$ rpki-client -vvf repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.mft File: DEA386454A080E52CD4B89DB87E873E2BB375D86.mft (raw, json) Hash identifier: sMU3ycNnHNNTmfB3aLAjnC+MZ/AGfglZRnxRl8AyaXQ= Subject key identifier: FB:65:37:E5:8E:A5:3C:47:72:71:1B:6C:05:5A:A0:91:0F:0B:66:08 Authority key identifier: DE:A3:86:45:4A:08:0E:52:CD:4B:89:DB:87:E8:73:E2:BB:37:5D:86 Certificate issuer: /CN=DEA386454A080E52CD4B89DB87E873E2BB375D86 Certificate serial: 458038187DADF97AC3C3955ED1580539A7315939 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEA386454A080E52CD4B89DB87E873E2BB375D86.cer Subject info access: rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.mft Manifest number: 0192 Signing time: Mon 02 Jun 2025 00:21:26 +0000 Manifest this update: Mon 02 Jun 2025 00:16:26 +0000 Manifest next update: Thu 05 Jun 2025 01:21:26 +0000 Files and hashes: 1: 3130332e36352e3233362e302f32332d3234203d3e20313335343530.roa (hash: iOcccdQpkl2eLxl0LKt/e7W2F4Q9POflHzcnPXjdyFg=) 2: 3130332e37372e3130362e302f32332d3234203d3e20313335343530.roa (hash: 7mgUNnKF1k9aQc8kIoMQeXk2Q+5QMh9pXTXHjbvLNw4=) 3: DEA386454A080E52CD4B89DB87E873E2BB375D86.crl (hash: NShv6Nf+qLZJuhtAAgUWoUbPZ8H2L73Nxh875CpG1FE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.crl rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEA386454A080E52CD4B89DB87E873E2BB375D86.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 01:21:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:80:38:18:7d:ad:f9:7a:c3:c3:95:5e:d1:58:05:39:a7:31:59:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEA386454A080E52CD4B89DB87E873E2BB375D86 Validity Not Before: Jun 2 00:16:26 2025 GMT Not After : Jun 5 01:21:26 2025 GMT Subject: CN=FB6537E58EA53C4772711B6C055AA0910F0B6608 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d2:a3:34:ad:68:92:ca:6f:dc:65:d6:0e:30: a9:db:98:3c:80:bc:fd:63:89:b6:ca:22:ce:1a:f1: e8:a7:8d:fc:d6:ee:cd:51:af:32:98:fe:5d:e2:c5: bf:9a:61:ce:c6:62:19:47:c0:a8:62:b9:80:3b:54: d1:0d:36:09:da:06:03:c8:b2:57:37:69:9e:c1:28: 49:dd:74:ba:15:43:48:e3:9b:be:b2:7f:f3:6a:6d: 75:3b:3a:08:23:af:db:97:e6:34:89:33:7d:d1:c9: 15:5f:36:58:b3:60:99:78:04:46:26:de:d6:06:d2: 40:88:e7:e4:12:0c:c8:a9:90:e8:18:3e:31:81:3f: e0:8b:83:25:58:db:fb:e6:46:8d:22:ab:af:5c:07: 18:8a:9d:69:c2:ab:8e:31:90:6a:a0:22:b3:38:52: ea:bf:2f:14:aa:05:42:89:7b:ca:e1:21:b4:26:80: af:fc:f1:ec:82:4f:9d:17:62:be:e2:99:9f:df:3d: 80:8a:26:58:98:52:50:cf:4d:73:06:b1:41:07:89: 61:28:fb:c1:17:83:8f:35:16:74:dd:63:ba:e5:eb: 7c:04:2b:66:4d:16:6b:99:60:28:e8:5e:94:60:57: f6:63:ca:b6:a3:68:01:25:8d:1f:94:6e:fa:f1:0e: 33:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FB:65:37:E5:8E:A5:3C:47:72:71:1B:6C:05:5A:A0:91:0F:0B:66:08 X509v3 Authority Key Identifier: keyid:DE:A3:86:45:4A:08:0E:52:CD:4B:89:DB:87:E8:73:E2:BB:37:5D:86 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEA386454A080E52CD4B89DB87E873E2BB375D86.