$ rpki-client -vvf repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.mft File: DE39DBDBFB23D179870083C94A086E2890E8B7AD.mft (raw, json) Hash identifier: bLmJdCtzP1wN9v7Er/5EqfEAKjb17eRSR3ciIQUbUHc= Subject key identifier: A2:D8:0C:8A:09:13:1C:2D:A4:4E:09:F5:15:22:49:6B:CE:49:D3:E9 Authority key identifier: DE:39:DB:DB:FB:23:D1:79:87:00:83:C9:4A:08:6E:28:90:E8:B7:AD Certificate issuer: /CN=DE39DBDBFB23D179870083C94A086E2890E8B7AD Certificate serial: 5C2E32A9FB26372E123FBA7798FEC5330238B98C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE39DBDBFB23D179870083C94A086E2890E8B7AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.mft Manifest number: 013D Signing time: Tue 03 Jun 2025 17:45:12 +0000 Manifest this update: Tue 03 Jun 2025 17:40:12 +0000 Manifest next update: Fri 06 Jun 2025 22:44:12 +0000 Files and hashes: 1: DE39DBDBFB23D179870083C94A086E2890E8B7AD.crl (hash: NHQYDBHarzwC0Pt8fDn8JTBSpdwMNvFj/l93WtOBNAA=) 2: 3130332e3231382e3138332e302f32342d3234203d3e20313530323636.roa (hash: O7ET++3mrznHJVvRoGpVQYJjcUAO15sAg0dKj486xb0=) 3: 323030313a6466323a376234303a3a2f34382d3438203d3e20313530323636.roa (hash: yQ+O0JgELxkJNBYJ1Ujm9yhO9nL92pk3Pdtypqzo9H4=) 4: 3130332e39312e3133372e302f32342d3234203d3e20313530323636.roa (hash: PmPPRQTTkJqVTyMLWeDylYP3YNddNNCX4NFRmE7faZ4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.crl rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE39DBDBFB23D179870083C94A086E2890E8B7AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 22:44:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:2e:32:a9:fb:26:37:2e:12:3f:ba:77:98:fe:c5:33:02:38:b9:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE39DBDBFB23D179870083C94A086E2890E8B7AD Validity Not Before: Jun 3 17:40:12 2025 GMT Not After : Jun 6 22:44:12 2025 GMT Subject: CN=A2D80C8A09131C2DA44E09F51522496BCE49D3E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:80:4b:b7:1f:63:7a:53:f0:e0:84:49:af:93: b8:35:fc:12:87:06:96:57:31:2f:ae:ff:e0:c7:2d: 25:ac:f6:db:89:05:c0:1c:8c:8b:c0:60:c8:f5:24: e3:fa:a9:91:34:a2:ce:d9:32:68:a9:6c:cb:d6:00: ff:9e:87:d5:11:8e:f4:5d:ac:e4:e4:32:a0:1c:4f: a2:8a:fc:4e:44:20:77:5a:48:1f:b5:1e:e9:d3:2c: 13:92:6d:6c:5b:43:35:c3:91:34:9a:20:eb:ea:21: b7:52:b4:d5:7f:18:1a:9b:8c:95:87:5e:5b:58:da: da:6c:4c:bd:bf:c2:c8:23:e9:c6:e9:27:a2:4e:47: 78:ca:51:7f:37:60:2a:0e:e1:c7:80:4b:37:b2:83: de:92:11:dd:a5:e6:55:f9:1e:80:ec:2c:51:62:74: 08:bc:86:51:a0:e3:f7:72:a0:bd:67:cd:93:4a:99: 8d:42:2b:03:f5:c6:9d:89:46:26:7d:0e:3c:b0:17: 0f:11:9f:3e:c7:21:1f:5f:64:3e:5d:85:9d:64:48: 4e:cc:c1:80:37:78:af:d3:bc:d5:ba:fd:fa:c1:ef: b1:fc:3b:4d:3f:af:25:fb:c6:f4:ad:89:b1:fc:0a: ab:bb:b2:47:2b:1e:10:6e:92:1f:b5:48:17:22:7d: 91:81 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:D8:0C:8A:09:13:1C:2D:A4:4E:09:F5:15:22:49:6B:CE:49:D3:E9 