$ rpki-client -vvf repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.mft File: DC935B44A30F5AECC1B1A1508E4B812572AB769B.mft (raw, json) Hash identifier: 8ZO5KNFxCuERpSM2YaZ4TkbWAj4pH5EsVXbpxrfNYUo= Subject key identifier: E1:FE:F4:47:F0:C3:D9:71:BE:2D:DA:AB:56:49:21:0A:28:01:3A:57 Authority key identifier: DC:93:5B:44:A3:0F:5A:EC:C1:B1:A1:50:8E:4B:81:25:72:AB:76:9B Certificate issuer: /CN=DC935B44A30F5AECC1B1A1508E4B812572AB769B Certificate serial: 3018EC397CCC683406FC0F9D5735FB1C9F65C1AE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.mft Manifest number: 04D0 Signing time: Mon 28 Apr 2025 04:11:18 +0000 Manifest this update: Mon 28 Apr 2025 04:06:18 +0000 Manifest next update: Thu 01 May 2025 05:27:18 +0000 Files and hashes: 1: 3130332e34392e3232322e302f32332d3233203d3e203234323131.roa (hash: eEzhgEkeswxEJB6cH8f720KKqD00kZq88ScuJtLKf4Q=) 2: DC935B44A30F5AECC1B1A1508E4B812572AB769B.crl (hash: slXD2mDDhFqwbro5uv9TCElbioZ97Q39UQobXuF66xQ=) 3: 3230332e3139302e3234322e302f32332d3233203d3e203234323131.roa (hash: KORoMdmEFellsQ4EIixNWtMn2mdrwHcMnMt2u7bRdgA=) 4: 3230332e3139302e3234362e302f32332d3233203d3e203234323131.roa (hash: D73qWtixS2k2vo+e7xc07gepRtYm2z1PcaFmujji1Q8=) 5: 323430323a613030303a343030303a3a2f33342d3334203d3e203234323131.roa (hash: da6VPzKks75GP7axUBrN1Ezhq6y+B/pfersv+H6tZ8s=) 6: 323430323a613030303a383030303a3a2f33342d3334203d3e203234323131.roa (hash: tDWHyBWQyv76eGBvUmmlMgh4YlyJb04q9W1lGaYrzss=) 7: 323430323a613030303a633030303a3a2f33342d3334203d3e203234323131.roa (hash: rnq9VA9UYxMUHx8T910m/pq5BuKXy74cv5MKvie9m3M=) 8: 3230332e3139302e3234342e302f32332d3233203d3e203234323131.roa (hash: rUMnL5o4jfF8Xk23x+nY13Og9gVdfKtim/VgsCTFYWA=) 9: 3230332e3139302e3234372e302f32342d3234203d3e203234323131.roa (hash: fbwTq+MNHXCM846ONnkdFzthRjFibT/sGY17CU4maLM=) 10: 3230332e3139302e3234302e302f32312d3231203d3e203234323131.roa (hash: einwJ3TMLG60eX8vOb8BP75bS+iG2kasu0kVBXw/aA0=) 11: 3230332e3139302e3234362e302f32342d3234203d3e203234323131.roa (hash: Px+0ZRxXqTaYuiAQpr845u2JpmHBGtqVxsdEAa7WjAw=) 12: 323430323a613030303a3a2f33342d3334203d3e203234323131.roa (hash: 2FlS11/c/x3Ynfk/ZVrKJLiDsOp9Gs66TvBDURO1NdY=) 13: 3130332e34392e3232302e302f32332d3233203d3e203234323131.roa (hash: VU7yTZJJzE9+CKf+7CWEBUbMLNLkqTfujFALCx1f38Y=) 14: 3130332e34392e3232302e302f32322d3232203d3e203234323131.roa (hash: jn5ELD9d7J3S6Is4OuoIa81jRUPNRS7VH/L2BxODy7U=) 15: 3230332e3139302e3234302e302f32332d3233203d3e203234323131.roa (hash: XuClycGrR46sx6e0k5i1gqFyr8XtkjJjo7XVCOwHej8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.crl rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 05:27:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:18:ec:39:7c:cc:68:34:06:fc:0f:9d:57:35:fb:1c:9f:65:c1:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC935B44A30F5AECC1B1A1508E4B812572AB769B Validity Not Before: Apr 28 04:06:18 2025 GMT Not After : May 1 05:27:18 2025 GMT Subject: CN=E1FEF447F0C3D971BE2DDAAB5649210A28013A57 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:1f:5a:de:41:38:81:a1:20:75:22:68:16:da: 53:42:dd:43:9d:3c:35:8b:e5:a5:cc:2f:13:0c:60: 34:94:00:b2:4e:62:56:8c:75:ad:a3:13:27:5f:68: 25:f2:bf:ce:7c:85:fb:be:45:20:5d:c7:4b:da:6d: 13:96:0e:53:a2:83:15:c9:ac:0b:5c:18:4f:36:56: 0d:c5:5e:25:d7:db:07:60:b3:01:f4:10:d4:90:20: 70:91:f6:11:8f:a0:53:cf:7d:bd:48:9f:e5:0a:76: 05:25:5b:d2:61:53:bb:78:45:5d:17:9e:9e:8b:ee: 