$ rpki-client -vvf repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.mft File: DF1CEA0313DA7500D70AE089169B4BBEE54CA859.mft (raw, json) Hash identifier: jHgkLmIbwwepLkhP9lpKw8YOrUtZMMIQhh0bjaZ7p7E= Subject key identifier: 65:10:FF:E9:A4:2D:4E:C5:56:09:7F:91:18:15:27:D9:C0:A3:EA:C8 Authority key identifier: DF:1C:EA:03:13:DA:75:00:D7:0A:E0:89:16:9B:4B:BE:E5:4C:A8:59 Certificate issuer: /CN=DF1CEA0313DA7500D70AE089169B4BBEE54CA859 Certificate serial: 4A9F32822C2A447942BE2D52F4431A660F98D989 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.mft Manifest number: 04DA Signing time: Sat 14 Jun 2025 10:31:14 +0000 Manifest this update: Sat 14 Jun 2025 10:26:14 +0000 Manifest next update: Tue 17 Jun 2025 12:47:14 +0000 Files and hashes: 1: DF1CEA0313DA7500D70AE089169B4BBEE54CA859.crl (hash: Bv60kE90Int+6zi7aaW3X+gxqh3+sOz3JdY3aEbGljQ=) 2: 3130332e3233332e38382e302f32332d3234203d3e203536323333.roa (hash: 7Q0dwA0Rc1pnpyLnXxos7sM1Wj4t+yMR55gSNZ0dsoU=) 3: 3139322e3134302e3232342e302f32332d3234203d3e203536323333.roa (hash: BlXsQ1QjfVoT6J0SDJFst3KLhMp6LiWyqHWFZlBXj2o=) 4: 3130332e31342e3131302e302f32332d3234203d3e203536323333.roa (hash: tDRK/Vdz8u2hhC9LdyJ4AT+BwDcg/REr12fUhDIA9Bo=) 5: 34332e3235322e3134342e302f32332d3234203d3e203536323333.roa (hash: u7MPei7+iN4f1OLKumfeRBmfOe2wgHqRvP7yaGUByuA=) 6: 3132302e38392e39342e302f32332d3234203d3e203536323333.roa (hash: dkwLIgjutNqyS1fEiwY5jB8EjSSH9/0tY66Lo4b2moY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.crl rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 12:47:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:9f:32:82:2c:2a:44:79:42:be:2d:52:f4:43:1a:66:0f:98:d9:89 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF1CEA0313DA7500D70AE089169B4BBEE54CA859 Validity Not Before: Jun 14 10:26:14 2025 GMT Not After : Jun 17 12:47:14 2025 GMT Subject: CN=6510FFE9A42D4EC556097F91181527D9C0A3EAC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:07:be:f2:37:5d:e2:91:27:78:9a:a2:06:f0: 52:0d:68:58:be:5d:c6:a3:3e:95:69:09:e7:c1:5c: 0b:5d:87:7f:fd:5f:c3:be:16:75:bf:c0:0b:90:92: c7:dd:f2:3b:8d:85:67:42:00:31:1d:db:d1:0c:5b: d2:39:ce:b0:15:0f:d6:42:f5:56:41:66:a3:67:f7: 42:c8:41:c0:fc:b2:57:08:23:59:40:da:2e:fa:f2: 4c:33:97:9e:fc:6e:07:7d:0e:dc:a4:2a:8a:6a:d5: c7:34:6a:b8:38:67:1f:ce:f3:8c:23:d2:64:db:ba: 0b:6d:4b:60:9c:72:65:79:36:a9:2a:0e:45:bf:11: 65:46:4b:7e:58:b0:f8:18:e4:7d:ee:39:c0:d7:e3: d3:4b:65:82:c6:ea:70:be:14:c7:ad:1b:87:fa:39: f5:ca:3e:0c:e4:60:2e:c9:2b:38:f5:16:d2:84:f4: af:8b:bb:25:fa:9b:bd:46:ca:45:bf:62:64:d4:32: ba:73:fd:f2:5c:bd:a6:19:e9:a0:9f:36:2e:f6:f1: 95:7c:2b:72:5d:ba:df:e5:d2:a0:1e:dd:41:07:08: fb:22:44:ba:2f:53:b8:2a:3b:ba:f9:00:02:ae:15: ec:06:d9:f5:75:94:63:cf:73:5e:2e:c4:f9:7e:6d: 