$ rpki-client -vvf repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft File: D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft (raw, json) Hash identifier: /qLDrUxjawAcTNq99IO1im/kpdawWxh3Zy+3wwpslZY= Subject key identifier: 2E:F9:FD:5C:C2:E8:91:96:E2:EF:F0:2D:F5:05:F3:4D:B7:40:28:79 Authority key identifier: D0:DD:54:04:78:1A:BE:E3:CF:6A:74:AD:A8:E9:3F:41:ED:4B:5F:85 Certificate issuer: /CN=D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85 Certificate serial: 6711B464ED7A223FB1A1E023FE4B49869675202B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft Manifest number: 86 Signing time: Sat 26 Apr 2025 09:11:41 +0000 Manifest this update: Sat 26 Apr 2025 09:06:41 +0000 Manifest next update: Tue 29 Apr 2025 19:28:41 +0000 Files and hashes: 1: 3135372e36362e3235302e302f32332d3234203d3e20313532373635.roa (hash: Hz/P540tQCAD7Joj9Cnl8/Cvk9mtd9SX29+QidTIXjo=) 2: D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.crl (hash: K9jASIgVgtMM0xW0PnChhYIorazOaEYbno3jd8LU734=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.crl rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 03:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:11:b4:64:ed:7a:22:3f:b1:a1:e0:23:fe:4b:49:86:96:75:20:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85 Validity Not Before: Apr 26 09:06:41 2025 GMT Not After : Apr 29 19:28:41 2025 GMT Subject: CN=2EF9FD5CC2E89196E2EFF02DF505F34DB7402879 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:78:d1:d1:18:f1:a0:a0:66:4e:62:dd:10:16: b7:3d:53:f4:77:81:9f:fd:e5:a5:52:87:81:aa:df: ea:78:82:4a:fe:05:d6:d8:47:30:c7:4d:4a:43:aa: 32:c8:9b:88:08:ac:6b:7f:ed:4a:11:37:5f:f9:26: 79:31:25:51:f3:40:93:b9:64:58:a7:f2:72:e1:ef: 6d:1d:57:1d:5f:da:d5:9f:82:ab:9b:04:90:55:31: 8c:94:df:71:17:5f:91:2d:e8:0d:e8:72:b6:35:2f: cb:99:ed:5c:d5:7c:02:77:a3:55:79:78:7c:cc:44: 94:ca:82:b4:c5:f7:5b:2c:1b:0c:ac:f0:2f:79:76: 18:15:77:e8:31:43:d3:60:88:e3:a0:ed:c8:1e:d2: 26:87:9f:e5:65:ff:49:68:86:01:74:6e:0f:f2:9f: ca:93:fc:1f:b0:12:41:cf:41:20:a5:32:93:3c:4f: 3a:34:89:15:74:5e:44:c8:ee:b3:3a:bc:0d:6e:ee: 70:f2:e6:82:44:05:75:64:ac:22:41:c7:b2:47:28: 41:ce:12:85:a4:c2:91:2e:4c:fb:02:0d:44:42:76: 4a:f9:c0:0a:df:27:de:a5:84:85:99:0f:a3:a3:eb: a0:b1:ac:f7:0d:50:c2:4f:16:e0:6e:c7:d7:8a:13: d3:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:F9:FD:5C:C2:E8:91:96:E2:EF:F0:2D:F5:05:F3:4D:B7:40:28:79 X509v3 Authority Key Identifier: keyid:D0:DD:54:04:78:1A:BE:E3:CF:6A:74:AD:A8:E9:3F:41:ED:4B:5F:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b12bf863-a1f0-42d0-9e3a-3f9ff69a2d15/0/D0DD5404781ABEE3CF6A74ADA8E93F41ED4B5F85.