$ rpki-client -vvf repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft File: D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft (raw, json) Hash identifier: XaywtqaEbNyaAjXVo/Ch0/bRab3mi9hBYh1xVUXRCbw= Subject key identifier: 05:83:9C:3C:21:BE:43:DF:EE:61:B0:6C:4D:BC:49:0C:40:6A:B8:26 Authority key identifier: D0:FF:6F:09:3D:0D:EA:FB:5C:B4:2A:93:43:3F:A2:39:C9:03:EA:C0 Certificate issuer: /CN=D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0 Certificate serial: 355CACCF72760709CD7CCCCC4834409D1E6A3F9F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft Manifest number: 01D6 Signing time: Wed 04 Jun 2025 05:41:49 +0000 Manifest this update: Wed 04 Jun 2025 05:36:49 +0000 Manifest next update: Sat 07 Jun 2025 12:29:49 +0000 Files and hashes: 1: 3130332e3136312e3230322e302f32332d3234203d3e203338333230.roa (hash: BdsS4s7jPHig7lZYR1kjJB8vTutisx05tJ8qnuC/vHI=) 2: D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.crl (hash: s1dCsZqMxT4GNOeBOr2KKjiSc44FZatMu0h3k8kDaHg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.crl rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 12:29:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:5c:ac:cf:72:76:07:09:cd:7c:cc:cc:48:34:40:9d:1e:6a:3f:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0 Validity Not Before: Jun 4 05:36:49 2025 GMT Not After : Jun 7 12:29:49 2025 GMT Subject: CN=05839C3C21BE43DFEE61B06C4DBC490C406AB826 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:7f:3f:ac:b1:d0:6e:f2:0b:a3:08:da:ed:1e: 27:e5:32:a4:bc:c9:a0:10:fb:34:b5:bd:45:e9:41: cb:ac:1c:67:20:4b:ca:c5:ea:8a:be:54:80:35:60: bf:00:95:ee:54:0a:57:9a:90:c7:9d:c5:05:68:09: b1:6a:65:e2:f1:d7:de:12:82:97:40:32:70:2d:6c: 28:33:22:4c:26:2d:78:af:9a:e6:7b:a9:6d:16:6c: 2a:39:50:20:b2:19:9f:74:c6:db:0c:bf:2f:23:a1: 80:cb:8f:a2:f9:90:35:fa:b7:6a:cb:d6:6d:48:66: e8:ca:69:22:69:4a:e3:6a:6e:16:ae:31:6e:29:ef: a9:db:f1:62:f8:89:07:50:f2:d4:18:48:bf:8b:be: 73:3b:37:7b:83:55:e0:01:fc:57:8b:c1:ba:ec:f5: 32:f1:c9:ee:15:3c:12:7c:a5:1d:d3:d9:1f:3d:9d: c1:7b:cf:5f:6d:fb:0d:2c:0d:b7:ce:c0:c8:6a:cd: 5a:ee:bd:8d:36:ad:98:a4:53:59:e4:f4:a1:ef:db: d0:5f:1d:98:67:98:0d:c9:ed:c0:b4:d9:5d:3a:43: 62:94:b5:7a:ba:28:bb:91:cc:f1:cf:a1:c4:ff:68: ac:5b:e9:24:55:bc:14:75:ae:2e:d6:e4:71:f0:ac: e9:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:83:9C:3C:21:BE:43:DF:EE:61:B0:6C:4D:BC:49:0C:40:6A:B8:26 X509v3 Authority Key Identifier: keyid:D0:FF:6F:09:3D:0D:EA:FB:5C:B4:2A:93:43:3F:A2:39:C9:03:EA:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:9a:17:a9:3c:90:0d:41:99:50:72:ba:2f:6d:f4:66:9f:ba: