$ rpki-client -vvf repo-rpki.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DFAE11418F2175A57D01D8F80A61497CC1F5306C.mft File: DFAE11418F2175A57D01D8F80A61497CC1F5306C.mft (raw, json) Hash identifier: vpSRmvOIPePTo78HcA53dN4JNxABBKBw+eBkqLnB4wI= Subject key identifier: 23:18:10:79:13:2A:55:5E:64:20:1B:CB:06:5C:CD:38:33:C2:76:8E Authority key identifier: DF:AE:11:41:8F:21:75:A5:7D:01:D8:F8:0A:61:49:7C:C1:F5:30:6C Certificate issuer: /CN=DFAE11418F2175A57D01D8F80A61497CC1F5306C Certificate serial: 5C19CBA9200C7DAE24B00DD574A8E0229694197D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFAE11418F2175A57D01D8F80A61497CC1F5306C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DFAE11418F2175A57D01D8F80A61497CC1F5306C.mft Manifest number: 0328 Signing time: Mon 02 Jun 2025 04:21:25 +0000 Manifest this update: Mon 02 Jun 2025 04:16:25 +0000 Manifest next update: Thu 05 Jun 2025 12:17:25 +0000 Files and hashes: 1: 3130332e3137312e3138342e302f32342d3234203d3e20313432333734.roa (hash: 6aMZ4xs6I3z2wIHDjzXkkCFtdMcUice/aLHdynSzMx8=) 2: DFAE11418F2175A57D01D8F80A61497CC1F5306C.crl (hash: 67n5iswMDlE7rX4VHKIfidkaMSplizSROu4OodL8baU=) 3: 3130332e3137312e3138352e302f32342d3234203d3e20313432333734.roa (hash: Un4jBswELs85PKZIKBQlwX0Wi2V6PoeRbOj08OHDeeg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DFAE11418F2175A57D01D8F80A61497CC1F5306C.crl rsync://repo-rpki.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DFAE11418F2175A57D01D8F80A61497CC1F5306C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFAE11418F2175A57D01D8F80A61497CC1F5306C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 12:17:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:19:cb:a9:20:0c:7d:ae:24:b0:0d:d5:74:a8:e0:22:96:94:19:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFAE11418F2175A57D01D8F80A61497CC1F5306C Validity Not Before: Jun 2 04:16:25 2025 GMT Not After : Jun 5 12:17:25 2025 GMT Subject: CN=23181079132A555E64201BCB065CCD3833C2768E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:ea:97:3a:ef:7a:00:4b:7a:d9:82:92:19:a7: 25:53:1b:d2:71:c0:95:fd:e1:75:29:a0:79:48:d4: 38:0d:1d:63:28:99:01:1a:df:21:43:fe:09:9a:56: ef:b8:7d:b7:61:f8:d2:e7:a8:6b:e6:96:a1:e9:d6: 73:32:6b:a2:73:9d:ee:63:6a:18:7a:b5:91:ad:77: c1:dd:53:72:a0:7c:e5:b4:b4:6f:46:00:d3:6d:4d: 3e:39:33:91:3e:c0:99:71:8b:b6:b0:7f:cc:1a:78: d0:06:f6:51:23:f6:2f:3b:56:32:c1:cd:5a:e3:d4: b5:5d:1e:bb:16:8e:ff:a9:e8:aa:75:fb:d7:c5:7e: af:04:78:74:a4:4b:ba:d3:4d:c0:dd:3e:2c:98:b0: f5:0a:cb:87:9c:af:ce:c8:a8:bd:4f:c9:a6:0e:2a: 2e:3f:35:bd:45:3b:75:0e:92:81:57:29:fb:b9:d0: 99:bf:ed:8b:10:38:9c:17:b2:91:42:a2:ba:7f:c5: c9:a6:dd:c0:ae:d8:57:a8:84:a4:b0:c7:fb:68:f0: 48:7d:a1:e1:41:a2:69:27:5b:55:61:70:84:c1:d5: 60:04:68:5b:b9:1e:77:25:af:17:5d:61:b9:41:ad: 3d:50:c2:e3:79:f2:04:04:d4:a1:72:1c:1c:12:c5: 4e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:18:10:79:13:2A:55:5E:64:20:1B:CB:06:5C:CD:38:33:C2:76:8E X509v3 