$ rpki-client -vvf repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft File: DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft (raw, json) Hash identifier: XAR4XCKoFedJocAnXDAWJNm5mAvMKpZddDFAfr3PvU0= Subject key identifier: 07:C0:3E:B4:0D:CA:79:FD:FB:ED:CC:F9:B2:29:58:5F:CC:67:45:FC Authority key identifier: DE:23:EE:57:18:0D:61:B3:92:DC:88:85:9F:E6:54:C7:A8:AC:F1:FF Certificate issuer: /CN=DE23EE57180D61B392DC88859FE654C7A8ACF1FF Certificate serial: 2CCFDFAADE557B3BF4092C2DE34A7D953110195A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft Manifest number: 015F Signing time: Tue 03 Jun 2025 16:33:57 +0000 Manifest this update: Tue 03 Jun 2025 16:28:57 +0000 Manifest next update: Fri 06 Jun 2025 19:46:57 +0000 Files and hashes: 1: 3130332e3139312e3137312e302f32342d3234203d3e20313439393333.roa (hash: kEwMr1mIRZGwTHrXfoM+k+XYrDWcsMsreXoEQMVJdUg=) 2: DE23EE57180D61B392DC88859FE654C7A8ACF1FF.crl (hash: BVSfQlZhCD+ETJN81wQ0En7d6zv9vtN6sOPWQbxBNUk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.crl rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 19:46:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:cf:df:aa:de:55:7b:3b:f4:09:2c:2d:e3:4a:7d:95:31:10:19:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE23EE57180D61B392DC88859FE654C7A8ACF1FF Validity Not Before: Jun 3 16:28:57 2025 GMT Not After : Jun 6 19:46:57 2025 GMT Subject: CN=07C03EB40DCA79FDFBEDCCF9B229585FCC6745FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:b5:71:84:dc:97:de:be:37:bd:08:a2:b1:74: a2:14:c4:59:a7:5d:a0:62:3e:05:2d:35:ba:aa:6d: 36:48:86:f6:37:e6:a0:9d:7b:5f:7d:37:35:cf:60: 00:07:93:58:3b:40:9a:1e:75:ad:27:48:37:46:3c: 9b:a1:88:e1:43:04:50:b9:a5:2e:4a:4d:8e:74:27: 7e:06:44:16:15:e7:0b:51:3c:a4:7d:7c:82:f0:36: a3:27:b0:eb:a7:02:fd:ee:e6:b8:4e:a3:9c:6b:62: 7b:92:07:77:a0:0f:f0:b5:d2:91:4e:1a:6a:d3:95: 15:04:81:e4:fd:d7:40:b1:e1:56:95:db:0b:27:e5: 25:4d:4f:90:b6:05:b6:6d:3e:5d:00:e7:fe:4c:13: d8:95:bc:0d:56:c4:fd:4f:5e:4a:00:c3:df:f7:6d: 42:33:04:97:c9:c2:d6:fd:94:96:a7:44:d7:b0:a4: 04:e2:80:12:39:fd:eb:95:62:94:2b:72:d1:f8:3f: 28:3b:4b:ef:cf:13:87:c0:5f:c7:85:ed:9d:e6:f0: c6:5b:94:f0:92:07:90:e3:c1:38:7a:5b:ed:d8:a2: 6b:ef:64:de:38:54:35:f3:18:eb:e8:46:4f:2e:6b: 39:fd:9e:3d:5a:48:b2:2f:a9:c4:1f:b5:9b:a7:56: f1:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:C0:3E:B4:0D:CA:79:FD:FB:ED:CC:F9:B2:29:58:5F:CC:67:45:FC X509v3 Authority Key Identifier: keyid:DE:23:EE:57:18:0D:61:B3:92:DC:88:85:9F:E6:54:C7:A8:AC:F1:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:75:3d:11:92:96:d6:04:82:0b:98:0d:94:6d:ca:77:a6:4c: 