$ rpki-client -vvf repo-rpki.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/DD68C98D519CC8D624F664B026AEB9B289EE819C.mft File: DD68C98D519CC8D624F664B026AEB9B289EE819C.mft (raw, json) Hash identifier: d7bEn1SvBJtA83DaJT7CuhkUDHMR75WjHtu4HKMyxns= Subject key identifier: EF:EE:23:5B:27:E4:32:D8:8D:2B:3E:9A:72:9D:66:EF:28:B2:A2:52 Authority key identifier: DD:68:C9:8D:51:9C:C8:D6:24:F6:64:B0:26:AE:B9:B2:89:EE:81:9C Certificate issuer: /CN=DD68C98D519CC8D624F664B026AEB9B289EE819C Certificate serial: 4262B4D7E342C400E05FAE245D596AF5BA2782CF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD68C98D519CC8D624F664B026AEB9B289EE819C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/DD68C98D519CC8D624F664B026AEB9B289EE819C.mft Manifest number: 0189 Signing time: Sat 05 Apr 2025 01:41:45 +0000 Manifest this update: Sat 05 Apr 2025 01:36:45 +0000 Manifest next update: Tue 08 Apr 2025 12:24:45 +0000 Files and hashes: 1: DD68C98D519CC8D624F664B026AEB9B289EE819C.crl (hash: urE00UawRitOnnPiLy7YkCUcYdc3D2hZCrCKv0GPaoA=) 2: 3130332e33362e35322e302f32332d3233203d3e2039333431.roa (hash: fGeQBiKX+xxqfH1XXT4otHk8nTCoBgbZ9CMCkIFVfP8=) 3: 3130332e33362e35322e302f32342d3234203d3e2039333431.roa (hash: nSaffT2loCbCY4DbpP8GpLCrFZYYKh3bE+jC1cyDP9Y=) 4: 3130332e33362e35332e302f32342d3234203d3e2039333431.roa (hash: n7fDyeuU1HQZdFIYr/m3ZztFKIf2iIRMeVjsry1/EpQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/DD68C98D519CC8D624F664B026AEB9B289EE819C.crl rsync://repo-rpki.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/DD68C98D519CC8D624F664B026AEB9B289EE819C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD68C98D519CC8D624F664B026AEB9B289EE819C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:62:b4:d7:e3:42:c4:00:e0:5f:ae:24:5d:59:6a:f5:ba:27:82:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD68C98D519CC8D624F664B026AEB9B289EE819C Validity Not Before: Apr 5 01:36:45 2025 GMT Not After : Apr 8 12:24:45 2025 GMT Subject: CN=EFEE235B27E432D88D2B3E9A729D66EF28B2A252 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:1d:71:04:25:b1:5f:c7:ae:55:1a:d0:cd:cc: 5b:f1:ce:4e:88:17:72:b7:ba:18:2b:36:1d:34:40: 7e:78:af:5d:e3:f3:2d:92:c7:f3:e5:3b:b8:7e:f0: 97:cf:83:62:4a:af:cf:f5:43:95:4a:9b:a0:f9:98: 21:f6:70:08:25:a4:ff:6f:ff:07:46:ba:1c:76:a7: 31:25:a6:63:46:83:5d:ce:63:aa:e3:5f:73:22:38: 88:9b:df:82:1a:4e:a1:fa:25:bf:b2:1f:c0:94:7b: 7b:9d:ff:f3:70:de:1b:4a:43:b2:4f:94:9a:6f:91: 25:28:ab:45:ab:e7:e5:2c:d0:85:65:d5:67:25:65: 64:2e:d0:74:b7:c3:eb:f0:15:58:4b:85:e2:4b:02: d6:8f:d9:5f:6d:2e:11:03:e7:a2:4a:f9:bd:ba:8b: b8:77:a2:6b:a0:e8:be:f1:17:02:bc:01:c8:54:f8: 31:b1:16:22:89:00:87:14:1a:2a:2a:6b:f9:79:d6: 54:7e:0f:ff:70:f8:61:8a:0d:21:c7:02:fa:8e:6e: 3c:ef:1a:cb:85:5d:1c:67:07:e2:96:0c:00:c4:92: bc:d8:fb:eb:67:01:eb:bf:a6:f5:9d:9c:74:6b:06: 84:13:b8:cb:f5:ff:e8:e1:44:b6:70:1e:83:7c:bd: 3f:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:EE:23:5B:27:E4:32:D8:8D:2B:3E:9A:72:9D:66:EF:28:B2:A2:52 X509v3 Authority