27:05:40:70:a5:0c:cd:3b:c4:62:89:64:e6:16:df: 7e:47:77:25:8d:ff:52:25:f8:85:d0:b8:d4:51:e4: e2:41:a0:cb:2a:0a:2a:0a:37:c2:1c:de:25:bc:a2: 2c:2f:67:1c:30:81:13:a9:f0:89:a8:44:3b:c7:6c: 68:05:e8:a0:24:61:3c:10:a9:94:38:f8:43:38:b5: 27:c6:53:82:c0:fb:e9:2d:cb:60:28:54:53:f2:0b: 0d:93:23:16:cd:03:e8:01:6b:ea:62:20:9f:53:a3: ef:4a:99:eb:e8:d8:b6:da:08:01:db:04:c1:8b:5a: 3b:f0:ca:aa:43:14:7f:7c:11:94:4d:84:bd:0b:b3: 24:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:FE:F4:47:F0:C3:D9:71:BE:2D:DA:AB:56:49:21:0A:28:01:3A:57 X509v3 Authority Key Identifier: keyid:DC:93:5B:44:A3:0F:5A:EC:C1:B1:A1:50:8E:4B:81:25:72:AB:76:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC935B44A30F5AECC1B1A1508E4B812572AB769B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59f013f9-b4f7-458c-aac5-08041b3f65e6/0/DC935B44A30F5AECC1B1A1508E4B812572AB769B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:8d:81:40:18:20:30:a2:5d:3c:d3:2e:93:45:d7:1b:8d:3a: ae:48:ce:54:fc:52:ea:d1:95:4c:fa:55:69:9b:3b:75:57:c7: 7f:7f:3d:70:0d:04:90:c6:bc:f1:04:c5:bf:f8:5e:a0:e2:b2: 0a:04:3b:ca:1e:aa:e5:72:ed:46:87:ff:10:8d:e7:b7:f5:64: 02:6c:e5:cd:5e:07:8b:80:77:92:ca:47:2a:76:9b:4a:da:b9: 18:31:6b:03:b7:8c:54:44:9e:21:1b:2c:12:28:f7:5c:8b:2a: 2e:f6:92:de:bf:48:28:db:17:dd:8f:f8:95:79:d8:10:6a:31: da:25:6d:bc:e2:52:60:e3:c6:69:73:d0:76:bd:65:ab:ff:89: d0:1a:5f:50:a6:7a:1a:b5:8f:d4:a3:55:b1:ce:7c:f5:e9:12: 2e:f9:9c:0b:de:a7:8f:11:24:9b:f2:b0:d5:97:d4:66:31:29: 4d:ee:41:7f:5f:76:1f:92:49:fc:15:1b:e9:b7:ee:62:32:73: dd:47:6c:54:61:38:8f:4e:22:1d:92:5c:c1:f1:e8:6e:b3:64: 40:2e:cd:0f:99:a4:2b:cf:14:be:46:7a:26:a0:44:f4:d8:ee: 78:df:fa:9a:ba:6a:2d:3b:fd:ed:03:fb:9e:2b:3c:69:48:39: 96:e5:a8:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMBjsOXzMaDQG/A+dVzX7HJ9lwa4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREM5MzVCNDRBMzBGNUFFQ0MxQjFBMTUwOEU0QjgxMjU3 MkFCNzY5QjAeFw0yNTA0MjgwNDA2MThaFw0yNTA1MDEwNTI3MThaMDMxMTAvBgNV BAMTKEUxRkVGNDQ3RjBDM0Q5NzFCRTJEREFBQjU2NDkyMTBBMjgwMTNBNTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4H1reQTiBoSB1ImgW2lNC3UOd PDWL5aXMLxMMYDSUALJOYlaMda2jEydfaCXyv858hfu+RSBdx0vabROWDlOigxXJ rAtcGE82Vg3FXiXX2wdgswH0ENSQIHCR9hGPoFPPfb1In+UKdgUlW9JhU7t4RV0X np6L7icFQHClDM07xGKJZOYW335HdyWN/1Il+IXQuNRR5OJBoMsqCioKN8Ic3iW8 oiwvZxwwgROp8ImoRDvHbGgF6KAkYTwQqZQ4+EM4tSfGU4LA++kty2AoVFPyCw2T IxbNA+gBa+piIJ9To+9Kmevo2LbaCAHbBMGLWjvwyqpDFH98EZRNhL0LsyQvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU4f70R/DD2XG+LdqrVkkhCigBOlcwHwYDVR0j BBgwFoAU3JNbRKMPWuzBsaFQjkuBJXKrdpswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 OWYwMTNmOS1iNGY3LTQ1OGMtYWFjNS0wODA0MWIzZjY1ZTYvMC9EQzkzNUI0NEEz MEY1QUVDQzFCMUExNTA4RTRCODEyNTcyQUI3NjlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREM5MzVCNDRBMzBGNUFFQ0MxQjFBMTUwOEU0QjgxMjU3MkFC NzY5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTlmMDEzZjktYjRmNy00NThjLWFh YzUtMDgwNDFiM2Y2NWU2LzAvREM5MzVCNDRBMzBGNUFFQ0MxQjFBMTUwOEU0Qjgx MjU3MkFCNzY5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKiNgUAYIDCiXTzTLpNF1xuNOq5IzlT8UurR lUz6VWmbO3VXx39/PXANBJDGvPEExb/4XqDisgoEO8oequVy7UaH/xCN57f1ZAJs 5c1eB4uAd5LKRyp2m0rauRgxawO3jFREniEbLBIo91yLKi72kt6/SCjbF92P+JV5 2BBqMdolbbziUmDjxmlz0Ha9Zav/idAaX1Cmehq1j9SjVbHOfPXpEi75nAvep48R JJvysNWX1GYxKU3uQX9fdh+SSfwVG+m37mIyc91HbFRhOI9OIh2SXMHx6G6zZEAu zQ+ZpCvPFL5GeiagRPTY7njf+pq6ai07/e0D+54rPGlIOZblqO0= -----END CERTIFICATE-----Generated at Mon Apr 28 08:24:01 2025 by rpki-client