$ rpki-client -vvf repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.mft File: DA680D591E9E6B4622614F94CF255933B6749212.mft (raw, json) Hash identifier: epynU+ajX+8k04fdvxEcgoPXdReMlsefhpbFCH+H2B8= Subject key identifier: 6C:03:D9:62:1E:CB:A6:B0:2E:BD:7C:A4:64:3D:E8:FA:97:03:E4:F2 Authority key identifier: DA:68:0D:59:1E:9E:6B:46:22:61:4F:94:CF:25:59:33:B6:74:92:12 Certificate issuer: /CN=DA680D591E9E6B4622614F94CF255933B6749212 Certificate serial: 5FDDEB5A78A11162D16422A0B6F4B772FAE1DF3F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DA680D591E9E6B4622614F94CF255933B6749212.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.mft Manifest number: DA Signing time: Fri 06 Jun 2025 20:41:51 +0000 Manifest this update: Fri 06 Jun 2025 20:36:51 +0000 Manifest next update: Tue 10 Jun 2025 03:07:51 +0000 Files and hashes: 1: 3135372e31302e3138322e302f32332d3234203d3e20313532333434.roa (hash: i0rS2o3mTh9+/ZMOMUuCXL7VcRhfm2ZL+vmQMK6r/AQ=) 2: 3135372e31302e3138332e302f32342d3234203d3e20313532333434.roa (hash: bW5GhG+n2gDC7aNS0QQfawXhWxcHV8PEi1pP/7l6eDw=) 3: DA680D591E9E6B4622614F94CF255933B6749212.crl (hash: v4XTJIUve8PYhzEPK+cTYqwraBxd7wlP81R76+X0g1s=) 4: 3135372e31302e3138322e302f32342d3234203d3e20313532333434.roa (hash: zo0q/Qyr9+OM0Fi4S3qemAqF/9QAiZg3ou4qqrAMiyU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.crl rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DA680D591E9E6B4622614F94CF255933B6749212.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 03:07:51 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:dd:eb:5a:78:a1:11:62:d1:64:22:a0:b6:f4:b7:72:fa:e1:df:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA680D591E9E6B4622614F94CF255933B6749212 Validity Not Before: Jun 6 20:36:51 2025 GMT Not After : Jun 10 03:07:51 2025 GMT Subject: CN=6C03D9621ECBA6B02EBD7CA4643DE8FA9703E4F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:18:2d:ee:fc:bd:d1:70:6b:a2:0c:c8:cd:03: da:01:fe:0d:17:f8:0d:e5:3a:92:3d:e1:01:66:64: 07:18:24:be:3a:56:cd:19:7b:7f:f8:c7:10:f2:7c: 5f:f6:69:3d:73:ec:80:04:37:ff:8a:d5:38:5f:ab: a1:69:07:8e:2f:9c:34:f9:7c:9e:5b:00:43:9d:42: 26:06:77:26:7c:3a:01:ff:49:7e:db:ff:80:06:fe: 5f:21:c3:15:34:7e:cb:82:53:be:5a:1e:0f:86:b8: 78:26:4c:d2:87:2c:32:9c:e8:8e:19:fe:9a:c3:e7: fa:c0:88:b2:fc:98:ef:e1:db:be:fd:3a:1b:00:fe: f3:16:f0:ee:d2:40:27:19:55:23:ef:50:c9:c3:da: de:81:4e:18:da:cf:e9:d0:be:20:27:f4:60:dd:64: ee:b4:ac:b7:ba:c8:3c:b4:b2:fc:bc:e9:53:58:f0: 6b:5f:5a:8f:9e:b0:10:0d:49:84:42:24:8a:75:cf: d8:05:72:a2:2a:6d:bc:f7:bb:3f:86:d1:d1:75:ab: a1:0d:88:bc:0f:1a:0e:78:15:60:45:64:fe:82:cb: b1:b6:5a:09:03:6c:ac:4f:f2:3a:c7:8e:64:cf:ec: 46:10:70:97:b4:e3:1a:86:3c:55:49:58:ea:e3:bb: 45:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6C:03:D9:62:1E:CB:A6:B0:2E:BD:7C:A4:64:3D:E8:FA:97:03:E4:F2 X509v3 Authority Key Identifier: keyid:DA:68:0D:59:1E:9E:6B:46:22:61:4F:94:CF:25:59:33:B6:74:92:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DA680D591E9E6B4622614F94CF255933B6749212.