Authority Key Identifier: keyid:DF:AE:11:41:8F:21:75:A5:7D:01:D8:F8:0A:61:49:7C:C1:F5:30:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DFAE11418F2175A57D01D8F80A61497CC1F5306C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFAE11418F2175A57D01D8F80A61497CC1F5306C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DFAE11418F2175A57D01D8F80A61497CC1F5306C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:ed:fc:ad:36:bd:fb:1c:69:d8:99:2f:dd:fe:93:f0:29:8d: d8:5a:38:7a:01:6a:f7:3d:b4:44:94:70:c6:e1:97:a4:20:58: cd:90:21:bf:c1:dc:5f:ea:7a:df:e7:48:79:7d:6d:a6:fb:69: cd:97:9c:c3:ee:9b:fa:4f:ea:54:7b:e9:96:a5:00:30:e2:82: 7d:e0:f9:15:49:31:41:91:7b:5f:b0:21:5e:ee:fc:37:08:97: 61:4f:c2:66:55:78:e2:a9:0d:34:f7:1b:1a:0b:f3:4e:db:5c: a8:99:f2:2d:72:4e:08:ed:4e:a8:3b:28:22:89:db:7c:6a:e3: 76:95:28:f5:39:68:83:cb:74:d4:a2:6e:1b:f5:62:64:0c:b8: 9d:6a:57:2f:f7:9c:df:83:94:2d:e4:f7:aa:92:54:fd:e1:03: aa:56:e6:21:8a:ab:e3:48:8c:c5:ac:31:79:81:6f:0d:ec:1a: b8:de:f3:16:3f:f7:40:7a:10:4c:c3:6c:a3:cc:67:6c:52:01: 69:5c:fe:81:12:39:e9:1c:51:54:98:3f:b4:de:bd:6c:45:09: 89:8e:13:30:1c:69:36:f0:f1:93:55:d5:80:95:18:e2:49:cd: 2c:f1:4f:42:d1:54:1e:ee:aa:bf:2f:3f:79:7e:ca:ec:04:c0: a3:ba:d7:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXBnLqSAMfa4ksA3VdKjgIpaUGX0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZBRTExNDE4RjIxNzVBNTdEMDFEOEY4MEE2MTQ5N0ND MUY1MzA2QzAeFw0yNTA2MDIwNDE2MjVaFw0yNTA2MDUxMjE3MjVaMDMxMTAvBgNV BAMTKDIzMTgxMDc5MTMyQTU1NUU2NDIwMUJDQjA2NUNDRDM4MzNDMjc2OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv6pc673oAS3rZgpIZpyVTG9Jx wJX94XUpoHlI1DgNHWMomQEa3yFD/gmaVu+4fbdh+NLnqGvmlqHp1nMya6Jzne5j ahh6tZGtd8HdU3KgfOW0tG9GANNtTT45M5E+wJlxi7awf8waeNAG9lEj9i87VjLB zVrj1LVdHrsWjv+p6Kp1+9fFfq8EeHSkS7rTTcDdPiyYsPUKy4ecr87IqL1PyaYO Ki4/Nb1FO3UOkoFXKfu50Jm/7YsQOJwXspFCorp/xcmm3cCu2FeohKSwx/to8Eh9 oeFBomknW1VhcITB1WAEaFu5HnclrxddYblBrT1QwuN58gQE1KFyHBwSxU7jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUIxgQeRMqVV5kIBvLBlzNODPCdo4wHwYDVR0j BBgwFoAU364RQY8hdaV9Adj4CmFJfMH1MGwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODU1ZjQ1MC1lYjdmLTRhMjYtYTZjNC1mOTgyN2VlMGE1YjgvMC9ERkFFMTE0MThG MjE3NUE1N0QwMUQ4RjgwQTYxNDk3Q0MxRjUzMDZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREZBRTExNDE4RjIxNzVBNTdEMDFEOEY4MEE2MTQ5N0NDMUY1 MzA2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjg1NWY0NTAtZWI3Zi00YTI2LWE2 YzQtZjk4MjdlZTBhNWI4LzAvREZBRTExNDE4RjIxNzVBNTdEMDFEOEY4MEE2MTQ5 N0NDMUY1MzA2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFnt/K02vfscadiZL93+k/ApjdhaOHoBavc9 tESUcMbhl6QgWM2QIb/B3F/qet/nSHl9bab7ac2XnMPum/pP6lR76ZalADDign3g +RVJMUGRe1+wIV7u/DcIl2FPwmZVeOKpDTT3GxoL807bXKiZ8i1yTgjtTqg7KCKJ 23xq43aVKPU5aIPLdNSibhv1YmQMuJ1qVy/3nN+DlC3k96qSVP3hA6pW5iGKq+NI jMWsMXmBbw3sGrje8xY/90B6EEzDbKPMZ2xSAWlc/oESOekcUVSYP7TevWxFCYmO EzAcaTbw8ZNV1YCVGOJJzSzxT0LRVB7uqr8vP3l+yuwEwKO614A= -----END CERTIFICATE-----Generated at Tue Jun 3 23:34:15 2025 by rpki-client