$ rpki-client -vvf repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft File: DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft (raw, json) Hash identifier: m+40FiDMOn68uvoiysuNEEJFEQYpUpWDtX/wKlx0OiQ= Subject key identifier: 16:B5:31:F3:2C:B5:17:4D:60:CE:7C:E1:A9:C1:95:9E:F3:81:41:56 Authority key identifier: DC:34:C8:B5:F4:38:B8:D4:CB:13:F2:45:1A:D1:F0:95:5E:5F:7F:BB Certificate issuer: /CN=DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB Certificate serial: 0B89B44175AA4ABC1AEA152BAA5645C6304F657A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft Manifest number: 044E Signing time: Sun 27 Apr 2025 23:21:34 +0000 Manifest this update: Sun 27 Apr 2025 23:16:34 +0000 Manifest next update: Thu 01 May 2025 06:57:34 +0000 Files and hashes: 1: DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.crl (hash: iR9fLKSXMuhPhQa16aKpuTzsUwRLxzdxK8SF9eOEDSc=) 2: 323030313a6466363a313830303a3a2f34382d3438203d3e20313331373535.roa (hash: HGlDA4/8VVAgy1tfZNlAnPXlJMICAK8Z05H6MVK5yJM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.crl rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 06:57:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:89:b4:41:75:aa:4a:bc:1a:ea:15:2b:aa:56:45:c6:30:4f:65:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB Validity Not Before: Apr 27 23:16:34 2025 GMT Not After : May 1 06:57:34 2025 GMT Subject: CN=16B531F32CB5174D60CE7CE1A9C1959EF3814156 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:bc:43:64:be:03:a4:bc:1d:cf:c7:0c:6b:11: 22:24:50:a3:f3:8a:f1:f3:c9:6a:f7:21:e8:53:20: bf:7e:ac:a2:71:16:c2:78:b0:f2:7a:8b:c3:3f:38: 29:c3:23:f9:1d:22:a9:49:3e:2c:2b:69:ae:f3:44: 7f:87:a2:f8:a1:e4:74:d9:17:02:1a:c1:bd:e4:cc: 9a:8a:51:5e:8d:b5:3f:66:f4:0a:a8:bb:82:13:dd: 73:42:3d:99:98:a7:a9:2c:bf:bf:cc:c4:fd:e8:2e: 7c:fd:4e:16:06:e4:a5:06:d7:f9:2f:42:60:84:0e: d4:6a:79:5e:f7:b9:18:83:ae:9d:20:d6:bc:e5:6d: 8c:d9:35:58:70:83:13:73:10:f8:99:e4:f9:ae:02: 0c:de:88:b5:89:37:6b:62:1e:4e:6c:96:97:4c:23: d8:e1:52:8c:c0:7f:aa:2e:7e:79:09:d4:ee:1a:28: 16:02:3e:7e:3f:13:d5:3b:d6:b2:17:0c:1d:bd:3d: ab:c2:2f:e6:58:9c:76:a5:c1:60:ac:46:e6:4e:89: 06:da:00:f3:5c:cd:c2:a7:25:4a:bc:55:a1:65:e7: e7:6f:e3:83:43:00:88:f8:d5:34:fc:ef:5f:bd:97: bb:f8:af:27:00:c2:56:86:28:3e:7f:05:30:94:7c: a7:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 16:B5:31:F3:2C:B5:17:4D:60:CE:7C:E1:A9:C1:95:9E:F3:81:41:56 X509v3 Authority Key Identifier: keyid:DC:34:C8:B5:F4:38:B8:D4:CB:13:F2:45:1A:D1:F0:95:5E:5F:7F:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5d:79:76:93:a0:8b:00:d3:e4:a2:eb:60:76:46:e0:41:7e:83: 