$ rpki-client -vvf repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft File: D0DE430E423B23AB634EBCF0195F1126B44A525E.mft (raw, json) Hash identifier: guLDiNFL4+dWJ3TETrUrI0yhCGnNWzkIVLNYzC8o0qs= Subject key identifier: 72:6C:C1:2D:16:8F:77:AA:50:55:B9:C9:CD:DF:B9:7F:5E:71:FE:BF Authority key identifier: D0:DE:43:0E:42:3B:23:AB:63:4E:BC:F0:19:5F:11:26:B4:4A:52:5E Certificate issuer: /CN=D0DE430E423B23AB634EBCF0195F1126B44A525E Certificate serial: 602EF561DE3E9884CB79AB06C6A5451C9B62A9D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0DE430E423B23AB634EBCF0195F1126B44A525E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft Manifest number: E0 Signing time: Thu 03 Apr 2025 09:31:52 +0000 Manifest this update: Thu 03 Apr 2025 09:26:52 +0000 Manifest next update: Sun 06 Apr 2025 16:58:52 +0000 Files and hashes: 1: 34352e3132332e3134322e302f32342d3234203d3e20313532303236.roa (hash: 8z2b+xp92tURTGvnf0C6XQM1zDU3t1HFgqr8ucYFBOU=) 2: D0DE430E423B23AB634EBCF0195F1126B44A525E.crl (hash: Qsxyat+sDC1H+Gtfh+nNv0WRM5kFcVmzmsAvqSvjxsg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.crl rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0DE430E423B23AB634EBCF0195F1126B44A525E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 06 Apr 2025 16:58:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:2e:f5:61:de:3e:98:84:cb:79:ab:06:c6:a5:45:1c:9b:62:a9:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0DE430E423B23AB634EBCF0195F1126B44A525E Validity Not Before: Apr 3 09:26:52 2025 GMT Not After : Apr 6 16:58:52 2025 GMT Subject: CN=726CC12D168F77AA5055B9C9CDDFB97F5E71FEBF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:56:98:90:ba:d1:10:64:9e:b8:96:af:cc:9c: cd:05:c6:f8:2a:4a:de:bf:dd:74:cf:51:8f:4c:c1: 84:e6:22:3f:3a:d1:4c:dd:5d:45:4c:98:ed:a5:86: 7a:a0:ff:e5:48:3c:56:00:d2:67:a3:a0:95:d6:cc: 20:23:5c:05:31:f7:76:b0:ec:5f:d9:c7:54:4f:ce: 27:3e:17:2f:f9:f3:64:d7:6e:12:66:86:3e:9d:24: c1:5d:69:4f:bd:6a:da:e2:28:02:36:73:8b:77:a7: 86:aa:32:e2:bf:b5:df:13:f6:2c:39:d5:0c:9b:ed: 72:87:47:fa:dc:ea:59:c0:49:b6:f2:aa:42:19:7f: 3d:90:ae:3f:d6:8f:a7:37:ce:e0:0f:2d:89:7d:6f: 45:e4:ce:63:ab:4c:e4:1b:8b:cb:da:6e:54:16:71: dc:ae:76:8c:ff:0a:de:13:d1:9f:d7:41:b1:11:75: 02:e9:e1:e6:4a:7e:80:44:1f:20:81:f3:9d:a3:77: 53:7e:b9:73:e4:b4:25:3e:19:b5:64:0b:c5:21:c7: 65:4c:e9:b2:49:c3:30:dd:4b:4f:95:47:1f:ed:99: 57:a6:d1:f8:6e:d3:3b:2e:81:04:99:8b:56:a8:28: fd:4b:f9:d4:74:7a:66:00:85:d2:fd:05:46:ae:45: 9c:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:6C:C1:2D:16:8F:77:AA:50:55:B9:C9:CD:DF:B9:7F:5E:71:FE:BF X509v3 Authority Key Identifier: