$ rpki-client -vvf repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.mft File: DCD5207AC33E109E31052BBB7F811DBF6DA180BB.mft (raw, json) Hash identifier: MhyS6M8smXKrL0g1qphYfsGUyN+NK3UZwu4obcHB5w4= Subject key identifier: EF:77:25:58:30:90:69:C1:39:6F:0E:9A:01:20:45:6F:3D:E3:44:38 Authority key identifier: DC:D5:20:7A:C3:3E:10:9E:31:05:2B:BB:7F:81:1D:BF:6D:A1:80:BB Certificate issuer: /CN=DCD5207AC33E109E31052BBB7F811DBF6DA180BB Certificate serial: 4238DF17132A78036C2F8907B7B5812B97C13658 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.mft Manifest number: 31 Signing time: Fri 25 Apr 2025 01:41:52 +0000 Manifest this update: Fri 25 Apr 2025 01:36:52 +0000 Manifest next update: Mon 28 Apr 2025 07:41:52 +0000 Files and hashes: 1: 3136302e32322e3130312e302f32342d3234203d3e20313532383039.roa (hash: mizXQiZMhSS2dg4DmWjoCSbZiybtKsfGNPxNOZ0yF9I=) 2: DCD5207AC33E109E31052BBB7F811DBF6DA180BB.crl (hash: lXPJkGapSV4DNwtYp3x28nd3Lf7MqD515CJbbqP0G+s=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.crl rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Apr 2025 19:57:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:38:df:17:13:2a:78:03:6c:2f:89:07:b7:b5:81:2b:97:c1:36:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCD5207AC33E109E31052BBB7F811DBF6DA180BB Validity Not Before: Apr 25 01:36:52 2025 GMT Not After : Apr 28 07:41:52 2025 GMT Subject: CN=EF772558309069C1396F0E9A0120456F3DE34438 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:46:0b:24:29:53:28:68:73:cb:d8:b3:2f:10: 64:1f:57:5f:ee:47:86:c4:f1:33:43:fc:22:b6:f5: eb:9e:11:08:41:38:fa:d5:1f:8f:03:43:ac:48:9d: ab:7e:e4:b4:b4:13:a8:d8:8d:37:25:6e:ce:05:2b: 72:11:60:5a:6a:1f:54:bf:df:61:3b:d5:24:9a:46: a8:60:b8:0f:8d:63:ea:7e:47:b1:3d:0e:7e:75:f0: bd:80:5a:8f:7f:1d:ce:0f:4e:68:94:53:18:d9:79: ae:32:de:a1:9e:16:27:fd:f6:28:6c:fd:d8:4e:3f: b5:19:7c:cf:71:e3:e2:f0:08:8d:0e:b6:80:96:9d: 06:c9:36:c2:9b:04:86:83:75:98:13:f9:1e:b9:4d: 1a:2b:e8:f4:1d:2c:41:50:19:60:d6:02:62:a8:b5: 55:26:72:d4:93:e6:aa:98:e9:7e:8c:e6:c9:53:e5: cc:d7:bc:ca:cd:96:17:60:0a:4a:b9:5f:ac:7e:0a: 4b:ee:71:30:43:8b:56:ba:fb:cb:05:bc:f6:b2:8d: 72:82:d5:8d:3b:2c:4b:d2:3a:2e:7f:aa:0e:f0:2f: a8:89:d4:5b:6d:51:66:56:f0:6d:d9:c4:b1:df:ce: b5:08:35:74:95:5c:a5:73:82:bb:85:39:33:ec:42: 4e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:77:25:58:30:90:69:C1:39:6F:0E:9A:01:20:45:6F:3D:E3:44:38 X509v3 Authority Key Identifier: keyid:DC:D5:20:7A:C3:3E:10:9E:31:05:2B:BB:7F:81:1D:BF:6D:A1:80:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ea:b4:9b:8e:0f:7b:bf:02:c5:43:9b:d7:91:ec:b2:88:1d:ec: 