$ rpki-client -vvf repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.mft File: DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.mft (raw, json) Hash identifier: +84cRgqT9qGQ3rfB1E6mNRIsTMHCt6zdHhKIVscZ2Ls= Subject key identifier: B0:48:44:B5:D2:9F:B3:28:25:BA:FF:F4:8A:26:AB:3E:D5:70:A8:27 Authority key identifier: DC:FC:FE:4E:81:97:FF:AF:B9:A5:79:20:BD:40:DC:C1:AC:F0:F3:0F Certificate issuer: /CN=DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F Certificate serial: 5E2453D11F3BE6797CA6FBE7771CF2CFD9D74A08 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.mft Manifest number: 01CF Signing time: Sat 05 Apr 2025 12:01:53 +0000 Manifest this update: Sat 05 Apr 2025 11:56:53 +0000 Manifest next update: Tue 08 Apr 2025 18:47:53 +0000 Files and hashes: 1: DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.crl (hash: 9yePaUjsT1VV3iaArigvxDkOQIoCOg47Pv7EJPUy4s8=) 2: 3130332e3131312e3231392e302f32342d3234203d3e20313337333233.roa (hash: N8Hp5zFXrvVRTETGbbuYPmuPvC+hIoWpg8/FhaH5avg=) 3: 3130332e3131312e3231382e302f32342d3234203d3e20313337333233.roa (hash: Zv0VjyXOs/YJcxUITNpIWw5z1xu1WaEnf3VgeGVypQs=) 4: 323030313a6466343a393130303a3a2f34382d3438203d3e20313337333233.roa (hash: NYSNKUm/BgmT5rJhU5PDu3zm0ji32HyB3xQtf69bB+8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.crl rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:24:53:d1:1f:3b:e6:79:7c:a6:fb:e7:77:1c:f2:cf:d9:d7:4a:08 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F Validity Not Before: Apr 5 11:56:53 2025 GMT Not After : Apr 8 18:47:53 2025 GMT Subject: CN=B04844B5D29FB32825BAFFF48A26AB3ED570A827 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d6:1d:8d:f7:fd:5b:bd:88:fc:1a:41:0c:80: b0:3e:fe:66:7e:45:49:5f:bc:cc:1c:76:5e:db:a6: c2:8c:28:bf:33:d4:d1:f9:c6:5e:5b:4f:f1:62:a5: a3:85:ec:f2:16:1c:e3:4b:f1:a6:e0:48:e2:ba:c0: 5b:17:9f:c2:5b:2e:74:d8:e9:93:e9:ee:11:af:61: ae:3d:77:86:0a:e9:97:af:72:da:62:12:c9:60:b6: 5c:13:0f:e1:c3:75:b0:dd:81:fd:82:d1:bd:98:3c: 1c:54:c7:55:d0:d0:ff:d4:e2:cc:ae:10:fd:b8:64: 06:11:85:f8:9c:5a:40:f9:46:33:27:0b:43:dc:af: ba:e2:ed:34:57:85:89:66:d9:5f:87:9a:cc:f8:99: dc:79:d1:f6:27:23:1f:a2:01:cc:3d:a0:08:54:3b: 8b:67:2c:d6:98:18:03:b9:76:0f:b8:9e:48:56:dd: f8:39:e5:6b:5c:df:b1:7e:f6:32:b2:fe:47:2b:7e: 8e:be:05:47:54:a4:60:6f:57:53:77:4c:06:06:c9: 48:5b:9a:16:65:38:af:ba:2b:7c:c9:e5:16:e2:7c: f0:48:3b:30:ff:43:82:c0:23:d3:56:c6:cd:b2:e5: 33:15:c8:f5:64:47:e2:6e:88:96:95:c5:76:93:41: 2f:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:48:44:B5:D2:9F:B3:28:25:BA:FF:F4:8A:26:AB:3E:D5:70:A8:27 X509v3 Authority Key Identifier: