$ rpki-client -vvf repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.mft File: D1E28E396E82778793018513BD084854BE663886.mft (raw, json) Hash identifier: 5wbItNuebglrXigEr2SAv0caIoQ68SJ/8u4KBTiPdzU= Subject key identifier: DF:E5:EE:74:A4:08:59:63:F8:2C:3A:EA:67:9A:B0:1F:0C:98:48:D2 Authority key identifier: D1:E2:8E:39:6E:82:77:87:93:01:85:13:BD:08:48:54:BE:66:38:86 Certificate issuer: /CN=D1E28E396E82778793018513BD084854BE663886 Certificate serial: 1EDE07A838F68409025EAD681A43FF186D1BBC6C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E28E396E82778793018513BD084854BE663886.cer Subject info access: rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.mft Manifest number: 0236 Signing time: Thu 05 Jun 2025 18:40:44 +0000 Manifest this update: Thu 05 Jun 2025 18:35:44 +0000 Manifest next update: Mon 09 Jun 2025 01:39:44 +0000 Files and hashes: 1: 3130332e3136392e3233302e302f32332d3234203d3e2034383030.roa (hash: wAotKcJ/dAT1Ar3MTmbAktiozrzps2/cZFRmdSxY5TY=) 2: D1E28E396E82778793018513BD084854BE663886.crl (hash: 6mRsxiGFhJVGwRqzw1QfEQYfjIxlyJb+AL94OKzlnQI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.crl rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E28E396E82778793018513BD084854BE663886.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 01:39:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:de:07:a8:38:f6:84:09:02:5e:ad:68:1a:43:ff:18:6d:1b:bc:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D1E28E396E82778793018513BD084854BE663886 Validity Not Before: Jun 5 18:35:44 2025 GMT Not After : Jun 9 01:39:44 2025 GMT Subject: CN=DFE5EE74A4085963F82C3AEA679AB01F0C9848D2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:3e:69:f0:2b:ed:92:fc:29:70:aa:75:41:d0: fe:49:6a:43:3b:aa:dc:cd:26:72:8b:65:ee:56:e3: 7d:26:d5:24:fd:4a:4c:07:55:a1:8e:a7:31:39:2f: 65:33:6f:23:23:6f:a5:6e:17:43:b0:3d:d7:c2:aa: 40:e4:f3:74:a8:c5:8c:49:1c:45:78:95:74:7b:37: 32:b1:cd:56:f3:ab:8e:45:5f:18:11:67:41:46:e1: 0a:46:55:0e:e9:32:5d:9f:ab:57:da:1d:1f:a9:0a: ba:72:18:66:43:5d:f8:db:65:9b:e4:59:ad:34:51: 7d:27:e6:0c:1e:65:d8:66:52:a9:3e:c9:aa:e6:a9: 59:0d:ae:b9:bb:aa:9d:0c:b4:0e:29:1e:6b:44:1f: cf:1d:f5:45:c0:e9:1d:c5:44:82:50:56:16:d2:e1: 5c:cf:36:e9:93:63:ee:8e:90:71:26:ec:07:a7:2c: b6:e0:5c:a9:89:3f:a2:34:ea:29:3e:10:5b:ec:77: 4d:7d:f8:ec:a0:08:ba:f1:39:71:04:98:98:40:a0: 2e:73:eb:29:1d:2d:6c:6c:1d:2d:32:9b:ce:91:e6: 17:58:d1:ab:8f:b7:3f:22:c4:45:ad:5e:9c:0a:f3: 7e:0d:34:b9:c0:27:9f:96:7b:6a:ff:d8:44:fb:15: b9:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DF:E5:EE:74:A4:08:59:63:F8:2C:3A:EA:67:9A:B0:1F:0C:98:48:D2 X509v3 Authority Key Identifier: keyid:D1:E2:8E:39:6E:82:77:87:93:01:85:13:BD:08:48:54:BE:66:38:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D1E28E396E82778793018513BD084854BE663886.