keyid:D0:DE:43:0E:42:3B:23:AB:63:4E:BC:F0:19:5F:11:26:B4:4A:52:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0DE430E423B23AB634EBCF0195F1126B44A525E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:3a:3b:da:be:67:79:88:08:ab:1f:ad:db:09:df:9e:0d:ee: 74:5f:00:9c:cb:f0:2f:f3:fd:16:4f:af:fd:ab:8c:88:f9:a1: f0:fb:b1:3f:17:dc:1d:2c:a9:a8:c5:87:92:61:52:2d:5a:c0: 02:14:7c:5f:e2:85:a5:05:82:e8:2f:a0:c6:89:98:74:34:98: d6:29:42:6a:fe:b9:0f:c7:10:ad:27:d8:65:b9:bb:f7:d3:b7: 77:74:1e:ea:35:bf:9b:62:ea:30:b3:d2:9a:de:b9:ec:44:c9: e2:4a:23:0d:55:13:e1:b5:e3:c5:ff:c2:e7:a4:90:c7:a1:cc: f5:f8:89:52:fe:13:16:9c:7c:22:9c:6d:af:30:8a:0b:1d:54: 6b:82:1d:ef:a3:72:b2:e3:e2:fa:2c:89:13:37:ef:5d:20:57: 15:9d:d2:6c:7b:63:21:f7:03:87:31:e8:90:17:25:ef:a0:e1: 87:fb:80:4d:fc:fa:17:6a:2e:fa:bf:50:50:10:5c:1a:32:a0: 7f:65:b4:17:21:2a:c4:c2:3b:f1:3f:cc:f1:7a:d4:18:cf:78: 5e:95:36:e0:ce:52:f5:74:ea:cf:ed:45:f1:95:ce:10:f3:8a: 5c:c3:90:fa:68:fb:0a:22:fd:3f:e2:7b:4b:bf:0f:a6:40:0e: 83:64:9d:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYC71Yd4+mITLeasGxqVFHJtiqdIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBERTQzMEU0MjNCMjNBQjYzNEVCQ0YwMTk1RjExMjZC NDRBNTI1RTAeFw0yNTA0MDMwOTI2NTJaFw0yNTA0MDYxNjU4NTJaMDMxMTAvBgNV BAMTKDcyNkNDMTJEMTY4Rjc3QUE1MDU1QjlDOUNEREZCOTdGNUU3MUZFQkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1VpiQutEQZJ64lq/MnM0Fxvgq St6/3XTPUY9MwYTmIj860UzdXUVMmO2lhnqg/+VIPFYA0mejoJXWzCAjXAUx93aw 7F/Zx1RPzic+Fy/582TXbhJmhj6dJMFdaU+9atriKAI2c4t3p4aqMuK/td8T9iw5 1Qyb7XKHR/rc6lnASbbyqkIZfz2Qrj/Wj6c3zuAPLYl9b0XkzmOrTOQbi8vablQW cdyudoz/Ct4T0Z/XQbERdQLp4eZKfoBEHyCB852jd1N+uXPktCU+GbVkC8Uhx2VM 6bJJwzDdS0+VRx/tmVem0fhu0zsugQSZi1aoKP1L+dR0emYAhdL9BUauRZyvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcmzBLRaPd6pQVbnJzd+5f15x/r8wHwYDVR0j BBgwFoAU0N5DDkI7I6tjTrzwGV8RJrRKUl4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzRhMTUyNy01YzhlLTRiZDMtYTFjNy05ZDFlZDJkMjNlMTQvMC9EMERFNDMwRTQy M0IyM0FCNjM0RUJDRjAxOTVGMTEyNkI0NEE1MjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBERTQzMEU0MjNCMjNBQjYzNEVCQ0YwMTk1RjExMjZCNDRB NTI1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDc0YTE1MjctNWM4ZS00YmQzLWEx YzctOWQxZWQyZDIzZTE0LzAvRDBERTQzMEU0MjNCMjNBQjYzNEVCQ0YwMTk1RjEx MjZCNDRBNTI1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGI6O9q+Z3mICKsfrdsJ354N7nRfAJzL8C/z /RZPr/2rjIj5ofD7sT8X3B0sqajFh5JhUi1awAIUfF/ihaUFgugvoMaJmHQ0mNYp Qmr+uQ/HEK0n2GW5u/fTt3d0Huo1v5ti6jCz0preuexEyeJKIw1VE+G148X/wuek kMehzPX4iVL+ExacfCKcba8wigsdVGuCHe+jcrLj4vosiRM3710gVxWd0mx7YyH3 A4cx6JAXJe+g4Yf7gE38+hdqLvq/UFAQXBoyoH9ltBchKsTCO/E/zPF61BjPeF6V NuDOUvV06s/tRfGVzhDzilzDkPpo+woi/T/ie0u/D6ZADoNknfE= -----END CERTIFICATE-----Generated at Sat Apr 5 16:38:06 2025 by rpki-client