$ rpki-client -vvf repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft File: DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft (raw, json) Hash identifier: 2AYTv7dnJhsf2M05cR+1M1Cn5y8bhraO1f1HzzvX2cA= Subject key identifier: 47:D8:F4:D7:0A:36:E5:FC:16:C6:4E:02:61:C0:BD:71:55:31:C5:90 Authority key identifier: DB:72:5E:AC:2D:D1:E6:2B:7A:02:C5:4A:61:8D:7A:01:B9:58:E4:C4 Certificate issuer: /CN=DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4 Certificate serial: 5464A2DE3B2C01B3C55DB2720F1872488C7021C2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft Manifest number: BA Signing time: Fri 06 Jun 2025 06:50:34 +0000 Manifest this update: Fri 06 Jun 2025 06:45:34 +0000 Manifest next update: Mon 09 Jun 2025 09:23:34 +0000 Files and hashes: 1: DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.crl (hash: HIkxc44cFAr/LRMZ8Dg9RXVSbrhPFSWjxsjB5gxpW/M=) 2: 3230332e3135332e3231322e302f32322d3234203d3e20313331373238.roa (hash: L+zbwKEiqCDXphQWC6ta3Lw7/a2eLbSVLx5eDneIanA=) 3: 3130332e31322e3131322e302f32322d3234203d3e20313331373238.roa (hash: W6CbDsM0PrN3d4twoSZMp8DZWVfT/4VVEcjlXAnT5RE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.crl rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 09:23:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:64:a2:de:3b:2c:01:b3:c5:5d:b2:72:0f:18:72:48:8c:70:21:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4 Validity Not Before: Jun 6 06:45:34 2025 GMT Not After : Jun 9 09:23:34 2025 GMT Subject: CN=47D8F4D70A36E5FC16C64E0261C0BD715531C590 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:c0:ac:fe:6e:0c:d6:16:0f:57:d4:79:02:1d: 46:ad:4b:94:17:5a:92:c1:61:bb:eb:8d:64:57:67: 02:2b:31:99:6d:85:3f:d2:ce:96:3d:1f:63:a4:ba: 6c:b9:c2:7c:bf:08:a2:55:b2:2e:76:ca:36:ee:36: b3:2d:29:91:d2:b2:37:f4:6c:7b:c9:6b:f4:13:a0: 82:a5:1d:fe:07:7d:0a:e0:c1:86:93:71:f3:39:f8: 1c:f7:10:f7:a1:fb:c6:38:9c:b6:bb:b5:0b:c8:cc: ac:62:64:e5:e2:7c:43:39:d4:b6:f5:66:30:ff:66: d5:df:df:f6:08:bd:4f:22:3e:f8:80:a1:a6:fd:37: bf:67:90:0b:49:84:cf:7d:1f:2a:98:97:d6:ff:d9: 8d:a7:94:88:f8:91:3b:b7:ed:84:31:56:43:5e:7f: cd:ad:18:25:b4:93:50:d6:b2:af:60:b9:dd:e2:80: b7:14:00:cc:21:5b:3c:51:79:7e:14:d9:d1:ae:d7: 32:fc:c9:93:f6:f6:9e:40:17:3e:0e:6d:ec:99:ce: 3f:00:36:38:df:9c:44:1b:5b:3a:6b:75:5e:43:0f: 60:29:dc:68:0e:76:f1:4b:d8:a7:41:52:2a:1e:81: b9:72:7f:db:e9:da:18:e3:b6:8b:f7:7a:ae:fe:96: be:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:D8:F4:D7:0A:36:E5:FC:16:C6:4E:02:61:C0:BD:71:55:31:C5:90 X509v3 Authority Key Identifier: