$ rpki-client -vvf repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft File: D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft (raw, json) Hash identifier: jFgHSR1LwsTxa2gTUmYYwqecOKoE/5Yc7MToSu/acoU= Subject key identifier: 40:8B:2A:B4:17:FF:5B:5F:90:E3:1F:FE:70:0B:91:47:72:0F:01:29 Authority key identifier: D3:B0:DD:BB:8E:07:FC:D9:8A:39:9C:90:C5:B3:FC:32:B4:FA:28:F0 Certificate issuer: /CN=D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0 Certificate serial: 5208F48F5C79B5D61D4D734A90836341743589D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft Manifest number: 4B Signing time: Fri 25 Apr 2025 20:30:02 +0000 Manifest this update: Fri 25 Apr 2025 20:25:02 +0000 Manifest next update: Tue 29 Apr 2025 08:02:02 +0000 Files and hashes: 1: 3136302e32322e3138372e302f32342d3234203d3e20313532383233.roa (hash: cvyj6LKtTOVBTWTHZighgw+CFWQteArr8dC6m6wOVeI=) 2: D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.crl (hash: kOSqtStNgF+xxHcJGN0WcNIIPeQ+wZ8pYbMqPXryLOA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.crl rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 03:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:08:f4:8f:5c:79:b5:d6:1d:4d:73:4a:90:83:63:41:74:35:89:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0 Validity Not Before: Apr 25 20:25:02 2025 GMT Not After : Apr 29 08:02:02 2025 GMT Subject: CN=408B2AB417FF5B5F90E31FFE700B9147720F0129 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ee:8e:81:ee:3f:8f:a9:e3:27:18:f3:68:40: 65:9c:75:fa:a0:53:8b:ac:91:7e:b2:7e:5f:ef:5a: 06:8d:5b:15:ec:e0:d3:f5:22:b5:92:d1:62:bc:43: 18:fb:70:1e:b6:30:90:8e:b6:8b:20:44:c2:f9:a7: e6:a7:99:ac:3a:d4:ae:58:66:ec:74:15:81:0a:31: 07:28:dd:7b:f5:74:85:02:b7:66:f0:eb:c9:b8:9f: 5a:af:59:e7:7a:9f:88:ec:7a:a4:3c:fe:94:d9:6e: ec:16:79:32:b6:43:80:af:77:bb:99:f4:16:80:62: cd:1f:c1:a5:a5:bc:04:3e:09:92:d7:76:9b:ec:43: a1:0a:10:c4:03:cf:a6:c0:7e:38:f3:4c:dd:fe:ae: b4:d2:87:1d:aa:e4:53:d1:43:5d:e7:c2:9d:fa:15: d8:65:2c:1a:46:6d:29:13:70:10:32:cb:09:2b:9f: d9:77:4d:d0:d7:19:09:5e:ac:b3:6f:bb:b1:4d:9b: 94:96:d5:f9:10:bc:62:73:2a:83:c6:78:a0:3f:1c: e0:5c:3e:7f:e5:d1:13:fe:45:73:77:99:bc:72:73: 58:38:62:b1:52:06:01:11:f9:94:f1:62:bb:1c:f8: fe:aa:b0:2c:84:73:86:1a:fb:39:57:18:40:9e:e4: ba:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:8B:2A:B4:17:FF:5B:5F:90:E3:1F:FE:70:0B:91:47:72:0F:01:29 X509v3 Authority Key Identifier: keyid:D3:B0:DD:BB:8E:07:FC:D9:8A:39:9C:90:C5:B3:FC:32:B4:FA:28:F0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d9f98f3-72f0-4006-be99-b9a9e8d9d2bf/0/D3B0DDBB8E07FCD98A399C90C5B3FC32B4FA28F0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:8f:7c:3e:90:f7:dc:c3:27:e2:99:21:92:7a:b5:e3:46:b6: