$ rpki-client -vvf repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.mft File: DC80860022A4D5D14DB78082BAC705E0C1B0F915.mft (raw, json) Hash identifier: 3sEZyZiG748zFS7o2lOizrO9tZ7UsW/tBfhqLzFSQko= Subject key identifier: 9F:7E:C2:03:B0:F4:5E:88:62:BF:D9:90:EF:C3:EE:C7:F5:76:49:44 Authority key identifier: DC:80:86:00:22:A4:D5:D1:4D:B7:80:82:BA:C7:05:E0:C1:B0:F9:15 Certificate issuer: /CN=DC80860022A4D5D14DB78082BAC705E0C1B0F915 Certificate serial: 4151C5CE5DCA0CA1AA7D74DEF59A493264488E77 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC80860022A4D5D14DB78082BAC705E0C1B0F915.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.mft Manifest number: 04C9 Signing time: Wed 30 Apr 2025 00:51:41 +0000 Manifest this update: Wed 30 Apr 2025 00:46:41 +0000 Manifest next update: Sat 03 May 2025 05:42:41 +0000 Files and hashes: 1: 3130332e3130362e3131322e302f32322d3234203d3e20313336383830.roa (hash: ZCH3XXiTrQMOGAjRhT39z3F568gOjmz+EgX36Ate/V4=) 2: 323430323a343234303a3a2f33322d3332203d3e20313336383830.roa (hash: 8mQYzB1g0N9/kAIrWX3si1LgH6siHpQM/MErsP7sMDw=) 3: DC80860022A4D5D14DB78082BAC705E0C1B0F915.crl (hash: wkhqh6yDwo7mGn6Or8a2hs14QiNcgRzSjP6xO40EGVk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.crl rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC80860022A4D5D14DB78082BAC705E0C1B0F915.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 05:42:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:51:c5:ce:5d:ca:0c:a1:aa:7d:74:de:f5:9a:49:32:64:48:8e:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC80860022A4D5D14DB78082BAC705E0C1B0F915 Validity Not Before: Apr 30 00:46:41 2025 GMT Not After : May 3 05:42:41 2025 GMT Subject: CN=9F7EC203B0F45E8862BFD990EFC3EEC7F5764944 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:06:3b:16:7b:0d:1a:94:b8:e1:cb:13:da:1a: 1e:44:0a:38:58:5e:27:84:31:80:3f:2d:4f:35:a3: 0f:c1:6d:1a:41:cd:d3:5e:22:ff:97:5a:11:03:9e: c5:d4:66:68:27:40:93:72:8e:2f:f8:d7:54:29:7a: cb:31:21:d4:b4:ea:a9:ff:49:21:d6:7c:05:1e:70: df:98:73:86:f0:b6:43:02:20:09:ae:67:0d:45:2d: 22:44:84:51:c7:cb:ad:5f:eb:d8:7e:2e:80:40:be: 9a:29:d5:de:d7:53:4e:19:16:2f:bf:75:9c:d9:6d: ca:94:10:00:9c:6f:4a:88:55:03:0c:e1:33:29:1c: 30:cc:53:5f:61:ef:91:da:b7:f1:4e:f3:3d:58:ee: bd:20:72:4e:ff:7c:bd:70:c5:b4:05:aa:a8:f2:66: 05:26:3d:f8:f2:e6:16:b6:e2:bf:d0:63:f1:c3:9c: f6:e5:23:ac:af:64:4e:52:f7:36:74:75:72:29:bb: 18:b1:1b:bd:86:e6:16:a7:a3:0c:d7:6c:72:57:b9: c5:a3:cb:db:08:62:d1:ef:bc:68:42:a9:91:bc:47: af:42:ac:96:5e:72:c2:90:c5:fa:09:40:3d:ae:ec: 31:61:2c:fe:a0:74:73:b8:9a:f8:bb:bc:9a:a6:61: c3:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9F:7E:C2:03:B0:F4:5E:88:62:BF:D9:90:EF:C3:EE:C7:F5:76:49:44 X509v3 Authority Key Identifier: keyid:DC:80:86:00:22:A4:D5:D1:4D:B7:80:82:BA:C7:05:E0:C1:B0:F9:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC80860022A4D5D14DB78082BAC705E0C1B0F915.