$ rpki-client -vvf repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.mft File: 196DBD061B4577EF848600B17A266D689F5A70B5.mft (raw, json) Hash identifier: cvQ5ZTpx4pj2NUVAPXwaq0Vd+B8ok7Vcr6DMJ+u6yvs= Subject key identifier: 1D:FF:41:2F:45:11:70:96:97:BF:20:8D:D7:84:C0:F4:42:5F:28:B4 Authority key identifier: 19:6D:BD:06:1B:45:77:EF:84:86:00:B1:7A:26:6D:68:9F:5A:70:B5 Certificate issuer: /CN=196DBD061B4577EF848600B17A266D689F5A70B5 Certificate serial: 73600275ECC5D66FE3348B8659A1795ADB2ED040 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/196DBD061B4577EF848600B17A266D689F5A70B5.cer Subject info access: rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.mft Manifest number: 01AF Signing time: Tue 08 Apr 2025 05:11:28 +0000 Manifest this update: Tue 08 Apr 2025 05:06:28 +0000 Manifest next update: Fri 11 Apr 2025 14:17:28 +0000 Files and hashes: 1: 3130332e3138302e3139382e302f32332d3234203d3e20313439333638.roa (hash: 0ITBGJ00BgJjiaRA5n1B3d0PzWeChxwSHb9vKaBZRbM=) 2: 3130332e3138302e3139382e302f32342d3234203d3e20313439333638.roa (hash: EdwKl111q2CtLUHBTONF9R20VzXLHu4+IxkAtHm2voQ=) 3: 3130332e3138302e3139392e302f32342d3234203d3e20313439333638.roa (hash: khKuR3b4PTQaHgWChILIFynR20HNq4BEEZ8cvsbakr8=) 4: 196DBD061B4577EF848600B17A266D689F5A70B5.crl (hash: G/vN3Njua6yYXDu3hL9JDKmTB/xIvTSSm6gg8cGr+VM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.crl rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/196DBD061B4577EF848600B17A266D689F5A70B5.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 11 Apr 2025 14:17:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:60:02:75:ec:c5:d6:6f:e3:34:8b:86:59:a1:79:5a:db:2e:d0:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=196DBD061B4577EF848600B17A266D689F5A70B5 Validity Not Before: Apr 8 05:06:28 2025 GMT Not After : Apr 11 14:17:28 2025 GMT Subject: CN=1DFF412F4511709697BF208DD784C0F4425F28B4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:11:ea:cc:f2:79:8e:62:cf:0d:94:8d:10:ed: 43:e6:ab:3c:41:be:42:b5:ec:1a:03:5b:dd:b0:f4: a2:30:3f:7d:27:88:e4:bc:40:80:42:65:80:77:8a: 60:c4:af:c1:96:fa:1d:ae:8a:f0:a5:1c:2a:43:49: 90:e5:73:8c:3b:0d:db:7c:35:dc:e8:76:57:eb:cd: de:d2:e4:03:61:80:e4:a4:a3:de:c7:cc:70:24:a9: 9e:60:c5:c0:51:9c:b3:83:2f:74:4b:05:90:28:a3: ff:77:aa:89:51:be:e0:ce:4f:aa:48:cd:f6:e6:b4: 54:a6:a2:28:f3:e1:09:9a:f3:a7:e9:93:79:a0:41: ff:84:1a:68:c7:de:aa:48:87:0f:dd:48:10:15:64: 52:8f:cf:82:57:37:6d:93:32:b4:6b:2b:fb:af:bc: a2:0d:7f:f2:c7:e7:60:c3:11:b7:65:60:c5:58:47: b4:95:01:b5:55:85:11:12:12:da:ee:cc:e1:30:c0: 36:f8:1d:a1:11:69:4e:92:1e:c3:cf:a6:aa:bc:d0: b2:20:33:02:03:82:51:3f:ad:64:e7:dd:7c:ee:c9: a3:7a:76:9e:df:7e:11:d4:93:26:46:ef:c9:fd:68: 8b:ea:c1:ff:da:61:01:44:be:20:a1:6c:39:09:75: 9b:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:FF:41:2F:45:11:70:96:97:BF:20:8D:D7:84:C0:F4:42:5F:28:B4 X509v3 Authority Key Identifier: keyid:19:6D:BD:06:1B:45:77:EF:84:86:00:B1:7A:26:6D:68:9F:5A:70:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/196DBD061B4577EF848600B17A266D689F5A70B5.