keyid:DC:FC:FE:4E:81:97:FF:AF:B9:A5:79:20:BD:40:DC:C1:AC:F0:F3:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:ea:2f:ed:2e:a9:7f:c0:43:7a:76:61:9e:b2:95:d0:29:32: 40:00:c2:f1:a9:7c:23:d7:1f:e2:b0:d5:6e:48:1f:d3:bb:b3: c2:cd:1c:23:31:61:80:6b:fd:4b:1c:dc:ee:4b:84:6c:c3:a1: 03:29:46:b1:a1:6d:e1:0e:79:b0:5e:ae:09:dd:94:e0:e3:98: 3e:db:4c:62:2c:c6:a0:ba:42:83:40:27:b1:95:d3:9a:83:b4: d5:99:ab:da:43:9a:bf:04:55:b8:c3:4c:a3:73:a5:10:35:7a: 4e:db:a4:72:73:84:1c:6e:f8:e8:19:88:3c:5c:b1:41:f9:37: c5:98:06:98:b7:f2:1d:2d:ba:c6:44:c3:79:7a:c7:87:24:0e: 82:7f:23:6d:d5:9a:80:f5:64:20:7a:38:e5:ff:72:6a:87:7d: 9f:e6:b6:d2:7a:6f:95:4e:bb:76:a7:41:dc:ec:79:14:95:05: 0f:0f:e5:ff:a8:f0:87:92:7a:49:7c:9e:f2:5a:c8:c7:be:4e: 6d:4d:6e:53:21:66:7f:9d:4d:02:c2:a6:fb:41:2b:bb:e2:00: 28:a4:e9:44:8b:b5:af:2d:18:f2:e9:b2:1c:6d:72:3e:04:0a: 7e:6e:89:23:99:43:b3:27:ac:6a:47:44:21:76:78:42:9c:b0: b6:46:e6:4d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXiRT0R875nl8pvvndxzyz9nXSggwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENGQ0ZFNEU4MTk3RkZBRkI5QTU3OTIwQkQ0MERDQzFB Q0YwRjMwRjAeFw0yNTA0MDUxMTU2NTNaFw0yNTA0MDgxODQ3NTNaMDMxMTAvBgNV BAMTKEIwNDg0NEI1RDI5RkIzMjgyNUJBRkZGNDhBMjZBQjNFRDU3MEE4MjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC31h2N9/1bvYj8GkEMgLA+/mZ+ RUlfvMwcdl7bpsKMKL8z1NH5xl5bT/FipaOF7PIWHONL8abgSOK6wFsXn8JbLnTY 6ZPp7hGvYa49d4YK6ZevctpiEslgtlwTD+HDdbDdgf2C0b2YPBxUx1XQ0P/U4syu EP24ZAYRhficWkD5RjMnC0Pcr7ri7TRXhYlm2V+Hmsz4mdx50fYnIx+iAcw9oAhU O4tnLNaYGAO5dg+4nkhW3fg55Wtc37F+9jKy/kcrfo6+BUdUpGBvV1N3TAYGyUhb mhZlOK+6K3zJ5RbifPBIOzD/Q4LAI9NWxs2y5TMVyPVkR+JuiJaVxXaTQS/LAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsEhEtdKfsygluv/0iiarPtVwqCcwHwYDVR0j BBgwFoAU3Pz+ToGX/6+5pXkgvUDcwazw8w8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MWFmMTQ0Yi1iOTJlLTRmZmYtYjY0MS1lNDZmZGRlOGM2ZGYvMC9EQ0ZDRkU0RTgx OTdGRkFGQjlBNTc5MjBCRDQwRENDMUFDRjBGMzBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRENGQ0ZFNEU4MTk3RkZBRkI5QTU3OTIwQkQ0MERDQzFBQ0Yw RjMwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTFhZjE0NGItYjkyZS00ZmZmLWI2 NDEtZTQ2ZmRkZThjNmRmLzAvRENGQ0ZFNEU4MTk3RkZBRkI5QTU3OTIwQkQ0MERD QzFBQ0YwRjMwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFLqL+0uqX/AQ3p2YZ6yldApMkAAwvGpfCPX H+Kw1W5IH9O7s8LNHCMxYYBr/Usc3O5LhGzDoQMpRrGhbeEOebBergndlODjmD7b TGIsxqC6QoNAJ7GV05qDtNWZq9pDmr8EVbjDTKNzpRA1ek7bpHJzhBxu+OgZiDxc sUH5N8WYBpi38h0tusZEw3l6x4ckDoJ/I23VmoD1ZCB6OOX/cmqHfZ/mttJ6b5VO u3anQdzseRSVBQ8P5f+o8IeSekl8nvJayMe+Tm1NblMhZn+dTQLCpvtBK7viACik 6USLta8tGPLpshxtcj4ECn5uiSOZQ7MnrGpHRCF2eEKcsLZG5k0= -----END CERTIFICATE-----Generated at Sat Apr 5 22:29:41 2025 by rpki-client