$ rpki-client -vvf repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.mft File: DB03D7B542C60D3D72565734C86589420DF070A0.mft (raw, json) Hash identifier: GaMN1qpWarl9X+VP4bCYBECPZ/bEoYaMJFAgru9CLSU= Subject key identifier: EF:4A:32:3F:58:7E:8B:AC:04:E0:55:1D:DC:6F:D7:FC:02:54:0C:74 Authority key identifier: DB:03:D7:B5:42:C6:0D:3D:72:56:57:34:C8:65:89:42:0D:F0:70:A0 Certificate issuer: /CN=DB03D7B542C60D3D72565734C86589420DF070A0 Certificate serial: 1A4A62434AC77F9BA7406B1CCF96561E46E44BAE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB03D7B542C60D3D72565734C86589420DF070A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.mft Manifest number: 01F3 Signing time: Tue 03 Jun 2025 12:53:32 +0000 Manifest this update: Tue 03 Jun 2025 12:48:32 +0000 Manifest next update: Fri 06 Jun 2025 21:07:32 +0000 Files and hashes: 1: DB03D7B542C60D3D72565734C86589420DF070A0.crl (hash: oHTVsAhfxHbUw6tQ9HTCdSUkQ0Jn8rM3ljX89XqO41s=) 2: 3130332e3138362e3231322e302f32332d3234203d3e20313439373134.roa (hash: qTxbUW36PI+ML7M9h6pieAAtdA4D+wz75UuUpAqL/GM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.crl rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB03D7B542C60D3D72565734C86589420DF070A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:07:32 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:4a:62:43:4a:c7:7f:9b:a7:40:6b:1c:cf:96:56:1e:46:e4:4b:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB03D7B542C60D3D72565734C86589420DF070A0 Validity Not Before: Jun 3 12:48:32 2025 GMT Not After : Jun 6 21:07:32 2025 GMT Subject: CN=EF4A323F587E8BAC04E0551DDC6FD7FC02540C74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:22:83:eb:35:a7:78:81:c6:54:8e:9a:46:fc: d0:bb:da:48:69:91:07:fb:f2:0c:16:6c:38:11:de: 77:e4:bd:64:ad:0d:8a:eb:eb:a5:89:69:1c:36:19: 19:d0:4f:2c:d1:62:33:1c:c3:52:8d:9d:88:42:c7: 67:43:87:66:00:2b:fa:86:fc:c1:1d:fa:28:9a:bb: c1:3b:f3:48:7f:e4:c5:4a:77:a9:4b:7f:c9:dd:69: 72:bd:2a:19:a8:d6:3d:63:11:88:a9:42:35:56:84: 1a:3f:0b:c5:72:61:e3:e6:a1:7f:da:89:6e:ed:4c: b0:47:43:b2:07:53:94:e2:3e:7c:62:22:ed:64:d6: e7:69:3a:5c:0b:13:e4:f1:d1:7e:7e:4f:e4:af:6b: 41:cd:39:d1:f9:06:87:30:42:1c:69:fb:77:6e:c2: 41:a5:b1:fd:d1:ce:c9:3d:f0:0b:bd:55:96:6c:33: cf:c0:35:0b:c5:ab:22:89:a8:c5:d4:3b:66:ec:b5: 85:be:95:ba:0b:f4:78:bb:ea:7d:98:28:7c:6d:b5: 60:cc:87:ad:00:71:45:38:40:b8:a2:57:81:d6:64: 1d:c0:1f:a5:33:b9:2d:86:86:03:39:d8:6a:03:c9: 44:92:bf:7f:e2:14:38:63:c4:e6:d8:6f:6f:00:18: 9d:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EF:4A:32:3F:58:7E:8B:AC:04:E0:55:1D:DC:6F:D7:FC:02:54:0C:74 X509v3 Authority Key Identifier: keyid:DB:03:D7:B5:42:C6:0D:3D:72:56:57:34:C8:65:89:42:0D:F0:70:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB03D7B542C60D3D72565734C86589420DF070A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:a2:ac:dc:2e:59:99:a3:8c:f3:74:ca:23:86:24:73:7d:e0: 6f:2c:01:ec:c9:64:74:c5:0f:75:05:d8:0c:e4:d6:43:06:01: ed:7e:1d:23:0f:e0:88:23:33:3b:36:00:55:b0:8a:ec:48:8b: 44:9f:3e:05:20:9e:76:e5:32:b3:ed:20:4c:73:cf:87:fa:6b: 0c:9b:ee:c5:04:43:4d:98:d7:1e:8d:bf:1f:06:e6:df:98:bc: 12:98:31:26:b0:92:bd:af:20:68:c7:ec:af:e5:db:aa:16:7e: c6:23:78:a3:57:e5:c7:a7:67:bf:a9:17:ef:c8:da:de:73:2d: 6e:92:64:d2:ea:c3:e9:0d:99:60:89:2c:8c:ff:a6:34:6e:6e: fc:21:0b:02:7e:25:9f:9e:b3:21:77:63:4a:47:3f:d1:d1:f8: 4b:eb:8c:aa:f8:c5:8d:27:5c:6e:d9:bc:6a:86:68:fc:b7:98: 84:77:eb:50:ec:d4:c3:4c:a4:6e:ce:01:90:db:60:91:fd:3d: 0b:d1:54:1c:bd:c1:e0:63:44:7a:de:a4:04:e8:b4:96:fa:5b: 41:e0:92:8b:37:cb:fe:87:3d:4a:5c:c1:fb:75:94:53:23:78: ad:fd:b3:ea:93:35:23:b9:44:5b:1d:e2:b9:e4:15:93:44:ac: e9:47:2b:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGkpiQ0rHf5unQGscz5ZWHkbkS64wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIwM0Q3QjU0MkM2MEQzRDcyNTY1NzM0Qzg2NTg5NDIw REYwNzBBMDAeFw0yNTA2MDMxMjQ4MzJaFw0yNTA2MDYyMTA3MzJaMDMxMTAvBgNV BAMTKEVGNEEzMjNGNTg3RThCQUMwNEUwNTUxRERDNkZEN0ZDMDI1NDBDNzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFIoPrNad4gcZUjppG/NC72khp kQf78gwWbDgR3nfkvWStDYrr66WJaRw2GRnQTyzRYjMcw1KNnYhCx2dDh2YAK/qG /MEd+iiau8E780h/5MVKd6lLf8ndaXK9Khmo1j1jEYipQjVWhBo/C8VyYePmoX/a iW7tTLBHQ7IHU5TiPnxiIu1k1udpOlwLE+Tx0X5+T+Sva0HNOdH5BocwQhxp+3du wkGlsf3Rzsk98Au9VZZsM8/ANQvFqyKJqMXUO2bstYW+lboL9Hi76n2YKHxttWDM h60AcUU4QLiiV4HWZB3AH6UzuS2GhgM52GoDyUSSv3/iFDhjxObYb28AGJ2dAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU70oyP1h+i6wE4FUd3G/X/AJUDHQwHwYDVR0j BBgwFoAU2wPXtULGDT1yVlc0yGWJQg3wcKAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NGYyODIzNS0wYmE4LTRlMTQtOGI4NS0yOWMzYTRhNzZlYWIvMC9EQjAzRDdCNTQy QzYwRDNENzI1NjU3MzRDODY1ODk0MjBERjA3MEEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREIwM0Q3QjU0MkM2MEQzRDcyNTY1NzM0Qzg2NTg5NDIwREYw NzBBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDRmMjgyMzUtMGJhOC00ZTE0LThi ODUtMjljM2E0YTc2ZWFiLzAvREIwM0Q3QjU0MkM2MEQzRDcyNTY1NzM0Qzg2NTg5 NDIwREYwNzBBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABeirNwuWZmjjPN0yiOGJHN94G8sAezJZHTF D3UF2Azk1kMGAe1+HSMP4IgjMzs2AFWwiuxIi0SfPgUgnnblMrPtIExzz4f6awyb 7sUEQ02Y1x6Nvx8G5t+YvBKYMSawkr2vIGjH7K/l26oWfsYjeKNX5cenZ7+pF+/I 2t5zLW6SZNLqw+kNmWCJLIz/pjRubvwhCwJ+JZ+esyF3Y0pHP9HR+EvrjKr4xY0n XG7ZvGqGaPy3mIR361Ds1MNMpG7OAZDbYJH9PQvRVBy9weBjRHrepATotJb6W0Hg kos3y/6HPUpcwft1lFMjeK39s+qTNSO5RFsd4rnkFZNErOlHK6U= -----END CERTIFICATE-----Generated at Thu Jun 5 18:12:18 2025 by rpki-client