$ rpki-client -vvf repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.mft File: DA680D591E9E6B4622614F94CF255933B6749212.mft (raw, json) Hash identifier: YuAJQmwYTsDnhGHfSSCuNJw7hX7XJXMhYKVeHK7XKjA= Subject key identifier: 7C:7A:83:F5:34:80:64:F7:F7:D7:14:53:5D:B9:B7:1D:74:5F:75:93 Authority key identifier: DA:68:0D:59:1E:9E:6B:46:22:61:4F:94:CF:25:59:33:B6:74:92:12 Certificate issuer: /CN=DA680D591E9E6B4622614F94CF255933B6749212 Certificate serial: 5190A584FC534077E0B24736DBE7353F04601FCC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DA680D591E9E6B4622614F94CF255933B6749212.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.mft Manifest number: C8 Signing time: Sun 27 Apr 2025 05:41:45 +0000 Manifest this update: Sun 27 Apr 2025 05:36:45 +0000 Manifest next update: Wed 30 Apr 2025 11:08:45 +0000 Files and hashes: 1: 3135372e31302e3138322e302f32342d3234203d3e20313532333434.roa (hash: zo0q/Qyr9+OM0Fi4S3qemAqF/9QAiZg3ou4qqrAMiyU=) 2: DA680D591E9E6B4622614F94CF255933B6749212.crl (hash: ihr6aNBWX3h9ZUyWYG8dmBegk0997ayv+PQAOV+oP84=) 3: 3135372e31302e3138332e302f32342d3234203d3e20313532333434.roa (hash: bW5GhG+n2gDC7aNS0QQfawXhWxcHV8PEi1pP/7l6eDw=) 4: 3135372e31302e3138322e302f32332d3234203d3e20313532333434.roa (hash: i0rS2o3mTh9+/ZMOMUuCXL7VcRhfm2ZL+vmQMK6r/AQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.crl rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DA680D591E9E6B4622614F94CF255933B6749212.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 30 Apr 2025 11:08:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:90:a5:84:fc:53:40:77:e0:b2:47:36:db:e7:35:3f:04:60:1f:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA680D591E9E6B4622614F94CF255933B6749212 Validity Not Before: Apr 27 05:36:45 2025 GMT Not After : Apr 30 11:08:45 2025 GMT Subject: CN=7C7A83F5348064F7F7D714535DB9B71D745F7593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f9:f7:59:07:ef:8f:c5:73:59:d5:11:b7:af: c8:9a:8b:33:a8:c3:e9:99:e7:af:0f:24:52:8b:6e: 5d:5c:da:96:ae:6d:77:10:60:86:5c:3c:7b:f3:18: a3:e9:7b:1c:73:a7:f2:4b:55:e5:1e:16:a1:2e:79: a4:ff:16:5f:11:7a:97:04:a7:60:4d:78:cf:e6:71: 6a:5d:eb:24:98:1a:b7:a6:3f:12:48:31:fb:1b:dd: 66:91:da:b5:0f:70:9d:d8:f1:c4:53:d9:bc:cf:ae: 2b:c6:3f:69:15:26:ea:c2:c0:49:f5:15:5a:bd:b2: 1c:66:4a:be:51:95:4e:6e:f5:2c:5d:b2:a8:cf:ab: 99:45:d4:c6:e9:c0:ee:9c:32:9c:55:b8:9c:6f:5a: 08:2c:5e:9b:31:62:7b:c3:7c:8d:9b:8e:45:43:fd: d7:30:10:95:96:19:45:14:34:56:4c:96:56:6b:43: ac:81:51:66:2b:43:8b:e3:c4:d8:39:33:22:73:e1: 9b:94:0b:bb:7e:1d:31:44:90:c8:09:af:3a:63:22: f0:be:4a:7d:e8:ae:f1:f3:2a:c2:a6:64:7e:68:aa: dd:75:73:9d:0d:f3:43:f0:b1:bd:0e:58:ab:32:e0: ab:99:3a:85:e7:44:92:12:d9:8f:35:3b:79:18:3b: 6f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:7A:83:F5:34:80:64:F7:F7:D7:14:53:5D:B9:B7:1D:74:5F:75:93 X509v3 Authority Key Identifier: keyid:DA:68:0D:59:1E:9E:6B:46:22:61:4F:94:CF:25:59:33:B6:74:92:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DA680D591E9E6B4622614F94CF255933B6749212.