$ rpki-client -vvf repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.mft File: DEA386454A080E52CD4B89DB87E873E2BB375D86.mft (raw, json) Hash identifier: Klu+css3CNjIfaM0xC5Z7IFR5YsGzPAOJpAiYsM1PiA= Subject key identifier: F0:2F:A2:1E:A3:6E:71:EF:E9:42:81:DE:27:DF:03:7A:D8:53:20:2B Authority key identifier: DE:A3:86:45:4A:08:0E:52:CD:4B:89:DB:87:E8:73:E2:BB:37:5D:86 Certificate issuer: /CN=DEA386454A080E52CD4B89DB87E873E2BB375D86 Certificate serial: 6A171D0A4BE7C37A28076E68961F7967FFA788D4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEA386454A080E52CD4B89DB87E873E2BB375D86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.mft Manifest number: 0183 Signing time: Tue 29 Apr 2025 17:41:25 +0000 Manifest this update: Tue 29 Apr 2025 17:36:25 +0000 Manifest next update: Sat 03 May 2025 01:43:25 +0000 Files and hashes: 1: DEA386454A080E52CD4B89DB87E873E2BB375D86.crl (hash: g4g3OghNGH4lhGwNvixqvaCzi7I+SKbNTNQXdzasZ9Q=) 2: 3130332e36352e3233362e302f32332d3234203d3e20313335343530.roa (hash: iOcccdQpkl2eLxl0LKt/e7W2F4Q9POflHzcnPXjdyFg=) 3: 3130332e37372e3130362e302f32332d3234203d3e20313335343530.roa (hash: 7mgUNnKF1k9aQc8kIoMQeXk2Q+5QMh9pXTXHjbvLNw4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.crl rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEA386454A080E52CD4B89DB87E873E2BB375D86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 01:43:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:17:1d:0a:4b:e7:c3:7a:28:07:6e:68:96:1f:79:67:ff:a7:88:d4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEA386454A080E52CD4B89DB87E873E2BB375D86 Validity Not Before: Apr 29 17:36:25 2025 GMT Not After : May 3 01:43:25 2025 GMT Subject: CN=F02FA21EA36E71EFE94281DE27DF037AD853202B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:0e:7f:36:e4:da:a3:ce:83:03:98:fb:64:f2: 8f:96:c0:d9:5c:0b:7b:c9:68:3b:fa:86:80:21:eb: f2:7d:89:aa:e6:71:cd:ea:14:9e:a8:b0:3e:cd:be: ad:e2:a9:51:1b:7e:8e:90:03:d7:3c:a7:e3:86:72: 9f:58:b8:ac:13:8d:dd:20:da:54:36:ae:39:db:01: 09:0f:f8:b8:66:7a:b0:32:b6:ea:e8:e9:a2:23:f0: 37:b0:b5:d9:bb:d5:62:92:f7:a2:3d:8a:63:29:8f: d2:05:4e:9b:55:34:ea:51:63:73:26:3f:54:b2:e6: 5a:f9:2c:41:1d:8b:75:d7:ca:db:32:05:cc:41:83: 60:98:bf:38:88:13:06:79:47:d9:ee:7b:74:6e:90: c7:98:f2:33:16:19:c1:5f:f6:a0:f6:8e:ae:b1:4b: 0a:17:aa:35:d9:fc:01:4f:1f:c4:b2:df:8e:c6:6b: 3c:4e:f6:07:f6:15:ab:af:4f:cb:e7:32:7d:2f:ee: d5:5f:c3:0f:9e:c5:9d:64:1d:b7:2c:ce:3b:5c:cc: f6:d1:e4:18:d3:2b:c0:6a:3b:55:ae:e7:23:8e:98: 35:ed:3f:1e:d0:bb:fe:7c:a9:87:f0:58:21:70:8d: 44:86:be:0c:e6:fe:d8:95:5c:12:54:0a:0c:62:86: e1:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:2F:A2:1E:A3:6E:71:EF:E9:42:81:DE:27:DF:03:7A:D8:53:20:2B X509v3 Authority Key Identifier: keyid:DE:A3:86:45:4A:08:0E:52:CD:4B:89:DB:87:E8:73:E2:BB:37:5D:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEA386454A080E52CD4B89DB87E873E2BB375D86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:5b:69:b7:44:7a:0d:9b:8d:73:2d:39:28:97:1d:b8:ac:77: b0:76:6d:15:a8:88:06:94:c2:4f:59:df:00:cf:c6:bd:74:93: 3d:c1:f7:68:f7:a7:23:3e:45:d0:8e:3e:84:f7:b4:5d:4f:cc: 19:8e:22:2e:69:f4:f7:5e:4c:89:99:54:c4:70:1a:ba:4a:af: 64:6a:7b:87:14:4e:6e:d9:82:80:be:b4:35:24:df:9c:7c:1d: 61:e1:43:80:78:fd:9a:22:79:34:ca:2a:0b:fb:2d:14:d7:e3: c3:b3:9d:ab:a6:8b:0b:96:b6:4e:f6:a0:8a:7f:e3:de:88:57: 34:24:37:b4:9c:70:e5:3d:c8:0b:5f:ae:98:84:c3:9b:61:af: 39:f2:1f:7a:ae:cd:6e:31:49:e3:a1:a0:05:ff:63:28:4f:da: f7:99:8e:b5:cc:b0:2e:88:fd:e9:a0:62:61:c6:e5:87:3a:98: 49:25:88:16:2f:48:b5:f0:c7:de:f0:ad:4c:26:0e:5a:5d:a6: 36:86:79:63:5c:a8:22:70:34:f2:c0:6d:f7:74:0b:af:3a:0b: c1:be:74:54:fa:8c:c3:07:44:29:b3:89:df:71:f8:eb:c9:84: 83:9b:3a:d3:ed:b3:c6:ab:1d:98:6f:46:4c:b8:ab:8b:93:32: da:fa:e9:e0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUahcdCkvnw3ooB25olh95Z/+niNQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVBMzg2NDU0QTA4MEU1MkNENEI4OURCODdFODczRTJC QjM3NUQ4NjAeFw0yNTA0MjkxNzM2MjVaFw0yNTA1MDMwMTQzMjVaMDMxMTAvBgNV BAMTKEYwMkZBMjFFQTM2RTcxRUZFOTQyODFERTI3REYwMzdBRDg1MzIwMkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoDn825NqjzoMDmPtk8o+WwNlc C3vJaDv6hoAh6/J9iarmcc3qFJ6osD7Nvq3iqVEbfo6QA9c8p+OGcp9YuKwTjd0g 2lQ2rjnbAQkP+LhmerAyturo6aIj8Dewtdm71WKS96I9imMpj9IFTptVNOpRY3Mm P1Sy5lr5LEEdi3XXytsyBcxBg2CYvziIEwZ5R9nue3RukMeY8jMWGcFf9qD2jq6x SwoXqjXZ/AFPH8Sy347GazxO9gf2FauvT8vnMn0v7tVfww+exZ1kHbcszjtczPbR 5BjTK8BqO1Wu5yOOmDXtPx7Qu/58qYfwWCFwjUSGvgzm/tiVXBJUCgxihuG/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8C+iHqNuce/pQoHeJ98DethTICswHwYDVR0j BBgwFoAU3qOGRUoIDlLNS4nbh+hz4rs3XYYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjA4YTJlMi1mODEwLTQ2ZTgtYTVhMS01NmVjNWEzNWQyYWQvMC9ERUEzODY0NTRB MDgwRTUyQ0Q0Qjg5REI4N0U4NzNFMkJCMzc1RDg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREVBMzg2NDU0QTA4MEU1MkNENEI4OURCODdFODczRTJCQjM3 NUQ4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYwOGEyZTItZjgxMC00NmU4LWE1 YTEtNTZlYzVhMzVkMmFkLzAvREVBMzg2NDU0QTA4MEU1MkNENEI4OURCODdFODcz RTJCQjM3NUQ4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALVbabdEeg2bjXMtOSiXHbisd7B2bRWoiAaU wk9Z3wDPxr10kz3B92j3pyM+RdCOPoT3tF1PzBmOIi5p9PdeTImZVMRwGrpKr2Rq e4cUTm7ZgoC+tDUk35x8HWHhQ4B4/ZoieTTKKgv7LRTX48OznaumiwuWtk72oIp/ 496IVzQkN7SccOU9yAtfrpiEw5thrznyH3quzW4xSeOhoAX/YyhP2veZjrXMsC6I /emgYmHG5Yc6mEkliBYvSLXwx97wrUwmDlpdpjaGeWNcqCJwNPLAbfd0C686C8G+ dFT6jMMHRCmzid9x+OvJhIObOtPts8arHZhvRky4q4uTMtr66eA= -----END CERTIFICATE-----Generated at Thu May 1 18:26:27 2025 by rpki-client