X509v3 Authority Key Identifier: keyid:DE:39:DB:DB:FB:23:D1:79:87:00:83:C9:4A:08:6E:28:90:E8:B7:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE39DBDBFB23D179870083C94A086E2890E8B7AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:62:f3:bc:4f:42:52:b2:55:ed:42:fa:cd:58:67:7b:62:74: 2d:4a:8e:ca:05:9d:30:53:82:94:5d:b3:ed:80:bd:5c:c4:f7: 1a:f7:3c:cc:e6:7d:20:85:26:a7:85:9d:61:84:28:a1:85:e6: 40:d8:b8:f6:04:2b:99:c1:46:fd:9e:14:cd:74:fc:cd:4f:e6: d3:9b:50:66:c1:ab:c9:80:2f:4a:91:5d:5c:a7:2b:92:ac:21: 92:85:a9:86:3c:5c:80:07:8d:96:39:dd:58:c7:36:46:9e:09: a9:43:2f:70:42:99:c4:a4:40:5c:61:12:4f:46:ef:a3:82:80: 8d:df:ca:d9:9b:d9:e9:40:ae:31:84:76:57:85:dc:93:c3:9b: 85:80:cb:de:c7:45:01:0f:7a:85:54:d9:86:d1:9a:25:f8:5c: e1:06:62:f5:33:cd:19:e0:2a:6d:53:16:ad:88:f6:9f:c1:12: da:38:e3:0c:1b:ca:45:e0:47:94:b4:23:2f:7c:fb:21:16:4e: 38:1e:26:8f:0d:6e:43:eb:a6:a1:32:3f:32:0e:c8:8c:16:8a: 44:88:30:b1:fb:58:6c:82:03:de:53:ba:0b:29:f0:19:ff:f1: 5e:82:a5:44:e0:ab:c8:f8:28:45:92:99:03:70:de:44:8f:dc: 1c:86:da:b5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXC4yqfsmNy4SP7p3mP7FMwI4uYwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUzOURCREJGQjIzRDE3OTg3MDA4M0M5NEEwODZFMjg5 MEU4QjdBRDAeFw0yNTA2MDMxNzQwMTJaFw0yNTA2MDYyMjQ0MTJaMDMxMTAvBgNV BAMTKEEyRDgwQzhBMDkxMzFDMkRBNDRFMDlGNTE1MjI0OTZCQ0U0OUQzRTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVgEu3H2N6U/DghEmvk7g1/BKH BpZXMS+u/+DHLSWs9tuJBcAcjIvAYMj1JOP6qZE0os7ZMmipbMvWAP+eh9URjvRd rOTkMqAcT6KK/E5EIHdaSB+1HunTLBOSbWxbQzXDkTSaIOvqIbdStNV/GBqbjJWH XltY2tpsTL2/wsgj6cbpJ6JOR3jKUX83YCoO4ceASzeyg96SEd2l5lX5HoDsLFFi dAi8hlGg4/dyoL1nzZNKmY1CKwP1xp2JRiZ9DjywFw8Rnz7HIR9fZD5dhZ1kSE7M wYA3eK/TvNW6/frB77H8O00/ryX7xvStibH8Cqu7skcrHhBukh+1SBcifZGBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUotgMigkTHC2kTgn1FSJJa85J0+kwHwYDVR0j BBgwFoAU3jnb2/sj0XmHAIPJSghuKJDot60wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NTJiZWFlMS0zNDgwLTRlOTItYTNhOS01YTU0ZmJiYWNkMmQvMC9ERTM5REJEQkZC MjNEMTc5ODcwMDgzQzk0QTA4NkUyODkwRThCN0FELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREUzOURCREJGQjIzRDE3OTg3MDA4M0M5NEEwODZFMjg5MEU4 QjdBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTUyYmVhZTEtMzQ4MC00ZTkyLWEz YTktNWE1NGZiYmFjZDJkLzAvREUzOURCREJGQjIzRDE3OTg3MDA4M0M5NEEwODZF Mjg5MEU4QjdBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACBi87xPQlKyVe1C+s1YZ3tidC1KjsoFnTBT gpRds+2AvVzE9xr3PMzmfSCFJqeFnWGEKKGF5kDYuPYEK5nBRv2eFM10/M1P5tOb UGbBq8mAL0qRXVynK5KsIZKFqYY8XIAHjZY53VjHNkaeCalDL3BCmcSkQFxhEk9G 76OCgI3fytmb2elArjGEdleF3JPDm4WAy97HRQEPeoVU2YbRmiX4XOEGYvUzzRng Km1TFq2I9p/BEto44wwbykXgR5S0Iy98+yEWTjgeJo8NbkPrpqEyPzIOyIwWikSI MLH7WGyCA95Tugsp8Bn/8V6CpUTgq8j4KEWSmQNw3kSP3ByG2rU= -----END CERTIFICATE-----Generated at Tue Jun 3 23:26:14 2025 by rpki-client