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dac801a0-7912-4b01-a281-88024624a2d4/0/196DBD061B4577EF848600B17A266D689F5A70B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:36:46:1a:fe:48:f2:92:c0:45:f4:6a:6f:40:8f:69:60:d3: 4e:75:dc:33:a3:ff:1b:48:8b:ba:f6:46:80:d8:54:e6:63:c3: 16:e2:a1:3d:31:d6:c7:03:07:a7:be:e3:e8:c3:96:21:06:1b: 9b:59:4a:4b:9e:c1:a2:7a:1b:15:bd:b7:ab:8d:91:e0:bc:d3: a0:9d:1b:43:31:a6:17:a4:31:b5:6f:ec:ff:38:d3:c4:1e:1c: a4:30:77:78:5a:e2:75:77:74:ea:c9:39:e5:6d:cf:19:e4:81: c8:0b:af:53:94:ba:35:ec:08:55:93:86:ec:33:d7:6d:a6:2e: 3e:51:80:53:4e:44:5f:92:d0:7b:d3:ed:a2:a5:65:b3:85:48: 1e:64:b4:93:1a:d0:64:79:69:e2:c3:40:f2:64:80:6c:c4:6e: 8f:23:69:92:5b:65:bd:13:25:1b:af:44:a7:ca:54:10:a1:dc: 2d:27:a9:24:7b:40:01:10:98:17:43:62:10:d0:ef:72:03:1e: ff:46:4b:89:fa:0a:76:d0:a0:13:e8:b0:54:9a:d2:15:17:30: 0a:26:a3:9b:b6:0f:5d:e6:6d:06:5d:95:76:18:d3:b1:fb:87: e7:13:58:59:fe:f1:c3:e8:17:e3:5f:08:be:00:a0:61:db:42: a5:4f:c5:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc2ACdezF1m/jNIuGWaF5Wtsu0EAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTk2REJEMDYxQjQ1NzdFRjg0ODYwMEIxN0EyNjZENjg5 RjVBNzBCNTAeFw0yNTA0MDgwNTA2MjhaFw0yNTA0MTExNDE3MjhaMDMxMTAvBgNV BAMTKDFERkY0MTJGNDUxMTcwOTY5N0JGMjA4REQ3ODRDMEY0NDI1RjI4QjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiEerM8nmOYs8NlI0Q7UPmqzxB vkK17BoDW92w9KIwP30niOS8QIBCZYB3imDEr8GW+h2uivClHCpDSZDlc4w7Ddt8 Ndzodlfrzd7S5ANhgOSko97HzHAkqZ5gxcBRnLODL3RLBZAoo/93qolRvuDOT6pI zfbmtFSmoijz4Qma86fpk3mgQf+EGmjH3qpIhw/dSBAVZFKPz4JXN22TMrRrK/uv vKINf/LH52DDEbdlYMVYR7SVAbVVhRESEtruzOEwwDb4HaERaU6SHsPPpqq80LIg MwIDglE/rWTn3XzuyaN6dp7ffhHUkyZG78n9aIvqwf/aYQFEviChbDkJdZvbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHf9BL0URcJaXvyCN14TA9EJfKLQwHwYDVR0j BBgwFoAUGW29BhtFd++EhgCxeiZtaJ9acLUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9k YWM4MDFhMC03OTEyLTRiMDEtYTI4MS04ODAyNDYyNGEyZDQvMC8xOTZEQkQwNjFC NDU3N0VGODQ4NjAwQjE3QTI2NkQ2ODlGNUE3MEI1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMTk2REJEMDYxQjQ1NzdFRjg0ODYwMEIxN0EyNjZENjg5RjVB NzBCNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZGFjODAxYTAtNzkxMi00YjAxLWEy ODEtODgwMjQ2MjRhMmQ0LzAvMTk2REJEMDYxQjQ1NzdFRjg0ODYwMEIxN0EyNjZE Njg5RjVBNzBCNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHA2Rhr+SPKSwEX0am9Aj2lg00513DOj/xtI i7r2RoDYVOZjwxbioT0x1scDB6e+4+jDliEGG5tZSkuewaJ6GxW9t6uNkeC806Cd G0MxphekMbVv7P8408QeHKQwd3ha4nV3dOrJOeVtzxnkgcgLr1OUujXsCFWThuwz 122mLj5RgFNORF+S0HvT7aKlZbOFSB5ktJMa0GR5aeLDQPJkgGzEbo8jaZJbZb0T JRuvRKfKVBCh3C0nqSR7QAEQmBdDYhDQ73IDHv9GS4n6CnbQoBPosFSa0hUXMAom o5u2D13mbQZdlXYY07H7h+cTWFn+8cPoF+NfCL4AoGHbQqVPxdw= -----END CERTIFICATE-----Generated at Wed Apr 9 10:07:50 2025 by rpki-client