$ rpki-client -vvf repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.mft File: DEB4279F0D4CD8368462787573162FB753A9B04B.mft (raw, json) Hash identifier: sK0iQdk5CQ0vYa/jH8f4siH053M57LpgKH5BWxtzn1U= Subject key identifier: 20:9F:7E:72:AB:2F:67:44:13:63:AE:6A:7A:01:36:35:B1:8C:97:3A Authority key identifier: DE:B4:27:9F:0D:4C:D8:36:84:62:78:75:73:16:2F:B7:53:A9:B0:4B Certificate issuer: /CN=DEB4279F0D4CD8368462787573162FB753A9B04B Certificate serial: 47F201D5CFCE60B311ABDD0CD196C74273E04F4D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEB4279F0D4CD8368462787573162FB753A9B04B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.mft Manifest number: 01A4 Signing time: Mon 02 Jun 2025 11:40:56 +0000 Manifest this update: Mon 02 Jun 2025 11:35:56 +0000 Manifest next update: Thu 05 Jun 2025 15:48:56 +0000 Files and hashes: 1: DEB4279F0D4CD8368462787573162FB753A9B04B.crl (hash: jEvAOux9nnnYO0jZ8+IQRAwva53sFezrOdt4Wcf3eiM=) 2: 3130332e33312e3234302e302f32342d3234203d3e20313339393532.roa (hash: 28zVUwIfauOaNkqHnh0ZLVPJlAu2ZRa+tGqxdNY0Rgo=) 3: 3130332e33312e3234312e302f32342d3234203d3e20313339393532.roa (hash: G08Zsb0m7nLFy8P1hWnzM0k+V4xtFf95Ynj7WmJyU4w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.crl rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEB4279F0D4CD8368462787573162FB753A9B04B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 15:48:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:f2:01:d5:cf:ce:60:b3:11:ab:dd:0c:d1:96:c7:42:73:e0:4f:4d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEB4279F0D4CD8368462787573162FB753A9B04B Validity Not Before: Jun 2 11:35:56 2025 GMT Not After : Jun 5 15:48:56 2025 GMT Subject: CN=209F7E72AB2F67441363AE6A7A013635B18C973A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:44:e9:20:44:f7:59:9f:a0:b6:75:a7:93:22: f0:64:98:ea:73:37:25:39:a7:4c:33:dc:bf:44:ae: 04:12:21:98:43:17:cb:f1:d2:bc:b8:76:0e:65:35: b4:64:96:bb:3b:fc:e0:98:cb:e9:43:62:f9:a1:8f: c6:0b:53:1f:9d:c9:d7:49:64:dc:c7:3e:af:2c:2f: 93:a6:d4:15:ff:b8:66:a1:56:90:f2:28:a0:a3:ff: 9f:2a:58:00:92:d2:1f:8c:89:69:fa:f1:4a:1f:ec: e5:3a:8d:78:5d:ce:3b:95:9f:fb:dd:76:17:58:4e: 1b:78:b7:91:a1:0b:35:4d:1f:24:78:b8:fe:20:ab: 54:5c:90:c3:22:70:00:2c:39:7d:e1:d7:b5:b2:6b: 66:3f:b4:d5:35:02:d9:3e:67:c9:bd:36:ec:19:15: 29:c1:28:9b:63:5c:43:da:5a:c3:c6:71:09:46:05: 71:cc:66:80:88:0d:eb:66:d5:ec:c8:1f:35:94:13: 40:9a:1e:aa:a6:5d:f9:94:3d:13:ad:97:15:a7:9f: fd:7a:26:01:aa:78:5d:9e:13:cc:b3:bb:8e:fd:4d: 9c:42:a9:ad:26:a0:82:5e:58:4d:cc:d2:de:81:ed: 0e:7b:ac:9b:5a:46:03:7c:c2:51:08:33:b5:1e:49: e7:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:9F:7E:72:AB:2F:67:44:13:63:AE:6A:7A:01:36:35:B1:8C:97:3A X509v3 Authority Key Identifier: keyid:DE:B4:27:9F:0D:4C:D8:36:84:62:78:75:73:16:2F:B7:53:A9:B0:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEB4279F0D4CD8368462787573162FB753A9B04B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption f9:5b:7f:b8:f1:99:3e:5b:bd:3a:76:1f:30:54:74:06:27:8f: 12:0f:24:45:0c:b6:35:35:e6:61:40:af:59:d8:e5:fb:e6:18: 3a:9b:fe:b9:4a:f3:73:a1:89:d7:c8:b7:78:db:c5:16:83:ef: fe:9d:35:d9:28:48:90:80:06:7d:01:37:b1:13:8a:ca:86:97: 11:fe:5e:b0:4b:61:e4:7f:28:24:ce:07:04:e6:07:27:d4:b4: b9:57:4a:f4:32:00:4c:30:40:5e:f3:f7:e5:a0:58:e8:c6:3e: 6a:ea:f0:07:bd:74:9a:d3:43:b7:3f:3f:24:67:d5:00:08:75: ee:23:24:fe:5b:a6:88:2e:ab:d6:aa:4c:fe:74:9d:84:f9:32: 47:ef:98:cb:ab:f3:68:7b:ac:20:11:5d:c1:aa:7c:72:d9:db: c7:7e:7d:51:0b:37:10:26:2c:1f:df:09:82:8d:94:59:e7:6e: 1f:33:75:8d:b6:63:94:03:4b:14:69:5c:4a:8e:1b:db:28:31: 1a:4e:98:2b:1a:23:05:82:b9:bb:37:30:c2:93:a3:b1:99:7e: e8:b7:61:e1:a5:1a:50:01:25:9f:98:6f:3f:bc:48:a8:25:98: a6:25:27:96:6b:22:09:af:18:66:af:e4:f1:cd:8e:5a:3b:45: a3:a5:f6:d9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUR/IB1c/OYLMRq90M0ZbHQnPgT00wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVCNDI3OUYwRDRDRDgzNjg0NjI3ODc1NzMxNjJGQjc1 M0E5QjA0QjAeFw0yNTA2MDIxMTM1NTZaFw0yNTA2MDUxNTQ4NTZaMDMxMTAvBgNV BAMTKDIwOUY3RTcyQUIyRjY3NDQxMzYzQUU2QTdBMDEzNjM1QjE4Qzk3M0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqROkgRPdZn6C2daeTIvBkmOpz NyU5p0wz3L9ErgQSIZhDF8vx0ry4dg5lNbRklrs7/OCYy+lDYvmhj8YLUx+dyddJ ZNzHPq8sL5Om1BX/uGahVpDyKKCj/58qWACS0h+MiWn68Uof7OU6jXhdzjuVn/vd dhdYTht4t5GhCzVNHyR4uP4gq1RckMMicAAsOX3h17Wya2Y/tNU1Atk+Z8m9NuwZ FSnBKJtjXEPaWsPGcQlGBXHMZoCIDetm1ezIHzWUE0CaHqqmXfmUPROtlxWnn/16 JgGqeF2eE8yzu479TZxCqa0moIJeWE3M0t6B7Q57rJtaRgN8wlEIM7UeSedXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIJ9+cqsvZ0QTY65qegE2NbGMlzowHwYDVR0j BBgwFoAU3rQnnw1M2DaEYnh1cxYvt1OpsEswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDMwMzRhYS1mMzljLTQ4ZjUtODUyZS1kMWJkN2YxN2FhNDIvMC9ERUI0Mjc5RjBE NENEODM2ODQ2Mjc4NzU3MzE2MkZCNzUzQTlCMDRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREVCNDI3OUYwRDRDRDgzNjg0NjI3ODc1NzMxNjJGQjc1M0E5 QjA0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQzMDM0YWEtZjM5Yy00OGY1LTg1 MmUtZDFiZDdmMTdhYTQyLzAvREVCNDI3OUYwRDRDRDgzNjg0NjI3ODc1NzMxNjJG Qjc1M0E5QjA0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAPlbf7jxmT5bvTp2HzBUdAYnjxIPJEUMtjU1 5mFAr1nY5fvmGDqb/rlK83OhidfIt3jbxRaD7/6dNdkoSJCABn0BN7ETisqGlxH+ XrBLYeR/KCTOBwTmByfUtLlXSvQyAEwwQF7z9+WgWOjGPmrq8Ae9dJrTQ7c/PyRn 1QAIde4jJP5bpoguq9aqTP50nYT5MkfvmMur82h7rCARXcGqfHLZ28d+fVELNxAm LB/fCYKNlFnnbh8zdY22Y5QDSxRpXEqOG9soMRpOmCsaIwWCubs3MMKTo7GZfui3 YeGlGlABJZ+Ybz+8SKglmKYlJ5ZrIgmvGGav5PHNjlo7RaOl9tk= -----END CERTIFICATE-----Generated at Tue Jun 3 23:49:26 2025 by rpki-client