8d:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:10:FF:E9:A4:2D:4E:C5:56:09:7F:91:18:15:27:D9:C0:A3:EA:C8 X509v3 Authority Key Identifier: keyid:DF:1C:EA:03:13:DA:75:00:D7:0A:E0:89:16:9B:4B:BE:E5:4C:A8:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:cf:e8:97:73:37:d5:5f:5d:94:bc:d0:a0:11:30:ae:da:f6: d0:d6:f7:ad:60:33:88:97:82:30:1e:b3:01:82:50:dd:1b:d6: 2c:b9:f1:c8:68:08:fe:9a:a2:45:32:23:30:9e:d1:a0:cf:ae: b7:fe:71:a5:f5:34:fa:c0:90:7a:f4:50:30:c1:ea:dd:53:c7: ae:0d:53:69:59:a6:44:eb:1b:4c:62:d1:61:63:75:41:c3:a3: bc:26:14:5e:00:0a:5e:be:2c:eb:f0:37:d8:a1:2d:e7:71:17: 32:f0:ca:75:5d:b2:a0:3b:73:3c:c8:73:19:cb:64:87:e9:35: b9:62:aa:c0:20:89:96:f4:5c:2d:c2:d9:b8:72:30:86:41:0a: 11:ef:57:fb:8b:9f:8a:85:9b:ce:dc:8c:92:cc:37:6a:1d:92: ad:ef:29:85:d1:f8:09:fe:fd:38:a4:08:a9:04:00:3f:3c:27: 96:65:db:15:47:36:e3:fb:a0:ea:53:86:7a:78:a5:07:70:ca: 16:b3:25:63:2b:47:ff:31:fc:2e:71:91:e9:4b:dc:c2:e3:de: cc:87:33:84:07:e3:13:f9:4f:00:34:cc:cb:c6:71:4e:fd:c7: 5a:93:99:ce:7c:b1:fc:ce:d8:b1:c1:87:b4:3a:34:06:c9:c3: 09:d9:0e:12 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSp8ygiwqRHlCvi1S9EMaZg+Y2YkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYxQ0VBMDMxM0RBNzUwMEQ3MEFFMDg5MTY5QjRCQkVF NTRDQTg1OTAeFw0yNTA2MTQxMDI2MTRaFw0yNTA2MTcxMjQ3MTRaMDMxMTAvBgNV BAMTKDY1MTBGRkU5QTQyRDRFQzU1NjA5N0Y5MTE4MTUyN0Q5QzBBM0VBQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvB77yN13ikSd4mqIG8FINaFi+ XcajPpVpCefBXAtdh3/9X8O+FnW/wAuQksfd8juNhWdCADEd29EMW9I5zrAVD9ZC 9VZBZqNn90LIQcD8slcII1lA2i768kwzl578bgd9DtykKopq1cc0arg4Zx/O84wj 0mTbugttS2CccmV5NqkqDkW/EWVGS35YsPgY5H3uOcDX49NLZYLG6nC+FMetG4f6 OfXKPgzkYC7JKzj1FtKE9K+LuyX6m71GykW/YmTUMrpz/fJcvaYZ6aCfNi728ZV8 K3Jdut/l0qAe3UEHCPsiRLovU7gqO7r5AAKuFewG2fV1lGPPc14uxPl+bY0NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZRD/6aQtTsVWCX+RGBUn2cCj6sgwHwYDVR0j BBgwFoAU3xzqAxPadQDXCuCJFptLvuVMqFkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NGZkNGJjMi00MWQ0LTQyZTYtYTdmZi01OTQ5Mzg4NTEyNmEvMC9ERjFDRUEwMzEz REE3NTAwRDcwQUUwODkxNjlCNEJCRUU1NENBODU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREYxQ0VBMDMxM0RBNzUwMEQ3MEFFMDg5MTY5QjRCQkVFNTRD QTg1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDRmZDRiYzItNDFkNC00MmU2LWE3 ZmYtNTk0OTM4ODUxMjZhLzAvREYxQ0VBMDMxM0RBNzUwMEQ3MEFFMDg5MTY5QjRC QkVFNTRDQTg1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHLP6JdzN9VfXZS80KARMK7a9tDW961gM4iX gjAeswGCUN0b1iy58choCP6aokUyIzCe0aDPrrf+caX1NPrAkHr0UDDB6t1Tx64N U2lZpkTrG0xi0WFjdUHDo7wmFF4ACl6+LOvwN9ihLedxFzLwynVdsqA7czzIcxnL ZIfpNbliqsAgiZb0XC3C2bhyMIZBChHvV/uLn4qFm87cjJLMN2odkq3vKYXR+An+ /TikCKkEAD88J5Zl2xVHNuP7oOpThnp4pQdwyhazJWMrR/8x/C5xkelL3MLj3syH M4QH4xP5TwA0zMvGcU79x1qTmc58sfzO2LHBh7Q6NAbJwwnZDhI= -----END CERTIFICATE-----Generated at Sun Jun 15 17:26:28 2025 by rpki-client