$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft File: DFE92467290F9E190072585C1045251D6F8B05A3.mft (raw, json) Hash identifier: 3uJZZKSl353Eb28uHhJZ2whtpp6ZU+91iRE2hucKgUs= Subject key identifier: 7F:32:0F:D0:D8:74:28:B4:E8:1B:82:C7:6F:39:6A:E3:11:30:D0:70 Authority key identifier: DF:E9:24:67:29:0F:9E:19:00:72:58:5C:10:45:25:1D:6F:8B:05:A3 Certificate issuer: /CN=DFE92467290F9E190072585C1045251D6F8B05A3 Certificate serial: 3335FEC22BD88EA6BA2C26091875ABF811EA69D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFE92467290F9E190072585C1045251D6F8B05A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft Manifest number: 0206 Signing time: Tue 03 Jun 2025 10:55:00 +0000 Manifest this update: Tue 03 Jun 2025 10:50:00 +0000 Manifest next update: Fri 06 Jun 2025 18:02:00 +0000 Files and hashes: 1: 3130332e3138352e35322e302f32332d3234203d3e20313339343536.roa (hash: haaSHQN0sWh09iak7Jfz/FWXF5gl4JL5L2Lm/giP904=) 2: DFE92467290F9E190072585C1045251D6F8B05A3.crl (hash: LEzpTifmHUXFKXDD+WqQGSMoKagYyMNi2F+jzVbdENM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.crl rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFE92467290F9E190072585C1045251D6F8B05A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 18:02:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:35:fe:c2:2b:d8:8e:a6:ba:2c:26:09:18:75:ab:f8:11:ea:69:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFE92467290F9E190072585C1045251D6F8B05A3 Validity Not Before: Jun 3 10:50:00 2025 GMT Not After : Jun 6 18:02:00 2025 GMT Subject: CN=7F320FD0D87428B4E81B82C76F396AE31130D070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:54:77:c2:2a:54:83:eb:03:97:6e:a0:55:4f: d6:85:0f:99:10:40:05:eb:9d:37:8c:14:99:b7:96: c6:23:8e:f0:1a:b6:64:e6:9e:25:0f:fe:1b:55:ef: 71:70:ba:1b:0a:f5:a8:ac:8f:27:a8:fd:cf:a0:61: 5c:82:1d:66:a7:1b:c2:e4:a1:5f:ab:00:45:7a:c7: 10:69:30:6b:61:d7:ed:c4:d4:33:ed:b9:3a:96:85: 30:53:30:45:26:9f:dc:6d:e5:7f:3c:bf:0f:c4:17: d0:75:99:1a:75:47:d4:5d:71:6c:74:9a:e6:ce:af: 5f:4e:76:49:e8:cd:11:ef:07:d9:b9:3a:ff:c4:cf: 55:c3:e7:7b:bf:dc:fe:a2:73:53:eb:e3:ca:7f:d3: a4:6b:47:d0:9f:09:9a:4c:0d:0c:c9:21:38:f2:ea: a8:62:36:a4:24:ab:82:7a:bf:e6:23:16:85:a0:f9: 10:6f:4f:48:d0:e4:c4:ad:79:7a:80:ae:39:73:0f: 06:94:46:cd:1d:29:81:5f:47:1a:fb:4a:1d:ab:a1: e3:cb:8f:eb:7a:1a:51:0b:d5:d3:6f:7e:80:5e:52: ab:9a:a0:df:ec:a9:af:da:4c:32:68:ea:22:da:85: fb:ee:79:df:4f:69:b7:04:ae:30:49:2b:96:0a:9b: 2b:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7F:32:0F:D0:D8:74:28:B4:E8:1B:82:C7:6F:39:6A:E3:11:30:D0:70 X509v3 Authority Key Identifier: keyid:DF:E9:24:67:29:0F:9E:19:00:72:58:5C:10:45:25:1D:6F:8B:05:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFE92467290F9E190072585C1045251D6F8B05A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5f:50:ae:7c:a5:45:90:b2:a2:33:c1:8e:ac:80:86:16:3e:7e: 67:e9:d9:03:34:93:bf:ac:df:dd:0a:c2:8f:ba:ae:42:c5:85: 53:62:d7:7b:6e:fb:4e:12:45:2a:80:99:4b:e2:eb:34:1b:44: 9a:cc:fa:ac:dd:91:34:99:29:dc:3a:60:44:9b:8d:7c:72:07: 82:e1:b9:9d:eb:02:20:11:e4:0c:d5:1c:10:45:01:fa:8c:a5: 1c:83:65:57:8a:a5:85:dd:d9:d7:ba:f6:0c:79:dc:c1:54:85: b9:b0:2f:9f:43:a1:fe:da:1d:71:21:5e:d9:6b:0a:b8:ae:ae: a9:f0:66:58:19:ff:e5:34:33:04:60:a2:c3:85:ae:be:ea:1f: 1c:c0:92:78:2e:5a:ab:34:57:69:ee:05:a1:fb:1c:2e:34:80: 01:18:82:fa:08:5e:00:60:28:8d:31:8c:b9:f8:95:1f:1d:d6: f0:41:14:ea:c4:e8:df:79:f3:25:a7:5d:e3:38:ca:6c:4e:a2: b2:bc:45:72:c1:7f:df:03:36:03:2f:57:0f:99:26:6b:53:8f: e3:37:5e:b1:78:74:3b:a1:78:a5:80:82:0f:8e:8d:c7:d9:05: 68:2e:50:b7:33:64:6e:47:e3:c1:4d:ec:4a:c0:54:55:60:59: 3f:d1:d2:79 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMzX+wivYjqa6LCYJGHWr+BHqadEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZFOTI0NjcyOTBGOUUxOTAwNzI1ODVDMTA0NTI1MUQ2 RjhCMDVBMzAeFw0yNTA2MDMxMDUwMDBaFw0yNTA2MDYxODAyMDBaMDMxMTAvBgNV BAMTKDdGMzIwRkQwRDg3NDI4QjRFODFCODJDNzZGMzk2QUUzMTEzMEQwNzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCVHfCKlSD6wOXbqBVT9aFD5kQ QAXrnTeMFJm3lsYjjvAatmTmniUP/htV73FwuhsK9aisjyeo/c+gYVyCHWanG8Lk oV+rAEV6xxBpMGth1+3E1DPtuTqWhTBTMEUmn9xt5X88vw/EF9B1mRp1R9RdcWx0 mubOr19OdknozRHvB9m5Ov/Ez1XD53u/3P6ic1Pr48p/06RrR9CfCZpMDQzJITjy 6qhiNqQkq4J6v+YjFoWg+RBvT0jQ5MSteXqArjlzDwaURs0dKYFfRxr7Sh2roePL j+t6GlEL1dNvfoBeUquaoN/sqa/aTDJo6iLahfvued9PabcErjBJK5YKmyv7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfzIP0Nh0KLToG4LHbzlq4xEw0HAwHwYDVR0j BBgwFoAU3+kkZykPnhkAclhcEEUlHW+LBaMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YzQ1NzRlMi0zYjk0LTQxNjAtOGViOC04ZjA5YWFkODJjMmMvMC9ERkU5MjQ2NzI5 MEY5RTE5MDA3MjU4NUMxMDQ1MjUxRDZGOEIwNUEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREZFOTI0NjcyOTBGOUUxOTAwNzI1ODVDMTA0NTI1MUQ2RjhC MDVBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmM0NTc0ZTItM2I5NC00MTYwLThl YjgtOGYwOWFhZDgyYzJjLzAvREZFOTI0NjcyOTBGOUUxOTAwNzI1ODVDMTA0NTI1 MUQ2RjhCMDVBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF9QrnylRZCyojPBjqyAhhY+fmfp2QM0k7+s 390Kwo+6rkLFhVNi13tu+04SRSqAmUvi6zQbRJrM+qzdkTSZKdw6YESbjXxyB4Lh uZ3rAiAR5AzVHBBFAfqMpRyDZVeKpYXd2de69gx53MFUhbmwL59Dof7aHXEhXtlr CriurqnwZlgZ/+U0MwRgosOFrr7qHxzAknguWqs0V2nuBaH7HC40gAEYgvoIXgBg KI0xjLn4lR8d1vBBFOrE6N958yWnXeM4ymxOorK8RXLBf98DNgMvVw+ZJmtTj+M3 XrF4dDuheKWAgg+OjcfZBWguULczZG5H48FN7ErAVFVgWT/R0nk= -----END CERTIFICATE-----Generated at Thu Jun 5 18:17:37 2025 by rpki-client