$ rpki-client -vvf repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft File: D065D2A0A105660C70D0A89385A33A61750ED7E8.mft (raw, json) Hash identifier: +3eIaPziVHSCUQdCEMBujyeLZD11Wx+usBeUxglRrVQ= Subject key identifier: 7E:89:3A:03:65:7D:11:F9:D3:93:0D:9C:FD:F5:DF:21:DF:30:B6:4C Authority key identifier: D0:65:D2:A0:A1:05:66:0C:70:D0:A8:93:85:A3:3A:61:75:0E:D7:E8 Certificate issuer: /CN=D065D2A0A105660C70D0A89385A33A61750ED7E8 Certificate serial: 417FD0BB76A9C1EADC5D5BAD05DDF6B9B2183C42 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D065D2A0A105660C70D0A89385A33A61750ED7E8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft Manifest number: 019E Signing time: Wed 30 Apr 2025 13:22:16 +0000 Manifest this update: Wed 30 Apr 2025 13:17:16 +0000 Manifest next update: Sat 03 May 2025 21:14:16 +0000 Files and hashes: 1: 3130332e3137342e36362e302f32342d3234203d3e20313431363138.roa (hash: 6/pSy7z7eY7tiFM1qTKt66H7MbktwVP3GS8euOTpVH0=) 2: 3130332e3136312e3130392e302f32342d3234203d3e20313431363138.roa (hash: WfS+hJt0MRHreGBYJWQj9QwW51lq/cgm3WlkvKr1/Is=) 3: D065D2A0A105660C70D0A89385A33A61750ED7E8.crl (hash: NXnSVNancGThYcKdHDnVZm1d7K2Xw2gwmQejQv7A06M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.crl rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D065D2A0A105660C70D0A89385A33A61750ED7E8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 03 May 2025 21:14:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:7f:d0:bb:76:a9:c1:ea:dc:5d:5b:ad:05:dd:f6:b9:b2:18:3c:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D065D2A0A105660C70D0A89385A33A61750ED7E8 Validity Not Before: Apr 30 13:17:16 2025 GMT Not After : May 3 21:14:16 2025 GMT Subject: CN=7E893A03657D11F9D3930D9CFDF5DF21DF30B64C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:aa:04:25:97:ca:e2:dc:84:e1:6c:3a:3e:9e: be:ad:0f:15:67:dc:b2:ad:57:81:f5:46:37:5b:36: 72:da:32:e2:d4:88:27:52:a9:97:99:b5:83:94:a9: df:46:81:4b:a7:c9:ee:69:87:6b:db:a8:8a:4e:83: da:96:f0:a4:69:ce:0e:9d:d3:01:b6:19:b8:0f:0c: 6b:92:6f:c5:a4:54:37:84:ab:c3:84:cf:11:f9:b1: 20:99:e4:ee:f1:56:80:b3:b0:28:c8:8e:32:3a:40: 6f:2f:4c:c8:ee:b0:0b:a5:12:ec:19:90:3b:44:f7: f7:d1:cc:7f:0d:d3:ba:24:17:ec:6c:cd:8e:92:ca: 71:c7:3c:3a:e8:65:22:b9:b6:ec:04:38:1d:10:be: 97:47:10:19:b6:c3:55:eb:f4:cf:cc:96:6b:8e:a5: dd:56:1f:76:da:b8:4e:3e:d2:9a:61:5b:74:aa:25: 6c:30:07:9c:03:9c:30:8a:83:cd:54:4b:5a:37:89: 92:49:0e:69:5c:96:6c:29:4a:ca:bc:22:78:86:d2: 9b:d7:7d:48:86:43:8e:8a:11:94:f4:fa:e8:f0:45: 73:95:55:35:b7:33:17:26:a8:39:44:fd:27:32:ce: 6b:e5:7e:74:58:b4:7f:a7:17:e1:e7:fd:3b:7c:54: 58:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:89:3A:03:65:7D:11:F9:D3:93:0D:9C:FD:F5:DF:21:DF:30:B6:4C X509v3 Authority Key Identifier: keyid:D0:65:D2:A0:A1:05:66:0C:70:D0:A8:93:85:A3:3A:61:75:0E:D7:E8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D065D2A0A105660C70D0A89385A33A61750ED7E8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0ba97ef-7bc8-45b8-82ab-f85533caedf4/0/D065D2A0A105660C70D0A89385A33A61750ED7E8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:7e:e5:91:fd:bb:97:af:fb:19:1f:09:9d:25:ae:dc:fb:31: 83:a8:b0:51:34:d2:24:9a:ac:42:d6:da:15:8e:7a:9d:5a:c1: 59:29:c9:95:62:a6:70:2c:b1:bb:ba:63:30:1f:be:83:f3:93: d0:f9:0c:39:48:69:33:51:21:20:5d:e2:2d:95:38:79:56:94: 34:6c:29:90:47:48:20:ee:ba:c7:1f:3f:1a:4a:6a:ae:78:89: 6e:04:4e:61:cb:58:ea:e5:ea:b3:d7:b6:3d:fe:92:42:9f:6e: ff:fe:6e:76:0d:c2:77:73:ab:4d:12:f8:14:3f:74:e8:80:bc: 01:a3:55:14:65:ba:17:d0:d9:86:89:22:cb:f6:6b:1d:82:c3: c4:34:f4:17:e5:c5:cb:0a:0f:41:2e:a6:d7:d6:bf:60:83:c8: c6:f3:ca:91:7f:49:d5:59:67:34:68:eb:e3:1f:80:b7:1e:82: 0c:a8:f6:d8:d9:b8:cd:0c:4f:c0:7f:8b:6a:16:ed:d8:e1:7b: 36:08:cb:97:d3:4d:ab:1a:c1:d7:f9:46:cf:ea:05:3c:dd:cf: 75:c6:02:72:9c:e0:aa:d6:38:3f:1a:03:18:c1:86:e0:2c:5d: b1:4b:d0:1a:05:2e:d8:1a:bc:0c:10:7a:d8:ec:73:55:50:87: 2f:96:d3:28 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQX/Qu3apwercXVutBd32ubIYPEIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDA2NUQyQTBBMTA1NjYwQzcwRDBBODkzODVBMzNBNjE3 NTBFRDdFODAeFw0yNTA0MzAxMzE3MTZaFw0yNTA1MDMyMTE0MTZaMDMxMTAvBgNV BAMTKDdFODkzQTAzNjU3RDExRjlEMzkzMEQ5Q0ZERjVERjIxREYzMEI2NEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDaqgQll8ri3IThbDo+nr6tDxVn 3LKtV4H1RjdbNnLaMuLUiCdSqZeZtYOUqd9GgUunye5ph2vbqIpOg9qW8KRpzg6d 0wG2GbgPDGuSb8WkVDeEq8OEzxH5sSCZ5O7xVoCzsCjIjjI6QG8vTMjusAulEuwZ kDtE9/fRzH8N07okF+xszY6SynHHPDroZSK5tuwEOB0QvpdHEBm2w1Xr9M/MlmuO pd1WH3bauE4+0pphW3SqJWwwB5wDnDCKg81US1o3iZJJDmlclmwpSsq8IniG0pvX fUiGQ46KEZT0+ujwRXOVVTW3MxcmqDlE/ScyzmvlfnRYtH+nF+Hn/Tt8VFiRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfok6A2V9EfnTkw2c/fXfId8wtkwwHwYDVR0j BBgwFoAU0GXSoKEFZgxw0KiThaM6YXUO1+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MGJhOTdlZi03YmM4LTQ1YjgtODJhYi1mODU1MzNjYWVkZjQvMC9EMDY1RDJBMEEx MDU2NjBDNzBEMEE4OTM4NUEzM0E2MTc1MEVEN0U4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDA2NUQyQTBBMTA1NjYwQzcwRDBBODkzODVBMzNBNjE3NTBF RDdFOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTBiYTk3ZWYtN2JjOC00NWI4LTgy YWItZjg1NTMzY2FlZGY0LzAvRDA2NUQyQTBBMTA1NjYwQzcwRDBBODkzODVBMzNB NjE3NTBFRDdFOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABF+5ZH9u5ev+xkfCZ0lrtz7MYOosFE00iSa rELW2hWOep1awVkpyZVipnAssbu6YzAfvoPzk9D5DDlIaTNRISBd4i2VOHlWlDRs KZBHSCDuuscfPxpKaq54iW4ETmHLWOrl6rPXtj3+kkKfbv/+bnYNwndzq00S+BQ/ dOiAvAGjVRRluhfQ2YaJIsv2ax2Cw8Q09BflxcsKD0EuptfWv2CDyMbzypF/SdVZ ZzRo6+MfgLceggyo9tjZuM0MT8B/i2oW7djhezYIy5fTTasawdf5Rs/qBTzdz3XG AnKc4KrWOD8aAxjBhuAsXbFL0BoFLtgavAwQetjsc1VQhy+W0yg= -----END CERTIFICATE-----Generated at Thu May 1 17:02:48 2025 by rpki-client