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:1b:28:e9:df:eb:4d:00:d6:45:27:88:6a:57:25:62:8c:f3: b6:b4:01:c1:8e:50:22:a0:f4:36:59:6a:c9:ff:c0:cd:a0:12: 19:43:97:c7:8d:d2:71:9a:cd:a3:50:8d:b3:82:18:1c:b9:4e: 99:9d:6a:40:b4:09:fa:95:cf:fb:82:29:a2:6a:49:70:8b:2a: cc:58:49:45:4e:51:a4:54:30:a3:b2:9d:a1:89:c1:22:03:96: 13:b0:81:81:94:4e:e3:67:ad:3f:14:2b:5c:fc:3b:28:93:14: 36:22:d6:b1:92:91:b5:56:fb:4c:85:fb:82:f2:b7:ed:82:38: cc:a1:c6:cd:8c:dc:6f:0e:86:34:0b:f9:3d:98:84:0b:49:ff: c9:b1:71:46:7a:73:52:14:09:03:c0:aa:dd:86:21:56:f5:32: 5b:de:04:eb:01:82:01:31:aa:34:45:a1:d0:ef:ca:3d:66:73: 5b:b4:e2:54:78:3a:82:07:dc:8c:45:81:46:d5:a7:88:39:f9: 2a:72:93:7d:af:33:c9:4d:55:18:21:a5:31:10:d7:e0:fd:c3: 67:aa:4c:99:f4:89:a4:7a:e7:55:51:6f:3a:63:ec:4e:47:fc: 7d:31:e5:45:2f:a3:bb:43:28:ba:c4:0c:32:61:ac:3c:0f:24: 95:f7:b5:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQVHFzl3KDKGqfXTe9ZpJMmRIjncwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREM4MDg2MDAyMkE0RDVEMTREQjc4MDgyQkFDNzA1RTBD MUIwRjkxNTAeFw0yNTA0MzAwMDQ2NDFaFw0yNTA1MDMwNTQyNDFaMDMxMTAvBgNV BAMTKDlGN0VDMjAzQjBGNDVFODg2MkJGRDk5MEVGQzNFRUM3RjU3NjQ5NDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpBjsWew0alLjhyxPaGh5ECjhY XieEMYA/LU81ow/BbRpBzdNeIv+XWhEDnsXUZmgnQJNyji/411QpessxIdS06qn/ SSHWfAUecN+Yc4bwtkMCIAmuZw1FLSJEhFHHy61f69h+LoBAvpop1d7XU04ZFi+/ dZzZbcqUEACcb0qIVQMM4TMpHDDMU19h75Hat/FO8z1Y7r0gck7/fL1wxbQFqqjy ZgUmPfjy5ha24r/QY/HDnPblI6yvZE5S9zZ0dXIpuxixG72G5hanowzXbHJXucWj y9sIYtHvvGhCqZG8R69CrJZecsKQxfoJQD2u7DFhLP6gdHO4mvi7vJqmYcO9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUn37CA7D0Xohiv9mQ78Pux/V2SUQwHwYDVR0j BBgwFoAU3ICGACKk1dFNt4CCuscF4MGw+RUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YjA3YjM3Yy0wNTA3LTQ5MTMtODMyOS0zZjE2MWI2YWZmNTYvMC9EQzgwODYwMDIy QTRENUQxNERCNzgwODJCQUM3MDVFMEMxQjBGOTE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREM4MDg2MDAyMkE0RDVEMTREQjc4MDgyQkFDNzA1RTBDMUIw RjkxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmIwN2IzN2MtMDUwNy00OTEzLTgz MjktM2YxNjFiNmFmZjU2LzAvREM4MDg2MDAyMkE0RDVEMTREQjc4MDgyQkFDNzA1 RTBDMUIwRjkxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJcbKOnf600A1kUniGpXJWKM87a0AcGOUCKg 9DZZasn/wM2gEhlDl8eN0nGazaNQjbOCGBy5TpmdakC0CfqVz/uCKaJqSXCLKsxY SUVOUaRUMKOynaGJwSIDlhOwgYGUTuNnrT8UK1z8OyiTFDYi1rGSkbVW+0yF+4Ly t+2COMyhxs2M3G8OhjQL+T2YhAtJ/8mxcUZ6c1IUCQPAqt2GIVb1MlveBOsBggEx qjRFodDvyj1mc1u04lR4OoIH3IxFgUbVp4g5+Spyk32vM8lNVRghpTEQ1+D9w2eq TJn0iaR651VRbzpj7E5H/H0x5UUvo7tDKLrEDDJhrDwPJJX3tQ4= -----END CERTIFICATE-----Generated at Thu May 1 03:24:07 2025 by rpki-client