keyid:DB:72:5E:AC:2D:D1:E6:2B:7A:02:C5:4A:61:8D:7A:01:B9:58:E4:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:e4:3e:14:7d:3e:de:9e:6c:5f:42:02:f4:44:b0:b5:43:7c: e6:c9:6d:c2:f6:50:64:78:d6:53:72:a6:62:47:00:02:48:5d: ac:19:d4:98:39:a3:f4:7a:b7:51:df:13:10:57:57:69:32:66: 64:44:a3:78:76:85:1f:46:e5:b1:0c:48:b6:e3:25:db:51:b8: 4b:5d:df:0b:77:96:1f:7e:87:7a:ea:28:4a:60:45:3f:18:24: 52:16:2b:d8:4e:53:13:c8:4a:ab:6e:15:9d:25:ca:4e:0e:58: 30:9e:dc:24:44:25:6a:11:0a:9c:aa:cd:00:c8:05:f4:66:00: 26:fc:1f:61:b0:b6:7d:ea:86:48:c0:d2:63:b5:6a:21:d8:c7: d8:a7:a6:65:b9:08:37:12:05:f7:a1:c2:13:36:5a:10:e7:74: 02:d8:ec:00:a4:9a:0f:8f:4d:7c:b1:75:2f:32:28:1f:f4:f9: 68:26:7e:89:f3:ad:f6:6b:0d:e1:ea:f9:3a:a0:d8:c9:fc:16: 64:90:cb:2d:ab:2e:e8:e4:4d:44:18:8e:79:45:2e:a4:af:3d: 85:4e:72:0e:b8:d3:4b:b9:25:cb:9d:ec:05:ff:7a:0e:e2:86: 9d:6e:c9:a9:8b:a9:69:ae:05:a2:2d:94:d2:a4:fb:86:0a:46: f3:13:bf:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVGSi3jssAbPFXbJyDxhySIxwIcIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI3MjVFQUMyREQxRTYyQjdBMDJDNTRBNjE4RDdBMDFC OTU4RTRDNDAeFw0yNTA2MDYwNjQ1MzRaFw0yNTA2MDkwOTIzMzRaMDMxMTAvBgNV BAMTKDQ3RDhGNEQ3MEEzNkU1RkMxNkM2NEUwMjYxQzBCRDcxNTUzMUM1OTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLwKz+bgzWFg9X1HkCHUatS5QX WpLBYbvrjWRXZwIrMZlthT/SzpY9H2Okumy5wny/CKJVsi52yjbuNrMtKZHSsjf0 bHvJa/QToIKlHf4HfQrgwYaTcfM5+Bz3EPeh+8Y4nLa7tQvIzKxiZOXifEM51Lb1 ZjD/ZtXf3/YIvU8iPviAoab9N79nkAtJhM99HyqYl9b/2Y2nlIj4kTu37YQxVkNe f82tGCW0k1DWsq9gud3igLcUAMwhWzxReX4U2dGu1zL8yZP29p5AFz4ObeyZzj8A NjjfnEQbWzprdV5DD2Ap3GgOdvFL2KdBUioegblyf9vp2hjjtov3eq7+lr7HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUR9j01wo25fwWxk4CYcC9cVUxxZAwHwYDVR0j BBgwFoAU23JerC3R5it6AsVKYY16AblY5MQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDE1YTg1NS1iMjljLTQ1MDItYWY4MS1jYmI4YjRmN2YwZjcvMC9EQjcyNUVBQzJE RDFFNjJCN0EwMkM1NEE2MThEN0EwMUI5NThFNEM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREI3MjVFQUMyREQxRTYyQjdBMDJDNTRBNjE4RDdBMDFCOTU4 RTRDNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODAxNWE4NTUtYjI5Yy00NTAyLWFm ODEtY2JiOGI0ZjdmMGY3LzAvREI3MjVFQUMyREQxRTYyQjdBMDJDNTRBNjE4RDdB MDFCOTU4RTRDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABDkPhR9Pt6ebF9CAvREsLVDfObJbcL2UGR4 1lNypmJHAAJIXawZ1Jg5o/R6t1HfExBXV2kyZmREo3h2hR9G5bEMSLbjJdtRuEtd 3wt3lh9+h3rqKEpgRT8YJFIWK9hOUxPISqtuFZ0lyk4OWDCe3CREJWoRCpyqzQDI BfRmACb8H2Gwtn3qhkjA0mO1aiHYx9inpmW5CDcSBfehwhM2WhDndALY7ACkmg+P TXyxdS8yKB/0+WgmfonzrfZrDeHq+Tqg2Mn8FmSQyy2rLujkTUQYjnlFLqSvPYVO cg6400u5Jcud7AX/eg7ihp1uyamLqWmuBaItlNKk+4YKRvMTv0c= -----END CERTIFICATE-----Generated at Sun Jun 8 01:30:53 2025 by rpki-client