$ rpki-client -vvf repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft File: D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft (raw, json) Hash identifier: F5rQpPXaIaQdWjbI0Qm3LgcjF+9pKHGFHoCFbhzYCYQ= Subject key identifier: 8F:06:B5:D8:BC:4E:D9:68:9C:CA:03:A7:F9:F0:C9:D1:C1:D8:85:D6 Authority key identifier: D9:0C:70:42:B5:DC:18:34:1D:CC:77:CA:5C:F8:F4:CA:21:0D:88:6B Certificate issuer: /CN=D90C7042B5DC18341DCC77CA5CF8F4CA210D886B Certificate serial: 10410DA506366E4F37992ED8B624897DFE90067E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft Manifest number: B1 Signing time: Mon 28 Apr 2025 04:04:32 +0000 Manifest this update: Mon 28 Apr 2025 03:59:32 +0000 Manifest next update: Thu 01 May 2025 07:17:32 +0000 Files and hashes: 1: D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.crl (hash: JOjXimUCGU8OKH8CkfpL85hcrf9m4Q2vd+wgPpJATZ4=) 2: 3135372e36362e372e302f32342d3234203d3e20313338383239.roa (hash: zM59QgzH/K8O4i/tzNe37zwwVnS65qf7DZJku3UKUIg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.crl rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 17:48:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:41:0d:a5:06:36:6e:4f:37:99:2e:d8:b6:24:89:7d:fe:90:06:7e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D90C7042B5DC18341DCC77CA5CF8F4CA210D886B Validity Not Before: Apr 28 03:59:32 2025 GMT Not After : May 1 07:17:32 2025 GMT Subject: CN=8F06B5D8BC4ED9689CCA03A7F9F0C9D1C1D885D6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:d5:80:01:81:06:15:26:41:8b:50:44:a6:c3: 61:83:ab:8d:7f:7b:f0:42:a4:6f:03:85:93:19:31: 74:c8:f3:88:15:49:5a:77:24:46:e5:70:8b:8a:fe: fe:27:b7:c7:12:f6:4a:11:fe:4b:1c:c7:8d:32:e2: 24:f9:f7:d9:9b:cf:ec:f7:b4:de:3f:f0:3c:fa:15: de:32:72:e9:df:a7:70:a6:c7:64:5b:a6:b7:2a:3d: d0:7c:02:5a:b4:50:c9:22:83:48:9f:f7:cb:4a:94: 2c:dc:89:46:8f:38:6a:63:c9:d0:72:0f:cc:9a:65: 96:cc:68:71:b0:99:c5:37:db:e2:64:1a:d9:d9:e0: d9:2a:ff:9c:dd:7f:61:81:62:55:15:5f:56:61:c8: ec:14:45:8c:e7:72:f2:a1:07:74:db:32:0b:ce:5d: 16:a7:9b:14:2e:d5:df:6d:3b:7e:82:b1:d2:e8:56: 7d:a9:00:cd:d0:73:5f:be:45:1f:86:d9:38:e1:c1: 9e:64:1c:7d:0e:fa:df:8c:b4:07:2f:49:f0:03:35: ab:11:9b:64:ff:c7:06:c4:e5:39:ee:03:60:74:9f: 81:a2:75:02:03:a7:5c:10:85:17:71:f1:3b:b9:b4: 31:a6:9b:f8:d1:fd:54:21:6b:6f:01:2b:af:6e:c2: f6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:06:B5:D8:BC:4E:D9:68:9C:CA:03:A7:F9:F0:C9:D1:C1:D8:85:D6 X509v3 Authority Key Identifier: keyid:D9:0C:70:42:B5:DC:18:34:1D:CC:77:CA:5C:F8:F4:CA:21:0D:88:6B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/00a6feaa-6b4f-47cf-9e3c-00aeac67a32a/0/D90C7042B5DC18341DCC77CA5CF8F4CA210D886B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:0d:75:8c:c2:e4:a8:e5:93:56:83:11:46:d9:1c:13:f1:1b: 