$ rpki-client -vvf repo-rpki.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.mft File: D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.mft (raw, json) Hash identifier: 7WvBlCCldFCoj5tOOXkabYFjxcfelk9voVChpHxtev8= Subject key identifier: 1D:CF:17:8A:E6:35:90:ED:8B:9D:C9:88:98:CF:45:08:DF:70:C1:5F Authority key identifier: D7:8F:E5:AE:87:0E:F2:21:FD:95:77:5C:FE:AF:EA:D5:AC:F3:23:68 Certificate issuer: /CN=D78FE5AE870EF221FD95775CFEAFEAD5ACF32368 Certificate serial: 3D05DD199D0359F589AFE01C7610BAF835538E2E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.cer Subject info access: rsync://repo-rpki.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.mft Manifest number: 34 Signing time: Sun 27 Apr 2025 04:21:53 +0000 Manifest this update: Sun 27 Apr 2025 04:16:53 +0000 Manifest next update: Wed 30 Apr 2025 14:33:53 +0000 Files and hashes: 1: D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.crl (hash: DicuWCg7G6Fd8biELmPq2NO9k5aW9x7VncewXxs3puM=) 2: 3135372e32302e3132312e302f32342d3234203d3e20313532343133.roa (hash: J+HA2voObMJkLTe14IHtv1+pBD6tmTWcTW3nQp6DPrc=) 3: 3135372e32302e3132302e302f32342d3234203d3e20313532343133.roa (hash: mtxUuoBWjsUwdIjXZpNi9bHZl2ZJW5TeiOYPZBEVbaM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.crl rsync://repo-rpki.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 03:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:05:dd:19:9d:03:59:f5:89:af:e0:1c:76:10:ba:f8:35:53:8e:2e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D78FE5AE870EF221FD95775CFEAFEAD5ACF32368 Validity Not Before: Apr 27 04:16:53 2025 GMT Not After : Apr 30 14:33:53 2025 GMT Subject: CN=1DCF178AE63590ED8B9DC98898CF4508DF70C15F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:fa:51:56:a0:b4:0d:5d:3c:77:cc:80:26:5a: b3:51:fd:96:95:84:c0:ae:f8:5a:d3:1d:d5:bc:d5: ee:dd:34:25:8a:61:af:f4:26:f5:f5:f4:42:6e:e9: c2:7c:c0:69:1f:a0:aa:2d:6e:d1:b7:8d:62:3f:c3: 6f:5f:01:16:44:b8:4c:0f:a2:f9:eb:22:36:c9:8a: 87:bd:ac:5a:ac:20:49:50:66:5b:1e:81:df:90:58: 41:e9:0f:6d:64:17:69:33:cc:63:7b:c2:ae:74:a2: 02:13:d6:c3:99:91:5e:09:c5:72:0d:85:93:95:75: 7f:25:4a:b3:62:62:dc:df:58:48:e8:e2:bb:63:98: f6:ea:cc:0d:05:7d:71:03:83:11:eb:ca:8d:bc:67: 73:48:65:31:e9:db:9b:f7:c1:a4:39:0c:41:da:2f: 8b:67:c9:d6:c0:fe:73:15:1e:fa:0f:49:66:84:f5: ba:48:3d:0a:d3:2d:fc:7d:c3:43:c2:51:f0:72:2a: e2:03:fb:bd:20:ce:36:cd:89:91:3a:5b:d6:37:b2: 0b:4c:0d:4a:fe:9f:22:00:9d:ff:3a:68:5b:8f:ba: 36:cb:18:74:2f:2b:a5:69:6f:a9:96:b4:cc:5a:03: ad:8d:be:16:ae:5a:b5:71:10:bf:15:a0:72:1f:aa: 21:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:CF:17:8A:E6:35:90:ED:8B:9D:C9:88:98:CF:45:08:DF:70:C1:5F X509v3 Authority Key Identifier: keyid:D7:8F:E5:AE:87:0E:F2:21:FD:95:77:5C:FE:AF:EA:D5:AC:F3:23:68 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4644263a-8ee2-4eec-a810-5733ccaf51e3/0/D78FE5AE870EF221FD95775CFEAFEAD5ACF32368.