$ rpki-client -vvf repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft File: D0DE430E423B23AB634EBCF0195F1126B44A525E.mft (raw, json) Hash identifier: OTXTm278+yEGP0HdvoZRK7g5YYBjC6FhJP9Rpr8d/3U= Subject key identifier: 17:84:36:D3:A5:0D:40:FF:9B:6E:7C:82:D1:0D:0E:78:16:38:DF:BB Authority key identifier: D0:DE:43:0E:42:3B:23:AB:63:4E:BC:F0:19:5F:11:26:B4:4A:52:5E Certificate issuer: /CN=D0DE430E423B23AB634EBCF0195F1126B44A525E Certificate serial: 7E55F507BAEEE8113EE73EE05B7842E6B84C8C55 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0DE430E423B23AB634EBCF0195F1126B44A525E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft Manifest number: FB Signing time: Wed 04 Jun 2025 03:11:58 +0000 Manifest this update: Wed 04 Jun 2025 03:06:58 +0000 Manifest next update: Sat 07 Jun 2025 06:44:58 +0000 Files and hashes: 1: D0DE430E423B23AB634EBCF0195F1126B44A525E.crl (hash: P8CMXG8OZ2vn23fLPhs/r1vsOqHZIghAKhx31cjGxYg=) 2: 34352e3132332e3134322e302f32342d3234203d3e20313532303236.roa (hash: 8z2b+xp92tURTGvnf0C6XQM1zDU3t1HFgqr8ucYFBOU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.crl rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0DE430E423B23AB634EBCF0195F1126B44A525E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 06:44:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:55:f5:07:ba:ee:e8:11:3e:e7:3e:e0:5b:78:42:e6:b8:4c:8c:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0DE430E423B23AB634EBCF0195F1126B44A525E Validity Not Before: Jun 4 03:06:58 2025 GMT Not After : Jun 7 06:44:58 2025 GMT Subject: CN=178436D3A50D40FF9B6E7C82D10D0E781638DFBB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:82:47:57:fe:48:73:33:69:07:6e:b8:31:51: 3f:dd:ee:32:98:e6:3c:36:f3:4e:d6:88:1a:82:69: 97:58:0d:36:90:6b:e9:85:76:ca:28:34:f0:17:c1: f0:74:1b:ee:43:ed:d8:8f:68:87:43:1e:68:f3:47: 9c:ee:38:d6:a4:21:a2:e8:36:9e:0e:a0:02:c5:ef: 88:da:fa:82:a2:5b:21:cd:52:26:78:e1:93:8f:00: a6:ed:29:f2:a8:25:e6:25:6e:ee:03:6d:85:7d:65: 64:e9:b6:93:f7:c9:92:c6:b0:04:4f:86:7d:46:de: 65:a5:50:13:c9:aa:7e:62:26:b3:ae:04:72:91:0e: 8d:11:59:49:fd:76:27:54:23:55:11:75:12:af:10: 1f:06:d6:77:02:1e:d7:12:15:bd:54:9d:76:48:fa: 7c:79:05:23:a2:1e:1b:8e:4c:fb:3f:33:45:06:10: f2:b0:6a:cc:f6:bd:7f:99:1c:1d:75:3f:45:6f:96: 09:aa:5f:cc:cb:67:ca:04:c6:45:49:a0:d9:08:eb: 7c:05:b2:18:17:11:eb:99:31:04:42:79:d2:05:32: 05:bf:ad:76:10:41:92:2c:2e:8f:7a:28:00:e3:4b: 01:5d:78:67:7b:17:c5:82:a8:ae:aa:27:b0:dc:6e: 78:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:84:36:D3:A5:0D:40:FF:9B:6E:7C:82:D1:0D:0E:78:16:38:DF:BB X509v3 Authority Key Identifier: keyid:D0:DE:43:0E:42:3B:23:AB:63:4E:BC:F0:19:5F:11:26:B4:4A:52:5E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0DE430E423B23AB634EBCF0195F1126B44A525E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d74a1527-5c8e-4bd3-a1c7-9d1ed2d23e14/0/D0DE430E423B23AB634EBCF0195F1126B44A525E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:84:71:6c:d7:f3:8b:db:22:48:2c:ea:fe:f7:54:f2:e7:cc: 1f:4c:0c:b2:19:80:36:3a:79:98:7f:81:00:3f:26:4e:74:ab: dc:93:58:9e:4a:8f:b2:6f:1f:bf:c9:cd:7d:b1:27:98:e8:60: 30:4f:fb:2a:23:bb:e2:0a:e2:46:92:78:41:ea:ea:ba:90:87: 01:ee:d3:91:db:96:72:0d:34:e0:af:dd:75:8a:9a:d7:4b:ff: f9:eb:ed:05:8b:2e:2f:c4:be:00:11:a6:29:80:cd:f7:c0:b8: f0:73:b4:23:cb:ce:27:51:11:be:62:5b:b9:f1:ee:54:1a:01: 22:f6:5d:3a:cb:3b:33:f6:3e:66:e7:fc:d2:16:ef:b0:2d:5e: e6:ab:0e:70:77:ef:5d:09:01:cb:90:b2:15:dd:b0:43:f6:8f: 1f:32:0c:70:9c:59:20:01:7d:c2:65:51:4d:f6:af:9b:15:4b: b1:75:c8:cc:29:5b:4c:7a:b8:04:c8:63:11:df:91:20:d6:d7: c1:f0:a1:24:a0:c4:b7:06:9e:6d:db:93:e2:cc:d6:55:f4:29: 1c:ce:50:02:7a:ed:1c:40:9e:96:08:fc:1f:63:72:ca:22:e0: 92:91:ac:0d:d6:32:0d:f4:f9:e5:ec:4a:9c:ce:bd:4f:ed:f0: d3:bf:79:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUflX1B7ru6BE+5z7gW3hC5rhMjFUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBERTQzMEU0MjNCMjNBQjYzNEVCQ0YwMTk1RjExMjZC NDRBNTI1RTAeFw0yNTA2MDQwMzA2NThaFw0yNTA2MDcwNjQ0NThaMDMxMTAvBgNV BAMTKDE3ODQzNkQzQTUwRDQwRkY5QjZFN0M4MkQxMEQwRTc4MTYzOERGQkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChgkdX/khzM2kHbrgxUT/d7jKY 5jw2807WiBqCaZdYDTaQa+mFdsooNPAXwfB0G+5D7diPaIdDHmjzR5zuONakIaLo Np4OoALF74ja+oKiWyHNUiZ44ZOPAKbtKfKoJeYlbu4DbYV9ZWTptpP3yZLGsARP hn1G3mWlUBPJqn5iJrOuBHKRDo0RWUn9didUI1URdRKvEB8G1ncCHtcSFb1UnXZI +nx5BSOiHhuOTPs/M0UGEPKwasz2vX+ZHB11P0VvlgmqX8zLZ8oExkVJoNkI63wF shgXEeuZMQRCedIFMgW/rXYQQZIsLo96KADjSwFdeGd7F8WCqK6qJ7DcbnglAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUF4Q206UNQP+bbnyC0Q0OeBY437swHwYDVR0j BBgwFoAU0N5DDkI7I6tjTrzwGV8RJrRKUl4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k NzRhMTUyNy01YzhlLTRiZDMtYTFjNy05ZDFlZDJkMjNlMTQvMC9EMERFNDMwRTQy M0IyM0FCNjM0RUJDRjAxOTVGMTEyNkI0NEE1MjVFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBERTQzMEU0MjNCMjNBQjYzNEVCQ0YwMTk1RjExMjZCNDRB NTI1RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZDc0YTE1MjctNWM4ZS00YmQzLWEx YzctOWQxZWQyZDIzZTE0LzAvRDBERTQzMEU0MjNCMjNBQjYzNEVCQ0YwMTk1RjEx MjZCNDRBNTI1RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE2EcWzX84vbIkgs6v73VPLnzB9MDLIZgDY6 eZh/gQA/Jk50q9yTWJ5Kj7JvH7/JzX2xJ5joYDBP+yoju+IK4kaSeEHq6rqQhwHu 05HblnINNOCv3XWKmtdL//nr7QWLLi/EvgARpimAzffAuPBztCPLzidREb5iW7nx 7lQaASL2XTrLOzP2Pmbn/NIW77AtXuarDnB3710JAcuQshXdsEP2jx8yDHCcWSAB fcJlUU32r5sVS7F1yMwpW0x6uATIYxHfkSDW18HwoSSgxLcGnm3bk+LM1lX0KRzO UAJ67RxAnpYI/B9jcsoi4JKRrA3WMg30+eXsSpzOvU/t8NO/eRw= -----END CERTIFICATE-----Generated at Thu Jun 5 18:14:39 2025 by rpki-client