$ rpki-client -vvf repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.mft File: DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.mft (raw, json) Hash identifier: Vk/dKp5vZ0/J9+LHioCYuF/2JR8Y3HX5HEmoTby02I8= Subject key identifier: D0:3E:A5:E5:EB:72:D7:D6:C4:26:48:61:05:D9:60:AD:B6:79:93:E7 Authority key identifier: DB:6A:89:80:C5:0F:21:0C:80:41:A2:10:10:E6:DB:F1:0F:C7:C0:DF Certificate issuer: /CN=DB6A8980C50F210C8041A21010E6DBF10FC7C0DF Certificate serial: 6714387B60B788F8147F10F636E544F4672B1488 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.mft Manifest number: 71 Signing time: Sun 27 Apr 2025 06:51:53 +0000 Manifest this update: Sun 27 Apr 2025 06:46:53 +0000 Manifest next update: Wed 30 Apr 2025 09:17:53 +0000 Files and hashes: 1: 3136302e32352e35332e302f32342d3234203d3e20313533303738.roa (hash: pprUfXETHw8TkfqK4zb4CjTcdBTaYCx5VEdGuTnw8a8=) 2: DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.crl (hash: zxGeD70d/eXL77ohlW4bUXJp9CJFxfj0fwiDGL6tTvs=) 3: 3136302e32352e35322e302f32342d3234203d3e20313533303738.roa (hash: RmlTqfic7IsCh0fZpH577DwpbXbmP18u5tDwU0JJBbQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.crl rsync://repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 09:17:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:14:38:7b:60:b7:88:f8:14:7f:10:f6:36:e5:44:f4:67:2b:14:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB6A8980C50F210C8041A21010E6DBF10FC7C0DF Validity Not Before: Apr 27 06:46:53 2025 GMT Not After : Apr 30 09:17:53 2025 GMT Subject: CN=D03EA5E5EB72D7D6C426486105D960ADB67993E7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:6e:ee:d4:91:f1:0f:c7:58:3f:2e:c4:41:a7: 52:4e:47:f2:18:af:02:95:f9:d5:3b:30:fa:89:08: ad:31:e6:10:df:64:86:a5:38:c0:d0:8f:63:b7:f1: df:fd:d6:80:f9:71:dc:da:1d:52:2a:88:16:41:bc: 45:52:e6:2b:bf:3c:39:12:8e:3e:6c:b9:ce:3a:e3: 7e:c0:96:80:d9:be:7e:60:1e:5a:23:ac:7f:d5:7e: b3:32:fc:49:d7:4a:bb:34:4f:68:20:5a:9e:c6:a4: 9d:24:8e:61:90:72:8f:ec:eb:6e:8a:0d:80:6b:f9: 70:c4:ff:de:e6:7d:73:50:ef:f7:42:2b:36:dd:29: 44:76:b7:16:59:ce:9c:c6:18:e7:a5:e7:2a:45:c6: 0c:47:97:f0:c0:53:7f:34:20:7f:b5:3b:5f:34:c4: dc:40:05:f0:05:81:61:ee:0f:d2:40:10:9b:38:99: 2a:ae:e0:e2:e3:5a:29:9a:22:a6:ce:9f:02:82:0e: b1:01:f9:1b:bf:92:e8:26:5c:2f:01:a4:cf:c3:97: 9d:27:11:dc:f5:19:cb:15:85:1c:6d:04:dd:ea:9a: a2:99:60:b1:99:36:64:5e:82:07:e1:d1:19:52:c2: 23:1a:53:14:49:fe:74:a8:ad:8b:89:72:37:61:96: b4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:3E:A5:E5:EB:72:D7:D6:C4:26:48:61:05:D9:60:AD:B6:79:93:E7 X509v3 Authority Key Identifier: keyid:DB:6A:89:80:C5:0F:21:0C:80:41:A2:10:10:E6:DB:F1:0F:C7:C0:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:f0:44:b9:21:9e:7d:5e:ad:b2:8d:28:cd:ba:f3:7a:d4:dc: a5:33:a1:18:08:cc:8f:61:27:fd:a7:9c:f2:47:1d:b4:8a:6f: 9e:fd:79:4f:24:0e:19:4b:d7:4d:81:a4:ac:c3:e9:22:7b:11: 81:9d:42:41:c6:7a:6b:42:44:c4:d8:48:0a:b4:29:e1:16:3d: 6c:4e:5a:41:a0:d7:a0:4c:85:17:ff:c1:7c:89:f2:1b:62:3e: 74:4c:34:89:ab:94:21:b1:84:e9:0a:40:13:2f:a3:92:ea:cf: bf:e2:85:bd:9e:02:4e:ef:5c:8c:3d:25:cd:14:e9:70:62:3f: df:db:c5:1e:d9:dc:32:f3:e3:4d:ae:8e:74:79:e0:4b:f2:d3: f9:f5:f3:b2:70:bb:cf:87:4e:1d:72:f9:cf:32:47:2a:4b:84: 57:9f:05:d1:45:0d:c4:a7:57:8b:09:d7:a7:34:fc:5c:b0:aa: 5c:f2:3b:3c:4c:05:dd:ff:a9:5d:1a:84:91:63:e9:12:03:f3: 84:d6:39:0f:3c:06:a6:45:ee:dc:59:a0:9c:1d:77:17:8d:2f: 75:e1:8b:4a:b0:64:63:f4:c1:8e:4a:84:56:e9:32:e9:e9:4d: 35:0e:bd:34:ec:03:ad:8b:6e:23:09:e4:fb:0d:bf:b9:50:dd: 63:79:d9:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZxQ4e2C3iPgUfxD2NuVE9GcrFIgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI2QTg5ODBDNTBGMjEwQzgwNDFBMjEwMTBFNkRCRjEw RkM3QzBERjAeFw0yNTA0MjcwNjQ2NTNaFw0yNTA0MzAwOTE3NTNaMDMxMTAvBgNV BAMTKEQwM0VBNUU1RUI3MkQ3RDZDNDI2NDg2MTA1RDk2MEFEQjY3OTkzRTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1bu7UkfEPx1g/LsRBp1JOR/IY rwKV+dU7MPqJCK0x5hDfZIalOMDQj2O38d/91oD5cdzaHVIqiBZBvEVS5iu/PDkS jj5suc46437AloDZvn5gHlojrH/VfrMy/EnXSrs0T2ggWp7GpJ0kjmGQco/s626K DYBr+XDE/97mfXNQ7/dCKzbdKUR2txZZzpzGGOel5ypFxgxHl/DAU380IH+1O180 xNxABfAFgWHuD9JAEJs4mSqu4OLjWimaIqbOnwKCDrEB+Ru/kugmXC8BpM/Dl50n Edz1GcsVhRxtBN3qmqKZYLGZNmReggfh0RlSwiMaUxRJ/nSorYuJcjdhlrRFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0D6l5ety19bEJkhhBdlgrbZ5k+cwHwYDVR0j BBgwFoAU22qJgMUPIQyAQaIQEObb8Q/HwN8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 M2IxNzg1Ny1iZTNkLTQxMzItOGYxOS0xMDgzNmY0MDg1NDYvMC9EQjZBODk4MEM1 MEYyMTBDODA0MUEyMTAxMEU2REJGMTBGQzdDMERGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvREI2QTg5ODBDNTBGMjEwQzgwNDFBMjEwMTBFNkRCRjEwRkM3 QzBERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjNiMTc4NTctYmUzZC00MTMyLThm MTktMTA4MzZmNDA4NTQ2LzAvREI2QTg5ODBDNTBGMjEwQzgwNDFBMjEwMTBFNkRC RjEwRkM3QzBERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJLwRLkhnn1erbKNKM2683rU3KUzoRgIzI9h J/2nnPJHHbSKb579eU8kDhlL102BpKzD6SJ7EYGdQkHGemtCRMTYSAq0KeEWPWxO WkGg16BMhRf/wXyJ8htiPnRMNImrlCGxhOkKQBMvo5Lqz7/ihb2eAk7vXIw9Jc0U 6XBiP9/bxR7Z3DLz402ujnR54Evy0/n187Jwu8+HTh1y+c8yRypLhFefBdFFDcSn V4sJ16c0/FywqlzyOzxMBd3/qV0ahJFj6RID84TWOQ88BqZF7txZoJwddxeNL3Xh i0qwZGP0wY5KhFbpMunpTTUOvTTsA62LbiMJ5PsNv7lQ3WN52eI= -----END CERTIFICATE-----Generated at Sun Apr 27 20:58:33 2025 by rpki-client