$ rpki-client -vvf repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft File: 0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft (raw, json) Hash identifier: vQzvSi25eak0qZYL0uNzFq/PGQu9WxWrNhGG9Axl9AU= Subject key identifier: B5:FA:21:84:43:43:F9:1D:1E:86:E5:A3:66:44:23:0B:B7:54:5E:69 Authority key identifier: 0D:F8:1F:0E:E9:9B:2E:06:DB:6C:AE:E0:5C:C3:01:BE:3A:23:D1:37 Certificate issuer: /CN=0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137 Certificate serial: 3191233C187F81BE052D1D363D2D1AA2D932F7BE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft Manifest number: 04DE Signing time: Fri 06 Jun 2025 16:21:54 +0000 Manifest this update: Fri 06 Jun 2025 16:16:54 +0000 Manifest next update: Mon 09 Jun 2025 22:24:54 +0000 Files and hashes: 1: 3130332e3132362e32382e302f32322d3234203d3e20313338313139.roa (hash: hqaKmxf71nI6HTBMvNY3G6OZQcwY11nDuhu6Wp5x5hA=) 2: 0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.crl (hash: F3L59dfH+9+UdfXTX/LRHPqBJr/qSRt+i/VyHqbtq1U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.crl rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 22:24:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:91:23:3c:18:7f:81:be:05:2d:1d:36:3d:2d:1a:a2:d9:32:f7:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137 Validity Not Before: Jun 6 16:16:54 2025 GMT Not After : Jun 9 22:24:54 2025 GMT Subject: CN=B5FA21844343F91D1E86E5A36644230BB7545E69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ec:36:ad:35:dd:86:ee:a3:03:cc:94:d5:81: 8d:84:83:66:57:49:02:93:b0:89:0c:39:f6:00:d1: 18:3f:e2:d2:1d:cd:fe:df:38:d7:50:bc:ac:9c:ce: 9a:78:49:4e:c1:db:47:02:25:46:c1:e5:a2:8e:b0: 14:b3:09:a3:f9:40:bf:5f:e1:b0:f9:04:a7:18:b3: 3b:01:44:d6:6c:5b:41:69:db:08:64:ca:8d:cd:63: b4:96:79:05:d0:24:25:3b:91:83:13:86:06:fc:f7: 3d:27:8f:f0:39:0a:ab:1a:a6:4f:a1:a8:3c:be:c6: 3c:58:06:39:32:12:cb:46:9c:9e:93:17:d2:15:06: ea:39:20:13:40:03:47:4a:c0:29:92:5c:3d:f1:38: 08:57:53:57:e2:2f:ef:84:f2:41:5f:ee:cb:42:3e: 9d:4c:b0:63:82:ce:9d:bb:76:28:5c:ae:a3:42:cf: 86:12:b2:5f:da:ef:e9:b8:81:8e:c2:b5:eb:47:13: 42:48:23:b9:54:da:39:15:6f:2a:82:72:56:dd:d3: a9:21:52:a5:c3:c7:1f:e9:36:52:c4:4f:01:3b:8e: 20:c9:f7:30:31:c3:1f:22:bf:8e:1b:3a:07:9a:f5: 7b:b9:a7:74:e7:07:a2:58:ca:09:b4:a9:dd:49:98: 29:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:FA:21:84:43:43:F9:1D:1E:86:E5:A3:66:44:23:0B:B7:54:5E:69 X509v3 Authority Key Identifier: keyid:0D:F8:1F:0E:E9:9B:2E:06:DB:6C:AE:E0:5C:C3:01:BE:3A:23:D1:37 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3f6ea221-77b7-4791-a8a8-b5164b00f1c5/0/0DF81F0EE99B2E06DB6CAEE05CC301BE3A23D137.