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:63:9f:72:1a:65:97:54:c3:42:4d:68:b2:39:34:4d:dd:b9: f9:17:33:f9:24:36:9d:8c:8b:ce:9d:0b:ad:76:5b:c8:8b:70: 7d:af:93:8d:f5:7f:7b:d7:19:0d:69:fa:f7:fa:53:11:7c:6e: 5f:c8:9e:8e:01:07:98:2b:76:7a:8f:9f:b8:66:af:55:16:10: cd:7e:bc:d5:13:5f:a6:1f:1a:a8:c7:07:30:8b:f5:bb:af:2d: 83:50:c2:5e:71:62:95:82:01:20:41:e1:9f:13:1b:1e:53:4d: fa:68:75:aa:23:f2:45:7a:6a:36:26:ec:d4:36:8e:d1:2a:dc: f8:b6:96:0a:73:61:21:44:62:e2:9a:9d:2b:db:25:25:02:45: 2b:a1:9c:39:47:cd:4e:cf:74:d3:f3:02:12:f8:82:9f:7b:11: 6d:cb:d6:c6:af:a0:41:11:61:ed:e9:45:32:37:85:ca:88:ff: 52:a2:d3:1e:51:ed:1c:0f:b0:27:25:81:79:67:6e:71:14:6f: 72:bc:fe:a8:76:54:43:96:37:55:ec:5c:24:78:5c:32:f8:c2: ed:c5:bd:be:b3:e5:69:31:a4:f0:8d:ef:b9:6f:d2:4f:74:c6: a3:1d:bf:84:f3:fb:59:73:83:7b:5e:74:21:64:ec:0a:a7:f0: a8:ad:0d:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPQXdGZ0DWfWJr+AcdhC6+DVTji4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDc4RkU1QUU4NzBFRjIyMUZEOTU3NzVDRkVBRkVBRDVB Q0YzMjM2ODAeFw0yNTA0MjcwNDE2NTNaFw0yNTA0MzAxNDMzNTNaMDMxMTAvBgNV BAMTKDFEQ0YxNzhBRTYzNTkwRUQ4QjlEQzk4ODk4Q0Y0NTA4REY3MEMxNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC++lFWoLQNXTx3zIAmWrNR/ZaV hMCu+FrTHdW81e7dNCWKYa/0JvX19EJu6cJ8wGkfoKotbtG3jWI/w29fARZEuEwP ovnrIjbJioe9rFqsIElQZlsegd+QWEHpD21kF2kzzGN7wq50ogIT1sOZkV4JxXIN hZOVdX8lSrNiYtzfWEjo4rtjmPbqzA0FfXEDgxHryo28Z3NIZTHp25v3waQ5DEHa L4tnydbA/nMVHvoPSWaE9bpIPQrTLfx9w0PCUfByKuID+70gzjbNiZE6W9Y3sgtM DUr+nyIAnf86aFuPujbLGHQvK6Vpb6mWtMxaA62NvhauWrVxEL8VoHIfqiHjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHc8XiuY1kO2LncmImM9FCN9wwV8wHwYDVR0j BBgwFoAU14/lrocO8iH9lXdc/q/q1azzI2gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80 NjQ0MjYzYS04ZWUyLTRlZWMtYTgxMC01NzMzY2NhZjUxZTMvMC9ENzhGRTVBRTg3 MEVGMjIxRkQ5NTc3NUNGRUFGRUFENUFDRjMyMzY4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDc4RkU1QUU4NzBFRjIyMUZEOTU3NzVDRkVBRkVBRDVBQ0Yz MjM2OC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNDY0NDI2M2EtOGVlMi00ZWVjLWE4 MTAtNTczM2NjYWY1MWUzLzAvRDc4RkU1QUU4NzBFRjIyMUZEOTU3NzVDRkVBRkVB RDVBQ0YzMjM2OC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAxjn3IaZZdUw0JNaLI5NE3dufkXM/kkNp2M i86dC612W8iLcH2vk431f3vXGQ1p+vf6UxF8bl/Ino4BB5grdnqPn7hmr1UWEM1+ vNUTX6YfGqjHBzCL9buvLYNQwl5xYpWCASBB4Z8TGx5TTfpodaoj8kV6ajYm7NQ2 jtEq3Pi2lgpzYSFEYuKanSvbJSUCRSuhnDlHzU7PdNPzAhL4gp97EW3L1savoEER Ye3pRTI3hcqI/1Ki0x5R7RwPsCclgXlnbnEUb3K8/qh2VEOWN1XsXCR4XDL4wu3F vb6z5WkxpPCN77lv0k90xqMdv4Tz+1lzg3tedCFk7Aqn8KitDSQ= -----END CERTIFICATE-----Generated at Sun Apr 27 11:26:32 2025 by rpki-client