$ rpki-client -vvf repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft File: 0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft (raw, json) Hash identifier: xj5GQ9G2Y9Kv15GMXT9npOOLjcm48+1Nu0OhMcRgQLU= Subject key identifier: 2B:24:6A:29:1D:B7:6D:10:87:52:0F:53:41:30:2B:50:1E:16:68:6F Authority key identifier: 0D:A6:D4:33:71:02:76:BF:7B:80:06:C2:1C:26:AE:F5:F8:56:AF:21 Certificate issuer: /CN=0DA6D433710276BF7B8006C21C26AEF5F856AF21 Certificate serial: 4E049B80A5146922638E4144D0A381335B4D6967 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DA6D433710276BF7B8006C21C26AEF5F856AF21.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft Manifest number: B9 Signing time: Fri 04 Apr 2025 18:21:43 +0000 Manifest this update: Fri 04 Apr 2025 18:16:43 +0000 Manifest next update: Tue 08 Apr 2025 04:30:43 +0000 Files and hashes: 1: 3230322e3134392e36342e302f31392d3234203d3e203137383236.roa (hash: MEf2zZIm4OfWmXedDD74TFV0+Lfq2fLCwzGFVGKNDNg=) 2: 323430353a353130303a3a2f33322d3438203d3e203137383236.roa (hash: RPuPflMz4nJKBYzjEh4JwUHlASpyjK5FiwQGJODrOJ0=) 3: 0DA6D433710276BF7B8006C21C26AEF5F856AF21.crl (hash: OpxCScf5MEJir1imRR2OVe4UjVzmhRNKT8xDY6KwJko=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.crl rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DA6D433710276BF7B8006C21C26AEF5F856AF21.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:04:9b:80:a5:14:69:22:63:8e:41:44:d0:a3:81:33:5b:4d:69:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DA6D433710276BF7B8006C21C26AEF5F856AF21 Validity Not Before: Apr 4 18:16:43 2025 GMT Not After : Apr 8 04:30:43 2025 GMT Subject: CN=2B246A291DB76D1087520F5341302B501E16686F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:31:8f:9a:33:6e:a2:c1:85:de:86:98:0e:41: 7d:2c:a2:f1:34:3e:77:38:14:7e:56:ef:9e:54:dc: 33:94:62:96:61:c9:d2:47:43:aa:db:8f:fa:79:39: 69:b3:85:f2:13:98:57:1b:d1:03:9a:89:65:12:7b: 03:10:d2:56:49:47:5b:e1:a3:15:86:d0:86:69:c9: c2:0c:b3:67:f1:db:7a:3a:24:91:59:be:a1:3a:22: b7:78:f8:40:c5:d6:86:3a:ed:fe:03:91:96:19:51: 77:55:43:7b:12:58:13:e5:ee:ff:b8:b1:20:4a:0b: a9:2f:12:ec:fd:c3:95:c1:64:15:b6:72:05:b7:29: 24:e2:b1:60:35:41:2d:ef:4a:d8:80:8b:a4:c1:60: 6f:82:24:94:63:69:1c:80:89:0a:9f:c8:00:81:44: f5:a9:bf:5b:7a:e5:ce:98:02:71:f9:4b:3e:d6:d8: d9:0c:09:b6:69:38:cb:28:e6:06:3d:62:d2:28:82: fb:dd:d6:de:06:60:ce:70:c0:6c:b3:a0:bf:ed:35: 02:24:e2:8e:49:11:cc:3f:55:5f:e7:11:cb:12:47: 34:96:14:fd:9a:ce:3c:5a:6e:2e:18:79:43:a5:8f: 56:16:b2:33:de:9b:24:bd:47:d7:1c:d5:06:71:6a: f9:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:24:6A:29:1D:B7:6D:10:87:52:0F:53:41:30:2B:50:1E:16:68:6F X509v3 Authority Key Identifier: keyid:0D:A6:D4:33:71:02:76:BF:7B:80:06:C2:1C:26:AE:F5:F8:56:AF:21 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DA6D433710276BF7B8006C21C26AEF5F856AF21.