9f:7f:8b:b5:5e:97:59:5d:ba:47:f4:01:bc:b7:26:92:e1:ca: a7:cd:18:99:7e:4b:6e:67:f2:72:8b:47:f6:05:02:4e:d4:32: da:9b:40:12:e0:41:f7:13:a2:7d:b6:49:a7:7f:33:d5:95:85: 73:dc:c7:1a:73:8e:7a:0a:be:4b:ba:70:6c:0b:00:0a:f6:04: 70:b7:e9:fd:00:10:0e:82:4a:13:c1:00:91:8d:1b:c4:35:cd: f0:58:89:e2:4e:53:4b:dd:c6:b8:78:52:ab:43:46:96:8d:b2: f6:eb:0a:cf:8b:d3:25:6a:29:7f:b6:56:84:27:85:c7:7d:98: b0:b5:7d:51:4d:e1:77:c2:74:8d:67:cc:80:ab:b8:99:05:a2: 71:29:1f:e1:11:d2:20:19:2e:21:57:89:5c:9e:a3:84:d7:f1: 76:55:f2:9f:b6:8d:07:66:19:26:e7:4c:42:4a:0f:3b:bd:66: 83:29:d1:cf:d2:f0:ec:74:01:b1:d3:e2:0e:8c:3e:c3:a9:c3: d7:cd:0e:b6:2e:3a:99:22:17:a3:c7:db:3e:e8:80:d8:45:f2: 70:6a:64:23:d6:7a:1e:33:4e:02:67:a1:bf:43:db:f8:9f:23: e5:bd:72:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEEENpQY2bk83mS7YtiSJff6QBn4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDkwQzcwNDJCNURDMTgzNDFEQ0M3N0NBNUNGOEY0Q0Ey MTBEODg2QjAeFw0yNTA0MjgwMzU5MzJaFw0yNTA1MDEwNzE3MzJaMDMxMTAvBgNV BAMTKDhGMDZCNUQ4QkM0RUQ5Njg5Q0NBMDNBN0Y5RjBDOUQxQzFEODg1RDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ1YABgQYVJkGLUESmw2GDq41/ e/BCpG8DhZMZMXTI84gVSVp3JEblcIuK/v4nt8cS9koR/kscx40y4iT599mbz+z3 tN4/8Dz6Fd4ycunfp3Cmx2RbprcqPdB8Alq0UMkig0if98tKlCzciUaPOGpjydBy D8yaZZbMaHGwmcU32+JkGtnZ4Nkq/5zdf2GBYlUVX1ZhyOwURYzncvKhB3TbMgvO XRanmxQu1d9tO36CsdLoVn2pAM3Qc1++RR+G2TjhwZ5kHH0O+t+MtAcvSfADNasR m2T/xwbE5TnuA2B0n4GidQIDp1wQhRdx8Tu5tDGmm/jR/VQha28BK69uwvZDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjwa12LxO2WicygOn+fDJ0cHYhdYwHwYDVR0j BBgwFoAU2QxwQrXcGDQdzHfKXPj0yiENiGswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MGE2ZmVhYS02YjRmLTQ3Y2YtOWUzYy0wMGFlYWM2N2EzMmEvMC9EOTBDNzA0MkI1 REMxODM0MURDQzc3Q0E1Q0Y4RjRDQTIxMEQ4ODZCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDkwQzcwNDJCNURDMTgzNDFEQ0M3N0NBNUNGOEY0Q0EyMTBE ODg2Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDBhNmZlYWEtNmI0Zi00N2NmLTll M2MtMDBhZWFjNjdhMzJhLzAvRDkwQzcwNDJCNURDMTgzNDFEQ0M3N0NBNUNGOEY0 Q0EyMTBEODg2Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALgNdYzC5Kjlk1aDEUbZHBPxG59/i7Vel1ld ukf0Aby3JpLhyqfNGJl+S25n8nKLR/YFAk7UMtqbQBLgQfcTon22Sad/M9WVhXPc xxpzjnoKvku6cGwLAAr2BHC36f0AEA6CShPBAJGNG8Q1zfBYieJOU0vdxrh4UqtD RpaNsvbrCs+L0yVqKX+2VoQnhcd9mLC1fVFN4XfCdI1nzICruJkFonEpH+ER0iAZ LiFXiVyeo4TX8XZV8p+2jQdmGSbnTEJKDzu9ZoMp0c/S8Ox0AbHT4g6MPsOpw9fN DrYuOpkiF6PH2z7ogNhF8nBqZCPWeh4zTgJnob9D2/ifI+W9ctw= -----END CERTIFICATE-----Generated at Mon Apr 28 20:07:09 2025 by rpki-client