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a608a2e2-f810-46e8-a5a1-56ec5a35d2ad/0/DEA386454A080E52CD4B89DB87E873E2BB375D86.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:48:4a:72:c8:89:07:ad:ac:89:46:50:dd:ca:28:13:39:82: db:5f:cc:96:96:04:0d:ed:02:4d:7c:68:6c:3d:fb:ad:8f:68: fb:18:2c:b2:ba:15:9c:a1:ea:f4:9a:eb:85:30:5e:32:2e:c9: bc:fb:04:5c:38:b4:02:e1:eb:95:76:e6:ab:7b:e7:d1:78:9c: 6c:0d:06:f4:36:5c:79:ef:6f:95:8f:f2:7e:50:46:72:de:aa: 10:cc:36:76:bb:9c:a6:9d:ae:2f:11:b7:00:98:c5:21:18:28: c1:0b:7b:1b:c3:2a:d2:b4:05:ee:f7:fb:8a:16:53:ee:fd:b5: 10:fd:70:3f:33:ed:5a:72:05:50:c3:db:72:d3:0a:26:25:ba: 33:51:a2:d1:6d:4b:41:d2:91:3c:51:d0:78:00:82:93:36:d3: 7c:04:34:d6:5d:19:56:eb:86:34:07:39:bd:4a:35:85:94:8e: 99:e6:8d:54:e4:47:4e:10:8c:c3:23:0c:2c:6b:be:d3:34:a3: ab:2c:93:d2:af:79:ce:42:04:0d:37:8e:af:4a:5f:61:72:3f: 77:1e:04:a2:5c:b3:ee:db:d5:da:ce:f7:65:c4:ea:53:81:85: 85:9f:34:86:0a:41:a8:13:9f:41:c3:dc:eb:14:3d:1e:69:b6: 0d:85:72:d8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURYA4GH2t+XrDw5Ve0VgFOacxWTkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVBMzg2NDU0QTA4MEU1MkNENEI4OURCODdFODczRTJC QjM3NUQ4NjAeFw0yNTA2MDIwMDE2MjZaFw0yNTA2MDUwMTIxMjZaMDMxMTAvBgNV BAMTKEZCNjUzN0U1OEVBNTNDNDc3MjcxMUI2QzA1NUFBMDkxMEYwQjY2MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz0qM0rWiSym/cZdYOMKnbmDyA vP1jibbKIs4a8einjfzW7s1RrzKY/l3ixb+aYc7GYhlHwKhiuYA7VNENNgnaBgPI slc3aZ7BKEnddLoVQ0jjm76yf/NqbXU7Oggjr9uX5jSJM33RyRVfNlizYJl4BEYm 3tYG0kCI5+QSDMipkOgYPjGBP+CLgyVY2/vmRo0iq69cBxiKnWnCq44xkGqgIrM4 Uuq/LxSqBUKJe8rhIbQmgK/88eyCT50XYr7imZ/fPYCKJliYUlDPTXMGsUEHiWEo +8EXg481FnTdY7rl63wEK2ZNFmuZYCjoXpRgV/ZjyrajaAEljR+UbvrxDjNDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU+2U35Y6lPEdycRtsBVqgkQ8LZggwHwYDVR0j BBgwFoAU3qOGRUoIDlLNS4nbh+hz4rs3XYYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h NjA4YTJlMi1mODEwLTQ2ZTgtYTVhMS01NmVjNWEzNWQyYWQvMC9ERUEzODY0NTRB MDgwRTUyQ0Q0Qjg5REI4N0U4NzNFMkJCMzc1RDg2LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREVBMzg2NDU0QTA4MEU1MkNENEI4OURCODdFODczRTJCQjM3 NUQ4Ni5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTYwOGEyZTItZjgxMC00NmU4LWE1 YTEtNTZlYzVhMzVkMmFkLzAvREVBMzg2NDU0QTA4MEU1MkNENEI4OURCODdFODcz RTJCQjM3NUQ4Ni5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ1ISnLIiQetrIlGUN3KKBM5gttfzJaWBA3t Ak18aGw9+62PaPsYLLK6FZyh6vSa64UwXjIuybz7BFw4tALh65V25qt759F4nGwN BvQ2XHnvb5WP8n5QRnLeqhDMNna7nKadri8RtwCYxSEYKMELexvDKtK0Be73+4oW U+79tRD9cD8z7VpyBVDD23LTCiYlujNRotFtS0HSkTxR0HgAgpM203wENNZdGVbr hjQHOb1KNYWUjpnmjVTkR04QjMMjDCxrvtM0o6ssk9Kvec5CBA03jq9KX2FyP3ce BKJcs+7b1drO92XE6lOBhYWfNIYKQagTn0HD3OsUPR5ptg2Fctg= -----END CERTIFICATE-----Generated at Tue Jun 3 23:31:57 2025 by rpki-client