$ rpki-client -vvf repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft File: DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft (raw, json) Hash identifier: ILef1o8dlBTBn99I3T54OrarhWCUapj9CxDdTVSMaeM= Subject key identifier: 3D:D6:3F:05:61:B3:38:6D:36:67:E0:8C:E2:F3:2D:B0:D8:F6:F5:01 Authority key identifier: DA:39:6A:1D:C6:29:9D:C3:BB:9E:8D:D7:65:0D:36:FA:BA:94:49:67 Certificate issuer: /CN=DA396A1DC6299DC3BB9E8DD7650D36FABA944967 Certificate serial: 2410A634EB3212C7E029CFD98B662FD8286EF5CD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft Manifest number: 01C0 Signing time: Fri 04 Apr 2025 15:50:52 +0000 Manifest this update: Fri 04 Apr 2025 15:45:52 +0000 Manifest next update: Mon 07 Apr 2025 18:15:52 +0000 Files and hashes: 1: 3130332e3136362e34382e302f32332d3234203d3e20313339343630.roa (hash: a7bbLvivN5h778OSusowuH24mo9x9m39VMDSk/dwR+U=) 2: DA396A1DC6299DC3BB9E8DD7650D36FABA944967.crl (hash: gXMhFCxpKH7SJA1mDzCnO+ysqwE83DZXIyxrwQlWue4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.crl rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:10:a6:34:eb:32:12:c7:e0:29:cf:d9:8b:66:2f:d8:28:6e:f5:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA396A1DC6299DC3BB9E8DD7650D36FABA944967 Validity Not Before: Apr 4 15:45:52 2025 GMT Not After : Apr 7 18:15:52 2025 GMT Subject: CN=3DD63F0561B3386D3667E08CE2F32DB0D8F6F501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:60:4d:73:d6:fd:8b:50:2c:0c:00:76:35:0e: c0:3e:93:bd:54:aa:2a:73:d3:3f:b0:b4:78:de:d2: 12:ee:82:f6:dd:25:64:87:91:61:a9:a3:f9:77:8e: c6:8e:91:b7:1f:62:e0:db:a7:2e:63:90:05:b9:8f: 44:01:8f:f2:27:3d:15:39:8f:24:9c:f9:34:4e:d2: 99:97:42:21:b8:0a:13:38:7b:5e:e5:57:0b:91:e5: 19:b5:5e:7c:31:41:81:91:2b:91:20:c7:a2:d0:e9: 13:84:08:3f:8b:06:b5:74:15:05:cc:dc:6b:74:a9: a3:5f:27:ec:a5:c1:77:6a:57:25:8e:f1:3d:41:c9: 9c:0b:1e:b2:95:4b:08:46:1d:d1:0c:11:e3:dd:ee: 8e:16:e9:af:6f:1a:2f:37:90:06:f2:cc:87:2b:64: 0c:44:9d:04:96:9c:41:b4:20:f5:15:ad:36:d9:63: 7a:14:a3:b0:d8:6a:04:45:ff:5e:8d:5c:0d:32:98: 68:4d:e8:86:02:af:cc:66:9d:4f:0a:1b:9c:97:ff: f2:27:b3:21:8a:53:b9:fd:00:4f:7e:07:00:72:3f: 7b:fd:b3:df:4a:b5:59:9d:ae:29:82:60:8f:5c:8e: 75:4f:42:a5:dd:87:b0:4b:b1:63:34:88:40:b5:ea: 0a:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:D6:3F:05:61:B3:38:6D:36:67:E0:8C:E2:F3:2D:B0:D8:F6:F5:01 X509v3 Authority Key Identifier: keyid:DA:39:6A:1D:C6:29:9D:C3:BB:9E:8D:D7:65:0D:36:FA:BA:94:49:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:78:5b:35:d1:91:83:f5:8f:72:b3:42:23:b5:43:06:9a:d4: 