64:c6:32:27:e9:76:94:81:c6:7e:7e:be:c6:c4:fa:cd:73:12: 39:5c:3e:db:be:33:30:f7:68:a1:86:e3:4c:09:25:c1:03:ca: bf:57:f6:4f:69:3d:d6:a9:8b:b5:48:4d:d2:60:74:26:d8:a2: 01:09:b1:e1:2c:d9:99:ee:c9:dc:98:01:e3:cb:3a:cd:71:97: e6:3d:64:39:c7:17:8f:6f:4b:b5:f1:9d:b6:cd:51:d5:0c:49: fc:18:1d:1e:0e:1a:08:7e:2e:aa:3a:f5:89:b8:81:43:b4:61: 4a:7a:c5:8f:77:5e:bd:d5:70:c6:89:a3:be:2f:5e:ce:20:7d: 05:2d:4d:25:ef:37:7c:ec:fc:f4:61:c6:f6:20:37:00:0a:b4: 60:49:07:61:9d:ed:c5:b4:ad:54:f1:43:56:82:88:fe:65:42: ba:ff:0d:3f:db:78:f0:46:72:f6:70:70:02:43:54:f0:de:29: a2:42:2b:a0:1e:e1:f7:47:24:80:98:e3:b5:a0:b1:98:a0:be: 9e:72:14:31:cc:c6:4e:43:aa:2e:17:13:fd:63:21:8b:6f:d8: 1b:bb:ee:14:f9:22:54:ae:dc:47:64:52:f3:13:7a:67:ae:96: 36:80:33:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC4m0QXWqSrwa6hUrqlZFxjBPZXowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMzNEM4QjVGNDM4QjhENENCMTNGMjQ1MUFEMUYwOTU1 RTVGN0ZCQjAeFw0yNTA0MjcyMzE2MzRaFw0yNTA1MDEwNjU3MzRaMDMxMTAvBgNV BAMTKDE2QjUzMUYzMkNCNTE3NEQ2MENFN0NFMUE5QzE5NTlFRjM4MTQxNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnvENkvgOkvB3PxwxrESIkUKPz ivHzyWr3IehTIL9+rKJxFsJ4sPJ6i8M/OCnDI/kdIqlJPiwraa7zRH+Hovih5HTZ FwIawb3kzJqKUV6NtT9m9Aqou4IT3XNCPZmYp6ksv7/MxP3oLnz9ThYG5KUG1/kv QmCEDtRqeV73uRiDrp0g1rzlbYzZNVhwgxNzEPiZ5PmuAgzeiLWJN2tiHk5slpdM I9jhUozAf6oufnkJ1O4aKBYCPn4/E9U71rIXDB29PavCL+ZYnHalwWCsRuZOiQba APNczcKnJUq8VaFl5+dv44NDAIj41TT871+9l7v4rycAwlaGKD5/BTCUfKepAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUFrUx8yy1F01gznzhqcGVnvOBQVYwHwYDVR0j BBgwFoAU3DTItfQ4uNTLE/JFGtHwlV5ff7swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YThmMDQzNS00ZDM4LTQ3ZWYtODUwZi01MWJhNDYxN2ZiM2QvMC9EQzM0QzhCNUY0 MzhCOEQ0Q0IxM0YyNDUxQUQxRjA5NTVFNUY3RkJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREMzNEM4QjVGNDM4QjhENENCMTNGMjQ1MUFEMUYwOTU1RTVG N0ZCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE4ZjA0MzUtNGQzOC00N2VmLTg1 MGYtNTFiYTQ2MTdmYjNkLzAvREMzNEM4QjVGNDM4QjhENENCMTNGMjQ1MUFEMUYw OTU1RTVGN0ZCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF15dpOgiwDT5KLrYHZG4EF+g2TGMifpdpSB xn5+vsbE+s1zEjlcPtu+MzD3aKGG40wJJcEDyr9X9k9pPdapi7VITdJgdCbYogEJ seEs2ZnuydyYAePLOs1xl+Y9ZDnHF49vS7XxnbbNUdUMSfwYHR4OGgh+Lqo69Ym4 gUO0YUp6xY93Xr3VcMaJo74vXs4gfQUtTSXvN3zs/PRhxvYgNwAKtGBJB2Gd7cW0 rVTxQ1aCiP5lQrr/DT/bePBGcvZwcAJDVPDeKaJCK6Ae4fdHJICY47WgsZigvp5y FDHMxk5Dqi4XE/1jIYtv2Bu77hT5IlSu3EdkUvMTemeuljaAM9s= -----END CERTIFICATE-----Generated at Tue Apr 29 20:56:58 2025 by rpki-client