$ rpki-client -vvf repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.mft File: DF1CEA0313DA7500D70AE089169B4BBEE54CA859.mft (raw, json) Hash identifier: C6umqJNjpVmYTQZ8JYD5z6TroIfUIIKoe9dudb33K+Q= Subject key identifier: B2:1E:64:B4:B0:AC:4A:6C:74:7A:65:C5:F5:9C:DB:9A:8C:1B:05:28 Authority key identifier: DF:1C:EA:03:13:DA:75:00:D7:0A:E0:89:16:9B:4B:BE:E5:4C:A8:59 Certificate issuer: /CN=DF1CEA0313DA7500D70AE089169B4BBEE54CA859 Certificate serial: 63B0B87CB2E53F5D789C70032DB8585561AD3503 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.mft Manifest number: 04C3 Signing time: Sun 27 Apr 2025 17:31:16 +0000 Manifest this update: Sun 27 Apr 2025 17:26:16 +0000 Manifest next update: Thu 01 May 2025 02:20:16 +0000 Files and hashes: 1: 3130332e3233332e38382e302f32332d3234203d3e203536323333.roa (hash: 0RrPfbpk+xcbyzgWiGEqZ6C13BPi43+NYiRziFVAs1Q=) 2: DF1CEA0313DA7500D70AE089169B4BBEE54CA859.crl (hash: 21AajssboDjdFz+9wwrKPGZ5ykBBiseesPiyTyT3xnI=) 3: 3139322e3134302e3232342e302f32332d3234203d3e203536323333.roa (hash: QN3Se42fDrnzH/Sn6RV3bdT6iaS+SIN59XlBOIPV4Lw=) 4: 34332e3235322e3134342e302f32332d3234203d3e203536323333.roa (hash: DYNELf9QNXD54CkouWHTSPB4IedLMvPnvTBJhut8CJ0=) 5: 3130332e31342e3131302e302f32332d3234203d3e203536323333.roa (hash: uOtYMqTZ6uxvD75CjDzgKIMtqTuljhnUzaL//5Qb6nY=) 6: 3132302e38392e39342e302f32332d3234203d3e203536323333.roa (hash: 9VPlWeet/QEh1f7qU/XboyNf8q0IIDBUTh5mcRRM4R4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.crl rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 02:20:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:b0:b8:7c:b2:e5:3f:5d:78:9c:70:03:2d:b8:58:55:61:ad:35:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF1CEA0313DA7500D70AE089169B4BBEE54CA859 Validity Not Before: Apr 27 17:26:16 2025 GMT Not After : May 1 02:20:16 2025 GMT Subject: CN=B21E64B4B0AC4A6C747A65C5F59CDB9A8C1B0528 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:03:a8:d6:cc:2f:a3:dd:c7:d8:6f:c4:fb:ad: fb:be:54:d5:30:e4:f0:a1:70:ac:68:a0:98:aa:6b: 9b:59:f9:0e:99:9f:66:4d:aa:f0:33:8a:a6:d8:a4: bd:fe:9b:8f:6d:e3:e4:6f:e8:c3:20:bc:dc:68:48: 95:1c:de:c5:03:89:12:c1:11:50:52:1f:66:76:80: 8c:48:b1:0b:6a:be:52:44:64:d0:db:13:a5:7b:fe: 43:3b:8e:34:f6:d1:f7:1d:b4:6b:ec:a4:35:55:e9: 59:e7:07:04:d6:93:ea:b8:b8:10:f9:ae:5b:b0:78: 90:a8:79:fb:32:4b:1a:b6:4e:18:b3:fb:17:7c:24: 0f:e0:4f:56:c2:4a:7b:37:be:ce:c0:0e:e6:83:7d: 0f:47:60:bb:aa:8f:4a:b2:92:fb:fe:71:2a:e0:b0: b7:16:3e:9f:79:5b:68:4f:74:f4:da:99:e4:7b:ae: 89:1e:97:fc:0b:66:ce:fb:53:da:bb:4e:11:8f:3b: f8:64:ca:97:e6:5d:3b:8b:a3:0a:ce:4e:22:9d:a1: 01:17:15:f8:8f:7f:17:62:0c:fa:54:0f:df:7c:bc: ef:96:0e:38:e0:9b:0e:a0:0c:95:39:d2:bf:19:0e: a9:78:73:f6:91:0b:5f:8b:95:b4:64:ae:4d:3d:1c: 83:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:1E:64:B4:B0:AC:4A:6C:74:7A:65:C5:F5:9C:DB:9A:8C:1B:05:28 X509v3 Authority Key Identifier: keyid:DF:1C:EA:03:13:DA:75:00:D7:0A:E0:89:16:9B:4B:BE:E5:4C:A8:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:6d:81:93:ee:91:a2:60:34:53:9b:cc:27:ce:9d:73:b5:07: c8:34:02:1a:1d:e8:ea:50:1d:cd:8b:55:77:12:65:8a:1d:5e: 31:8c:f5:13:b9:44:c1:ea:6b:fd:06:59:72:45:76:35:d6:18: cd:f6:d3:ee:d7:a4:ab:09:82:24:31:0c:0c:b1:4a:e3:56:23: 06:13:ed:a4:e7:85:1d:6e:0c:9c:47:09:fd:87:9b:7f:33:48: c8:b7:39:31:96:73:f4:6f:ba:e1:b2:24:87:97:db:cf:af:16: 59:68:4f:da:78:34:3b:d1:d6:e1:23:cb:c3:72:42:27:cb:d0: da:56:44:68:8b:ad:df:ea:2a:0d:25:71:d5:58:90:5b:a2:cc: a1:84:bb:bb:b1:50:44:a2:ce:38:b6:69:78:1b:2d:ae:a7:82: 76:8d:2e:dd:5b:6a:a3:83:f6:8f:9c:2b:a6:38:41:48:1f:14: 74:60:4e:62:6f:5d:3f:b0:e6:68:60:d1:2d:40:0c:08:7b:90: 69:9a:5b:20:7f:17:ba:d0:e0:47:d9:5c:dc:a0:2f:55:fe:9f: f8:fc:48:81:8a:e8:e9:0b:c7:9b:40:a0:2d:ce:fb:bc:08:a8: 1d:88:63:14:e1:e3:57:b6:5f:83:b5:c9:68:7b:ed:69:36:a9: a8:ef:ed:75 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUY7C4fLLlP114nHADLbhYVWGtNQMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYxQ0VBMDMxM0RBNzUwMEQ3MEFFMDg5MTY5QjRCQkVF NTRDQTg1OTAeFw0yNTA0MjcxNzI2MTZaFw0yNTA1MDEwMjIwMTZaMDMxMTAvBgNV BAMTKEIyMUU2NEI0QjBBQzRBNkM3NDdBNjVDNUY1OUNEQjlBOEMxQjA1MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUA6jWzC+j3cfYb8T7rfu+VNUw 5PChcKxooJiqa5tZ+Q6Zn2ZNqvAziqbYpL3+m49t4+Rv6MMgvNxoSJUc3sUDiRLB EVBSH2Z2gIxIsQtqvlJEZNDbE6V7/kM7jjT20fcdtGvspDVV6VnnBwTWk+q4uBD5 rluweJCoefsySxq2Thiz+xd8JA/gT1bCSns3vs7ADuaDfQ9HYLuqj0qykvv+cSrg sLcWPp95W2hPdPTameR7rokel/wLZs77U9q7ThGPO/hkypfmXTuLowrOTiKdoQEX FfiPfxdiDPpUD998vO+WDjjgmw6gDJU50r8ZDql4c/aRC1+LlbRkrk09HIOVAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsh5ktLCsSmx0emXF9ZzbmowbBSgwHwYDVR0j BBgwFoAU3xzqAxPadQDXCuCJFptLvuVMqFkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NGZkNGJjMi00MWQ0LTQyZTYtYTdmZi01OTQ5Mzg4NTEyNmEvMC9ERjFDRUEwMzEz REE3NTAwRDcwQUUwODkxNjlCNEJCRUU1NENBODU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREYxQ0VBMDMxM0RBNzUwMEQ3MEFFMDg5MTY5QjRCQkVFNTRD QTg1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDRmZDRiYzItNDFkNC00MmU2LWE3 ZmYtNTk0OTM4ODUxMjZhLzAvREYxQ0VBMDMxM0RBNzUwMEQ3MEFFMDg5MTY5QjRC QkVFNTRDQTg1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJttgZPukaJgNFObzCfOnXO1B8g0Ahod6OpQ Hc2LVXcSZYodXjGM9RO5RMHqa/0GWXJFdjXWGM320+7XpKsJgiQxDAyxSuNWIwYT 7aTnhR1uDJxHCf2Hm38zSMi3OTGWc/RvuuGyJIeX28+vFlloT9p4NDvR1uEjy8Ny QifL0NpWRGiLrd/qKg0lcdVYkFuizKGEu7uxUESizji2aXgbLa6ngnaNLt1baqOD 9o+cK6Y4QUgfFHRgTmJvXT+w5mhg0S1ADAh7kGmaWyB/F7rQ4EfZXNygL1X+n/j8 SIGK6OkLx5tAoC3O+7wIqB2IYxTh41e2X4O1yWh77Wk2qajv7XU= -----END CERTIFICATE-----Generated at Tue Apr 29 08:30:59 2025 by rpki-client