$ rpki-client -vvf repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft File: D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft (raw, json) Hash identifier: 28u9NQ50fv+vuPjdN4pnSYG1mI40zHwMEEt922E6bb8= Subject key identifier: 61:34:D7:F6:05:6C:ED:8E:23:DF:D9:E7:33:7E:D8:B4:2A:54:3C:E4 Authority key identifier: D4:68:8B:55:FB:8C:00:F6:AE:C2:84:E5:BC:B8:1E:22:7C:51:2D:ED Certificate issuer: /CN=D4688B55FB8C00F6AEC284E5BCB81E227C512DED Certificate serial: 6E84CCE874560C6C44CCB09EFEDE90A0B93B0D8F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft Manifest number: 3F Signing time: Fri 18 Apr 2025 14:51:21 +0000 Manifest this update: Fri 18 Apr 2025 14:46:21 +0000 Manifest next update: Mon 21 Apr 2025 17:39:21 +0000 Files and hashes: 1: D4688B55FB8C00F6AEC284E5BCB81E227C512DED.crl (hash: YSlEdFm9Dnffcj+2QUTvA2mi4iQc2s40Eh84vPcuMrw=) 2: 3135372e32302e3133322e302f32342d3234203d3e20313532343033.roa (hash: 594wKSAWlPpCaF+0MRLR4aC4V5qJ2eufvq7sqBbmmOc=) 3: 3135372e32302e3133332e302f32342d3234203d3e20313532343033.roa (hash: urPap96O72bhGMnY7pKE8RIJODUHRqXobYzgJgy+CAg=) 4: 3135372e32302e3133322e302f32332d3233203d3e20313532343033.roa (hash: 8j1+acCdsJVbTJGY7uHwLQICxHIGJ/neg6B/vDw5bQ0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.crl rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 21 Apr 2025 17:39:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:84:cc:e8:74:56:0c:6c:44:cc:b0:9e:fe:de:90:a0:b9:3b:0d:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4688B55FB8C00F6AEC284E5BCB81E227C512DED Validity Not Before: Apr 18 14:46:21 2025 GMT Not After : Apr 21 17:39:21 2025 GMT Subject: CN=6134D7F6056CED8E23DFD9E7337ED8B42A543CE4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:12:ce:9d:a5:8a:6e:72:1f:dd:aa:61:48:93: 02:d8:33:70:4d:f1:04:ae:f2:3b:29:3f:5e:15:7d: 84:8b:50:f6:94:1d:74:94:dc:78:94:b2:56:37:4b: fa:89:85:e8:ae:8c:b8:af:4a:0c:f3:f3:8e:95:c5: fb:49:e7:d6:20:c5:54:77:66:7e:c3:79:25:c5:6a: 63:c3:4d:32:e6:2a:ed:82:10:73:73:c6:21:19:1d: 37:7b:4b:cf:a7:6b:36:07:73:f7:61:b4:86:be:70: d6:45:e2:69:3a:a2:2f:52:ee:7c:b8:32:2d:97:1d: dc:75:67:b7:68:d2:73:57:f1:a7:29:c0:1a:89:7a: 8a:ea:aa:54:b4:66:4d:73:ca:2b:f8:23:40:9d:e8: 2e:30:1e:81:bf:c1:14:28:ad:78:4d:95:ae:ab:ab: 3b:3e:13:e7:f7:93:b1:7b:56:9d:59:c7:7b:46:19: f0:1d:68:99:47:e6:bf:b4:e9:a6:7a:bd:a4:32:e5: 88:1e:b1:59:71:2f:76:a2:46:bd:8c:8c:42:41:4e: c3:a5:ce:91:fe:e7:70:71:d8:53:1f:d5:c6:10:ee: 1e:e1:06:ee:43:f1:c6:a7:1a:a6:16:4b:e9:47:a7: a5:1e:56:6c:32:7e:5f:71:b4:e9:bf:1f:28:db:89: 35:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:34:D7:F6:05:6C:ED:8E:23:DF:D9:E7:33:7E:D8:B4:2A:54:3C:E4 X509v3 Authority