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:3f:cd:a9:47:a1:9b:1f:94:23:dd:70:a3:70:2a:11:e3:2e: f3:f8:8f:57:63:0f:31:9a:da:10:77:d1:d7:44:8c:96:32:16: 0c:7a:ed:7f:c9:59:06:2f:3a:78:27:29:ad:27:67:b4:ef:68: 35:54:a4:4c:fc:15:d9:9c:43:62:52:50:ce:01:5d:05:e3:10: b8:aa:98:5c:a9:a0:8f:c7:e4:d1:bf:ff:d7:16:75:8a:c2:99: af:b0:6e:89:11:b6:45:2a:55:3e:7e:c6:d1:6c:43:06:67:71: c5:39:c3:bf:56:59:08:ac:0a:3f:62:fe:c0:4b:71:8c:8b:4f: 0b:e8:ef:2b:ee:46:ae:10:ca:5c:b0:98:e7:7d:fa:d5:94:ea: f9:1d:7c:0d:ab:1a:68:b7:a7:c8:87:33:1b:82:0d:3e:6b:68: 54:b6:bd:ca:08:8d:bc:0f:bf:0a:aa:fd:56:ab:d2:bf:f4:70: 59:76:34:af:ce:25:0d:da:c3:bd:1f:a1:12:7b:38:5c:a1:80: 52:2d:49:a1:6d:86:65:76:55:f5:63:ac:63:86:2a:35:3c:48: b6:6e:9b:86:0a:fb:eb:d7:cf:79:56:f4:c0:bf:fb:b8:40:db: 89:fc:9c:85:53:9f:b4:ba:3a:37:3d:1a:3f:9b:46:a5:44:1a: d5:2a:fe:aa -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMZEjPBh/gb4FLR02PS0aotky974wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMERGODFGMEVFOTlCMkUwNkRCNkNBRUUwNUNDMzAxQkUz QTIzRDEzNzAeFw0yNTA2MDYxNjE2NTRaFw0yNTA2MDkyMjI0NTRaMDMxMTAvBgNV BAMTKEI1RkEyMTg0NDM0M0Y5MUQxRTg2RTVBMzY2NDQyMzBCQjc1NDVFNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO7DatNd2G7qMDzJTVgY2Eg2ZX SQKTsIkMOfYA0Rg/4tIdzf7fONdQvKyczpp4SU7B20cCJUbB5aKOsBSzCaP5QL9f 4bD5BKcYszsBRNZsW0Fp2whkyo3NY7SWeQXQJCU7kYMThgb89z0nj/A5Cqsapk+h qDy+xjxYBjkyEstGnJ6TF9IVBuo5IBNAA0dKwCmSXD3xOAhXU1fiL++E8kFf7stC Pp1MsGOCzp27dihcrqNCz4YSsl/a7+m4gY7CtetHE0JII7lU2jkVbyqCclbd06kh UqXDxx/pNlLETwE7jiDJ9zAxwx8iv44bOgea9Xu5p3TnB6JYygm0qd1JmCnTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtfohhEND+R0ehuWjZkQjC7dUXmkwHwYDVR0j BBgwFoAUDfgfDumbLgbbbK7gXMMBvjoj0TcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z ZjZlYTIyMS03N2I3LTQ3OTEtYThhOC1iNTE2NGIwMGYxYzUvMC8wREY4MUYwRUU5 OUIyRTA2REI2Q0FFRTA1Q0MzMDFCRTNBMjNEMTM3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvMERGODFGMEVFOTlCMkUwNkRCNkNBRUUwNUNDMzAxQkUzQTIz RDEzNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2Y2ZWEyMjEtNzdiNy00NzkxLWE4 YTgtYjUxNjRiMDBmMWM1LzAvMERGODFGMEVFOTlCMkUwNkRCNkNBRUUwNUNDMzAx QkUzQTIzRDEzNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACo/zalHoZsflCPdcKNwKhHjLvP4j1djDzGa 2hB30ddEjJYyFgx67X/JWQYvOngnKa0nZ7TvaDVUpEz8FdmcQ2JSUM4BXQXjELiq mFypoI/H5NG//9cWdYrCma+wbokRtkUqVT5+xtFsQwZnccU5w79WWQisCj9i/sBL cYyLTwvo7yvuRq4QylywmOd9+tWU6vkdfA2rGmi3p8iHMxuCDT5raFS2vcoIjbwP vwqq/Var0r/0cFl2NK/OJQ3aw70foRJ7OFyhgFItSaFthmV2VfVjrGOGKjU8SLZu m4YK++vXz3lW9MC/+7hA24n8nIVTn7S6Ojc9Gj+bRqVEGtUq/qo= -----END CERTIFICATE-----Generated at Sun Jun 8 05:09:11 2025 by rpki-client