$ rpki-client -vvf repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft File: D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft (raw, json) Hash identifier: KRVCAd33J3EhMrMRlKZdLVviLimgc06y+8bqKsd+KX4= Subject key identifier: AE:80:AB:54:71:19:75:07:97:76:55:54:D2:6C:92:B3:B0:BD:6B:CC Authority key identifier: D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28 Certificate issuer: /CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428 Certificate serial: 051F54BC6DB3ED9853D055CEE77D064C0EA8D99E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft Manifest number: 0307 Signing time: Sat 26 Apr 2025 12:10:56 +0000 Manifest this update: Sat 26 Apr 2025 12:05:56 +0000 Manifest next update: Tue 29 Apr 2025 14:32:56 +0000 Files and hashes: 1: 3130332e38322e3138302e302f32332d3233203d3e203535303032.roa (hash: MargjL84nTzHz8ChojHD7+4RMOnc9Fhif/pdgboFtAQ=) 2: D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl (hash: xl1t/MbSpjM4iNKEmQpkLnv5djWj82PvUAfyPIwz6EQ=) 3: 3130332e38322e3138332e302f32342d3234203d3e203535303032.roa (hash: N+Ot/inKVcA4yr7n4GNYrMxfbDoZyZlvEVliFyH2+mQ=) 4: 3130332e38322e3138302e302f32332d3233203d3e20313336303631.roa (hash: vos4wfbgWit9CPIZhtiH7kwDHAjtl0eqL3m94EaJcso=) 5: 3130332e38322e3138312e302f32342d3234203d3e20313336303631.roa (hash: hn9BpZ4mJ7xZ4KfEXMzBILbMuvOXYpPzh4YpRCquyqk=) 6: 3130332e38322e3138302e302f32342d3234203d3e20313336303631.roa (hash: vrTITHbJ7Z89V7LCGHxYnSOAw5dei/ElVg8Aq8hclwk=) 7: 3130332e38322e3138332e302f32342d3234203d3e20313336303631.roa (hash: Fob1/hoaxI1PmxjmOmJBrnjoUBlYNNau0pJudnAPUXY=) 8: 3130332e38322e3138322e302f32342d3234203d3e203535303032.roa (hash: Gb4dk6cIFWpDm7yOXj9wMvU+xey+IEOR2MYqhzLU7AE=) 9: 3130332e38322e3138322e302f32342d3234203d3e20313336303631.roa (hash: 07yh7hfVKVGF6Yffm3aMOKeO+ClRWm+M1+obA5h32mQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 14:32:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:1f:54:bc:6d:b3:ed:98:53:d0:55:ce:e7:7d:06:4c:0e:a8:d9:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1CE4EF910CAB784EF293D26D983A92FCB3A3428 Validity Not Before: Apr 26 12:05:56 2025 GMT Not After : Apr 29 14:32:56 2025 GMT Subject: CN=AE80AB547119750797765554D26C92B3B0BD6BCC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:f5:d9:60:2b:9d:28:16:b9:6d:00:74:ae:45: e1:8a:0a:b1:ac:68:20:f2:4e:0e:c5:1a:5e:4a:75: 49:91:30:b9:4f:17:ee:50:3b:36:22:fe:9a:0e:73: 4b:0e:55:fd:50:3f:ce:11:2a:55:28:6a:cb:d2:2e: 3d:5f:5e:9d:a4:be:23:3b:96:74:88:48:49:a0:3f: 03:dc:6d:a3:0e:7c:9d:90:2a:f4:7d:dd:fb:3b:7f: 6c:8a:07:84:3b:c7:6b:9b:d0:71:84:36:7f:d8:13: d2:ac:26:dd:23:22:2a:fc:ec:e3:53:09:e3:46:9d: c1:d5:2d:05:fa:36:d0:27:9d:6f:cb:a6:d9:08:bc: e4:1b:5b:fb:78:7a:53:b9:fe:73:84:19:3c:65:7d: e2:80:86:21:25:2b:03:eb:52:22:2a:a3:94:70:f7: 78:b0:a6:05:d5:3d:be:47:13:1f:62:49:6c:21:3b: 11:5c:e5:c8:c7:1a:d9:20:1e:b7:e8:91:86:a5:25: 1f:f7:bb:c9:63:55:3b:d2:4d:f2:4a:e1:29:f4:99: e0:4b:4d:42:90:35:5f:ce:df:7e:e9:d1:65:b9:26: 48:c8:aa:66:e2:ad:f6:d6:9c:81:8e:5e:8c:72:01: e9:dc:20:c2:c3:4e:ae:ff:d6:83:1a:9b:10:21:e3: 3f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:80:AB:54:71:19:75:07:97:76:55:54:D2:6C:92:B3:B0:BD:6B:CC X509v3 Authority Key Identifier: keyid:D1:CE:4E:F9:10:CA:B7:84:EF:29:3D:26:D9:83:A9:2F:CB:3A:34:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80758f15-5de8-487d-9945-c3ea207e44ad/0/D1CE4EF910CAB784EF293D26D983A92FCB3A3428.