$ rpki-client -vvf repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft File: D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft (raw, json) Hash identifier: bnM/L6sSy4InTUGwOWkzWqf2PEpFmir53UgAyQ7twR8= Subject key identifier: D8:A1:04:47:B5:4E:7D:F8:2D:BC:81:17:6C:AD:F2:F0:50:AF:27:D0 Authority key identifier: D1:F7:2E:67:DA:9C:CE:09:04:4F:A4:20:4E:A9:93:AE:93:D1:96:D6 Certificate issuer: /CN=D1F72E67DA9CCE09044FA4204EA993AE93D196D6 Certificate serial: 7C3A908ACB49E7051E8F789966B2F8CCF8F3EC5D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft Manifest number: F1 Signing time: Thu 03 Apr 2025 23:31:02 +0000 Manifest this update: Thu 03 Apr 2025 23:26:02 +0000 Manifest next update: Mon 07 Apr 2025 03:07:02 +0000 Files and hashes: 1: D1F72E67DA9CCE09044FA4204EA993AE93D196D6.crl (hash: oiPzxy7GP86eTomU3H08pJyK1hR7bLB/87F/UD/bJ88=) 2: 3130332e3138322e37382e302f32342d3234203d3e20313439363635.roa (hash: LAATNsnHcnoJWKciQROoRwDYWcBiokYiUiwzyLuS2UY=) 3: 3130332e3138322e37382e302f32332d3234203d3e20313439363635.roa (hash: gY0MYBLnrNGMInBtjBk2fVW/5Y8HTuVN7KMpfZNbvwM=) 4: 3130332e3138322e37392e302f32342d3234203d3e20313439363635.roa (hash: dJaS59sTNR5P0zfWxcM9Q8SeRwLPq4ilnHYQElEDNMo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.crl rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 03:07:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:3a:90:8a:cb:49:e7:05:1e:8f:78:99:66:b2:f8:cc:f8:f3:ec:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1F72E67DA9CCE09044FA4204EA993AE93D196D6 Validity Not Before: Apr 3 23:26:02 2025 GMT Not After : Apr 7 03:07:02 2025 GMT Subject: CN=D8A10447B54E7DF82DBC81176CADF2F050AF27D0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:76:d0:a5:5e:4c:e5:6c:97:71:05:5d:ce:47: ad:c4:ae:2c:95:2f:5d:d7:34:60:b7:fe:5d:11:ba: 1c:6b:26:bb:ef:88:23:ff:17:95:70:86:2f:67:c4: 10:5b:0a:32:a8:e2:59:53:95:0a:63:ba:c0:91:25: 9d:e5:c7:82:a8:fa:f4:0d:bb:c4:a8:10:58:27:58: aa:1b:83:aa:57:3c:d4:bc:87:17:2f:ae:75:47:66: 8b:93:2a:fd:64:28:04:7c:8f:60:56:81:f3:e0:34: 76:1b:49:b4:5a:0a:49:95:75:5c:69:90:6f:9c:e0: 05:4e:6e:21:d4:22:d7:49:3b:22:9b:e4:04:d8:85: 98:c7:17:49:65:2e:89:6e:41:b8:f0:d3:ef:89:ab: 53:1c:3d:a0:01:40:99:1f:a4:87:19:ff:00:bc:9f: 20:ef:c7:16:85:49:05:79:83:cf:2f:27:7d:16:91: d7:e1:18:08:4a:78:d2:9f:ef:f7:24:cc:f2:26:59: a5:29:e1:58:83:11:c9:79:d2:9d:7d:85:77:2e:f0: d7:f2:02:c7:1c:88:e4:2c:f1:0c:b9:12:9b:e2:71: 78:61:3d:96:df:88:e7:54:8e:3a:c0:c5:e9:b1:d5: 1a:f4:a0:24:a9:ac:33:02:67:17:69:7d:1a:fc:1b: 87:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:A1:04:47:B5:4E:7D:F8:2D:BC:81:17:6C:AD:F2:F0:50:AF:27:D0 X509v3 Authority Key Identifier: keyid:D1:F7:2E:67:DA:9C:CE:09:04:4F:A4:20:4E:A9:93:AE:93:D1:96:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34c33b8-9d42-4208-8ac4-f172a144d868/0/D1F72E67DA9CCE09044FA4204EA993AE93D196D6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:8c:c3:11:75:4a:d7:83:e8:3c:2c:eb:c5:a5:e6:9e:15:94: fd:19:b6:e1:f7:dc:b9:ba:dc:b0:c3:18:8d:09:aa:14:52:ea: 8b:ea:d7:f2:c8:1c:88:c8:9d:c7:ea:2d:cb:0a:a1:30:04:57: 6b:22:14:d1:cc:53:9f:93:80:d9:94:4e:17:59:b4:95:3a:2b: ef:67:bf:73:48:c4:6c:53:ee:f1:20:4d:a6:18:a9:a7:2e:6d: 49:f7:9a:c2:be:af:d3:90:bb:4e:41:60:cb:ac:5f:e7:d3:c4: 49:60:78:67:db:93:5c:fd:8d:e6:ad:f3:b8:2b:25:7c:25:09: 7d:6e:45:d4:ab:94:cc:d8:03:4a:b9:62:44:ea:5b:b2:a0:0e: 65:2f:ec:7e:f0:27:48:71:b1:18:ed:16:97:97:47:73:4a:68: 79:41:16:73:56:6f:8d:07:91:4c:2e:06:00:58:c7:bc:5b:85: d3:e8:9b:5f:b0:33:58:c3:c9:1b:be:5b:78:b4:bf:c8:a6:07: 44:1a:23:41:a8:e5:7a:be:3f:ae:14:95:76:ed:f4:ce:38:5b: b0:6a:94:8a:07:05:5c:97:a1:36:3e:18:97:ca:a6:09:72:25: 23:bc:2f:dd:a2:59:37:61:8f:61:ba:0b:90:f3:17:ba:d2:ed: 5f:6b:62:b2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfDqQistJ5wUej3iZZrL4zPjz7F0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFGNzJFNjdEQTlDQ0UwOTA0NEZBNDIwNEVBOTkzQUU5 M0QxOTZENjAeFw0yNTA0MDMyMzI2MDJaFw0yNTA0MDcwMzA3MDJaMDMxMTAvBgNV BAMTKEQ4QTEwNDQ3QjU0RTdERjgyREJDODExNzZDQURGMkYwNTBBRjI3RDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCldtClXkzlbJdxBV3OR63EriyV L13XNGC3/l0RuhxrJrvviCP/F5Vwhi9nxBBbCjKo4llTlQpjusCRJZ3lx4Ko+vQN u8SoEFgnWKobg6pXPNS8hxcvrnVHZouTKv1kKAR8j2BWgfPgNHYbSbRaCkmVdVxp kG+c4AVObiHUItdJOyKb5ATYhZjHF0llLoluQbjw0++Jq1McPaABQJkfpIcZ/wC8 nyDvxxaFSQV5g88vJ30WkdfhGAhKeNKf7/ckzPImWaUp4ViDEcl50p19hXcu8Nfy AscciOQs8Qy5EpvicXhhPZbfiOdUjjrAxemx1Rr0oCSprDMCZxdpfRr8G4dRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2KEER7VOffgtvIEXbK3y8FCvJ9AwHwYDVR0j BBgwFoAU0fcuZ9qczgkET6QgTqmTrpPRltYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MzRjMzNiOC05ZDQyLTQyMDgtOGFjNC1mMTcyYTE0NGQ4NjgvMC9EMUY3MkU2N0RB OUNDRTA5MDQ0RkE0MjA0RUE5OTNBRTkzRDE5NkQ2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDFGNzJFNjdEQTlDQ0UwOTA0NEZBNDIwNEVBOTkzQUU5M0Qx OTZENi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjM0YzMzYjgtOWQ0Mi00MjA4LThh YzQtZjE3MmExNDRkODY4LzAvRDFGNzJFNjdEQTlDQ0UwOTA0NEZBNDIwNEVBOTkz QUU5M0QxOTZENi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ2MwxF1SteD6Dws68Wl5p4VlP0ZtuH33Lm6 3LDDGI0JqhRS6ovq1/LIHIjIncfqLcsKoTAEV2siFNHMU5+TgNmUThdZtJU6K+9n v3NIxGxT7vEgTaYYqacubUn3msK+r9OQu05BYMusX+fTxElgeGfbk1z9jeat87gr JXwlCX1uRdSrlMzYA0q5YkTqW7KgDmUv7H7wJ0hxsRjtFpeXR3NKaHlBFnNWb40H kUwuBgBYx7xbhdPom1+wM1jDyRu+W3i0v8imB0QaI0Go5Xq+P64UlXbt9M44W7Bq lIoHBVyXoTY+GJfKpglyJSO8L92iWTdhj2G6C5DzF7rS7V9rYrI= -----END CERTIFICATE-----Generated at Sat Apr 5 21:18:50 2025 by rpki-client