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bdd1eacd-a067-4924-9284-bc6f10d8d5a8/0/0DA6D433710276BF7B8006C21C26AEF5F856AF21.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:17:38:a1:00:0a:80:3b:60:b6:44:29:8d:e5:e1:8f:65:1e: 15:26:66:33:06:3c:e6:9f:20:b0:59:05:30:44:a3:7f:46:9f: eb:b7:77:fa:f6:6d:c7:3a:61:97:d2:cd:d5:a6:1a:61:1c:f3: 2d:64:5e:1e:55:b5:03:c0:cc:e9:02:c7:8f:26:7b:85:e1:31: 2a:4f:87:7c:0b:c5:e6:98:25:1f:09:0c:d5:45:ab:4b:43:2c: 6c:6e:15:fc:bc:04:bb:5a:2f:fe:1d:a0:85:4a:54:45:19:fd: 43:41:21:af:94:7d:80:ef:95:6c:ab:73:9b:7a:6a:f7:6b:f9: 91:e1:bf:9e:0d:47:2b:94:59:49:ff:a8:4a:27:0b:f9:c8:17: 97:b5:62:8a:4f:b1:f2:f6:b3:83:2f:38:e6:eb:31:f1:1f:7e: bb:74:2e:8e:eb:4a:4d:6e:ad:93:a9:13:8e:6c:26:b6:57:40: 3b:1a:75:ce:da:27:3f:f1:6c:49:55:ae:77:74:35:c0:05:54: 20:16:5a:c8:9e:11:fe:1b:82:99:4d:37:b9:b8:1d:7f:32:7c: a7:0c:bd:82:a1:a7:0f:df:06:00:44:89:61:a7:70:f1:bf:f4: 7b:7b:4a:23:e9:d4:20:46:ad:3f:32:e2:b1:06:9c:b6:c4:89: f3:0f:a2:62 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTgSbgKUUaSJjjkFE0KOBM1tNaWcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERBNkQ0MzM3MTAyNzZCRjdCODAwNkMyMUMyNkFFRjVG ODU2QUYyMTAeFw0yNTA0MDQxODE2NDNaFw0yNTA0MDgwNDMwNDNaMDMxMTAvBgNV BAMTKDJCMjQ2QTI5MURCNzZEMTA4NzUyMEY1MzQxMzAyQjUwMUUxNjY4NkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWMY+aM26iwYXehpgOQX0sovE0 Pnc4FH5W755U3DOUYpZhydJHQ6rbj/p5OWmzhfITmFcb0QOaiWUSewMQ0lZJR1vh oxWG0IZpycIMs2fx23o6JJFZvqE6Ird4+EDF1oY67f4DkZYZUXdVQ3sSWBPl7v+4 sSBKC6kvEuz9w5XBZBW2cgW3KSTisWA1QS3vStiAi6TBYG+CJJRjaRyAiQqfyACB RPWpv1t65c6YAnH5Sz7W2NkMCbZpOMso5gY9YtIogvvd1t4GYM5wwGyzoL/tNQIk 4o5JEcw/VV/nEcsSRzSWFP2azjxabi4YeUOlj1YWsjPemyS9R9cc1QZxavnlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKyRqKR23bRCHUg9TQTArUB4WaG8wHwYDVR0j BBgwFoAUDabUM3ECdr97gAbCHCau9fhWryEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ZGQxZWFjZC1hMDY3LTQ5MjQtOTI4NC1iYzZmMTBkOGQ1YTgvMC8wREE2RDQzMzcx MDI3NkJGN0I4MDA2QzIxQzI2QUVGNUY4NTZBRjIxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMERBNkQ0MzM3MTAyNzZCRjdCODAwNkMyMUMyNkFFRjVGODU2 QUYyMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmRkMWVhY2QtYTA2Ny00OTI0LTky ODQtYmM2ZjEwZDhkNWE4LzAvMERBNkQ0MzM3MTAyNzZCRjdCODAwNkMyMUMyNkFF RjVGODU2QUYyMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGAXOKEACoA7YLZEKY3l4Y9lHhUmZjMGPOaf ILBZBTBEo39Gn+u3d/r2bcc6YZfSzdWmGmEc8y1kXh5VtQPAzOkCx48me4XhMSpP h3wLxeaYJR8JDNVFq0tDLGxuFfy8BLtaL/4doIVKVEUZ/UNBIa+UfYDvlWyrc5t6 avdr+ZHhv54NRyuUWUn/qEonC/nIF5e1YopPsfL2s4MvOObrMfEffrt0Lo7rSk1u rZOpE45sJrZXQDsadc7aJz/xbElVrnd0NcAFVCAWWsieEf4bgplNN7m4HX8yfKcM vYKhpw/fBgBEiWGncPG/9Ht7SiPp1CBGrT8y4rEGnLbEifMPomI= -----END CERTIFICATE-----Generated at Sat Apr 5 23:15:29 2025 by rpki-client