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:11:01:48:11:25:98:c7:45:54:93:e3:f2:37:fe:37:c1:e5: bb:ee:a0:2e:6f:72:30:88:53:91:3b:47:77:59:e4:35:21:d3: 44:87:71:90:85:b7:5a:9b:10:e6:b3:2e:38:da:30:ca:13:41: c1:78:22:63:07:21:91:70:f1:10:6d:a3:1b:13:2c:16:f2:6f: 0f:13:5d:ef:c5:f3:e6:76:45:aa:91:02:92:fb:0e:33:83:fa: 09:bc:2b:40:2a:69:4b:2b:97:ae:b0:1c:4c:10:9d:92:58:1e: 01:79:c4:72:98:86:b7:c6:f6:4a:ad:e5:9c:0e:01:6d:61:dd: c1:15:70:de:68:2b:f9:22:8c:84:37:93:ea:d6:39:97:4a:5e: 78:9e:3f:3b:cb:49:f7:c2:c7:a0:f3:9a:a0:be:5b:07:47:b7: 77:28:b1:e9:25:b8:3b:34:c7:30:46:41:71:05:50:b8:17:01: bd:18:fb:e6:63:fd:1b:dd:5c:84:8c:2b:7d:7f:db:bc:12:ae: dd:13:c0:41:5c:55:e5:3b:1b:ab:5c:f6:95:52:30:ff:00:d4: 8b:b0:90:f2:fe:9a:17:d8:41:4e:d5:fc:19:ad:10:29:b9:2e: 79:03:2d:46:ff:c6:cd:19:eb:c5:66:69:10:4f:89:e0:1c:ce: c7:07:2f:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUX93rWnihEWLRZCKgtvS3cvrh3z8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE2ODBENTkxRTlFNkI0NjIyNjE0Rjk0Q0YyNTU5MzNC Njc0OTIxMjAeFw0yNTA2MDYyMDM2NTFaFw0yNTA2MTAwMzA3NTFaMDMxMTAvBgNV BAMTKDZDMDNEOTYyMUVDQkE2QjAyRUJEN0NBNDY0M0RFOEZBOTcwM0U0RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4GC3u/L3RcGuiDMjNA9oB/g0X +A3lOpI94QFmZAcYJL46Vs0Ze3/4xxDyfF/2aT1z7IAEN/+K1Thfq6FpB44vnDT5 fJ5bAEOdQiYGdyZ8OgH/SX7b/4AG/l8hwxU0fsuCU75aHg+GuHgmTNKHLDKc6I4Z /prD5/rAiLL8mO/h2779OhsA/vMW8O7SQCcZVSPvUMnD2t6BThjaz+nQviAn9GDd ZO60rLe6yDy0svy86VNY8GtfWo+esBANSYRCJIp1z9gFcqIqbbz3uz+G0dF1q6EN iLwPGg54FWBFZP6Cy7G2WgkDbKxP8jrHjmTP7EYQcJe04xqGPFVJWOrju0WpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUbAPZYh7LprAuvXykZD3o+pcD5PIwHwYDVR0j BBgwFoAU2mgNWR6ea0YiYU+UzyVZM7Z0khIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWRhMjNlOS04NGJlLTRhNTQtYmNhMC1lOWEwY2FmZDE2ZmUvMC9EQTY4MEQ1OTFF OUU2QjQ2MjI2MTRGOTRDRjI1NTkzM0I2NzQ5MjEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvREE2ODBENTkxRTlFNkI0NjIyNjE0Rjk0Q0YyNTU5MzNCNjc0 OTIxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFkYTIzZTktODRiZS00YTU0LWJj YTAtZTlhMGNhZmQxNmZlLzAvREE2ODBENTkxRTlFNkI0NjIyNjE0Rjk0Q0YyNTU5 MzNCNjc0OTIxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJMRAUgRJZjHRVST4/I3/jfB5bvuoC5vcjCI U5E7R3dZ5DUh00SHcZCFt1qbEOazLjjaMMoTQcF4ImMHIZFw8RBtoxsTLBbybw8T Xe/F8+Z2RaqRApL7DjOD+gm8K0AqaUsrl66wHEwQnZJYHgF5xHKYhrfG9kqt5ZwO AW1h3cEVcN5oK/kijIQ3k+rWOZdKXniePzvLSffCx6DzmqC+WwdHt3cosekluDs0 xzBGQXEFULgXAb0Y++Zj/RvdXISMK31/27wSrt0TwEFcVeU7G6tc9pVSMP8A1Iuw kPL+mhfYQU7V/BmtECm5LnkDLUb/xs0Z68VmaRBPieAczscHL6s= -----END CERTIFICATE-----Generated at Sun Jun 8 00:49:33 2025 by rpki-client