6e:d6:c9:08:85:75:37:66:15:c1:14:e8:b5:b5:b5:7e:00:c5: 96:cf:6e:e7:5d:fc:19:51:40:02:13:15:75:5c:0f:d1:dd:6b: 91:63:aa:f2:ac:86:d1:f9:4b:c3:1a:54:f3:6b:e3:f8:8f:33: 4b:15:c5:21:15:e3:c0:33:c3:8f:1e:33:aa:8b:f3:78:52:f7: 10:ed:65:cd:84:6a:bf:82:e6:eb:f6:f8:be:67:6e:30:45:7b: 0a:10:c1:ee:24:41:37:28:ff:61:a7:aa:64:21:e3:a1:ff:25: 2e:5f:02:93:a4:37:f0:b4:42:2f:db:25:98:1a:4e:29:79:a0: 8a:03:1c:4b:2e:86:64:21:90:54:f0:62:64:f8:08:cc:d0:15: 3f:f0:af:eb:06:c1:1f:30:fe:84:97:12:e0:71:cb:88:e0:66: 8e:b0:33:7a:59:ca:97:a2:3c:7a:68:b4:dc:df:d2:8d:25:d2: b6:63:81:30:de:0e:80:5c:e8:2c:97:ae:43:23:25:ec:75:b1: 8d:ae:03:5c:c8:87:7b:9d:82:81:60:bc:12:e3:5a:15:72:33: 37:f1:9f:ae:92:29:e1:1f:45:a5:a8:e3:87:0d:3b:3e:9a:37: 7a:2a:c1:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULM/fqt5Vezv0CSwt40p9lTEQGVowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUyM0VFNTcxODBENjFCMzkyREM4ODg1OUZFNjU0QzdB OEFDRjFGRjAeFw0yNTA2MDMxNjI4NTdaFw0yNTA2MDYxOTQ2NTdaMDMxMTAvBgNV BAMTKDA3QzAzRUI0MERDQTc5RkRGQkVEQ0NGOUIyMjk1ODVGQ0M2NzQ1RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBtXGE3Jfevje9CKKxdKIUxFmn XaBiPgUtNbqqbTZIhvY35qCde199NzXPYAAHk1g7QJoeda0nSDdGPJuhiOFDBFC5 pS5KTY50J34GRBYV5wtRPKR9fILwNqMnsOunAv3u5rhOo5xrYnuSB3egD/C10pFO GmrTlRUEgeT910Cx4VaV2wsn5SVNT5C2BbZtPl0A5/5ME9iVvA1WxP1PXkoAw9/3 bUIzBJfJwtb9lJanRNewpATigBI5/euVYpQrctH4Pyg7S+/PE4fAX8eF7Z3m8MZb lPCSB5DjwTh6W+3YomvvZN44VDXzGOvoRk8uazn9nj1aSLIvqcQftZunVvFzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUB8A+tA3Kef377cz5silYX8xnRfwwHwYDVR0j BBgwFoAU3iPuVxgNYbOS3IiFn+ZUx6is8f8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NWMxZTJmMy00ZmJkLTQ0YmItODNmMC1iYjVhZmU2NDU3NWUvMC9ERTIzRUU1NzE4 MEQ2MUIzOTJEQzg4ODU5RkU2NTRDN0E4QUNGMUZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREUyM0VFNTcxODBENjFCMzkyREM4ODg1OUZFNjU0QzdBOEFD RjFGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDVjMWUyZjMtNGZiZC00NGJiLTgz ZjAtYmI1YWZlNjQ1NzVlLzAvREUyM0VFNTcxODBENjFCMzkyREM4ODg1OUZFNjU0 QzdBOEFDRjFGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAN1PRGSltYEgguYDZRtynemTG7WyQiFdTdm FcEU6LW1tX4AxZbPbudd/BlRQAITFXVcD9Hda5FjqvKshtH5S8MaVPNr4/iPM0sV xSEV48Azw48eM6qL83hS9xDtZc2Ear+C5uv2+L5nbjBFewoQwe4kQTco/2GnqmQh 46H/JS5fApOkN/C0Qi/bJZgaTil5oIoDHEsuhmQhkFTwYmT4CMzQFT/wr+sGwR8w /oSXEuBxy4jgZo6wM3pZypeiPHpotNzf0o0l0rZjgTDeDoBc6CyXrkMjJex1sY2u A1zIh3udgoFgvBLjWhVyMzfxn66SKeEfRaWo44cNOz6aN3oqwVA= -----END CERTIFICATE-----Generated at Thu Jun 5 18:41:05 2025 by rpki-client