$ rpki-client -vvf repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft File: DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft (raw, json) Hash identifier: eEvNuM5Id2MMPNUhBsqoTWm1cxr9uZP7mkcoxPjdlTw= Subject key identifier: EB:73:D4:F0:D9:DF:D5:F9:33:23:F4:E6:5E:DF:85:8D:CF:7F:C3:D4 Authority key identifier: DA:39:6A:1D:C6:29:9D:C3:BB:9E:8D:D7:65:0D:36:FA:BA:94:49:67 Certificate issuer: /CN=DA396A1DC6299DC3BB9E8DD7650D36FABA944967 Certificate serial: 3A823126EE81E9BD05A21EA1FC90D81CAAB2316D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft Manifest number: 01DB Signing time: Tue 03 Jun 2025 10:41:13 +0000 Manifest this update: Tue 03 Jun 2025 10:36:13 +0000 Manifest next update: Fri 06 Jun 2025 21:46:13 +0000 Files and hashes: 1: 3130332e3136362e34382e302f32332d3234203d3e20313339343630.roa (hash: 0a2CK00YtHnEd2JmEamQH3BHgmE0sjYsMU62NZCZSoM=) 2: DA396A1DC6299DC3BB9E8DD7650D36FABA944967.crl (hash: kiuJ2+qaDnSPH1XmWQ1IpqDTJ+exxyL3jh0M8nYk13o=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.crl rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 06 Jun 2025 21:09:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:82:31:26:ee:81:e9:bd:05:a2:1e:a1:fc:90:d8:1c:aa:b2:31:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA396A1DC6299DC3BB9E8DD7650D36FABA944967 Validity Not Before: Jun 3 10:36:13 2025 GMT Not After : Jun 6 21:46:13 2025 GMT Subject: CN=EB73D4F0D9DFD5F93323F4E65EDF858DCF7FC3D4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:1d:b4:0b:d0:9d:bc:8b:1c:1d:32:c3:1d:b1: 64:5e:87:27:65:76:d5:35:f7:36:fd:f3:c3:af:6e: f3:f3:8d:3b:b2:26:d8:f3:54:49:8c:42:90:17:45: ac:c8:af:75:3b:d3:ac:1b:2a:dd:7d:ec:f8:ae:bb: ab:4d:a8:03:6f:e8:46:40:b3:14:d5:b7:62:18:f9: 02:d7:fc:4e:9c:cb:c9:55:d2:4d:2f:40:38:cc:24: 5b:f6:ee:7b:49:3e:be:92:c1:53:cb:3d:a9:11:b5: fd:fe:a9:2b:53:7c:55:ea:cb:e0:47:94:63:9c:2c: e5:ea:2b:ca:cd:5b:4a:9f:67:21:21:3e:b8:2c:5a: 85:65:1a:90:a1:7f:a1:37:92:10:c4:ed:59:f6:76: d4:9f:6f:48:ef:b7:08:3a:84:04:8f:b6:40:df:96: 27:53:6d:36:0d:38:6b:9d:e3:f3:cd:1e:2e:0a:5a: d6:5c:1e:07:2a:26:af:f0:f2:12:ac:f7:1a:9d:00: 94:d3:8a:88:ad:e3:17:f5:2e:4e:22:4c:52:dd:92: 90:f0:c3:95:55:cf:69:ca:d6:ef:e2:4b:73:2d:6d: 9c:eb:b7:af:aa:67:dc:5a:7c:43:86:cb:b3:54:74: 06:a1:3e:f3:50:c3:2a:0c:5b:52:78:70:12:a4:3f: e2:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:73:D4:F0:D9:DF:D5:F9:33:23:F4:E6:5E:DF:85:8D:CF:7F:C3:D4 X509v3 Authority Key Identifier: keyid:DA:39:6A:1D:C6:29:9D:C3:BB:9E:8D:D7:65:0D:36:FA:BA:94:49:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:72:c2:a2:5f:16:39:72:f8:f3:a8:cb:c4:e3:f0:b8:6e:67: fa:ae:86:7e:96:26:6e:8a:5d:42:b1:37:f3:a3:e4:07:e5:e0: d8:1c:3c:2a:51:5a:21:84:44:76:f2:e3:4a:da:c0:1a:ba:e1: 66:95:70:34:83:8b:5a:9c:2f:d0:19:3c:3a:54:d0:4a:fe:1a: d3:91:19:8f:8b:79:30:a4:99:1a:26:fe:d0:00:df:5a:a2:85: 2a:fe:0c:61:8b:9c:a3:09:d3:48:23:12:20:47:df:71:36:d0: f4:f6:b6:bd:bd:e3:c7:f5:51:b6:a4:2c:a7:fe:f0:00:17:65: 59:a3:39:3e:fa:49:7b:4f:e3:23:1a:2b:c9:2c:18:8d:1e:25: 39:d8:57:3d:f0:86:cf:45:27:1b:cd:b4:80:9d:bd:dd:97:ea: 90:aa:40:35:71:e4:73:d1:66:fc:aa:92:fd:2d:af:ca:14:eb: 03:4b:e5:b7:62:2e:9e:54:a4:79:39:a4:ee:42:d4:6b:2d:2f: 6e:00:3e:b3:cb:03:05:63:6f:5b:e5:b6:cb:91:74:75:71:50: f4:85:b2:cd:28:a7:d2:00:b3:79:8a:b3:17:db:be:86:4e:0a: 59:33:6f:c8:5e:9e:6e:89:33:83:9e:03:59:12:90:85:7b:60: e6:c5:71:1b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOoIxJu6B6b0Foh6h/JDYHKqyMW0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREEzOTZBMURDNjI5OURDM0JCOUU4REQ3NjUwRDM2RkFC QTk0NDk2NzAeFw0yNTA2MDMxMDM2MTNaFw0yNTA2MDYyMTQ2MTNaMDMxMTAvBgNV BAMTKEVCNzNENEYwRDlERkQ1RjkzMzIzRjRFNjVFREY4NThEQ0Y3RkMzRDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3HbQL0J28ixwdMsMdsWRehydl dtU19zb988OvbvPzjTuyJtjzVEmMQpAXRazIr3U706wbKt197Piuu6tNqANv6EZA sxTVt2IY+QLX/E6cy8lV0k0vQDjMJFv27ntJPr6SwVPLPakRtf3+qStTfFXqy+BH lGOcLOXqK8rNW0qfZyEhPrgsWoVlGpChf6E3khDE7Vn2dtSfb0jvtwg6hASPtkDf lidTbTYNOGud4/PNHi4KWtZcHgcqJq/w8hKs9xqdAJTTioit4xf1Lk4iTFLdkpDw w5VVz2nK1u/iS3MtbZzrt6+qZ9xafEOGy7NUdAahPvNQwyoMW1J4cBKkP+IrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU63PU8Nnf1fkzI/TmXt+Fjc9/w9QwHwYDVR0j BBgwFoAU2jlqHcYpncO7no3XZQ02+rqUSWcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OGI2M2U3ZC1hNjE3LTRlOGMtYTgyMS02MjM5NTZkNGQ0YWUvMC9EQTM5NkExREM2 Mjk5REMzQkI5RThERDc2NTBEMzZGQUJBOTQ0OTY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREEzOTZBMURDNjI5OURDM0JCOUU4REQ3NjUwRDM2RkFCQTk0 NDk2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZThiNjNlN2QtYTYxNy00ZThjLWE4 MjEtNjIzOTU2ZDRkNGFlLzAvREEzOTZBMURDNjI5OURDM0JCOUU4REQ3NjUwRDM2 RkFCQTk0NDk2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAJywqJfFjly+POoy8Tj8LhuZ/quhn6WJm6K XUKxN/Oj5Afl4NgcPCpRWiGERHby40rawBq64WaVcDSDi1qcL9AZPDpU0Er+GtOR GY+LeTCkmRom/tAA31qihSr+DGGLnKMJ00gjEiBH33E20PT2tr2948f1UbakLKf+ 8AAXZVmjOT76SXtP4yMaK8ksGI0eJTnYVz3whs9FJxvNtICdvd2X6pCqQDVx5HPR Zvyqkv0tr8oU6wNL5bdiLp5UpHk5pO5C1GstL24APrPLAwVjb1vltsuRdHVxUPSF ss0op9IAs3mKsxfbvoZOClkzb8henm6JM4OeA1kSkIV7YObFcRs= -----END CERTIFICATE-----Generated at Tue Jun 3 23:14:45 2025 by rpki-client