$ rpki-client -vvf repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.mft File: DE4325727D17555F6DABCC72788E361C741D47CF.mft (raw, json) Hash identifier: xNWRZRN/yEF5I2zrIdezXqrsagAS9MSCj/UWRLKR06A= Subject key identifier: 49:0B:AA:2E:39:20:DD:84:D9:DF:FD:9D:20:19:24:A1:18:E2:71:2A Authority key identifier: DE:43:25:72:7D:17:55:5F:6D:AB:CC:72:78:8E:36:1C:74:1D:47:CF Certificate issuer: /CN=DE4325727D17555F6DABCC72788E361C741D47CF Certificate serial: 60398DB6F6B55053222A0F2122E7EC9789E1AFC7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE4325727D17555F6DABCC72788E361C741D47CF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.mft Manifest number: 019B Signing time: Wed 04 Jun 2025 01:30:03 +0000 Manifest this update: Wed 04 Jun 2025 01:25:03 +0000 Manifest next update: Sat 07 Jun 2025 04:06:03 +0000 Files and hashes: 1: 323430363a363263303a3a2f33322d3332203d3e20313431303734.roa (hash: 2Lk6auTAFU1KMFXNa9pRSBxyYyKqC713tFzsVGAw9EU=) 2: 3130332e3135352e32352e302f32342d3234203d3e20313431303734.roa (hash: G51YluNBJVnWJJLUM3oLTxL1SDaPjGOTZwYfGpp2BCE=) 3: 3130332e3135352e32342e302f32342d3234203d3e20313431303734.roa (hash: frVX3KU+95dnNdoEu8zY99nlhl5o8DK8rzkyAoketnM=) 4: 3130332e3135352e32342e302f32332d3233203d3e20313431303734.roa (hash: 6aU9uz5CHHldU1HIevUJsAf5erVKI657uWFvNEr+ic0=) 5: DE4325727D17555F6DABCC72788E361C741D47CF.crl (hash: py5kUhHTBhwp++Xq7q1uO5gkOxIeouy1+uAC5G5JS4c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.crl rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE4325727D17555F6DABCC72788E361C741D47CF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 04:06:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:39:8d:b6:f6:b5:50:53:22:2a:0f:21:22:e7:ec:97:89:e1:af:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE4325727D17555F6DABCC72788E361C741D47CF Validity Not Before: Jun 4 01:25:03 2025 GMT Not After : Jun 7 04:06:03 2025 GMT Subject: CN=490BAA2E3920DD84D9DFFD9D201924A118E2712A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:db:02:15:40:4b:87:81:a7:67:f5:69:34:a9: 3f:65:99:32:7b:d0:0d:c0:0d:27:68:0e:ac:40:ef: 0e:45:ba:24:2f:62:e7:7b:fc:75:27:a4:fe:32:f1: d9:62:7e:29:d9:ab:41:a7:60:ff:88:e4:2b:4c:06: ae:54:be:45:3e:63:a3:f8:53:dd:ac:f3:d6:4a:f4: 9e:c1:81:54:da:cb:4f:90:7d:9d:15:6d:a3:da:8f: b2:30:ec:61:d5:8a:e6:fa:23:c4:c0:fc:c6:04:72: 93:0d:f9:fe:58:35:66:97:ca:d1:bb:ef:2d:f0:42: 3c:e6:43:25:ff:e3:ba:5f:a9:22:82:14:f8:fa:48: a5:95:a5:cd:d9:cf:fb:01:bc:6c:67:0e:ba:93:2b: bb:4b:29:16:f8:03:c4:42:0d:5b:e2:ea:6b:f2:71: e9:a9:49:91:33:f5:dc:0c:06:16:7f:ae:a8:56:ca: 79:3d:30:1a:f1:fe:bf:de:6d:4b:eb:a1:5b:99:f5: f0:8d:d1:99:3f:b0:42:cf:0a:35:3e:dd:25:f8:90: ec:0d:12:55:30:02:ad:76:e3:ff:38:e5:de:b0:a9: 00:ef:62:e2:a9:ea:42:e8:51:26:78:28:b0:a6:92: c3:4f:24:93:b0:26:29:a0:cb:cc:df:ce:b6:6a:82: ea:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:0B:AA:2E:39:20:DD:84:D9:DF:FD:9D:20:19:24:A1:18:E2:71:2A X509v3 Authority Key Identifier: keyid:DE:43:25:72:7D:17:55:5F:6D:AB:CC:72:78:8E:36:1C:74:1D:47:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE4325727D17555F6DABCC72788E361C741D47CF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2c:35:37:fc:76:bb:12:e5:06:ce:da:11:00:f5:9a:2e:d1:1f: ad:30:8d:45:c0:8b:3e:7b:08:cc:b5:c1:64:25:e2:25:6a:41: 2b:d2:4e:c7:ff:24:56:8e:5f:a1:31:4c:cd:c9:00:f1:e2:72: 69:07:f8:79:57:d2:42:6b:67:cf:90:5d:0e:03:12:ef:62:ce: a7:f5:a7:24:dd:c9:e9:2c:05:48:ef:9c:a1:d4:91:b6:df:00: 27:a8:46:ff:2c:bb:67:6c:de:e5:20:0f:c5:d1:70:da:43:5b: f2:c3:8f:6c:ad:ba:f0:8e:fc:fb:5b:86:9b:2e:94:08:0c:83: de:2d:56:a2:e4:02:92:2e:79:23:40:42:15:82:61:fb:af:8c: 32:6a:16:9f:49:76:c2:f7:60:aa:88:04:37:88:9b:d4:a9:b3: be:7b:ba:6d:aa:65:6a:a5:96:eb:41:57:b9:8b:d3:9b:be:e3: d0:58:91:d8:d3:97:5b:76:8d:7d:83:be:ce:d6:49:1f:a3:2e: 10:62:d3:81:be:f4:19:75:79:5c:03:2d:3b:2b:ea:6f:15:dd: 13:9c:ac:f3:fd:af:7b:bc:b6:3a:14:54:51:f4:fd:17:9f:8d: fb:5a:2c:70:c4:1e:fd:f6:a4:0d:dc:ed:58:07:1d:b4:5d:f5: b4:82:8c:3f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYDmNtva1UFMiKg8hIufsl4nhr8cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU0MzI1NzI3RDE3NTU1RjZEQUJDQzcyNzg4RTM2MUM3 NDFENDdDRjAeFw0yNTA2MDQwMTI1MDNaFw0yNTA2MDcwNDA2MDNaMDMxMTAvBgNV BAMTKDQ5MEJBQTJFMzkyMEREODREOURGRkQ5RDIwMTkyNEExMThFMjcxMkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW2wIVQEuHgadn9Wk0qT9lmTJ7 0A3ADSdoDqxA7w5FuiQvYud7/HUnpP4y8dlifinZq0GnYP+I5CtMBq5UvkU+Y6P4 U92s89ZK9J7BgVTay0+QfZ0VbaPaj7Iw7GHViub6I8TA/MYEcpMN+f5YNWaXytG7 7y3wQjzmQyX/47pfqSKCFPj6SKWVpc3Zz/sBvGxnDrqTK7tLKRb4A8RCDVvi6mvy cempSZEz9dwMBhZ/rqhWynk9MBrx/r/ebUvroVuZ9fCN0Zk/sELPCjU+3SX4kOwN ElUwAq124/845d6wqQDvYuKp6kLoUSZ4KLCmksNPJJOwJimgy8zfzrZqguqbAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSQuqLjkg3YTZ3/2dIBkkoRjicSowHwYDVR0j BBgwFoAU3kMlcn0XVV9tq8xyeI42HHQdR88wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDc2MDhjZS1jM2Y4LTQ0ZWItYWVlNy1iNzg0YWUyMGM5YzcvMC9ERTQzMjU3MjdE MTc1NTVGNkRBQkNDNzI3ODhFMzYxQzc0MUQ0N0NGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU0MzI1NzI3RDE3NTU1RjZEQUJDQzcyNzg4RTM2MUM3NDFE NDdDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTA3NjA4Y2UtYzNmOC00NGViLWFl ZTctYjc4NGFlMjBjOWM3LzAvREU0MzI1NzI3RDE3NTU1RjZEQUJDQzcyNzg4RTM2 MUM3NDFENDdDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACw1N/x2uxLlBs7aEQD1mi7RH60wjUXAiz57 CMy1wWQl4iVqQSvSTsf/JFaOX6ExTM3JAPHicmkH+HlX0kJrZ8+QXQ4DEu9izqf1 pyTdyeksBUjvnKHUkbbfACeoRv8su2ds3uUgD8XRcNpDW/LDj2ytuvCO/Ptbhpsu lAgMg94tVqLkApIueSNAQhWCYfuvjDJqFp9JdsL3YKqIBDeIm9Sps757um2qZWql lutBV7mL05u+49BYkdjTl1t2jX2Dvs7WSR+jLhBi04G+9Bl1eVwDLTsr6m8V3ROc rPP9r3u8tjoUVFH0/RefjftaLHDEHv32pA3c7VgHHbRd9bSCjD8= -----END CERTIFICATE-----Generated at Thu Jun 5 18:40:03 2025 by rpki-client