$ rpki-client -vvf repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft File: DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft (raw, json) Hash identifier: EPpuRzPsS+94PxKvbFMlM4n9/edzHmB9YXXHJZHr1Ow= Subject key identifier: 78:D5:05:9D:67:7D:DB:42:9B:D5:18:53:75:1C:06:6B:08:ED:94:64 Authority key identifier: DF:8E:F2:99:4C:B5:42:09:F2:C2:A3:9A:7B:CE:7D:A0:D9:C3:4E:4A Certificate issuer: /CN=DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A Certificate serial: 119A5911BBBE1E8F82C77E30E744A7D4776CBBB7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft Manifest number: 0312 Signing time: Mon 02 Jun 2025 09:31:14 +0000 Manifest this update: Mon 02 Jun 2025 09:26:14 +0000 Manifest next update: Thu 05 Jun 2025 18:35:14 +0000 Files and hashes: 1: DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.crl (hash: 3D+JoM7Rk5LafyDXYbPgpZtMaplzC6mtVSkiNX8nZFQ=) 2: 323430343a326363303a3a2f33322d3438203d3e20313331373336.roa (hash: h8DSOqlAB7DM5TJQosNDXf2STLaxOgc/wT91U1wd/Qs=) 3: 3130332e3133322e31322e302f32322d3234203d3e20313331373336.roa (hash: UUq68ar7HAMDX81IMpy1nkM8WYEb11BQCvn3QoFFoCE=) 4: 323430343a326363303a323a3a2f34382d3438203d3e20313331373336.roa (hash: Y94ACgKRW/B6r5u1l5R9++TiByrUg/dDZ6VyKO+Pxik=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.crl rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 18:35:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:9a:59:11:bb:be:1e:8f:82:c7:7e:30:e7:44:a7:d4:77:6c:bb:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A Validity Not Before: Jun 2 09:26:14 2025 GMT Not After : Jun 5 18:35:14 2025 GMT Subject: CN=78D5059D677DDB429BD51853751C066B08ED9464 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:17:d3:60:ab:94:4e:0d:1b:b8:f9:3f:ed:14: 2a:55:b6:a1:86:4b:47:c8:7e:97:8b:dd:22:91:78: 60:6c:fd:6c:7f:8d:24:44:bc:e9:20:85:97:30:55: 92:38:14:1c:06:97:38:93:31:10:af:92:d9:3a:57: 91:41:95:e7:6a:55:5a:94:92:0b:15:1e:ac:f8:4a: 0c:ff:76:35:10:41:9d:c1:da:25:bc:6e:9e:cd:cd: 39:90:b3:3a:c7:6e:70:5b:60:d7:05:19:36:63:a4: 04:04:33:fc:13:a3:1d:c7:d1:c6:aa:f3:c9:30:e3: ee:33:c9:3c:6a:f7:52:e5:ce:c5:bf:fa:36:f4:91: df:09:d8:b8:34:e4:0c:aa:be:c2:19:74:f7:d3:35: e6:3a:97:9d:67:4e:8e:f4:aa:67:80:0c:bf:db:27: 64:ea:0a:c3:8b:28:4e:68:59:06:bc:38:93:66:e1: 18:09:5a:25:da:38:8f:80:1b:ef:42:58:a9:dd:a2: 2d:e5:4d:3c:c5:01:dc:a0:1b:bc:e7:d9:c8:a0:64: 60:c5:0d:6b:1c:29:6b:0a:01:9e:b3:ad:2b:f8:84: 0c:bb:c1:08:95:6e:48:72:9d:23:7f:a0:2b:29:5f: 75:78:34:49:51:8c:9a:f8:63:7e:6b:d0:da:0c:89: a7:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:D5:05:9D:67:7D:DB:42:9B:D5:18:53:75:1C:06:6B:08:ED:94:64 X509v3 Authority Key