$ rpki-client -vvf repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.mft File: DBF597EA29EF8A70656446AF75CF33F0618E8282.mft (raw, json) Hash identifier: bIZW3Krmr/7EOzFWyut2Ly0aiiedCjuR9doQUSuiPYY= Subject key identifier: 45:0A:3F:B2:2F:23:6D:58:BD:28:87:DC:24:FD:2A:33:66:B9:2A:3A Authority key identifier: DB:F5:97:EA:29:EF:8A:70:65:64:46:AF:75:CF:33:F0:61:8E:82:82 Certificate issuer: /CN=DBF597EA29EF8A70656446AF75CF33F0618E8282 Certificate serial: 3CABB8E79AD7640ED0B90AE9E69F52A296A2CCAD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF597EA29EF8A70656446AF75CF33F0618E8282.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.mft Manifest number: 04CB Signing time: Tue 29 Apr 2025 16:12:10 +0000 Manifest this update: Tue 29 Apr 2025 16:07:10 +0000 Manifest next update: Fri 02 May 2025 23:13:10 +0000 Files and hashes: 1: DBF597EA29EF8A70656446AF75CF33F0618E8282.crl (hash: 1EI3TgFfAkpE8pWRqRUq07fRrFnBCUCyhrRqm48nGJQ=) 2: 3130332e3234322e3230342e302f32322d3234203d3e203233373536.roa (hash: UpSXaQL4hvamZB7sMVEVrvvzWIfPbsCxCjFg7VirCfM=) 3: 323430363a363230303a3a2f33322d3438203d3e203233373536.roa (hash: PMaf9YrAeTdzm+l6puGPGAXV1wZZdjOv5Pgvb9K+9Zo=) 4: 3230322e362e3232342e302f32302d3234203d3e203233373536.roa (hash: yoojfMzQKh4mJ5yJkpKCOee+XIAQV6Uq1iQBpPZ4uAE=) 5: 3131372e3130322e3232342e302f31392d3234203d3e203233373536.roa (hash: hkjarDn9mLD3pYLM9+FCm3xKAyZZb8KbslY3PfkSGdQ=) 6: 3135302e3130372e3133322e302f32322d3234203d3e203233373536.roa (hash: HKdDrsWDkAEnJ6eI7ZqOPeb8e5bF+cd3+bp0HL/Z/po=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.crl rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF597EA29EF8A70656446AF75CF33F0618E8282.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 18:52:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:ab:b8:e7:9a:d7:64:0e:d0:b9:0a:e9:e6:9f:52:a2:96:a2:cc:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBF597EA29EF8A70656446AF75CF33F0618E8282 Validity Not Before: Apr 29 16:07:10 2025 GMT Not After : May 2 23:13:10 2025 GMT Subject: CN=450A3FB22F236D58BD2887DC24FD2A3366B92A3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:6a:c7:9f:4f:6b:ac:8d:40:dd:ab:51:df:8f: a4:06:26:d3:9c:7d:d8:1c:98:77:52:6e:14:6f:ba: 82:c6:04:a4:c1:96:40:2a:bb:93:0b:1c:bd:71:d7: d3:f7:e8:8a:a6:a1:78:c0:4a:da:56:44:7d:86:1e: be:5e:33:8a:eb:c1:63:20:0d:af:58:24:5b:c6:21: e6:9e:81:ad:9d:e8:c9:9f:31:4c:8b:c8:30:49:f5: 7b:34:d5:e3:c5:48:0e:5e:79:87:a5:3f:88:ee:91: 5e:09:39:11:de:d6:36:49:53:49:86:ec:72:be:15: 99:d9:d8:af:98:d8:32:cf:76:2b:3f:da:ba:68:db: 15:ee:a0:7d:1e:4f:77:ab:d4:01:e1:c7:af:72:c6: 8a:db:ee:7c:dc:80:71:f5:72:2f:98:71:55:b3:70: 6d:84:2c:de:47:57:3a:db:ef:98:2c:7f:8e:ea:9d: 65:2d:fb:6c:3b:54:07:76:8d:f0:95:db:6b:87:3b: 16:84:9a:45:b2:20:04:73:3d:d7:61:1b:fe:55:14: d0:23:0c:eb:91:be:17:e9:57:51:84:03:f8:e5:5e: 04:30:e8:35:f3:0e:3d:41:7e:0c:2d:5c:48:7d:14: d3:25:f1:45:3c:ee:b6:e0:a3:72:df:82:09:fb:6b: c6:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:0A:3F:B2:2F:23:6D:58:BD:28:87:DC:24:FD:2A:33:66:B9:2A:3A X509v3 Authority Key Identifier: keyid:DB:F5:97:EA:29:EF:8A:70:65:64:46:AF:75:CF:33:F0:61:8E:82:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF597EA29EF8A70656446AF75CF33F0618E8282.