$ rpki-client -vvf repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft File: DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft (raw, json) Hash identifier: r6CjoU39UXpPCBjCtPcfpZH86G74Hl/Vc119T1UtYrY= Subject key identifier: 05:75:B7:86:D8:39:89:43:B4:25:14:8B:83:5A:83:9B:8E:2B:71:94 Authority key identifier: DF:0A:C6:ED:AE:FC:E4:FE:D1:EE:8A:4C:0A:7B:C4:EF:D6:22:FB:2E Certificate issuer: /CN=DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E Certificate serial: 64C85A22B8B6EDCBDF6DD319693DF8700095DE5A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft Manifest number: 0150 Signing time: Thu 05 Jun 2025 15:11:38 +0000 Manifest this update: Thu 05 Jun 2025 15:06:38 +0000 Manifest next update: Sun 08 Jun 2025 23:02:38 +0000 Files and hashes: 1: 3130332e3132372e3130362e302f32332d3234203d3e20313530393731.roa (hash: lW1DAyCSTgRvB6XQz9p6ZQqRRWcAHTlnodsMGbhnNcU=) 2: DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.crl (hash: 6c7HKSKhT1/dWX6zXs8aFTLG75EyWO1EmSLxGdUrSVY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.crl rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 08 Jun 2025 19:48:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:c8:5a:22:b8:b6:ed:cb:df:6d:d3:19:69:3d:f8:70:00:95:de:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E Validity Not Before: Jun 5 15:06:38 2025 GMT Not After : Jun 8 23:02:38 2025 GMT Subject: CN=0575B786D8398943B425148B835A839B8E2B7194 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:24:85:cd:6a:9e:4b:5a:d9:8a:35:16:3d:4a: 08:30:e2:8a:82:01:f5:4c:23:64:4a:2f:a6:d6:e7: 3c:7b:88:7a:75:5a:3b:80:d1:3a:4b:61:a5:f4:51: da:d2:07:98:5c:c3:4e:05:35:c7:af:e6:7c:b7:66: b3:a0:7a:1b:f9:89:49:74:ac:42:07:4c:7f:c8:72: 8a:d4:eb:09:66:44:9c:db:8f:7f:e6:ef:07:26:4d: 54:7d:12:75:25:f3:c8:d9:56:71:be:b8:18:81:9d: e3:0a:c6:7a:14:59:76:75:33:60:58:8b:1b:e6:48: 11:0f:56:31:f7:28:b5:3a:f7:8c:ca:f6:ca:f0:f1: 67:31:f6:8d:ae:79:72:00:e4:eb:08:53:45:0f:9a: 5f:09:9d:e3:99:20:69:d5:a8:ba:03:39:86:c4:7e: 72:e3:7b:2d:3e:c7:55:68:d2:27:00:d6:e5:7f:cd: 3b:ae:61:d7:25:2d:56:a6:eb:1c:6d:d8:23:81:d2: 98:5d:c3:57:e7:b6:5d:d5:46:cd:5f:9d:dc:3f:4b: 3f:75:43:5d:82:49:b2:15:a4:a5:8e:03:db:47:60: c0:a6:55:8c:68:ca:6e:ed:5f:0a:17:37:21:96:26: 3d:6b:61:6b:58:67:13:a0:f5:60:4b:77:28:a8:75: 11:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:75:B7:86:D8:39:89:43:B4:25:14:8B:83:5A:83:9B:8E:2B:71:94 X509v3 Authority Key Identifier: keyid:DF:0A:C6:ED:AE:FC:E4:FE:D1:EE:8A:4C:0A:7B:C4:EF:D6:22:FB:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:f9:9c:f0:b6:36:8b:5c:86:3b:98:8e:c8:c9:60:24:6a:58: