:83:86:13:21:9e:b2:9c:99:55:1c:a5:18:5a:29:4c:4e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBF597EA29EF8A70656446AF75CF33F0618E8282 Validity Not Before: Apr 6 22:37:11 2025 GMT Not After : Apr 10 08:35:11 2025 GMT Subject: CN=698740C1370E3C386CC304AEC6F8CAA359D81E39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:82:ad:bd:dc:25:72:3e:f8:31:3e:21:cf:9c: bf:3c:dd:6e:23:32:c0:3b:ef:64:84:c3:ae:f1:2a: 8e:9c:fd:5f:f8:00:44:71:f4:be:b9:27:a3:a0:9b: 2e:02:c6:91:b3:9d:d2:f7:f9:0c:2f:e4:d8:52:1f: 22:6d:6d:d6:e1:5a:46:7c:e4:3f:6b:73:e5:b9:64: 03:65:46:ae:b0:82:33:69:05:5a:fe:95:7e:4f:36: 86:68:79:08:e1:bc:14:c6:1a:5b:55:3a:b7:08:0e: 30:05:57:f8:8d:a7:5a:51:a8:9d:51:ca:ab:f4:17: 5f:f2:62:ae:c8:f3:27:a2:1e:7e:18:f5:32:a0:01: e0:27:72:de:63:9e:df:ff:09:2e:b6:d0:6e:f1:48: 1e:8b:cc:cf:fb:9a:2d:fc:53:8d:0d:31:47:23:39: f4:c3:db:20:6b:cf:5e:f8:d4:a1:74:36:b2:36:97: db:a0:0c:f9:f4:79:8f:88:9b:61:51:cf:df:55:a5: b2:1b:0e:6a:ac:4b:45:4e:fc:ab:db:6f:a5:34:82: f9:74:b6:61:f9:23:d0:b3:44:e0:47:d5:ee:88:2f: 1b:f6:d2:8d:86:76:39:49:fa:39:34:99:2c:e0:17: 7c:23:81:63:0d:7f:a4:71:9c:30:96:a1:22:a4:32: 85:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:87:40:C1:37:0E:3C:38:6C:C3:04:AE:C6:F8:CA:A3:59:D8:1E:39 X509v3 Authority Key Identifier: keyid:DB:F5:97:EA:29:EF:8A:70:65:64:46:AF:75:CF:33:F0:61:8E:82:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF597EA29EF8A70656446AF75CF33F0618E8282.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:1b:9f:a7:9c:85:cd:41:a2:8f:a0:c1:cd:06:70:ff:c1:be: 47:9e:d3:b6:81:0b:a5:29:eb:8e:f3:f2:b4:58:2d:a6:2f:f1: f3:5c:e7:5d:97:6f:29:44:a8:26:50:01:e6:86:cd:01:d8:66: 90:06:ea:c0:6a:d7:b7:7c:38:33:7e:e0:5b:4e:ae:12:64:75: 5a:94:cb:be:bd:76:61:0e:ed:9e:d4:70:9f:c1:0a:11:ce:aa: 3c:f6:01:1c:fa:b7:39:98:71:8f:00:e4:05:a1:3c:52:89:76: 92:8d:52:71:ce:2c:fe:08:a3:b9:3c:bb:94:af:67:5a:20:50: 37:7b:ef:9d:e0:9a:60:ec:b8:dc:99:4b:75:75:cb:43:e6:cf: 84:08:1e:4d:6e:c0:7b:71:01:88:46:94:a5:7a:62:a7:64:16: 19:01:dc:d7:07:55:f1:0d:6e:7b:6e:2b:c6:f0:24:f6:2e:c8: 06:3c:19:05:4c:20:63:c4:cd:b5:10:f7:96:5b:82:62:4f:cc: 8a:78:73:e6:47:f3:55:9c:84:f1:9b:45:1d:ee:39:bc:ba:d1: a3:92:72:9e:d7:84:2f:07:41:70:9b:75:ad:f2:01:f5:79:af: 25:b3:df:b7:40:85:75:a9:be:ec:03:bb:70:cc:13:f2:0c:f4: 0a:64:7b:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV0i2+oOGEyGespyZVRylGFopTE4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJGNTk3RUEyOUVGOEE3MDY1NjQ0NkFGNzVDRjMzRjA2 MThFODI4MjAeFw0yNTA0MDYyMjM3MTFaFw0yNTA0MTAwODM1MTFaMDMxMTAvBgNV BAMTKDY5ODc0MEMxMzcwRTNDMzg2Q0MzMDRBRUM2RjhDQUEzNTlEODFFMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKgq293CVyPvgxPiHPnL883W4j MsA772SEw67xKo6c/V/4AERx9L65J6Ogmy4CxpGzndL3+Qwv5NhSHyJtbdbhWkZ8 5D9rc+W5ZANlRq6wgjNpBVr+lX5PNoZoeQjhvBTGGltVOrcIDjAFV/iNp1pRqJ1R yqv0F1/yYq7I8yeiHn4Y9TKgAeAnct5jnt//CS620G7xSB6LzM/7mi38U40NMUcj OfTD2yBrz1741KF0NrI2l9ugDPn0eY+Im2FRz99VpbIbDmqsS0VO/Kvbb6U0gvl0 tmH5I9CzROBH1e6ILxv20o2GdjlJ+jk0mSzgF3wjgWMNf6RxnDCWoSKkMoUTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaYdAwTcOPDhswwSuxvjKo1nYHjkwHwYDVR0j BBgwFoAU2/WX6invinBlZEavdc8z8GGOgoIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZDBmMWE2ZS04M2I2LTQ1MzQtOTY3ZC1mOGRiM2MzNzExZjQvMC9EQkY1OTdFQTI5 RUY4QTcwNjU2NDQ2QUY3NUNGMzNGMDYxOEU4MjgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREJGNTk3RUEyOUVGOEE3MDY1NjQ0NkFGNzVDRjMzRjA2MThF ODI4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWQwZjFhNmUtODNiNi00NTM0LTk2 N2QtZjhkYjNjMzcxMWY0LzAvREJGNTk3RUEyOUVGOEE3MDY1NjQ0NkFGNzVDRjMz RjA2MThFODI4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABobn6echc1Boo+gwc0GcP/Bvkee07aBC6Up 647z8rRYLaYv8fNc512XbylEqCZQAeaGzQHYZpAG6sBq17d8ODN+4FtOrhJkdVqU y769dmEO7Z7UcJ/BChHOqjz2ARz6tzmYcY8A5AWhPFKJdpKNUnHOLP4Io7k8u5Sv Z1ogUDd7753gmmDsuNyZS3V1y0Pmz4QIHk1uwHtxAYhGlKV6YqdkFhkB3NcHVfEN bntuK8bwJPYuyAY8GQVMIGPEzbUQ95ZbgmJPzIp4c+ZH81WchPGbRR3uOby60aOS cp7XhC8HQXCbda3yAfV5ryWz37dAhXWpvuwDu3DME/IM9Apke28= -----END CERTIFICATE-----Generated at Tue Apr 8 17:07:03 2025 by rpki-client