e3:2c:4a:2a:38:8e:40:27:31:ed:63:3f:8c:bf:7d:a9:68:ab: 33:d1:66:41:8e:13:7b:ea:32:41:84:a2:d4:81:87:7b:49:3e: 54:bb:50:df:ff:a0:bc:6e:84:35:00:1d:75:54:b6:34:3b:a9: bf:d1:6c:5f:3b:3c:d6:bf:13:6e:6c:21:61:ca:2b:1d:0a:92: 97:53:1b:50:01:01:35:7a:96:75:2b:43:ac:81:b5:76:0c:05: fe:d8:b3:13:b5:b4:9a:3a:5a:cf:26:78:75:54:a6:b3:db:83: 25:7d:37:84:62:f1:fd:36:ec:b9:22:f5:81:ca:e0:00:e8:79: 1c:f7:78:1d:61:f5:ec:14:46:5b:c7:34:1a:17:06:aa:dd:4a: a7:12:c7:e8:b1:b7:e0:99:e0:13:94:f9:99:fb:fd:9c:bf:6a: 4d:ee:c8:66:98:ee:11:46:25:d9:b8:65:a0:1e:47:43:1d:ea: 91:62:e8:a2:db:7d:00:94:9f:06:61:a0:60:a0:75:04:41:80: c5:7d:64:12:63:94:dd:0c:4c:e5:ac:af:24:b1:b2:f8:70:28: 43:2e:e5:38:06:d6:bc:f3:23:c9:cb:ff:32:3a:9f:23:18:a7: d0:3f:d5:44 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUgj0j1x5tdYdTXNKkINjQXQ1idgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDNCMEREQkI4RTA3RkNEOThBMzk5QzkwQzVCM0ZDMzJC NEZBMjhGMDAeFw0yNTA0MjUyMDI1MDJaFw0yNTA0MjkwODAyMDJaMDMxMTAvBgNV BAMTKDQwOEIyQUI0MTdGRjVCNUY5MEUzMUZGRTcwMEI5MTQ3NzIwRjAxMjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw7o6B7j+PqeMnGPNoQGWcdfqg U4uskX6yfl/vWgaNWxXs4NP1IrWS0WK8Qxj7cB62MJCOtosgRML5p+anmaw61K5Y Zux0FYEKMQco3Xv1dIUCt2bw68m4n1qvWed6n4jseqQ8/pTZbuwWeTK2Q4Cvd7uZ 9BaAYs0fwaWlvAQ+CZLXdpvsQ6EKEMQDz6bAfjjzTN3+rrTShx2q5FPRQ13nwp36 FdhlLBpGbSkTcBAyywkrn9l3TdDXGQlerLNvu7FNm5SW1fkQvGJzKoPGeKA/HOBc Pn/l0RP+RXN3mbxyc1g4YrFSBgER+ZTxYrsc+P6qsCyEc4Ya+zlXGECe5LpTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQIsqtBf/W1+Q4x/+cAuRR3IPASkwHwYDVR0j BBgwFoAU07Ddu44H/NmKOZyQxbP8MrT6KPAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 ZDlmOThmMy03MmYwLTQwMDYtYmU5OS1iOWE5ZThkOWQyYmYvMC9EM0IwRERCQjhF MDdGQ0Q5OEEzOTlDOTBDNUIzRkMzMkI0RkEyOEYwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDNCMEREQkI4RTA3RkNEOThBMzk5QzkwQzVCM0ZDMzJCNEZB MjhGMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2Q5Zjk4ZjMtNzJmMC00MDA2LWJl OTktYjlhOWU4ZDlkMmJmLzAvRDNCMEREQkI4RTA3RkNEOThBMzk5QzkwQzVCM0ZD MzJCNEZBMjhGMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADqPfD6Q99zDJ+KZIZJ6teNGtuMsSio4jkAn Me1jP4y/faloqzPRZkGOE3vqMkGEotSBh3tJPlS7UN//oLxuhDUAHXVUtjQ7qb/R bF87PNa/E25sIWHKKx0KkpdTG1ABATV6lnUrQ6yBtXYMBf7YsxO1tJo6Ws8meHVU prPbgyV9N4Ri8f027Lki9YHK4ADoeRz3eB1h9ewURlvHNBoXBqrdSqcSx+ixt+CZ 4BOU+Zn7/Zy/ak3uyGaY7hFGJdm4ZaAeR0Md6pFi6KLbfQCUnwZhoGCgdQRBgMV9 ZBJjlN0MTOWsrySxsvhwKEMu5TgG1rzzI8nL/zI6nyMYp9A/1UQ= -----END CERTIFICATE-----Generated at Sun Apr 27 12:49:10 2025 by rpki-client