$ rpki-client -vvf repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft File: D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft (raw, json) Hash identifier: utpl1A4DmMU1YVyWrvv6ahNyoOcT1fk8ICRxYbJ6/Vk= Subject key identifier: F2:61:A8:1A:32:D0:30:6A:B4:6C:21:61:F1:10:B3:C8:33:43:65:66 Authority key identifier: D4:68:8B:55:FB:8C:00:F6:AE:C2:84:E5:BC:B8:1E:22:7C:51:2D:ED Certificate issuer: /CN=D4688B55FB8C00F6AEC284E5BCB81E227C512DED Certificate serial: 0676F6CED0886C24E8848B6668CE78EFB6CBE178 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft Manifest number: 43 Signing time: Sat 26 Apr 2025 21:31:20 +0000 Manifest this update: Sat 26 Apr 2025 21:26:20 +0000 Manifest next update: Tue 29 Apr 2025 22:33:20 +0000 Files and hashes: 1: 3135372e32302e3133322e302f32332d3233203d3e20313532343033.roa (hash: 8j1+acCdsJVbTJGY7uHwLQICxHIGJ/neg6B/vDw5bQ0=) 2: 3135372e32302e3133332e302f32342d3234203d3e20313532343033.roa (hash: urPap96O72bhGMnY7pKE8RIJODUHRqXobYzgJgy+CAg=) 3: 3135372e32302e3133322e302f32342d3234203d3e20313532343033.roa (hash: 594wKSAWlPpCaF+0MRLR4aC4V5qJ2eufvq7sqBbmmOc=) 4: D4688B55FB8C00F6AEC284E5BCB81E227C512DED.crl (hash: Lm7KIwZLE1KW+GfXU9Oro0zL73k9VVwptkxpT1IRtE0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.crl rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Apr 2025 03:44:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:76:f6:ce:d0:88:6c:24:e8:84:8b:66:68:ce:78:ef:b6:cb:e1:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D4688B55FB8C00F6AEC284E5BCB81E227C512DED Validity Not Before: Apr 26 21:26:20 2025 GMT Not After : Apr 29 22:33:20 2025 GMT Subject: CN=F261A81A32D0306AB46C2161F110B3C833436566 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:9c:ca:db:aa:02:e9:e2:47:b2:8b:f8:48:72: 62:fe:cb:74:4b:22:59:af:c7:98:11:aa:40:33:b2: 94:4f:ae:b7:ca:ca:7d:e6:0c:32:2e:ef:18:ef:43: 5e:d5:13:ed:93:a5:1e:ca:3f:4a:75:da:aa:54:ac: ad:5c:85:07:14:fa:6c:1c:c7:3c:49:75:7c:72:cd: a6:7f:d7:ac:f2:11:6a:b0:91:70:79:d9:bf:b7:df: e8:66:13:43:cc:7b:1a:8c:43:31:74:3d:3c:63:3b: 8e:7f:57:2f:f8:42:f7:82:13:8f:e9:c9:ec:02:57: 12:ce:1d:9b:d2:29:2f:27:29:69:2e:13:f5:43:5d: 2d:24:23:d1:c3:2d:9a:d7:90:dd:2a:53:c9:a4:ae: f9:3b:69:07:1d:bb:de:05:89:af:72:42:8b:76:7c: 95:76:85:25:11:91:e3:03:5f:a3:4a:5a:1a:9f:f6: 4d:70:4a:3c:f0:b7:a0:6a:5d:78:db:8d:b0:06:67: 91:9a:f6:6a:5b:8a:5c:da:17:d6:94:ac:54:40:f4: a8:ae:a4:db:65:94:d6:a5:84:9a:af:de:ca:34:bb: 3c:9c:b8:9e:3a:1b:06:85:6d:f2:4b:83:53:3b:4a: 8b:48:de:7d:53:bf:0b:e4:48:cb:8d:d9:c0:72:7d: ee:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F2:61:A8:1A:32:D0:30:6A:B4:6C:21:61:F1:10:B3:C8:33:43:65:66 X509v3 Authority Key Identifier: keyid:D4:68:8B:55:FB:8C:00:F6:AE:C2:84:E5:BC:B8:1E:22:7C:51:2D:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e9c15b78-2071-44d1-9a1d-ad6eb09fae08/0/D4688B55FB8C00F6AEC284E5BCB81E227C512DED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:20:79:5c:2d:80:53:90:6f:60:29:ab:6a:85:b8:62:71:ed: 3e:94:7d:1f:33:7b:4e:a4:60:c7:45:bd:60:32:c8:a0:95:3a: 1e:1f:47:aa:64:c0:b1:fe:27:11:7f:13:98:d4:38:b0:43:08: cf:be:2e:56:72:29:53:04:84:cf:d1:5e:cb:98:37:2e:fa:54: 16:f5:22:5e:57:52:18:ce:43:5d:b1:89:fb:0b:21:55:e8:56: 6c:d7:bb:28:e4:0d:8a:cd:fd:ae:a5:5e:5d:89:2f:fd:0e:d5: 8f:4c:09:73:63:e4:5b:f5:88:a2:a0:0a:59:54:5d:fa:f5:91: 3a:30:ff:ad:fd:86:95:20:f6:e9:f2:01:80:0f:05:02:b7:dc: 53:82:6b:fa:d2:57:b4:40:eb:4c:91:06:91:dc:72:d3:42:e2: de:7b:d9:10:11:c9:eb:0d:8c:9e:41:0a:4a:9c:3f:c3:cb:9e: cf:a4:81:dc:95:b2:c3:37:88:14:c0:54:56:c1:e8:33:10:55: 0c:87:a0:c1:fe:c4:05:e9:db:ab:d7:17:53:79:fb:4d:c4:03: 54:1d:a6:52:ba:d7:ee:0c:ed:c4:d4:50:19:58:b2:f4:35:76: 82:69:5a:67:fb:b7:db:5d:d2:92:5a:b2:b8:a2:dd:17:33:ee: 1c:b6:79:98 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBnb2ztCIbCTohItmaM5477bL4XgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDQ2ODhCNTVGQjhDMDBGNkFFQzI4NEU1QkNCODFFMjI3 QzUxMkRFRDAeFw0yNTA0MjYyMTI2MjBaFw0yNTA0MjkyMjMzMjBaMDMxMTAvBgNV BAMTKEYyNjFBODFBMzJEMDMwNkFCNDZDMjE2MUYxMTBCM0M4MzM0MzY1NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3nMrbqgLp4keyi/hIcmL+y3RL Ilmvx5gRqkAzspRPrrfKyn3mDDIu7xjvQ17VE+2TpR7KP0p12qpUrK1chQcU+mwc xzxJdXxyzaZ/16zyEWqwkXB52b+33+hmE0PMexqMQzF0PTxjO45/Vy/4QveCE4/p yewCVxLOHZvSKS8nKWkuE/VDXS0kI9HDLZrXkN0qU8mkrvk7aQcdu94Fia9yQot2 fJV2hSURkeMDX6NKWhqf9k1wSjzwt6BqXXjbjbAGZ5Ga9mpbilzaF9aUrFRA9Kiu pNtllNalhJqv3so0uzycuJ46GwaFbfJLg1M7SotI3n1TvwvkSMuN2cByfe6BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8mGoGjLQMGq0bCFh8RCzyDNDZWYwHwYDVR0j BBgwFoAU1GiLVfuMAPauwoTlvLgeInxRLe0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OWMxNWI3OC0yMDcxLTQ0ZDEtOWExZC1hZDZlYjA5ZmFlMDgvMC9ENDY4OEI1NUZC OEMwMEY2QUVDMjg0RTVCQ0I4MUUyMjdDNTEyREVELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRDQ2ODhCNTVGQjhDMDBGNkFFQzI4NEU1QkNCODFFMjI3QzUx MkRFRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTljMTViNzgtMjA3MS00NGQxLTlh MWQtYWQ2ZWIwOWZhZTA4LzAvRDQ2ODhCNTVGQjhDMDBGNkFFQzI4NEU1QkNCODFF MjI3QzUxMkRFRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGYgeVwtgFOQb2Apq2qFuGJx7T6UfR8ze06k YMdFvWAyyKCVOh4fR6pkwLH+JxF/E5jUOLBDCM++LlZyKVMEhM/RXsuYNy76VBb1 Il5XUhjOQ12xifsLIVXoVmzXuyjkDYrN/a6lXl2JL/0O1Y9MCXNj5Fv1iKKgCllU Xfr1kTow/639hpUg9unyAYAPBQK33FOCa/rSV7RA60yRBpHcctNC4t572RARyesN jJ5BCkqcP8PLns+kgdyVssM3iBTAVFbB6DMQVQyHoMH+xAXp26vXF1N5+03EA1Qd plK61+4M7cTUUBlYsvQ1doJpWmf7t9td0pJasrii3Rcz7hy2eZg= -----END CERTIFICATE-----Generated at Sun Apr 27 12:14:25 2025 by rpki-client