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/16d61135-75e4-46c6-bddd-fba6834dce41/0/D1E28E396E82778793018513BD084854BE663886.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:b6:b6:00:01:1e:61:22:64:9b:f4:90:48:9d:20:33:dd:26: 2c:df:22:3c:0d:04:46:cf:1c:88:db:05:b1:92:c8:9b:3f:6b: 4d:54:67:61:7a:64:dc:45:24:34:7d:37:b2:0c:1a:e0:8c:a3: ae:1f:37:1a:fd:d2:8a:f3:f9:15:c9:8c:30:3f:b9:f7:8a:b9: 9e:4e:1a:7f:34:96:a7:0c:7c:a9:e8:4a:be:84:e6:b1:27:d6: e3:25:cd:ac:8c:10:ad:45:fb:5a:cc:a5:f9:41:37:3f:d7:66: 54:6c:ac:23:40:7d:0f:20:b2:7b:0b:c6:05:f2:25:7c:8f:66: a7:be:2a:6e:d4:8e:c9:11:15:83:7c:29:ce:90:0e:ff:dc:e6: 54:8e:81:f2:ac:33:ad:c5:26:bf:ff:f0:17:76:eb:b1:f7:54: e1:84:5a:86:f3:91:68:51:ba:ff:5b:1a:be:c4:04:d5:d6:c3: 38:ee:17:45:9d:0a:6c:0b:45:b3:a2:16:79:72:91:e9:f5:1a: bc:41:ce:42:26:b6:89:39:76:e8:c6:78:bf:b8:18:e1:7a:11: 4b:43:6d:13:3b:2b:fe:47:b9:50:12:92:a4:70:28:42:e8:fc: 85:78:36:82:7d:27:64:3e:3f:1d:4b:e3:50:39:15:ac:78:5a: 85:13:97:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHt4HqDj2hAkCXq1oGkP/GG0bvGwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDFFMjhFMzk2RTgyNzc4NzkzMDE4NTEzQkQwODQ4NTRC RTY2Mzg4NjAeFw0yNTA2MDUxODM1NDRaFw0yNTA2MDkwMTM5NDRaMDMxMTAvBgNV BAMTKERGRTVFRTc0QTQwODU5NjNGODJDM0FFQTY3OUFCMDFGMEM5ODQ4RDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvPmnwK+2S/ClwqnVB0P5JakM7 qtzNJnKLZe5W430m1ST9SkwHVaGOpzE5L2UzbyMjb6VuF0OwPdfCqkDk83SoxYxJ HEV4lXR7NzKxzVbzq45FXxgRZ0FG4QpGVQ7pMl2fq1faHR+pCrpyGGZDXfjbZZvk Wa00UX0n5gweZdhmUqk+yarmqVkNrrm7qp0MtA4pHmtEH88d9UXA6R3FRIJQVhbS 4VzPNumTY+6OkHEm7AenLLbgXKmJP6I06ik+EFvsd019+OygCLrxOXEEmJhAoC5z 6ykdLWxsHS0ym86R5hdY0auPtz8ixEWtXpwK834NNLnAJ5+We2r/2ET7FbmNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3+XudKQIWWP4LDrqZ5qwHwyYSNIwHwYDVR0j BBgwFoAU0eKOOW6Cd4eTAYUTvQhIVL5mOIYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x NmQ2MTEzNS03NWU0LTQ2YzYtYmRkZC1mYmE2ODM0ZGNlNDEvMC9EMUUyOEUzOTZF ODI3Nzg3OTMwMTg1MTNCRDA4NDg1NEJFNjYzODg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDFFMjhFMzk2RTgyNzc4NzkzMDE4NTEzQkQwODQ4NTRCRTY2 Mzg4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMTZkNjExMzUtNzVlNC00NmM2LWJk ZGQtZmJhNjgzNGRjZTQxLzAvRDFFMjhFMzk2RTgyNzc4NzkzMDE4NTEzQkQwODQ4 NTRCRTY2Mzg4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAu2tgABHmEiZJv0kEidIDPdJizfIjwNBEbP HIjbBbGSyJs/a01UZ2F6ZNxFJDR9N7IMGuCMo64fNxr90orz+RXJjDA/ufeKuZ5O Gn80lqcMfKnoSr6E5rEn1uMlzayMEK1F+1rMpflBNz/XZlRsrCNAfQ8gsnsLxgXy JXyPZqe+Km7UjskRFYN8Kc6QDv/c5lSOgfKsM63FJr//8Bd267H3VOGEWobzkWhR uv9bGr7EBNXWwzjuF0WdCmwLRbOiFnlyken1GrxBzkImtok5dujGeL+4GOF6EUtD bRM7K/5HuVASkqRwKELo/IV4NoJ9J2Q+Px1L41A5Fax4WoUTlxM= -----END CERTIFICATE-----Generated at Sat Jun 7 18:07:50 2025 by rpki-client