Key Identifier: keyid:D4:68:8B:55:FB:8C:00:F6:AE:C2:84:E5:BC:B8:1E:22:7C:51:2D:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:4f:35:b1:60:76:e9:c7:94:88:f9:43:1f:ad:b4:dd:3e:1e: 49:2f:e7:bc:06:eb:6d:34:22:7c:81:c5:ff:3b:67:37:ee:04: 46:68:63:6b:29:9b:18:24:43:65:37:3e:fa:05:86:07:b5:17: 51:0e:35:e6:85:52:be:06:4f:33:ab:69:65:7c:f4:29:66:93: 51:a8:25:36:bf:76:fa:88:27:32:6d:ad:89:9a:84:22:e2:4a: 37:e3:97:05:21:c7:79:be:8f:6a:d8:88:e9:83:e6:b6:43:a7: 31:9a:a6:8b:b2:de:29:f5:ba:59:8b:19:74:75:c5:cf:cf:ac: c5:d6:bb:08:90:f9:52:63:5c:ff:7c:e1:38:26:34:e0:57:3a: d8:9e:71:8b:25:d8:37:ec:bf:37:5c:8d:f1:17:e4:af:2b:68: 13:70:05:c1:ca:ef:2e:41:9d:fc:99:c0:85:3a:bd:84:1f:e3: 15:73:c8:4e:3e:50:7c:12:9a:a3:bf:09:90:b7:2b:8c:52:51: 70:e4:13:37:3b:e9:7e:07:8d:d1:ee:a6:bb:66:08:8d:71:30: f1:1b:ae:ad:e4:81:30:66:c8:d8:3f:9d:a0:cf:d6:75:d6:35: 08:b3:05:b4:e5:8f:02:3a:9a:77:01:c6:ab:d7:83:e6:d8:4b: 5b:55:e7:b3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUboTM6HRWDGxEzLCe/t6QoLk7DY8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ2ODhCNTVGQjhDMDBGNkFFQzI4NEU1QkNCODFFMjI3 QzUxMkRFRDAeFw0yNTA0MTgxNDQ2MjFaFw0yNTA0MjExNzM5MjFaMDMxMTAvBgNV BAMTKDYxMzREN0Y2MDU2Q0VEOEUyM0RGRDlFNzMzN0VEOEI0MkE1NDNDRTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYEs6dpYpuch/dqmFIkwLYM3BN 8QSu8jspP14VfYSLUPaUHXSU3HiUslY3S/qJheiujLivSgzz846VxftJ59YgxVR3 Zn7DeSXFamPDTTLmKu2CEHNzxiEZHTd7S8+nazYHc/dhtIa+cNZF4mk6oi9S7ny4 Mi2XHdx1Z7do0nNX8acpwBqJeorqqlS0Zk1zyiv4I0Cd6C4wHoG/wRQorXhNla6r qzs+E+f3k7F7Vp1Zx3tGGfAdaJlH5r+06aZ6vaQy5YgesVlxL3aiRr2MjEJBTsOl zpH+53Bx2FMf1cYQ7h7hBu5D8canGqYWS+lHp6UeVmwyfl9xtOm/HyjbiTWbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYTTX9gVs7Y4j39nnM37YtCpUPOQwHwYDVR0j BBgwFoAU1GiLVfuMAPauwoTlvLgeInxRLe0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OWMxNWI3OC0yMDcxLTQ0ZDEtOWExZC1hZDZlYjA5ZmFlMDgvMC9ENDY4OEI1NUZC OEMwMEY2QUVDMjg0RTVCQ0I4MUUyMjdDNTEyREVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDQ2ODhCNTVGQjhDMDBGNkFFQzI4NEU1QkNCODFFMjI3QzUx MkRFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTljMTViNzgtMjA3MS00NGQxLTlh MWQtYWQ2ZWIwOWZhZTA4LzAvRDQ2ODhCNTVGQjhDMDBGNkFFQzI4NEU1QkNCODFF MjI3QzUxMkRFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIhPNbFgdunHlIj5Qx+ttN0+Hkkv57wG6200 InyBxf87ZzfuBEZoY2spmxgkQ2U3PvoFhge1F1EONeaFUr4GTzOraWV89Clmk1Go JTa/dvqIJzJtrYmahCLiSjfjlwUhx3m+j2rYiOmD5rZDpzGapouy3in1ulmLGXR1 xc/PrMXWuwiQ+VJjXP984TgmNOBXOtiecYsl2DfsvzdcjfEX5K8raBNwBcHK7y5B nfyZwIU6vYQf4xVzyE4+UHwSmqO/CZC3K4xSUXDkEzc76X4HjdHuprtmCI1xMPEb rq3kgTBmyNg/naDP1nXWNQizBbTljwI6mncBxqvXg+bYS1tV57M= -----END CERTIFICATE-----Generated at Sat Apr 19 16:01:19 2025 by rpki-client