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:25:6f:fa:c6:73:e9:16:20:76:12:b8:1d:6d:52:af:ca:9f: bf:7b:40:1d:be:fd:bb:4a:ed:44:0c:ac:6b:15:f2:4b:2b:5b: 6d:2e:a8:76:88:c8:33:c9:40:01:50:64:50:98:43:64:45:2b: f7:41:98:48:ab:99:46:09:39:5a:c6:0f:b2:b3:d1:14:b6:1a: f1:e1:13:17:ce:2c:13:e9:da:8c:13:81:db:00:f4:86:b2:4c: f3:bb:78:52:f6:5f:42:3e:fa:d6:a1:ce:e6:45:06:d1:c6:b7: cb:b5:44:8d:6d:67:b0:c1:9d:75:85:8e:a6:1f:d8:0a:74:0b: 02:d2:c2:45:b4:98:ca:10:d9:f1:ba:96:d1:fb:00:dd:48:45: 28:47:59:ea:73:6c:20:61:3c:69:9a:9c:be:09:29:6c:2f:aa: b7:f0:63:65:54:4d:65:5e:c1:8e:2c:47:c7:30:4d:43:9c:a1: b8:73:48:16:12:33:24:12:5e:e8:30:12:0d:98:94:aa:73:28: ab:22:50:9b:fc:7b:fb:89:26:41:b4:c2:05:ac:72:cc:18:65: a0:3f:83:ce:e5:04:70:cb:37:2a:e8:df:fc:2a:c4:88:55:a7: a4:62:07:6a:41:93:83:6b:a0:e7:3b:44:5e:98:8e:6e:4c:17: 16:74:b7:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZxG0ZO16Ij+xoeAj/ktJhpZ1ICswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBERDU0MDQ3ODFBQkVFM0NGNkE3NEFEQThFOTNGNDFF RDRCNUY4NTAeFw0yNTA0MjYwOTA2NDFaFw0yNTA0MjkxOTI4NDFaMDMxMTAvBgNV BAMTKDJFRjlGRDVDQzJFODkxOTZFMkVGRjAyREY1MDVGMzREQjc0MDI4NzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUeNHRGPGgoGZOYt0QFrc9U/R3 gZ/95aVSh4Gq3+p4gkr+BdbYRzDHTUpDqjLIm4gIrGt/7UoRN1/5JnkxJVHzQJO5 ZFin8nLh720dVx1f2tWfgqubBJBVMYyU33EXX5Et6A3ocrY1L8uZ7VzVfAJ3o1V5 eHzMRJTKgrTF91ssGwys8C95dhgVd+gxQ9NgiOOg7cge0iaHn+Vl/0lohgF0bg/y n8qT/B+wEkHPQSClMpM8Tzo0iRV0XkTI7rM6vA1u7nDy5oJEBXVkrCJBx7JHKEHO EoWkwpEuTPsCDURCdkr5wArfJ96lhIWZD6Oj66CxrPcNUMJPFuBux9eKE9MFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULvn9XMLokZbi7/At9QXzTbdAKHkwHwYDVR0j BBgwFoAU0N1UBHgavuPPanStqOk/Qe1LX4UwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i MTJiZjg2My1hMWYwLTQyZDAtOWUzYS0zZjlmZjY5YTJkMTUvMC9EMERENTQwNDc4 MUFCRUUzQ0Y2QTc0QURBOEU5M0Y0MUVENEI1Rjg1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDBERDU0MDQ3ODFBQkVFM0NGNkE3NEFEQThFOTNGNDFFRDRC NUY4NS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjEyYmY4NjMtYTFmMC00MmQwLTll M2EtM2Y5ZmY2OWEyZDE1LzAvRDBERDU0MDQ3ODFBQkVFM0NGNkE3NEFEQThFOTNG NDFFRDRCNUY4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ4lb/rGc+kWIHYSuB1tUq/Kn797QB2+/btK 7UQMrGsV8ksrW20uqHaIyDPJQAFQZFCYQ2RFK/dBmEirmUYJOVrGD7Kz0RS2GvHh ExfOLBPp2owTgdsA9IayTPO7eFL2X0I++tahzuZFBtHGt8u1RI1tZ7DBnXWFjqYf 2Ap0CwLSwkW0mMoQ2fG6ltH7AN1IRShHWepzbCBhPGmanL4JKWwvqrfwY2VUTWVe wY4sR8cwTUOcobhzSBYSMyQSXugwEg2YlKpzKKsiUJv8e/uJJkG0wgWscswYZaA/ g87lBHDLNyro3/wqxIhVp6RiB2pBk4NroOc7RF6Yjm5MFxZ0t2o= -----END CERTIFICATE-----Generated at Sun Apr 27 07:10:02 2025 by rpki-client