Identifier: keyid:DF:8E:F2:99:4C:B5:42:09:F2:C2:A3:9A:7B:CE:7D:A0:D9:C3:4E:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:fb:a7:a7:f3:66:9a:96:94:e0:34:6b:07:2f:2c:19:8d:78: c4:9a:a9:21:32:d9:f5:ce:5b:64:92:25:17:fd:98:e9:74:2c: 78:08:dc:01:f9:00:67:6b:aa:6b:94:c7:16:11:8a:4a:32:b2: 75:47:2a:55:9c:98:5c:ad:66:55:06:2b:59:b4:94:a2:46:3a: 01:81:96:1f:86:36:6c:7e:29:a9:7d:34:6c:46:19:41:9b:34: 33:6a:42:1d:ad:69:36:a5:06:45:96:2b:96:1b:4d:8b:58:5b: 57:70:92:10:28:37:4a:f1:a8:06:6e:33:36:9c:16:28:90:59: 27:d1:35:0d:41:f0:e4:b9:28:5a:a6:2d:62:a7:a0:fd:6a:78: 37:2d:fe:74:03:6d:5d:84:45:a1:a8:81:76:15:ac:38:23:39: a4:4d:d8:da:54:25:5b:d0:55:9d:fa:14:28:66:8a:3c:42:9a: 75:ab:4f:25:32:eb:3f:5c:fb:88:d1:44:c0:f2:ca:39:d6:9c: 80:0d:93:3c:70:29:b8:90:70:ab:82:1f:d3:6e:8c:aa:02:bf: db:9c:63:a9:c8:f4:c7:00:80:6b:9e:58:f4:df:79:ea:e9:d1: 73:c8:74:e7:e2:ff:80:2e:30:7e:8c:fb:3a:15:30:4a:39:52: 78:22:cb:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUEZpZEbu+Ho+Cx34w50Sn1Hdsu7cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY4RUYyOTk0Q0I1NDIwOUYyQzJBMzlBN0JDRTdEQTBE OUMzNEU0QTAeFw0yNTA2MDIwOTI2MTRaFw0yNTA2MDUxODM1MTRaMDMxMTAvBgNV BAMTKDc4RDUwNTlENjc3RERCNDI5QkQ1MTg1Mzc1MUMwNjZCMDhFRDk0NjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7F9Ngq5RODRu4+T/tFCpVtqGG S0fIfpeL3SKReGBs/Wx/jSREvOkghZcwVZI4FBwGlziTMRCvktk6V5FBledqVVqU kgsVHqz4Sgz/djUQQZ3B2iW8bp7NzTmQszrHbnBbYNcFGTZjpAQEM/wTox3H0caq 88kw4+4zyTxq91LlzsW/+jb0kd8J2Lg05AyqvsIZdPfTNeY6l51nTo70qmeADL/b J2TqCsOLKE5oWQa8OJNm4RgJWiXaOI+AG+9CWKndoi3lTTzFAdygG7zn2cigZGDF DWscKWsKAZ6zrSv4hAy7wQiVbkhynSN/oCspX3V4NElRjJr4Y35r0NoMiafHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUeNUFnWd920Kb1RhTdRwGawjtlGQwHwYDVR0j BBgwFoAU347ymUy1QgnywqOae859oNnDTkowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjVjZGEzNi02OTNhLTRjMWEtYmE5ZS1lMGUxNzgxMTIxNDAvMC9ERjhFRjI5OTRD QjU0MjA5RjJDMkEzOUE3QkNFN0RBMEQ5QzM0RTRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREY4RUYyOTk0Q0I1NDIwOUYyQzJBMzlBN0JDRTdEQTBEOUMz NEU0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTI1Y2RhMzYtNjkzYS00YzFhLWJh OWUtZTBlMTc4MTEyMTQwLzAvREY4RUYyOTk0Q0I1NDIwOUYyQzJBMzlBN0JDRTdE QTBEOUMzNEU0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHT7p6fzZpqWlOA0awcvLBmNeMSaqSEy2fXO W2SSJRf9mOl0LHgI3AH5AGdrqmuUxxYRikoysnVHKlWcmFytZlUGK1m0lKJGOgGB lh+GNmx+Kal9NGxGGUGbNDNqQh2taTalBkWWK5YbTYtYW1dwkhAoN0rxqAZuMzac FiiQWSfRNQ1B8OS5KFqmLWKnoP1qeDct/nQDbV2ERaGogXYVrDgjOaRN2NpUJVvQ VZ36FChmijxCmnWrTyUy6z9c+4jRRMDyyjnWnIANkzxwKbiQcKuCH9NujKoCv9uc Y6nI9McAgGueWPTfeerp0XPIdOfi/4AuMH6M+zoVMEo5Ungiy0c= -----END CERTIFICATE-----Generated at Tue Jun 3 23:48:39 2025 by rpki-client