$ rpki-client -vvf repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft File: DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft (raw, json) Hash identifier: TM8G2CiBKowjfNbYvO889D1MPlwcKEXMqoihOaPUC98= Subject key identifier: D3:13:C4:CE:7A:65:DA:22:5A:06:C4:3C:52:3E:91:52:45:93:F2:53 Authority key identifier: DB:F7:1D:6F:8C:24:BD:B8:0D:69:2B:E8:6D:6F:7A:D3:95:1B:6C:EE Certificate issuer: /CN=DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE Certificate serial: 115346310401D70AC8DDADEFD720B5BDC0C216AD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft Manifest number: 45 Signing time: Wed 04 Jun 2025 07:11:45 +0000 Manifest this update: Wed 04 Jun 2025 07:06:45 +0000 Manifest next update: Sat 07 Jun 2025 14:26:45 +0000 Files and hashes: 1: DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.crl (hash: Bi2BeOfmUi0Kfmjj7XRrUAF/Ky/jNAsgybV76JhjJ9o=) 2: 323030313a6466353a323730303a3a2f34382d3438203d3e20313337333631.roa (hash: lAwEnKyw5OHxCplSawk5HVEotvU+5HwJxxtoSxrjtdo=) 3: 3130332e3131352e3130342e302f32342d3234203d3e20313337333631.roa (hash: 6mL7Avaab4glDlpMGnON/Jhq6VFk/42559+PiNPAoXE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.crl rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 14:26:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:53:46:31:04:01:d7:0a:c8:dd:ad:ef:d7:20:b5:bd:c0:c2:16:ad Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE Validity Not Before: Jun 4 07:06:45 2025 GMT Not After : Jun 7 14:26:45 2025 GMT Subject: CN=D313C4CE7A65DA225A06C43C523E91524593F253 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:af:e2:77:e3:e3:dd:81:d6:e5:b2:e8:fb:4a: 63:b6:fc:d7:b4:4c:2e:47:f3:34:2f:56:98:6f:39: 23:f0:27:fb:15:13:b6:49:ac:b9:76:3b:55:a9:b9: f1:30:15:61:31:d5:3c:a4:85:1e:8c:a9:fd:12:0b: b0:d8:76:65:a5:93:11:b3:09:51:ed:1d:0e:81:73: f8:a1:a7:71:be:d7:4e:b2:c0:62:ae:7b:db:16:00: d9:d8:f9:e2:d5:57:28:ae:bf:3a:9a:29:dd:ae:56: 4f:a6:58:5a:0f:82:74:41:20:55:fd:e0:15:a7:24: d1:da:f2:bf:84:fb:79:01:9e:13:f8:07:b1:da:d1: dd:34:42:e7:b1:7f:1d:40:a2:a0:3c:24:cf:6d:67: b5:89:d1:14:f9:77:39:a8:09:cb:a0:30:83:54:ea: ea:f3:5f:c7:61:64:b7:b7:4c:a1:f2:03:94:6b:94: 73:fa:60:8c:d3:f7:fd:09:58:ac:3a:69:0d:dd:82: 9c:75:f7:11:26:6e:ee:5f:4c:27:a1:ab:bb:72:de: e5:61:9b:b2:3f:f5:62:54:43:52:ff:df:e6:26:a6: f3:28:00:70:e7:ea:68:54:ac:ef:22:52:26:2f:db: 10:40:fe:d0:f6:b5:e7:f8:de:e0:bc:ba:2b:b3:0e: 0f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:13:C4:CE:7A:65:DA:22:5A:06:C4:3C:52:3E:91:52:45:93:F2:53 X509v3 Authority Key Identifier: