$ rpki-client -vvf repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.mft File: DEF44331E724964F28697DEABAF2313CDCEEFACE.mft (raw, json) Hash identifier: AhomFOXNc74dJsUmrJyRW+p63decFFNQlWBpQaakhFc= Subject key identifier: B0:C1:4B:F8:BF:A9:96:C3:05:7C:AB:5A:9A:15:EE:D2:E5:EC:71:43 Authority key identifier: DE:F4:43:31:E7:24:96:4F:28:69:7D:EA:BA:F2:31:3C:DC:EE:FA:CE Certificate issuer: /CN=DEF44331E724964F28697DEABAF2313CDCEEFACE Certificate serial: 7D849EA4434DF4B7925E4339FC0A2A5362CDCCA6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEF44331E724964F28697DEABAF2313CDCEEFACE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.mft Manifest number: 04D8 Signing time: Wed 04 Jun 2025 08:50:56 +0000 Manifest this update: Wed 04 Jun 2025 08:45:56 +0000 Manifest next update: Sat 07 Jun 2025 16:46:56 +0000 Files and hashes: 1: DEF44331E724964F28697DEABAF2313CDCEEFACE.crl (hash: 0GMnRMUgsSy7XZyTa+EGy3ib6ygTfsNhUMPh48UGXsE=) 2: 3130332e3130382e3139312e302f32342d3234203d3e20313337333132.roa (hash: rUdT5hgB1MoqDtYNUlsd/H7JJhMR5l8B8KRXMe+OwOs=) 3: 323030313a6466343a316630303a3a2f34382d3438203d3e20313337333132.roa (hash: JRR7XEn+B9iX1MKG6S3DWTWk+XJaRXgwa3RueWQgr7k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.crl rsync://repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEF44331E724964F28697DEABAF2313CDCEEFACE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 07 Jun 2025 16:46:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:84:9e:a4:43:4d:f4:b7:92:5e:43:39:fc:0a:2a:53:62:cd:cc:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEF44331E724964F28697DEABAF2313CDCEEFACE Validity Not Before: Jun 4 08:45:56 2025 GMT Not After : Jun 7 16:46:56 2025 GMT Subject: CN=B0C14BF8BFA996C3057CAB5A9A15EED2E5EC7143 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:c4:42:b0:59:88:ea:95:b2:ca:53:b6:55:5a: fb:be:4f:6f:06:89:f2:39:46:03:9d:db:5f:86:89: 3f:01:0b:41:d9:20:c0:bf:3d:7a:23:78:f4:aa:88: 0d:fa:fe:03:90:74:7c:cf:b2:a5:33:df:06:5a:d7: 56:c1:97:86:01:13:8b:29:71:ce:91:98:8c:cf:dc: 16:73:4a:b4:67:b3:fe:aa:dc:4e:26:3e:db:cd:03: 5b:18:59:57:a8:9a:79:61:b4:ee:d0:5b:0f:4c:26: 46:7c:dd:9b:5d:0e:25:c0:65:cf:42:58:97:f9:bd: 67:d8:2d:98:3c:28:b9:37:55:16:18:05:c9:58:e6: fc:5d:2d:f5:c6:f7:fd:d5:2c:a4:2e:0c:5d:db:f3: 59:85:36:29:d3:f5:97:d7:34:70:e5:8c:9e:08:73: c6:a3:ee:dc:c0:85:8b:2c:48:0e:41:40:26:30:42: 4a:1c:dd:72:f7:ee:43:9a:00:1c:06:57:7f:d3:cc: af:e9:67:43:e1:5d:7a:69:a5:f0:8f:7e:ad:a6:5f: 3d:6d:c1:4e:8a:4a:19:3f:50:0b:ef:2d:79:9c:08: 5d:ab:2b:75:e6:ab:a5:78:a6:43:26:0d:75:82:02: fe:15:18:af:a6:94:8f:f9:2a:f9:4c:86:1f:91:48: a7:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B0:C1:4B:F8:BF:A9:96:C3:05:7C:AB:5A:9A:15:EE:D2:E5:EC:71:43 X509v3 Authority Key