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:de:67:5e:81:03:f4:29:db:b5:c3:44:74:d6:d9:2a:72:cb: 04:cb:52:fe:30:39:e2:4b:f0:65:b8:ef:56:88:5d:6d:af:20: c8:bb:18:30:be:5b:06:f9:b1:37:17:24:31:ac:74:67:32:d6: d4:49:e5:1c:a5:67:bb:d6:74:aa:4a:5e:73:c5:04:43:d6:09: ec:56:95:02:05:47:7a:be:e7:e9:b0:5d:e9:b5:61:e2:e2:83: 7c:f6:38:96:41:b2:96:5a:b4:29:e1:4b:c9:4b:29:a0:29:80: 51:fa:97:b9:52:59:2e:ef:2e:e0:cf:fe:31:f1:52:f5:eb:83: 94:b9:4d:12:d9:12:ed:eb:7f:02:16:82:d2:44:52:20:7d:bf: 3f:9b:bf:cb:eb:28:20:13:cc:ad:21:88:2c:67:b7:2f:d9:04: 89:1f:c6:b9:89:5a:50:2e:08:17:53:68:f9:60:de:b1:f0:41: 09:75:af:0d:10:73:d3:bc:38:97:eb:e1:4a:fb:1f:59:4a:a6: a4:14:8c:68:9f:77:0c:7b:c3:ec:3a:8f:d3:8e:c0:04:1b:bf: d2:d5:d1:b3:85:34:dd:b8:cb:7c:d2:da:42:19:eb:e3:6d:b1: 21:ba:1b:e2:aa:8e:c0:c0:db:8a:8b:3d:98:a7:52:6b:80:d4: ad:62:e8:2b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPKu455rXZA7QuQrp5p9SopaizK0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJGNTk3RUEyOUVGOEE3MDY1NjQ0NkFGNzVDRjMzRjA2 MThFODI4MjAeFw0yNTA0MjkxNjA3MTBaFw0yNTA1MDIyMzEzMTBaMDMxMTAvBgNV BAMTKDQ1MEEzRkIyMkYyMzZENThCRDI4ODdEQzI0RkQyQTMzNjZCOTJBM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeasefT2usjUDdq1Hfj6QGJtOc fdgcmHdSbhRvuoLGBKTBlkAqu5MLHL1x19P36IqmoXjAStpWRH2GHr5eM4rrwWMg Da9YJFvGIeaega2d6MmfMUyLyDBJ9Xs01ePFSA5eeYelP4jukV4JORHe1jZJU0mG 7HK+FZnZ2K+Y2DLPdis/2rpo2xXuoH0eT3er1AHhx69yxorb7nzcgHH1ci+YcVWz cG2ELN5HVzrb75gsf47qnWUt+2w7VAd2jfCV22uHOxaEmkWyIARzPddhG/5VFNAj DOuRvhfpV1GEA/jlXgQw6DXzDj1BfgwtXEh9FNMl8UU87rbgo3Lfggn7a8ZDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURQo/si8jbVi9KIfcJP0qM2a5KjowHwYDVR0j BBgwFoAU2/WX6invinBlZEavdc8z8GGOgoIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZDBmMWE2ZS04M2I2LTQ1MzQtOTY3ZC1mOGRiM2MzNzExZjQvMC9EQkY1OTdFQTI5 RUY4QTcwNjU2NDQ2QUY3NUNGMzNGMDYxOEU4MjgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREJGNTk3RUEyOUVGOEE3MDY1NjQ0NkFGNzVDRjMzRjA2MThF ODI4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWQwZjFhNmUtODNiNi00NTM0LTk2 N2QtZjhkYjNjMzcxMWY0LzAvREJGNTk3RUEyOUVGOEE3MDY1NjQ0NkFGNzVDRjMz RjA2MThFODI4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJreZ16BA/Qp27XDRHTW2SpyywTLUv4wOeJL 8GW471aIXW2vIMi7GDC+Wwb5sTcXJDGsdGcy1tRJ5RylZ7vWdKpKXnPFBEPWCexW lQIFR3q+5+mwXem1YeLig3z2OJZBspZatCnhS8lLKaApgFH6l7lSWS7vLuDP/jHx UvXrg5S5TRLZEu3rfwIWgtJEUiB9vz+bv8vrKCATzK0hiCxnty/ZBIkfxrmJWlAu CBdTaPlg3rHwQQl1rw0Qc9O8OJfr4Ur7H1lKpqQUjGifdwx7w+w6j9OOwAQbv9LV 0bOFNN24y3zS2kIZ6+NtsSG6G+KqjsDA24qLPZinUmuA1K1i6Cs= -----END CERTIFICATE-----Generated at Wed Apr 30 00:14:59 2025 by rpki-client