$ rpki-client -vvf repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft File: DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft (raw, json) Hash identifier: S5tl8vN0VJ15uSCPawobtk5bmd4/m/6ozBwboHDP44U= Subject key identifier: C6:AA:7C:05:E9:19:85:BD:22:36:D1:CD:FE:45:6E:AB:ED:D8:C3:A1 Authority key identifier: DB:E9:15:60:EB:E5:8F:31:F0:1F:54:3D:75:1B:03:FC:02:EA:7D:9E Certificate issuer: /CN=DBE91560EBE58F31F01F543D751B03FC02EA7D9E Certificate serial: 71095E8000C9007EAF4226EDFC450685E89C9C02 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft Manifest number: 04D7 Signing time: Mon 02 Jun 2025 02:02:59 +0000 Manifest this update: Mon 02 Jun 2025 01:57:59 +0000 Manifest next update: Thu 05 Jun 2025 05:36:59 +0000 Files and hashes: 1: 323030313a6466333a666438303a3a2f34382d3438203d3e20313430343432.roa (hash: 6nfQfvYHsKjsaw/P97GpMinNY5TWkRYJKWFHck6y3/Q=) 2: 3130332e3135322e37322e302f32332d3234203d3e20313430343432.roa (hash: obl90Ju8Uh49WHiF5evmIzEfZW09mIiXbUTRedxtitw=) 3: DBE91560EBE58F31F01F543D751B03FC02EA7D9E.crl (hash: jMHdAGcEoVXPp/LCNppmzTedOZHS9z95hSmBVCbfLpk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.crl rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 05:36:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:09:5e:80:00:c9:00:7e:af:42:26:ed:fc:45:06:85:e8:9c:9c:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBE91560EBE58F31F01F543D751B03FC02EA7D9E Validity Not Before: Jun 2 01:57:59 2025 GMT Not After : Jun 5 05:36:59 2025 GMT Subject: CN=C6AA7C05E91985BD2236D1CDFE456EABEDD8C3A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:a7:8e:ca:61:39:80:39:c4:12:3f:01:2d:c0: 0c:68:e0:34:ea:fe:9a:14:de:55:c7:6f:0c:44:6f: 71:4f:ba:dd:40:1b:72:a3:d6:d6:1c:d1:0d:7f:62: 55:c1:55:de:38:b1:e5:02:b3:78:78:06:17:2f:20: a2:4c:56:a7:35:f2:97:72:8e:29:16:88:49:fc:53: 36:86:4c:38:d3:60:c9:a5:77:ef:7e:71:67:f5:42: cc:c7:3a:cf:41:e0:aa:fa:78:07:d0:e8:bb:b2:0a: d5:7a:18:76:97:ae:c1:8c:d2:0f:c8:53:08:e5:12: 40:79:8f:00:f8:aa:ce:8b:a9:59:69:c3:f4:09:ec: 28:04:2a:ff:a8:61:57:b6:dd:3b:a7:a3:5d:98:43: 59:a3:dd:27:0e:6a:11:04:ef:9f:ac:59:f1:87:c8: 9d:8b:6c:18:06:30:54:b5:cc:2a:ef:42:82:1c:bc: f3:eb:54:db:89:72:1d:91:c5:2e:17:a9:ba:45:66: ae:89:a2:93:37:03:9f:d1:90:17:d4:0f:6e:0e:67: fd:ec:cb:4e:9e:af:ae:12:ce:8b:e7:7b:d8:f1:55: 0e:83:14:dd:17:26:d6:c1:9d:ec:71:c3:78:49:99: b6:1b:d1:b4:75:9a:6e:6e:32:c6:f2:28:95:b9:57: c0:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:AA:7C:05:E9:19:85:BD:22:36:D1:CD:FE:45:6E:AB:ED:D8:C3:A1 X509v3 Authority Key Identifier: keyid:DB:E9:15:60:EB:E5:8F:31:F0:1F:54:3D:75:1B:03:FC:02:EA:7D:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 50:3c:e3:aa:42:23:fd:33:77:26:72:3e:5b:75:8d:d3:d4:ea: 99:28:6d:f1:ed:05:7f:fe:45:f9:9d:48:b5:53:c7:52:ac:e5: 67:3c:34:0c:3f:18:9d:3b:37:82:69:19:20:9c:89:3e:6b:b3: 8f:8d:3f:94:79:e1:fa:9e:ac:78:ba:fa:41:57:cc:55:4b:8f: 18:13:d0:ef:2e:39:ee:0b:9f:5c:c8:0d:3e:ab:c5:82:b7:ff: 53:5f:fd:0e:79:2e:75:cf:bb:11:18:81:eb:0e:4e:1c:54:e8: 07:d8:52:d0:7c:87:38:9b:71:1b:c3:15:df:cd:c1:fe:45:01: f4:80:32:41:76:b7:50:76:7c:f8:80:b8:64:62:c0:7f:4b:3f: d7:de:3b:2d:ec:f7:73:e1:4e:82:26:7d:1b:b0:0f:3f:c3:98: 8e:8f:94:f2:e4:c0:65:1b:2c:c5:03:88:7b:34:fb:66:f2:b5: b4:a6:93:19:8f:23:0d:30:44:12:dc:d9:9e:51:ce:45:03:45: 54:ac:98:32:08:ba:28:54:36:00:2d:7f:0c:68:b4:13:ee:6b: ef:99:4d:a5:6f:6a:6f:6e:ad:b3:3c:ee:38:a2:e1:32:78:4e: 8b:6d:a8:8a:51:c6:09:02:d3:6a:46:19:29:e0:62:ba:64:fd: 40:a3:c2:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcQlegADJAH6vQibt/EUGheicnAIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJFOTE1NjBFQkU1OEYzMUYwMUY1NDNENzUxQjAzRkMw MkVBN0Q5RTAeFw0yNTA2MDIwMTU3NTlaFw0yNTA2MDUwNTM2NTlaMDMxMTAvBgNV BAMTKEM2QUE3QzA1RTkxOTg1QkQyMjM2RDFDREZFNDU2RUFCRUREOEMzQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3p47KYTmAOcQSPwEtwAxo4DTq /poU3lXHbwxEb3FPut1AG3Kj1tYc0Q1/YlXBVd44seUCs3h4BhcvIKJMVqc18pdy jikWiEn8UzaGTDjTYMmld+9+cWf1QszHOs9B4Kr6eAfQ6LuyCtV6GHaXrsGM0g/I UwjlEkB5jwD4qs6LqVlpw/QJ7CgEKv+oYVe23Tuno12YQ1mj3ScOahEE75+sWfGH yJ2LbBgGMFS1zCrvQoIcvPPrVNuJch2RxS4XqbpFZq6JopM3A5/RkBfUD24OZ/3s y06er64Szovne9jxVQ6DFN0XJtbBnexxw3hJmbYb0bR1mm5uMsbyKJW5V8ALAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxqp8BekZhb0iNtHN/kVuq+3Yw6EwHwYDVR0j BBgwFoAU2+kVYOvljzHwH1Q9dRsD/ALqfZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NzI4Yzc3Yi0yMTAwLTRmMmEtOTBkOS0wOGM1M2U4NDFlMWIvMC9EQkU5MTU2MEVC RTU4RjMxRjAxRjU0M0Q3NTFCMDNGQzAyRUE3RDlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREJFOTE1NjBFQkU1OEYzMUYwMUY1NDNENzUxQjAzRkMwMkVB N0Q5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjcyOGM3N2ItMjEwMC00ZjJhLTkw ZDktMDhjNTNlODQxZTFiLzAvREJFOTE1NjBFQkU1OEYzMUYwMUY1NDNENzUxQjAz RkMwMkVBN0Q5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFA846pCI/0zdyZyPlt1jdPU6pkobfHtBX/+ RfmdSLVTx1Ks5Wc8NAw/GJ07N4JpGSCciT5rs4+NP5R54fqerHi6+kFXzFVLjxgT 0O8uOe4Ln1zIDT6rxYK3/1Nf/Q55LnXPuxEYgesOThxU6AfYUtB8hzibcRvDFd/N wf5FAfSAMkF2t1B2fPiAuGRiwH9LP9feOy3s93PhToImfRuwDz/DmI6PlPLkwGUb LMUDiHs0+2bytbSmkxmPIw0wRBLc2Z5RzkUDRVSsmDIIuihUNgAtfwxotBPua++Z TaVvam9urbM87jii4TJ4TottqIpRxgkC02pGGSngYrpk/UCjwrs= -----END CERTIFICATE-----Generated at Tue Jun 3 23:41:22 2025 by rpki-client