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:fc:79:84:43:fd:f3:03:e9:11:2e:4c:58:97:67:b3:64:5b: b6:19:77:05:8d:c0:47:bf:eb:0a:59:1a:d8:1a:26:d7:cd:20: f6:72:c9:07:65:c3:fc:f0:9b:99:8e:94:f5:61:31:e8:0b:19: 1f:9a:02:f6:0b:cb:31:87:b1:e9:9a:b8:52:65:1b:4a:c0:f1: b2:3a:56:e6:b3:6a:eb:34:83:a3:1f:c1:03:7f:d1:17:6a:8e: 3f:91:7d:22:f5:86:ba:17:d3:21:2c:2c:02:0a:64:51:00:a2: 42:70:82:af:eb:c7:13:6f:75:e7:e5:09:59:79:0a:d6:fa:f0: 21:77:b3:cc:68:a0:e4:b9:2d:b5:94:d1:1a:3e:fa:d1:cd:4b: a8:9b:62:d0:b4:e4:32:ab:cd:fa:49:3d:18:75:38:1f:75:f2: e1:84:38:22:b3:35:55:e4:02:d2:c5:12:29:6c:cc:77:8c:84: 05:ce:4b:b9:3b:2a:e5:9a:25:cb:fe:ba:d4:1c:01:7e:a6:e9: f8:5e:9d:73:8b:37:da:44:3c:3b:46:47:b4:90:10:b6:f2:96: f6:d2:c5:81:a3:5d:31:58:55:51:68:46:84:31:3e:b5:63:36: 0a:95:8e:53:1c:55:17:60:a2:66:77:8f:13:6e:f2:cf:66:46: 69:c6:81:52 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBR9UvG2z7ZhT0FXO530GTA6o2Z4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFDRTRFRjkxMENBQjc4NEVGMjkzRDI2RDk4M0E5MkZD QjNBMzQyODAeFw0yNTA0MjYxMjA1NTZaFw0yNTA0MjkxNDMyNTZaMDMxMTAvBgNV BAMTKEFFODBBQjU0NzExOTc1MDc5Nzc2NTU1NEQyNkM5MkIzQjBCRDZCQ0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC9dlgK50oFrltAHSuReGKCrGs aCDyTg7FGl5KdUmRMLlPF+5QOzYi/poOc0sOVf1QP84RKlUoasvSLj1fXp2kviM7 lnSISEmgPwPcbaMOfJ2QKvR93fs7f2yKB4Q7x2ub0HGENn/YE9KsJt0jIir87ONT CeNGncHVLQX6NtAnnW/LptkIvOQbW/t4elO5/nOEGTxlfeKAhiElKwPrUiIqo5Rw 93iwpgXVPb5HEx9iSWwhOxFc5cjHGtkgHrfokYalJR/3u8ljVTvSTfJK4Sn0meBL TUKQNV/O337p0WW5JkjIqmbirfbWnIGOXoxyAencIMLDTq7/1oMamxAh4z9hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUroCrVHEZdQeXdlVU0mySs7C9a8wwHwYDVR0j BBgwFoAU0c5O+RDKt4TvKT0m2YOpL8s6NCgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDc1OGYxNS01ZGU4LTQ4N2QtOTk0NS1jM2VhMjA3ZTQ0YWQvMC9EMUNFNEVGOTEw Q0FCNzg0RUYyOTNEMjZEOTgzQTkyRkNCM0EzNDI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDFDRTRFRjkxMENBQjc4NEVGMjkzRDI2RDk4M0E5MkZDQjNB MzQyOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODA3NThmMTUtNWRlOC00ODdkLTk5 NDUtYzNlYTIwN2U0NGFkLzAvRDFDRTRFRjkxMENBQjc4NEVGMjkzRDI2RDk4M0E5 MkZDQjNBMzQyOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABr8eYRD/fMD6REuTFiXZ7NkW7YZdwWNwEe/ 6wpZGtgaJtfNIPZyyQdlw/zwm5mOlPVhMegLGR+aAvYLyzGHsemauFJlG0rA8bI6 Vuazaus0g6MfwQN/0Rdqjj+RfSL1hroX0yEsLAIKZFEAokJwgq/rxxNvdeflCVl5 Ctb68CF3s8xooOS5LbWU0Ro++tHNS6ibYtC05DKrzfpJPRh1OB918uGEOCKzNVXk AtLFEilszHeMhAXOS7k7KuWaJcv+utQcAX6m6fhenXOLN9pEPDtGR7SQELbylvbS xYGjXTFYVVFoRoQxPrVjNgqVjlMcVRdgomZ3jxNu8s9mRmnGgVI= -----END CERTIFICATE-----Generated at Sun Apr 27 12:48:37 2025 by rpki-client