79:2c:7b:c2:5c:a8:a2:31:d1:62:c9:88:f3:2d:5c:8c:75:c1: d3:a7:ec:35:b8:2a:a4:cb:a8:96:37:18:d3:96:74:66:b3:62: 7e:a5:ca:07:4f:47:fb:e4:38:3e:05:de:b6:9f:cd:83:25:23: 8a:a2:d3:d4:de:9a:d3:cf:b9:d3:30:72:09:87:7c:17:d4:72: 61:32:77:6e:b2:db:b2:5d:44:14:86:54:52:2b:05:0f:d5:53: 70:63:47:3d:1a:2c:9b:92:c7:03:b4:e0:44:34:f2:7a:45:ed: dd:b3:a7:f9:9c:1e:b7:8e:0d:62:71:6b:53:3d:cd:c4:fe:c6: dd:05:aa:7e:50:26:e2:8c:95:c7:af:07:19:51:6f:a0:e0:24: 0e:dd:e7:43:d6:e3:a9:77:05:27:41:0d:d7:e1:7d:0f:4f:0e: 43:4d:e8:36:4b:70:df:34:cc:2f:83:f9:0c:c3:e4:2f:a6:ff: bb:c0:da:22:81:b9:24:e5:27:ff:9b:1f:f7:8d:53:07:75:00: dc:a7:e6:39:6a:0b:87:9c:02:aa:0d:33:82:72:e9:21:88:bc: 5e:e8:81:40:02:ed:a1:64:80:99:79:32:26:6f:f2:ec:e5:32: df:bd:9f:c5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJBCmNOsyEsfgKc/Zi2Yv2Chu9c0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREEzOTZBMURDNjI5OURDM0JCOUU4REQ3NjUwRDM2RkFC QTk0NDk2NzAeFw0yNTA0MDQxNTQ1NTJaFw0yNTA0MDcxODE1NTJaMDMxMTAvBgNV BAMTKDNERDYzRjA1NjFCMzM4NkQzNjY3RTA4Q0UyRjMyREIwRDhGNkY1MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTYE1z1v2LUCwMAHY1DsA+k71U qipz0z+wtHje0hLugvbdJWSHkWGpo/l3jsaOkbcfYuDbpy5jkAW5j0QBj/InPRU5 jySc+TRO0pmXQiG4ChM4e17lVwuR5Rm1XnwxQYGRK5Egx6LQ6ROECD+LBrV0FQXM 3Gt0qaNfJ+ylwXdqVyWO8T1ByZwLHrKVSwhGHdEMEePd7o4W6a9vGi83kAbyzIcr ZAxEnQSWnEG0IPUVrTbZY3oUo7DYagRF/16NXA0ymGhN6IYCr8xmnU8KG5yX//In syGKU7n9AE9+BwByP3v9s99KtVmdrimCYI9cjnVPQqXdh7BLsWM0iEC16grzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPdY/BWGzOG02Z+CM4vMtsNj29QEwHwYDVR0j BBgwFoAU2jlqHcYpncO7no3XZQ02+rqUSWcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OGI2M2U3ZC1hNjE3LTRlOGMtYTgyMS02MjM5NTZkNGQ0YWUvMC9EQTM5NkExREM2 Mjk5REMzQkI5RThERDc2NTBEMzZGQUJBOTQ0OTY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREEzOTZBMURDNjI5OURDM0JCOUU4REQ3NjUwRDM2RkFCQTk0 NDk2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZThiNjNlN2QtYTYxNy00ZThjLWE4 MjEtNjIzOTU2ZDRkNGFlLzAvREEzOTZBMURDNjI5OURDM0JCOUU4REQ3NjUwRDM2 RkFCQTk0NDk2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGx4WzXRkYP1j3KzQiO1Qwaa1Hkse8JcqKIx 0WLJiPMtXIx1wdOn7DW4KqTLqJY3GNOWdGazYn6lygdPR/vkOD4F3rafzYMlI4qi 09TemtPPudMwcgmHfBfUcmEyd26y27JdRBSGVFIrBQ/VU3BjRz0aLJuSxwO04EQ0 8npF7d2zp/mcHreODWJxa1M9zcT+xt0Fqn5QJuKMlcevBxlRb6DgJA7d50PW46l3 BSdBDdfhfQ9PDkNN6DZLcN80zC+D+QzD5C+m/7vA2iKBuSTlJ/+bH/eNUwd1ANyn 5jlqC4ecAqoNM4Jy6SGIvF7ogUAC7aFkgJl5MiZv8uzlMt+9n8U= -----END CERTIFICATE-----Generated at Sat Apr 5 23:15:20 2025 by rpki-client