$ rpki-client -vvf repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.mft File: DA8C840CB41D2668581983C2C4E964E67EF2D6A1.mft (raw, json) Hash identifier: c1AjWiibecgoG+7lsn+aTMjx40GufFverIwu6tUKC+Y= Subject key identifier: 33:1C:4B:ED:B6:6C:27:FC:91:83:72:C1:15:19:AF:52:7C:21:4D:A6 Authority key identifier: DA:8C:84:0C:B4:1D:26:68:58:19:83:C2:C4:E9:64:E6:7E:F2:D6:A1 Certificate issuer: /CN=DA8C840CB41D2668581983C2C4E964E67EF2D6A1 Certificate serial: 60EC1043C75EE662F87F69C045DFA69EB57CAAD5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.mft Manifest number: 022F Signing time: Tue 03 Jun 2025 07:01:51 +0000 Manifest this update: Tue 03 Jun 2025 06:56:51 +0000 Manifest next update: Fri 06 Jun 2025 17:34:51 +0000 Files and hashes: 1: DA8C840CB41D2668581983C2C4E964E67EF2D6A1.crl (hash: mbp6xdreDXgjT4znnL+cD3xTDTAcPjzGhH1hArIQDoE=) 2: 3130332e3137392e3231342e302f32332d3234203d3e20313439333735.roa (hash: ufTh3NuQ02tKvK6+AzJYb6zEYLra1UIfIsPq97spTJM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.crl rsync://repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 17:34:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:ec:10:43:c7:5e:e6:62:f8:7f:69:c0:45:df:a6:9e:b5:7c:aa:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA8C840CB41D2668581983C2C4E964E67EF2D6A1 Validity Not Before: Jun 3 06:56:51 2025 GMT Not After : Jun 6 17:34:51 2025 GMT Subject: CN=331C4BEDB66C27FC918372C11519AF527C214DA6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:40:48:1c:0a:50:e4:3c:11:f5:ba:3a:f0:50: d0:54:1e:bb:5d:27:a5:e5:79:35:88:92:e8:cc:0d: e2:e2:de:4e:c7:f9:6e:eb:b8:6d:cb:a0:18:9e:2c: 9b:94:23:f4:65:53:1a:a9:75:4f:a1:39:7b:4e:34: 14:b0:20:d9:5a:39:47:9b:4a:3f:1f:a8:04:50:e3: 80:58:c9:09:26:0b:ab:c0:87:62:61:23:77:37:4c: c2:a2:43:54:59:9f:d6:66:40:67:30:d6:53:19:3d: 7e:ee:ef:14:6d:60:f4:8c:d2:9e:f5:a2:a8:42:64: e8:5c:f1:4e:a1:9b:1a:65:87:b1:cf:10:d3:e4:ce: 8c:da:f6:0b:64:c6:d2:dd:04:d6:52:14:26:ee:b2: 2e:0f:21:a1:de:34:7d:68:8d:29:ec:46:45:32:c5: c5:a4:58:1e:d3:d9:ad:83:34:0a:db:15:6a:08:ea: a9:e3:dc:67:48:6d:da:11:37:f0:2a:e1:5e:e0:97: 3b:b0:cb:c4:cb:7c:f4:45:22:ca:0d:46:3d:2c:be: b2:ce:2b:0b:70:ed:15:d6:f8:89:41:2d:44:a3:3a: 63:5d:ea:39:62:9b:77:87:d9:e2:f7:26:1f:d0:81: 9f:00:fb:ce:8f:71:29:ea:4d:4f:44:2b:38:22:6d: c1:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:1C:4B:ED:B6:6C:27:FC:91:83:72:C1:15:19:AF:52:7C:21:4D:A6 X509v3 Authority Key Identifier: keyid:DA:8C:84:0C:B4:1D:26:68:58:19:83:C2:C4:E9:64:E6:7E:F2:D6:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b1:e2:0b:e1:3e:a3:5e:cf:d4:82:7e:b0:58:93:ab:58:e7:18: c1:33:85:48:94:e7:1e:50:2a:22:69:01:b2:26:58:11:b2:e6: ba:69:f9:ab:a3:7f:7b:dd:31:48:d8:3a:f3:41:b7:7e:48:c6: c2:bf:8c:f2:1e:35:5d:f5:28:6e:53:c0:76:49:4b:38:d0:c0: 36:6c:73:ec:14:3c:a9:2a:50:43:2c:f2:91:d6:33:25:4e:19: 88:70:08:bf:bb:04:54:cf:7c:fc:17:17:b4:2a:a3:32:b0:b7: e4:32:a8:c7:dd:9c:25:6d:86:3b:da:da:30:7a:a5:4c:8b:1c: 68:ca:2e:03:46:d3:81:7f:2e:dd:e6:8f:f0:62:85:e4:7b:7b: bb:39:e4:e3:d0:67:7a:3d:13:f9:17:44:75:ce:71:d2:d8:85: 39:4e:e2:78:1f:c8:cc:db:c7:73:86:c2:90:c5:c1:d0:3b:41: 32:fc:ca:ba:63:91:dd:40:24:54:bf:87:3a:09:09:92:ac:38: 40:36:3d:8c:0a:2b:2d:a8:d5:1c:27:15:58:6d:76:27:10:ee: 86:09:f6:2a:e1:fc:85:6d:1c:47:cd:1a:7f:65:46:5c:7d:26: 39:c9:1c:eb:75:97:24:1e:ae:77:05:06:07:e9:8f:55:ef:da: 1c:8f:4b:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYOwQQ8de5mL4f2nARd+mnrV8qtUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE4Qzg0MENCNDFEMjY2ODU4MTk4M0MyQzRFOTY0RTY3 RUYyRDZBMTAeFw0yNTA2MDMwNjU2NTFaFw0yNTA2MDYxNzM0NTFaMDMxMTAvBgNV BAMTKDMzMUM0QkVEQjY2QzI3RkM5MTgzNzJDMTE1MTlBRjUyN0MyMTREQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmQEgcClDkPBH1ujrwUNBUHrtd J6XleTWIkujMDeLi3k7H+W7ruG3LoBieLJuUI/RlUxqpdU+hOXtONBSwINlaOUeb Sj8fqARQ44BYyQkmC6vAh2JhI3c3TMKiQ1RZn9ZmQGcw1lMZPX7u7xRtYPSM0p71 oqhCZOhc8U6hmxplh7HPENPkzoza9gtkxtLdBNZSFCbusi4PIaHeNH1ojSnsRkUy xcWkWB7T2a2DNArbFWoI6qnj3GdIbdoRN/Aq4V7glzuwy8TLfPRFIsoNRj0svrLO Kwtw7RXW+IlBLUSjOmNd6jlim3eH2eL3Jh/QgZ8A+86PcSnqTU9EKzgibcF3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMxxL7bZsJ/yRg3LBFRmvUnwhTaYwHwYDVR0j BBgwFoAU2oyEDLQdJmhYGYPCxOlk5n7y1qEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDgyN2NiOC0xYjJjLTQ0YjEtODE5MC05ODVkODIwNWE0NjQvMC9EQThDODQwQ0I0 MUQyNjY4NTgxOTgzQzJDNEU5NjRFNjdFRjJENkExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREE4Qzg0MENCNDFEMjY2ODU4MTk4M0MyQzRFOTY0RTY3RUYy RDZBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODA4MjdjYjgtMWIyYy00NGIxLTgx OTAtOTg1ZDgyMDVhNDY0LzAvREE4Qzg0MENCNDFEMjY2ODU4MTk4M0MyQzRFOTY0 RTY3RUYyRDZBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALHiC+E+o17P1IJ+sFiTq1jnGMEzhUiU5x5Q KiJpAbImWBGy5rpp+aujf3vdMUjYOvNBt35IxsK/jPIeNV31KG5TwHZJSzjQwDZs c+wUPKkqUEMs8pHWMyVOGYhwCL+7BFTPfPwXF7QqozKwt+QyqMfdnCVthjva2jB6 pUyLHGjKLgNG04F/Lt3mj/BiheR7e7s55OPQZ3o9E/kXRHXOcdLYhTlO4ngfyMzb x3OGwpDFwdA7QTL8yrpjkd1AJFS/hzoJCZKsOEA2PYwKKy2o1RwnFVhtdicQ7oYJ 9irh/IVtHEfNGn9lRlx9JjnJHOt1lyQerncFBgfpj1Xv2hyPS8A= -----END CERTIFICATE-----Generated at Tue Jun 3 23:40:20 2025 by rpki-client