keyid:DB:F7:1D:6F:8C:24:BD:B8:0D:69:2B:E8:6D:6F:7A:D3:95:1B:6C:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:0d:b9:a0:4f:2a:fc:95:fc:47:11:4a:2f:b1:e8:33:58:ea: 85:87:44:7d:f8:6f:2d:f4:44:29:b2:04:eb:52:6c:ee:9b:01: e7:69:bc:9c:58:60:e7:19:75:d1:a6:01:0a:0c:c4:a3:3d:53: c3:f3:f8:e8:0c:24:57:b3:79:df:f7:e9:ec:de:0f:fa:ed:61: 31:0d:4b:49:c3:9f:85:1c:4a:29:a9:e1:73:a9:1a:2f:17:7a: 32:23:30:0c:d2:1f:c4:3a:96:f7:5d:be:9d:5d:cf:da:70:92: 30:64:89:c4:b8:8d:7b:4b:15:c0:e6:62:00:c7:bd:1e:40:f6: da:c3:be:74:64:fc:0c:9c:7a:84:9e:9f:27:c1:2d:3c:e2:0d: c9:83:d8:47:78:0d:09:30:46:9f:01:c6:7a:c8:7c:33:22:61: fa:78:26:04:aa:3a:09:27:de:95:4c:9f:6e:f2:f3:44:4d:3f: b4:10:55:e9:da:f3:9d:96:0e:7e:1b:d0:f8:31:b2:ca:87:e5: 0a:40:53:6d:8f:e4:f0:89:36:50:fa:fb:d3:7f:36:53:5b:f0: 76:37:41:1a:44:d5:68:eb:c4:f0:76:4f:2f:8f:c7:6f:59:13: 74:88:8f:c2:8e:51:3b:38:0f:e1:d3:58:51:5b:78:b4:3d:20: 51:08:21:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEVNGMQQB1wrI3a3v1yC1vcDCFq0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJGNzFENkY4QzI0QkRCODBENjkyQkU4NkQ2RjdBRDM5 NTFCNkNFRTAeFw0yNTA2MDQwNzA2NDVaFw0yNTA2MDcxNDI2NDVaMDMxMTAvBgNV BAMTKEQzMTNDNENFN0E2NURBMjI1QTA2QzQzQzUyM0U5MTUyNDU5M0YyNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4r+J34+Pdgdblsuj7SmO2/Ne0 TC5H8zQvVphvOSPwJ/sVE7ZJrLl2O1WpufEwFWEx1TykhR6Mqf0SC7DYdmWlkxGz CVHtHQ6Bc/ihp3G+106ywGKue9sWANnY+eLVVyiuvzqaKd2uVk+mWFoPgnRBIFX9 4BWnJNHa8r+E+3kBnhP4B7Ha0d00Quexfx1AoqA8JM9tZ7WJ0RT5dzmoCcugMINU 6urzX8dhZLe3TKHyA5RrlHP6YIzT9/0JWKw6aQ3dgpx19xEmbu5fTCehq7ty3uVh m7I/9WJUQ1L/3+YmpvMoAHDn6mhUrO8iUiYv2xBA/tD2tef43uC8uiuzDg9NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0xPEznpl2iJaBsQ8Uj6RUkWT8lMwHwYDVR0j BBgwFoAU2/cdb4wkvbgNaSvobW9605UbbO4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MzJjYWUzZi1iMzI5LTQ0MWItOTdmYy01YmI5ZmNjMDUxZDIvMC9EQkY3MUQ2RjhD MjRCREI4MEQ2OTJCRTg2RDZGN0FEMzk1MUI2Q0VFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREJGNzFENkY4QzI0QkRCODBENjkyQkU4NkQ2RjdBRDM5NTFC NkNFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDMyY2FlM2YtYjMyOS00NDFiLTk3 ZmMtNWJiOWZjYzA1MWQyLzAvREJGNzFENkY4QzI0QkRCODBENjkyQkU4NkQ2RjdB RDM5NTFCNkNFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEINuaBPKvyV/EcRSi+x6DNY6oWHRH34by30 RCmyBOtSbO6bAedpvJxYYOcZddGmAQoMxKM9U8Pz+OgMJFezed/36ezeD/rtYTEN S0nDn4UcSimp4XOpGi8XejIjMAzSH8Q6lvddvp1dz9pwkjBkicS4jXtLFcDmYgDH vR5A9trDvnRk/AyceoSenyfBLTziDcmD2Ed4DQkwRp8BxnrIfDMiYfp4JgSqOgkn 3pVMn27y80RNP7QQVena852WDn4b0PgxssqH5QpAU22P5PCJNlD6+9N/NlNb8HY3 QRpE1WjrxPB2Ty+Px29ZE3SIj8KOUTs4D+HTWFFbeLQ9IFEIIUA= -----END CERTIFICATE-----Generated at Thu Jun 5 18:11:47 2025 by rpki-client