30:75:6f:c2:2e:06:79:3a:b0:d2:7c:b5:4f:cd:df:ae:28:1d: 70:55:3e:d8:55:09:14:0b:92:e6:54:34:fc:0d:fe:5e:34:eb: 1f:32:30:ef:c1:ed:01:b7:01:f1:8b:fd:5f:66:53:2d:01:6e: 6f:10:56:03:2e:2a:c9:0d:9e:33:ca:7a:d8:af:28:dc:a2:15: 03:42:ab:d2:f0:5f:21:c8:42:60:e9:39:59:42:1f:9d:49:cc: ff:20:f4:b6:85:11:7d:e0:a1:5c:ce:d6:9b:e2:40:22:32:22: a2:b0:da:f3:d3:19:f5:7c:d9:3f:32:3a:6e:ec:59:09:99:a3: c9:20:bd:72:35:fa:24:4c:c8:da:1f:b0:21:ae:db:e7:02:69: 66:5a:12:0d:71:66:69:8a:a7:e4:d9:db:4c:71:c7:54:da:89: 40:ba:78:8d:e5:fd:d2:5b:b0:dc:10:71:64:2a:70:78:fe:8a: b5:82:c9:06:b5:9a:35:52:e0:0f:24:ea:10:e5:69:a0:92:44: 5d:96:46:55:63:9b:9b:d5:e2:c8:f2:df:56:be:e0:f2:97:8f: a0:d1:6b:07:a3:d2:64:17:2c:70:20:ca:ff:37:e1:5b:e1:e0: 0d:44:66:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQjjfFxMqeANsL4kHt7WBK5fBNlgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENENTIwN0FDMzNFMTA5RTMxMDUyQkJCN0Y4MTFEQkY2 REExODBCQjAeFw0yNTA0MjUwMTM2NTJaFw0yNTA0MjgwNzQxNTJaMDMxMTAvBgNV BAMTKEVGNzcyNTU4MzA5MDY5QzEzOTZGMEU5QTAxMjA0NTZGM0RFMzQ0MzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbRgskKVMoaHPL2LMvEGQfV1/u R4bE8TND/CK29eueEQhBOPrVH48DQ6xInat+5LS0E6jYjTclbs4FK3IRYFpqH1S/ 32E71SSaRqhguA+NY+p+R7E9Dn518L2AWo9/Hc4PTmiUUxjZea4y3qGeFif99ihs /dhOP7UZfM9x4+LwCI0OtoCWnQbJNsKbBIaDdZgT+R65TRor6PQdLEFQGWDWAmKo tVUmctST5qqY6X6M5slT5czXvMrNlhdgCkq5X6x+CkvucTBDi1a6+8sFvPayjXKC 1Y07LEvSOi5/qg7wL6iJ1FttUWZW8G3ZxLHfzrUINXSVXKVzgruFOTPsQk7rAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU73clWDCQacE5bw6aASBFbz3jRDgwHwYDVR0j BBgwFoAU3NUgesM+EJ4xBSu7f4Edv22hgLswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDhlZjExOS03ZGRmLTQ1ZTUtODYzNC0zOGI3NzI1OGNiY2MvMC9EQ0Q1MjA3QUMz M0UxMDlFMzEwNTJCQkI3RjgxMURCRjZEQTE4MEJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRENENTIwN0FDMzNFMTA5RTMxMDUyQkJCN0Y4MTFEQkY2REEx ODBCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ4ZWYxMTktN2RkZi00NWU1LTg2 MzQtMzhiNzcyNThjYmNjLzAvRENENTIwN0FDMzNFMTA5RTMxMDUyQkJCN0Y4MTFE QkY2REExODBCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOq0m44Pe78CxUOb15Hssogd7DB1b8IuBnk6 sNJ8tU/N364oHXBVPthVCRQLkuZUNPwN/l406x8yMO/B7QG3AfGL/V9mUy0Bbm8Q VgMuKskNnjPKetivKNyiFQNCq9LwXyHIQmDpOVlCH51JzP8g9LaFEX3goVzO1pvi QCIyIqKw2vPTGfV82T8yOm7sWQmZo8kgvXI1+iRMyNofsCGu2+cCaWZaEg1xZmmK p+TZ20xxx1TaiUC6eI3l/dJbsNwQcWQqcHj+irWCyQa1mjVS4A8k6hDlaaCSRF2W RlVjm5vV4sjy31a+4PKXj6DRawej0mQXLHAgyv834Vvh4A1EZh0= -----END CERTIFICATE-----Generated at Fri Apr 25 06:02:22 2025 by rpki-client on console.sobornost.net