$ rpki-client -vvf repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft File: DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft (raw, json) Hash identifier: 1s6nFeSB2DCMa1WwUzypapoTk8U07z2hUHM8yw0ybpg= Subject key identifier: B1:FC:7F:81:19:23:BB:E7:15:3E:E2:9E:56:1B:29:42:DE:93:15:CC Authority key identifier: DF:68:55:96:DA:F9:D3:65:4A:2E:2F:21:CE:11:AA:0B:B8:0E:45:D1 Certificate issuer: /CN=DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1 Certificate serial: 0108596DA5BED92F27D9180FE170BF5A58451B99 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft Manifest number: 0326 Signing time: Fri 06 Jun 2025 04:00:36 +0000 Manifest this update: Fri 06 Jun 2025 03:55:36 +0000 Manifest next update: Mon 09 Jun 2025 14:36:36 +0000 Files and hashes: 1: DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.crl (hash: 8Ymb7BZ1EU/V5fHr4CGQPfF3z16CqjKpREFum4J+5Sg=) 2: 3130332e3136392e3235342e302f32342d3234203d3e20313432333730.roa (hash: TptDi2yJ3flSSMDSqc9f0+quKLm9aeSrjexrkn5vS9o=) 3: 3130332e3136392e3235352e302f32342d3234203d3e20313432333730.roa (hash: zXQVHsRu+F6s1MVNzrtFO+eU8maZ8ipfm8/30hkR/TA=) 4: 3130332e3136392e3235342e302f32332d3233203d3e20313432333730.roa (hash: DLJmEfbL3ZCZVVlEJnye8kD0RQcM/dIeZcFOFRkwePE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.crl rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 14:36:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:08:59:6d:a5:be:d9:2f:27:d9:18:0f:e1:70:bf:5a:58:45:1b:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1 Validity Not Before: Jun 6 03:55:36 2025 GMT Not After : Jun 9 14:36:36 2025 GMT Subject: CN=B1FC7F811923BBE7153EE29E561B2942DE9315CC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:9c:38:a4:5e:93:4e:18:76:c2:72:4c:58:47: 3d:64:ac:85:35:b3:8e:9a:e2:13:a3:55:d9:3b:91: 1f:5e:5c:24:25:e7:73:e6:a4:b6:bf:8f:e6:0e:84: 56:76:97:13:dd:5d:f1:df:f4:10:ae:a5:ab:e0:08: ac:7d:20:5f:fe:d8:c3:e3:8a:45:28:0c:2f:73:1b: b8:4f:45:e8:38:57:a7:ca:92:0a:66:c0:20:eb:08: a6:56:6d:9d:6c:34:86:29:3b:c3:43:7e:ae:c1:78: 41:02:c6:f0:20:e2:63:91:d7:18:9c:65:8f:a1:08: 64:14:cf:43:83:36:b7:0a:59:80:19:ae:a5:57:ac: c5:a4:c2:94:af:ac:49:65:43:cc:d7:e7:a5:92:3d: 2d:e0:57:5c:f1:1d:34:dc:43:60:aa:fd:9b:e5:18: 15:2c:0b:c4:46:a3:1f:f3:43:a4:ac:27:78:87:55: 8c:88:dc:5d:db:7f:2a:ac:81:1d:5b:4a:bd:65:d5: b7:69:bb:97:2f:22:ee:b0:07:aa:b7:16:85:88:8d: 7b:e2:4f:14:e4:0c:bd:42:58:f7:91:c1:be:cd:1a: 4f:44:16:63:1e:55:e6:5a:8e:0a:64:f4:a6:30:3b: ce:c0:41:76:e8:d1:74:87:90:2f:6b:9c:52:31:f7: f9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:FC:7F:81:19:23:BB:E7:15:3E:E2:9E:56:1B:29:42:DE:93:15:CC X509v3 Authority Key