Identifier: keyid:DE:F4:43:31:E7:24:96:4F:28:69:7D:EA:BA:F2:31:3C:DC:EE:FA:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEF44331E724964F28697DEABAF2313CDCEEFACE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:49:c3:b5:ff:de:0a:31:84:b1:ae:f6:76:27:48:ca:8c:fd: 90:bd:5b:1b:18:a4:74:a0:a4:8f:c2:d9:3d:2d:d7:83:d5:9c: 42:c4:b8:9f:a9:52:96:f0:03:82:10:c6:e9:62:38:16:fd:a3: 81:50:3d:32:85:57:0e:97:10:ae:85:3c:32:36:a8:1a:66:7e: 83:51:fb:ac:2e:00:7a:c9:0a:5a:91:bc:14:16:ad:e9:81:ad: 71:e2:21:83:7f:18:a7:59:0c:a9:5b:cf:88:ef:dd:2d:29:8c: eb:1a:af:53:28:8e:b0:1f:ba:18:26:b9:92:3b:7f:d5:27:4c: c5:e4:6d:2a:38:a0:59:f9:b3:d7:af:58:d9:26:06:73:5a:30: f2:d8:fb:06:c0:ff:b0:0f:c8:54:25:be:59:b3:11:51:b6:d6: 72:3e:59:ec:dd:bd:fc:4e:bb:f6:48:64:8d:fc:0b:93:c5:25: 02:b8:e1:e6:95:59:5c:81:61:c3:d3:da:e4:d5:77:96:61:35: f1:04:2f:f1:f7:0c:e8:fe:08:92:07:51:2d:64:5d:d1:a6:58: ef:fb:e7:d5:f4:29:e5:01:20:68:a9:2f:1c:90:42:d6:c7:cf: da:9d:01:8a:ac:0c:eb:89:be:3d:27:1b:38:23:d4:91:5e:27: 2e:62:69:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfYSepENN9LeSXkM5/AoqU2LNzKYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVGNDQzMzFFNzI0OTY0RjI4Njk3REVBQkFGMjMxM0NE Q0VFRkFDRTAeFw0yNTA2MDQwODQ1NTZaFw0yNTA2MDcxNjQ2NTZaMDMxMTAvBgNV BAMTKEIwQzE0QkY4QkZBOTk2QzMwNTdDQUI1QTlBMTVFRUQyRTVFQzcxNDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCxEKwWYjqlbLKU7ZVWvu+T28G ifI5RgOd21+GiT8BC0HZIMC/PXojePSqiA36/gOQdHzPsqUz3wZa11bBl4YBE4sp cc6RmIzP3BZzSrRns/6q3E4mPtvNA1sYWVeomnlhtO7QWw9MJkZ83ZtdDiXAZc9C WJf5vWfYLZg8KLk3VRYYBclY5vxdLfXG9/3VLKQuDF3b81mFNinT9ZfXNHDljJ4I c8aj7tzAhYssSA5BQCYwQkoc3XL37kOaABwGV3/TzK/pZ0PhXXpppfCPfq2mXz1t wU6KShk/UAvvLXmcCF2rK3Xmq6V4pkMmDXWCAv4VGK+mlI/5KvlMhh+RSKdvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUsMFL+L+plsMFfKtamhXu0uXscUMwHwYDVR0j BBgwFoAU3vRDMecklk8oaX3quvIxPNzu+s4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MTkwYzM3ZS0yNjU1LTQyYjEtYmFmNy00MmVjMWNmMTkyYWEvMC9ERUY0NDMzMUU3 MjQ5NjRGMjg2OTdERUFCQUYyMzEzQ0RDRUVGQUNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREVGNDQzMzFFNzI0OTY0RjI4Njk3REVBQkFGMjMxM0NEQ0VF RkFDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjE5MGMzN2UtMjY1NS00MmIxLWJh ZjctNDJlYzFjZjE5MmFhLzAvREVGNDQzMzFFNzI0OTY0RjI4Njk3REVBQkFGMjMx M0NEQ0VFRkFDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMpJw7X/3goxhLGu9nYnSMqM/ZC9WxsYpHSg pI/C2T0t14PVnELEuJ+pUpbwA4IQxuliOBb9o4FQPTKFVw6XEK6FPDI2qBpmfoNR +6wuAHrJClqRvBQWremBrXHiIYN/GKdZDKlbz4jv3S0pjOsar1MojrAfuhgmuZI7 f9UnTMXkbSo4oFn5s9evWNkmBnNaMPLY+wbA/7APyFQlvlmzEVG21nI+WezdvfxO u/ZIZI38C5PFJQK44eaVWVyBYcPT2uTVd5ZhNfEEL/H3DOj+CJIHUS1kXdGmWO/7 59X0KeUBIGipLxyQQtbHz9qdAYqsDOuJvj0nGzgj1JFeJy5iaSQ= -----END CERTIFICATE-----Generated at Thu Jun 5 18:10:53 2025 by rpki-client