Key Identifier: keyid:DD:68:C9:8D:51:9C:C8:D6:24:F6:64:B0:26:AE:B9:B2:89:EE:81:9C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/DD68C98D519CC8D624F664B026AEB9B289EE819C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DD68C98D519CC8D624F664B026AEB9B289EE819C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d043a889-c861-4d29-9d77-923d927e7634/0/DD68C98D519CC8D624F664B026AEB9B289EE819C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:30:00:b2:18:f2:84:14:9f:d7:c6:b6:e6:ea:bb:5c:2c:c0: 14:0c:95:27:d5:61:84:c4:12:2f:ac:64:d4:fc:39:57:3f:99: 9c:33:89:b3:b5:9a:07:4f:88:a2:ea:d1:15:44:99:d4:b6:d0: 6e:79:92:28:0f:48:6a:af:ca:6f:98:3a:08:58:d9:12:1d:a4: 53:15:dc:6d:5f:4b:e6:d2:8c:b0:f5:fc:36:a0:6a:42:7a:e3: 1e:83:3c:7c:23:d5:47:c1:b8:b1:fd:5f:aa:20:19:7b:a1:1e: 56:66:2a:1e:ef:43:b7:eb:21:cb:9a:6e:5d:9d:b9:64:53:5d: af:94:93:c6:a2:ca:79:3b:69:15:d4:88:36:a1:02:80:d2:cf: 53:25:1e:88:b7:fa:9b:9c:83:21:5b:fa:34:8a:24:85:f0:66: 14:0f:8c:b0:a4:df:39:81:15:6e:9e:12:a3:ae:be:39:50:41: 20:45:1d:c0:9f:a8:2a:01:1a:12:8e:11:84:0d:e8:81:7a:be: 11:6f:49:38:41:20:0d:a0:38:99:5e:59:12:93:40:ff:24:78: eb:31:f5:e8:3c:2b:32:a3:01:cf:d6:2b:57:db:1d:a0:0f:1d: c6:08:48:10:31:7a:0c:7f:1f:7c:79:1d:2b:68:76:0c:7f:42: 69:48:50:42 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQmK01+NCxADgX64kXVlq9bongs8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ2OEM5OEQ1MTlDQzhENjI0RjY2NEIwMjZBRUI5QjI4 OUVFODE5QzAeFw0yNTA0MDUwMTM2NDVaFw0yNTA0MDgxMjI0NDVaMDMxMTAvBgNV BAMTKEVGRUUyMzVCMjdFNDMyRDg4RDJCM0U5QTcyOUQ2NkVGMjhCMkEyNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1HXEEJbFfx65VGtDNzFvxzk6I F3K3uhgrNh00QH54r13j8y2Sx/PlO7h+8JfPg2JKr8/1Q5VKm6D5mCH2cAglpP9v /wdGuhx2pzElpmNGg13OY6rjX3MiOIib34IaTqH6Jb+yH8CUe3ud//Nw3htKQ7JP lJpvkSUoq0Wr5+Us0IVl1WclZWQu0HS3w+vwFVhLheJLAtaP2V9tLhED56JK+b26 i7h3omug6L7xFwK8AchU+DGxFiKJAIcUGioqa/l51lR+D/9w+GGKDSHHAvqObjzv GsuFXRxnB+KWDADEkrzY++tnAeu/pvWdnHRrBoQTuMv1/+jhRLZwHoN8vT+VAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7+4jWyfkMtiNKz6acp1m7yiyolIwHwYDVR0j BBgwFoAU3WjJjVGcyNYk9mSwJq65sonugZwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k MDQzYTg4OS1jODYxLTRkMjktOWQ3Ny05MjNkOTI3ZTc2MzQvMC9ERDY4Qzk4RDUx OUNDOEQ2MjRGNjY0QjAyNkFFQjlCMjg5RUU4MTlDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREQ2OEM5OEQ1MTlDQzhENjI0RjY2NEIwMjZBRUI5QjI4OUVF ODE5Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDA0M2E4ODktYzg2MS00ZDI5LTlk NzctOTIzZDkyN2U3NjM0LzAvREQ2OEM5OEQ1MTlDQzhENjI0RjY2NEIwMjZBRUI5 QjI4OUVFODE5Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF0wALIY8oQUn9fGtubqu1wswBQMlSfVYYTE Ei+sZNT8OVc/mZwzibO1mgdPiKLq0RVEmdS20G55kigPSGqvym+YOghY2RIdpFMV 3G1fS+bSjLD1/DagakJ64x6DPHwj1UfBuLH9X6ogGXuhHlZmKh7vQ7frIcuabl2d uWRTXa+Uk8aiynk7aRXUiDahAoDSz1MlHoi3+pucgyFb+jSKJIXwZhQPjLCk3zmB FW6eEqOuvjlQQSBFHcCfqCoBGhKOEYQN6IF6vhFvSThBIA2gOJleWRKTQP8keOsx 9eg8KzKjAc/WK1fbHaAPHcYISBAxegx/H3x5HStodgx/QmlIUEI= -----END CERTIFICATE-----Generated at Sat Apr 5 21:22:41 2025 by rpki-client