Identifier: keyid:DF:68:55:96:DA:F9:D3:65:4A:2E:2F:21:CE:11:AA:0B:B8:0E:45:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:c7:b7:53:5b:8b:e1:23:28:a7:3d:2e:2c:ec:17:64:0d:d9: 97:dd:f3:6c:d6:df:89:98:4b:c6:d9:5c:4e:04:f4:92:b0:2a: b3:79:e3:4c:ef:66:74:2b:77:ec:8d:47:a0:bb:11:c0:fb:d4: 90:7d:6d:b1:a5:c0:c6:4a:31:65:d2:29:fe:06:a5:ef:24:63: d9:a1:28:41:c1:26:0d:9e:59:bb:74:d7:00:39:eb:6e:1a:89: b8:75:b6:e1:5f:35:33:e7:a9:b0:af:15:b2:7e:52:5f:b5:02: 87:ba:5d:e5:29:7c:9d:fd:d3:9d:25:ef:90:96:cd:29:e0:32: 15:40:2f:98:35:71:48:e7:ba:49:09:61:b6:e5:80:2a:47:d2: fc:bc:ea:76:83:2b:b3:04:55:20:3f:69:53:87:97:20:dd:60: 4f:6c:27:73:55:cc:7f:c8:eb:fe:2b:05:8a:6f:a2:72:a2:77: 17:c7:da:91:ab:25:3c:70:0b:b4:24:c5:72:7d:7b:a1:3c:4c: 68:50:8f:43:81:68:27:28:5b:c4:72:84:e5:54:08:5c:a5:d2: 49:97:1f:d3:d0:28:ec:cb:e5:0d:2a:54:af:71:f9:ed:79:d6: d7:85:55:0a:18:90:b5:e0:77:36:bf:3c:f1:a4:ad:b9:a9:91: 66:50:04:be -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAQhZbaW+2S8n2RgP4XC/WlhFG5kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY2ODU1OTZEQUY5RDM2NTRBMkUyRjIxQ0UxMUFBMEJC ODBFNDVEMTAeFw0yNTA2MDYwMzU1MzZaFw0yNTA2MDkxNDM2MzZaMDMxMTAvBgNV BAMTKEIxRkM3RjgxMTkyM0JCRTcxNTNFRTI5RTU2MUIyOTQyREU5MzE1Q0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSnDikXpNOGHbCckxYRz1krIU1 s46a4hOjVdk7kR9eXCQl53PmpLa/j+YOhFZ2lxPdXfHf9BCupavgCKx9IF/+2MPj ikUoDC9zG7hPReg4V6fKkgpmwCDrCKZWbZ1sNIYpO8NDfq7BeEECxvAg4mOR1xic ZY+hCGQUz0ODNrcKWYAZrqVXrMWkwpSvrEllQ8zX56WSPS3gV1zxHTTcQ2Cq/Zvl GBUsC8RGox/zQ6SsJ3iHVYyI3F3bfyqsgR1bSr1l1bdpu5cvIu6wB6q3FoWIjXvi TxTkDL1CWPeRwb7NGk9EFmMeVeZajgpk9KYwO87AQXbo0XSHkC9rnFIx9/nTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsfx/gRkju+cVPuKeVhspQt6TFcwwHwYDVR0j BBgwFoAU32hVltr502VKLi8hzhGqC7gORdEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NzUyYjNjMi0zZjMwLTQwNDAtOGIwNS04MzgyMTc3NzA0OGYvMC9ERjY4NTU5NkRB RjlEMzY1NEEyRTJGMjFDRTExQUEwQkI4MEU0NUQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREY2ODU1OTZEQUY5RDM2NTRBMkUyRjIxQ0UxMUFBMEJCODBF NDVEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjc1MmIzYzItM2YzMC00MDQwLThi MDUtODM4MjE3NzcwNDhmLzAvREY2ODU1OTZEQUY5RDM2NTRBMkUyRjIxQ0UxMUFB MEJCODBFNDVEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAErHt1Nbi+EjKKc9LizsF2QN2Zfd82zW34mY S8bZXE4E9JKwKrN540zvZnQrd+yNR6C7EcD71JB9bbGlwMZKMWXSKf4Gpe8kY9mh KEHBJg2eWbt01wA5624aibh1tuFfNTPnqbCvFbJ+Ul+1Aoe6XeUpfJ39050l75CW zSngMhVAL5g1cUjnukkJYbblgCpH0vy86naDK7MEVSA/aVOHlyDdYE9sJ3NVzH/I 6/4rBYpvonKidxfH2pGrJTxwC7QkxXJ9e6E8TGhQj0OBaCcoW8RyhOVUCFyl0kmX H9PQKOzL5Q0qVK9x+e151teFVQoYkLXgdza/PPGkrbmpkWZQBL4= -----END CERTIFICATE-----Generated at Sat Jun 7 23:35:17 2025 by rpki-client