$ rpki-client -vvf repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.mft File: DC0680824B7F80117B62C239676444B0691128B8.mft (raw, json) Hash identifier: 57rm3eln8JNuMC1AIDjuG3C3HY7FYNaUDy/PBFukIOU= Subject key identifier: 45:FC:1F:39:03:2E:46:50:63:A0:06:1A:93:E5:B2:E6:5B:7B:7C:B6 Authority key identifier: DC:06:80:82:4B:7F:80:11:7B:62:C2:39:67:64:44:B0:69:11:28:B8 Certificate issuer: /CN=DC0680824B7F80117B62C239676444B0691128B8 Certificate serial: 640F79AEF28A7466A431D79B7E4A6D1A57AF468F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DC0680824B7F80117B62C239676444B0691128B8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.mft Manifest number: 48 Signing time: Sat 26 Apr 2025 06:01:36 +0000 Manifest this update: Sat 26 Apr 2025 05:56:36 +0000 Manifest next update: Tue 29 Apr 2025 07:16:36 +0000 Files and hashes: 1: DC0680824B7F80117B62C239676444B0691128B8.crl (hash: qyI4B++RXG7ztbT5gD9/gmZsxqzcqthrV8kr8PlGTpE=) 2: 3136302e3139312e3130362e302f32332d3234203d3e20313533313433.roa (hash: iw17DMpgfD2nYIWjQL2ZNOlw/a2YjINch68eFMNeuo0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.crl rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DC0680824B7F80117B62C239676444B0691128B8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 07:16:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:0f:79:ae:f2:8a:74:66:a4:31:d7:9b:7e:4a:6d:1a:57:af:46:8f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC0680824B7F80117B62C239676444B0691128B8 Validity Not Before: Apr 26 05:56:36 2025 GMT Not After : Apr 29 07:16:36 2025 GMT Subject: CN=45FC1F39032E465063A0061A93E5B2E65B7B7CB6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:38:54:e7:d6:bc:62:cb:01:4a:83:ea:c9:8c: 8d:20:48:7c:d0:22:87:af:b1:aa:08:17:71:16:34: df:4b:8d:c8:d2:46:9b:f8:84:ed:f2:a6:fd:6f:2a: b0:5f:9a:c7:92:fa:52:5e:cd:cc:1c:e6:4f:f3:32: c5:e2:09:a0:f6:f2:60:a2:db:11:0e:df:0e:77:e2: 04:36:d1:34:b0:c9:4d:29:8a:7f:98:84:46:92:45: a8:38:c4:b0:0e:a7:dc:e4:b5:c1:76:8d:33:73:ba: bc:1c:59:8c:93:df:2b:7c:9c:bd:d6:56:08:e8:d3: c9:17:4f:51:4e:c2:05:d6:a4:3d:19:21:a0:5c:5b: 83:c2:5a:51:31:30:84:ad:cd:db:d7:15:ad:3c:82: 16:b5:57:5f:cc:98:de:d6:a7:ca:1f:c0:df:a7:7c: c7:f9:2b:6c:a6:9b:f8:74:e1:eb:27:3d:8c:d3:af: e9:e9:9e:ba:79:95:63:11:35:5c:27:b1:fe:2d:1e: 9b:8d:08:17:b9:66:5a:21:fe:57:0b:d9:6d:14:18: 61:28:56:4a:7b:e1:03:d7:6d:ee:f5:52:e2:7c:f4: 02:80:bc:27:db:99:a9:fb:f1:f2:2a:57:2f:ca:ea: 55:23:6e:ed:21:46:25:a8:6e:24:5d:93:54:68:f1: 08:b3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:FC:1F:39:03:2E:46:50:63:A0:06:1A:93:E5:B2:E6:5B:7B:7C:B6 X509v3 Authority Key Identifier: keyid:DC:06:80:82:4B:7F:80:11:7B:62:C2:39:67:64:44:B0:69:11:28:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DC0680824B7F80117B62C239676444B0691128B8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1e855e8a-3ff8-47ff-aaec-48d8b380a904/0/DC0680824B7F80117B62C239676444B0691128B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:8b:58:17:a6:d9:3f:06:31:cf:3d:9d:b0:3b:eb:7c:c8:d1: 98:96:62:48:f9:b0:9c:03:26:6c:f4:19:f4:07:eb:3c:4d:2d: 11:4a:66:13:55:64:ec:02:02:31:67:4b:69:42:58:03:64:e2: e2:a7:17:e6:b9:80:69:13:d3:69:44:3b:60:41:8e:d6:cb:27: cf:0e:dc:1e:ef:7e:de:0b:20:a9:c1:03:c5:dd:75:df:dc:f3: 66:a9:8c:37:48:8d:2d:1c:84:96:7f:90:5a:4e:36:84:0c:b9: 07:c0:86:89:27:0a:dc:c4:54:e5:24:a7:84:fa:6d:f3:24:78: ff:08:39:3b:ab:d4:31:bc:83:2b:60:30:ed:c9:20:b3:11:2f: 6d:24:9c:39:8b:73:ed:95:cb:d4:e5:fd:23:bb:2c:a0:76:95: 1e:11:e3:fc:90:4f:e2:f3:2f:e7:9d:08:ac:cd:e0:a6:a1:1e: e6:a7:b9:48:3a:4c:3c:d7:c2:4d:ac:bb:88:eb:27:19:73:46: 61:bb:c0:a6:5c:a8:a2:a6:44:4e:b6:24:3a:06:b9:54:58:de: 18:56:6c:b4:63:4a:ed:69:d4:92:b2:ef:64:02:ad:68:5f:6c: 1f:31:55:70:61:0e:26:63:aa:a7:8b:b1:7c:2c:9c:cb:5d:51: a4:e2:cc:ec -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZA95rvKKdGakMdebfkptGlevRo8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMwNjgwODI0QjdGODAxMTdCNjJDMjM5Njc2NDQ0QjA2 OTExMjhCODAeFw0yNTA0MjYwNTU2MzZaFw0yNTA0MjkwNzE2MzZaMDMxMTAvBgNV BAMTKDQ1RkMxRjM5MDMyRTQ2NTA2M0EwMDYxQTkzRTVCMkU2NUI3QjdDQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQOFTn1rxiywFKg+rJjI0gSHzQ IoevsaoIF3EWNN9LjcjSRpv4hO3ypv1vKrBfmseS+lJezcwc5k/zMsXiCaD28mCi 2xEO3w534gQ20TSwyU0pin+YhEaSRag4xLAOp9zktcF2jTNzurwcWYyT3yt8nL3W Vgjo08kXT1FOwgXWpD0ZIaBcW4PCWlExMIStzdvXFa08gha1V1/MmN7Wp8ofwN+n fMf5K2ymm/h04esnPYzTr+npnrp5lWMRNVwnsf4tHpuNCBe5Zloh/lcL2W0UGGEo Vkp74QPXbe71UuJ89AKAvCfbman78fIqVy/K6lUjbu0hRiWobiRdk1Ro8QizAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURfwfOQMuRlBjoAYak+Wy5lt7fLYwHwYDVR0j BBgwFoAU3AaAgkt/gBF7YsI5Z2REsGkRKLgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x ZTg1NWU4YS0zZmY4LTQ3ZmYtYWFlYy00OGQ4YjM4MGE5MDQvMC9EQzA2ODA4MjRC N0Y4MDExN0I2MkMyMzk2NzY0NDRCMDY5MTEyOEI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvREMwNjgwODI0QjdGODAxMTdCNjJDMjM5Njc2NDQ0QjA2OTEx MjhCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWU4NTVlOGEtM2ZmOC00N2ZmLWFh ZWMtNDhkOGIzODBhOTA0LzAvREMwNjgwODI0QjdGODAxMTdCNjJDMjM5Njc2NDQ0 QjA2OTExMjhCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKaLWBem2T8GMc89nbA763zI0ZiWYkj5sJwD Jmz0GfQH6zxNLRFKZhNVZOwCAjFnS2lCWANk4uKnF+a5gGkT02lEO2BBjtbLJ88O 3B7vft4LIKnBA8Xddd/c82apjDdIjS0chJZ/kFpONoQMuQfAhoknCtzEVOUkp4T6 bfMkeP8IOTur1DG8gytgMO3JILMRL20knDmLc+2Vy9Tl/SO7LKB2lR4R4/yQT+Lz L+edCKzN4KahHuanuUg6TDzXwk2su4jrJxlzRmG7wKZcqKKmRE62JDoGuVRY3hhW bLRjSu1p1JKy72QCrWhfbB8xVXBhDiZjqqeLsXwsnMtdUaTizOw= -----END CERTIFICATE-----Generated at Sun Apr 27 17:39:00 2025 by rpki-client