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b2:40:45:e8:e2:20:03:78:ba:55:bf:9d:f6:dc:83:11:88:a7: ce:26:86:18:2d:fa:13:24:50:7c:ee:de:4f:9a:a5:fc:f4:00: 4d:2c:42:b9:5d:ba:e5:c6:ec:0d:e9:ac:58:30:d6:f6:55:41: 93:41:fa:f4:24:59:50:c8:64:d9:20:e4:58:5b:9b:d4:5b:52: 32:dc:11:f3:ac:dd:0c:26:e9:91:e7:d1:bd:bd:da:6d:f3:a9: fc:5f:f9:de:34:4e:60:3b:ba:06:d6:5c:61:a3:b4:56:be:48: 1e:cf:b0:fb:0f:83:fa:ab:6f:1a:4a:3c:8c:d5:49:ef:85:a7: 73:37:eb:98:59:69:5a:e3:44:3b:f2:b5:09:a8:7b:b0:96:2a: 07:6f:d5:82:be:86:8b:9b:5c:ea:44:be:1c:30:97:98:f9:c0: ec:d2:40:56:36:1e:d9:31:5f:71:03:ff:fd:55:73:67:02:d6: cf:ac:2b:7b:a3:b4:ca:21:9f:96:55:c4:3b:3d:46:9a:7f:a5: 99:e6:94:a4:58:97:19:62:23:8f:20:46:89:a3:90:e4:59:9a: 46:c7:64:9b:d2:e9:c1:56:75:e6:b6:87:37:ea:69:39:b1:26: 14:2c:85:a4:86:ab:f6:bb:d1:72:b4:21:d0:bf:1e:d5:d7:4f: 1f:6a:c6:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUZClhPxTQHfgskc22+c1PwRgH8wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE2ODBENTkxRTlFNkI0NjIyNjE0Rjk0Q0YyNTU5MzNC Njc0OTIxMjAeFw0yNTA0MjcwNTM2NDVaFw0yNTA0MzAxMTA4NDVaMDMxMTAvBgNV BAMTKDdDN0E4M0Y1MzQ4MDY0RjdGN0Q3MTQ1MzVEQjlCNzFENzQ1Rjc1OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS+fdZB++PxXNZ1RG3r8iaizOo w+mZ568PJFKLbl1c2paubXcQYIZcPHvzGKPpexxzp/JLVeUeFqEueaT/Fl8RepcE p2BNeM/mcWpd6ySYGremPxJIMfsb3WaR2rUPcJ3Y8cRT2bzPrivGP2kVJurCwEn1 FVq9shxmSr5RlU5u9SxdsqjPq5lF1MbpwO6cMpxVuJxvWggsXpsxYnvDfI2bjkVD /dcwEJWWGUUUNFZMllZrQ6yBUWYrQ4vjxNg5MyJz4ZuUC7t+HTFEkMgJrzpjIvC+ Sn3orvHzKsKmZH5oqt11c50N80Pwsb0OWKsy4KuZOoXnRJIS2Y81O3kYO29dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfHqD9TSAZPf31xRTXbm3HXRfdZMwHwYDVR0j BBgwFoAU2mgNWR6ea0YiYU+UzyVZM7Z0khIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWRhMjNlOS04NGJlLTRhNTQtYmNhMC1lOWEwY2FmZDE2ZmUvMC9EQTY4MEQ1OTFF OUU2QjQ2MjI2MTRGOTRDRjI1NTkzM0I2NzQ5MjEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvREE2ODBENTkxRTlFNkI0NjIyNjE0Rjk0Q0YyNTU5MzNCNjc0 OTIxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFkYTIzZTktODRiZS00YTU0LWJj YTAtZTlhMGNhZmQxNmZlLzAvREE2ODBENTkxRTlFNkI0NjIyNjE0Rjk0Q0YyNTU5 MzNCNjc0OTIxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALJARejiIAN4ulW/nfbcgxGIp84mhhgt+hMk UHzu3k+apfz0AE0sQrlduuXG7A3prFgw1vZVQZNB+vQkWVDIZNkg5Fhbm9RbUjLc EfOs3Qwm6ZHn0b292m3zqfxf+d40TmA7ugbWXGGjtFa+SB7PsPsPg/qrbxpKPIzV Se+Fp3M365hZaVrjRDvytQmoe7CWKgdv1YK+houbXOpEvhwwl5j5wOzSQFY2Htkx X3ED//1Vc2cC1s+sK3ujtMohn5ZVxDs9Rpp/pZnmlKRYlxliI48gRomjkORZmkbH ZJvS6cFWdea2hzfqaTmxJhQshaSGq/a70XK0IdC/HtXXTx9qxtw= -----END CERTIFICATE-----Generated at Mon Apr 28 10:37:19 2025 by rpki-client