ed:ae:8d:7d:44:ad:c5:f3:c1:4c:25:cb:52:ff:ad:1d:bd:61: 10:89:dc:37:90:15:16:7f:3d:ba:9c:94:47:04:f7:01:6d:57: f1:a4:b3:86:8b:fc:11:2c:ea:86:0f:2f:07:2d:db:1d:24:65: 3b:98:ff:2f:c3:8e:72:ce:c0:b9:90:39:46:d4:be:18:08:ae: 81:5b:1a:c7:06:ab:a4:b7:ad:e9:5a:c9:2c:d7:42:8b:69:4f: 6a:5b:6c:52:c6:da:8d:13:80:83:e2:57:15:c4:52:d4:e1:f2: e4:99:61:8a:28:ee:c0:42:a4:eb:98:7a:50:da:f3:0f:37:19: ce:59:a7:4f:90:4d:0a:74:8d:52:8d:48:56:8c:40:9a:43:55: 25:0b:da:36:a6:e6:ff:16:9d:ee:88:4e:1c:74:01:ff:ca:a2: 30:c7:fa:10:9f:bb:46:c0:c8:62:7c:46:d4:e7:d7:cd:fb:cc: d5:b7:ac:11:7c:23:f5:35:1c:83:90:a2:97:fc:25:5f:44:5b: e7:86:1f:60:07:14:df:e6:88:c0:69:35:53:aa:f2:5e:3e:5f: d3:10:b9:e5:70:de:92:79:7b:d1:6c:98:bc:f4:ee:89:6b:f1: 10:82:9b:c4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUNVysz3J2BwnNfMzMSDRAnR5qP58wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBGRjZGMDkzRDBERUFGQjVDQjQyQTkzNDMzRkEyMzlD OTAzRUFDMDAeFw0yNTA2MDQwNTM2NDlaFw0yNTA2MDcxMjI5NDlaMDMxMTAvBgNV BAMTKDA1ODM5QzNDMjFCRTQzREZFRTYxQjA2QzREQkM0OTBDNDA2QUI4MjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYfz+ssdBu8gujCNrtHiflMqS8 yaAQ+zS1vUXpQcusHGcgS8rF6oq+VIA1YL8Ale5UCleakMedxQVoCbFqZeLx194S gpdAMnAtbCgzIkwmLXivmuZ7qW0WbCo5UCCyGZ90xtsMvy8joYDLj6L5kDX6t2rL 1m1IZujKaSJpSuNqbhauMW4p76nb8WL4iQdQ8tQYSL+LvnM7N3uDVeAB/FeLwbrs 9TLxye4VPBJ8pR3T2R89ncF7z19t+w0sDbfOwMhqzVruvY02rZikU1nk9KHv29Bf HZhnmA3J7cC02V06Q2KUtXq6KLuRzPHPocT/aKxb6SRVvBR1ri7W5HHwrOnvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBYOcPCG+Q9/uYbBsTbxJDEBquCYwHwYDVR0j BBgwFoAU0P9vCT0N6vtctCqTQz+iOckD6sAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 N2Y5ZjU2Mi03MjkyLTQ0ZjEtOGUyYy00NDBhMDUzMWMzOTYvMC9EMEZGNkYwOTNE MERFQUZCNUNCNDJBOTM0MzNGQTIzOUM5MDNFQUMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBGRjZGMDkzRDBERUFGQjVDQjQyQTkzNDMzRkEyMzlDOTAz RUFDMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjdmOWY1NjItNzI5Mi00NGYxLThl MmMtNDQwYTA1MzFjMzk2LzAvRDBGRjZGMDkzRDBERUFGQjVDQjQyQTkzNDMzRkEy MzlDOTAzRUFDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHeaF6k8kA1BmVByui9t9Gafuu2ujX1ErcXz wUwly1L/rR29YRCJ3DeQFRZ/PbqclEcE9wFtV/Gks4aL/BEs6oYPLwct2x0kZTuY /y/DjnLOwLmQOUbUvhgIroFbGscGq6S3relaySzXQotpT2pbbFLG2o0TgIPiVxXE UtTh8uSZYYoo7sBCpOuYelDa8w83Gc5Zp0+QTQp0jVKNSFaMQJpDVSUL2jam5v8W ne6IThx0Af/KojDH+hCfu0bAyGJ8RtTn1837zNW3rBF8I/U1HIOQopf8JV9EW+eG H2AHFN/miMBpNVOq8l4+X9MQueVw3pJ5e9FsmLz07olr8RCCm8Q= -----END CERTIFICATE-----Generated at Thu Jun 5 18:16:45 2025 by rpki-client