f9:23:79:0a:17:7e:e4:39:c2:2d:7d:e6:e6:15:ac:39:aa:47: 6c:96:f3:f2:cb:61:c2:5e:c2:cc:82:08:7a:6d:2c:45:92:b0: cb:73:d0:3f:a2:f9:d8:04:83:cb:d6:59:db:26:ad:8a:59:8e: 33:58:23:aa:8c:d0:97:cf:5e:8f:cb:95:15:2e:9d:c3:23:58: 5d:a5:4e:a7:98:55:b1:dc:65:e8:23:66:12:d5:da:22:12:f2: 27:92:cb:82:4b:61:29:e3:fb:2a:84:8c:ae:66:67:b7:cd:2a: af:a4:c2:c2:01:af:e5:12:c1:be:cd:c1:0b:c6:22:0e:28:58: 13:d0:e7:5f:83:bb:70:48:9f:a3:0d:0f:64:6b:2e:87:69:4b: ab:f1:1d:4a:1e:37:b7:70:90:3f:6b:0e:17:d1:f3:81:8f:22: 08:5d:ff:21:c0:dc:e2:19:24:44:60:39:ec:21:ec:1c:3a:d3: 16:0d:44:59:bd:6c:74:14:f9:48:23:2a:9a:c9:4c:f6:6a:26: 81:32:ef:75:fa:c4:3a:27:e7:32:3b:57:db:0f:65:df:41:26: 8b:39:9b:64:21:d2:b0:cd:5a:f2:e2:e5:ac:8d:f5:a5:1b:e2: 65:07:6e:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZMhaIri27cvfbdMZaT34cACV3lowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYwQUM2RURBRUZDRTRGRUQxRUU4QTRDMEE3QkM0RUZE NjIyRkIyRTAeFw0yNTA2MDUxNTA2MzhaFw0yNTA2MDgyMzAyMzhaMDMxMTAvBgNV BAMTKDA1NzVCNzg2RDgzOTg5NDNCNDI1MTQ4QjgzNUE4MzlCOEUyQjcxOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFJIXNap5LWtmKNRY9Sggw4oqC AfVMI2RKL6bW5zx7iHp1WjuA0TpLYaX0UdrSB5hcw04FNcev5ny3ZrOgehv5iUl0 rEIHTH/IcorU6wlmRJzbj3/m7wcmTVR9EnUl88jZVnG+uBiBneMKxnoUWXZ1M2BY ixvmSBEPVjH3KLU694zK9srw8Wcx9o2ueXIA5OsIU0UPml8JneOZIGnVqLoDOYbE fnLjey0+x1Vo0icA1uV/zTuuYdclLVam6xxt2COB0phdw1fntl3VRs1fndw/Sz91 Q12CSbIVpKWOA9tHYMCmVYxoym7tXwoXNyGWJj1rYWtYZxOg9WBLdyiodRGBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBXW3htg5iUO0JRSLg1qDm44rcZQwHwYDVR0j BBgwFoAU3wrG7a785P7R7opMCnvE79Yi+y4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OGQ3YTAzOC1mOGExLTRlZDAtYTFhZi01NDk1MmU1NDNjNDMvMC9ERjBBQzZFREFF RkNFNEZFRDFFRThBNEMwQTdCQzRFRkQ2MjJGQjJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREYwQUM2RURBRUZDRTRGRUQxRUU4QTRDMEE3QkM0RUZENjIy RkIyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzhkN2EwMzgtZjhhMS00ZWQwLWEx YWYtNTQ5NTJlNTQzYzQzLzAvREYwQUM2RURBRUZDRTRGRUQxRUU4QTRDMEE3QkM0 RUZENjIyRkIyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACD5nPC2NotchjuYjsjJYCRqWPkjeQoXfuQ5 wi195uYVrDmqR2yW8/LLYcJewsyCCHptLEWSsMtz0D+i+dgEg8vWWdsmrYpZjjNY I6qM0JfPXo/LlRUuncMjWF2lTqeYVbHcZegjZhLV2iIS8ieSy4JLYSnj+yqEjK5m Z7fNKq+kwsIBr+USwb7NwQvGIg4oWBPQ51+Du3BIn6MND2RrLodpS6vxHUoeN7dw kD9rDhfR84GPIghd/yHA3OIZJERgOewh7Bw60xYNRFm9bHQU+UgjKprJTPZqJoEy 73X6xDon5zI7V9sPZd9BJos5m2Qh0rDNWvLi5ayN9aUb4mUHbrU= -----END CERTIFICATE-----Generated at Thu Jun 5 18:15:13 2025 by rpki-client