$ rpki-client -vvf repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft File: DC19ED76CCD72AB435328C48847EF794698443FE.mft (raw, json) Hash identifier: C+tjc0TI21CuA+imYYWpGUza4KkfNQ2rpQfuw9XgXaU= Subject key identifier: 9C:41:62:10:68:1D:E6:A7:DE:31:3C:2F:E8:D6:E8:4E:98:F4:16:F0 Authority key identifier: DC:19:ED:76:CC:D7:2A:B4:35:32:8C:48:84:7E:F7:94:69:84:43:FE Certificate issuer: /CN=DC19ED76CCD72AB435328C48847EF794698443FE Certificate serial: 0938AE5F5F79A0F48AD0263471BC4197B59FA6F3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft Manifest number: 01C9 Signing time: Sun 27 Apr 2025 21:12:10 +0000 Manifest this update: Sun 27 Apr 2025 21:07:10 +0000 Manifest next update: Thu 01 May 2025 01:59:10 +0000 Files and hashes: 1: 3130332e3138382e3137342e302f32342d3234203d3e203538333639.roa (hash: M2AqJ26SKPMQCW3KR3RhdcUmaBv2RenAC76SCZeW+a0=) 2: 3130332e3138382e3137342e302f32332d3233203d3e203538333639.roa (hash: QklyP1dvX/5DYZK2HcWTPqmmMUQSin71ViC/dExkFg4=) 3: 3130332e3138382e3137352e302f32342d3234203d3e203538333639.roa (hash: tKnvOcGTVqsW/yS5Z2lvba/Xzg8OV2BXKtMn/U4SLRQ=) 4: DC19ED76CCD72AB435328C48847EF794698443FE.crl (hash: /nZROit62c6xTI1N8n1cWqPJQrL6An9DtS+OdEv84y0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.crl rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 01:59:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:38:ae:5f:5f:79:a0:f4:8a:d0:26:34:71:bc:41:97:b5:9f:a6:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC19ED76CCD72AB435328C48847EF794698443FE Validity Not Before: Apr 27 21:07:10 2025 GMT Not After : May 1 01:59:10 2025 GMT Subject: CN=9C416210681DE6A7DE313C2FE8D6E84E98F416F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:d3:06:3f:1e:d9:91:ca:a1:b6:3e:d5:40:52: 98:75:10:de:b6:c1:2a:50:26:d2:55:6c:b1:01:90: f2:8c:15:ba:bc:98:b0:13:99:e5:72:ee:e1:1a:22: 07:f2:c8:1c:f8:7a:5f:73:76:87:fb:45:b0:e8:b6: 69:36:30:45:7e:7f:e1:7f:82:a2:f9:99:f9:83:5f: f0:b9:a1:32:9f:08:1e:7f:ea:dd:d9:f0:0a:f8:93: aa:82:f1:cb:44:43:0b:ae:75:4e:bb:fd:f2:7a:00: 01:36:0e:76:d2:25:ce:b5:8a:da:4f:ae:0b:4a:a7: d0:35:63:49:f7:31:be:8e:dc:65:a9:4c:02:7e:fd: eb:e2:ea:16:71:29:99:7d:4a:54:53:9a:f2:4f:ca: 1b:de:57:fe:c2:ca:c6:65:f6:93:fa:eb:1c:c2:85: 7f:a4:8a:14:2e:c9:a6:73:31:d6:75:9d:be:90:b8: b9:80:39:5d:ab:ec:16:14:e2:b6:4e:71:e2:bc:51: 6f:3c:39:3a:b4:07:21:a3:5a:89:34:0a:b9:02:f1: bb:6d:13:6d:66:7d:45:50:bc:68:36:3a:4f:c2:e1: f8:ad:e8:25:03:04:cf:df:e7:cf:22:07:45:2f:1d: 7a:f9:f2:68:f0:d1:16:96:de:38:0f:55:68:0d:74: 4e:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:41:62:10:68:1D:E6:A7:DE:31:3C:2F:E8:D6:E8:4E:98:F4:16:F0 X509v3 Authority Key Identifier: keyid:DC:19:ED:76:CC:D7:2A:B4:35:32:8C:48:84:7E:F7:94:69:84:43:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC19ED76CCD72AB435328C48847EF794698443FE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86bd5538-4270-412d-9d66-c2b5157d3d6e/0/DC19ED76CCD72AB435328C48847EF794698443FE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:30:af:e6:ab:80:e0:cb:6a:73:50:ab:ff:0d:a6:1b:b3:81: c6:6f:ca:b9:07:ba:33:7d:93:0b:7d:47:9b:19:76:59:d3:24: aa:4d:1f:76:8e:80:4b:57:58:fd:14:65:d4:47:86:c5:55:7f: 80:11:70:42:89:e2:9a:60:fa:86:c3:e7:87:26:3d:7d:fd:f0: 32:17:1e:55:6a:2a:44:32:34:19:03:7f:18:6f:38:b9:7c:7a: f2:e0:2c:73:13:ad:ba:3e:bd:ac:d1:3b:4c:82:e8:7b:94:43: bf:71:20:5d:6f:61:f9:56:b3:60:fc:72:3a:c3:77:f7:87:22: d5:d3:4a:a4:8e:c2:5a:38:52:48:9d:dc:fe:e6:84:cc:c1:51: 35:e1:56:38:8e:6b:1b:45:0d:58:3e:40:09:2d:f9:56:79:85: 0c:32:77:26:a7:50:c4:25:66:6b:5a:93:35:2e:da:4f:2b:b5: da:7f:27:13:c2:76:32:b6:3d:f3:a7:b3:7b:3d:a8:01:96:51: 01:0f:76:67:7c:21:38:c4:3f:d1:0e:f5:15:95:31:93:41:b5: 1e:2e:ec:4f:cc:1f:82:91:bf:6f:f3:53:53:42:e9:01:25:21: 05:6c:af:04:ff:af:7b:ea:07:4c:d8:14:cd:30:95:36:8d:25: 03:51:c6:7a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCTiuX195oPSK0CY0cbxBl7WfpvMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMxOUVENzZDQ0Q3MkFCNDM1MzI4QzQ4ODQ3RUY3OTQ2 OTg0NDNGRTAeFw0yNTA0MjcyMTA3MTBaFw0yNTA1MDEwMTU5MTBaMDMxMTAvBgNV BAMTKDlDNDE2MjEwNjgxREU2QTdERTMxM0MyRkU4RDZFODRFOThGNDE2RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC10wY/HtmRyqG2PtVAUph1EN62 wSpQJtJVbLEBkPKMFbq8mLATmeVy7uEaIgfyyBz4el9zdof7RbDotmk2MEV+f+F/ gqL5mfmDX/C5oTKfCB5/6t3Z8Ar4k6qC8ctEQwuudU67/fJ6AAE2DnbSJc61itpP rgtKp9A1Y0n3Mb6O3GWpTAJ+/evi6hZxKZl9SlRTmvJPyhveV/7CysZl9pP66xzC hX+kihQuyaZzMdZ1nb6QuLmAOV2r7BYU4rZOceK8UW88OTq0ByGjWok0CrkC8btt E21mfUVQvGg2Ok/C4fit6CUDBM/f588iB0UvHXr58mjw0RaW3jgPVWgNdE7XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnEFiEGgd5qfeMTwv6NboTpj0FvAwHwYDVR0j BBgwFoAU3BntdszXKrQ1MoxIhH73lGmEQ/4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NmJkNTUzOC00MjcwLTQxMmQtOWQ2Ni1jMmI1MTU3ZDNkNmUvMC9EQzE5RUQ3NkND RDcyQUI0MzUzMjhDNDg4NDdFRjc5NDY5ODQ0M0ZFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREMxOUVENzZDQ0Q3MkFCNDM1MzI4QzQ4ODQ3RUY3OTQ2OTg0 NDNGRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODZiZDU1MzgtNDI3MC00MTJkLTlk NjYtYzJiNTE1N2QzZDZlLzAvREMxOUVENzZDQ0Q3MkFCNDM1MzI4QzQ4ODQ3RUY3 OTQ2OTg0NDNGRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAK0wr+argODLanNQq/8NphuzgcZvyrkHujN9 kwt9R5sZdlnTJKpNH3aOgEtXWP0UZdRHhsVVf4ARcEKJ4ppg+obD54cmPX398DIX HlVqKkQyNBkDfxhvOLl8evLgLHMTrbo+vazRO0yC6HuUQ79xIF1vYflWs2D8cjrD d/eHItXTSqSOwlo4Ukid3P7mhMzBUTXhVjiOaxtFDVg+QAkt+VZ5hQwydyanUMQl ZmtakzUu2k8rtdp/JxPCdjK2PfOns3s9qAGWUQEPdmd8ITjEP9EO9RWVMZNBtR4u 7E/MH4KRv2/zU1NC6QElIQVsrwT/r3vqB0zYFM0wlTaNJQNRxno= -----END CERTIFICATE-----Generated at Tue Apr 29 18:37:33 2025 by rpki-client