$ rpki-client -vvf repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft File: DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft (raw, json) Hash identifier: bozcbZdrC5U1/9UePLbfollGNcrqomZnI08fWHH74zI= Subject key identifier: 0E:A3:87:B9:AB:2E:C4:89:A1:49:07:E1:04:65:F0:9E:F7:07:A3:E1 Authority key identifier: DF:0A:C6:ED:AE:FC:E4:FE:D1:EE:8A:4C:0A:7B:C4:EF:D6:22:FB:2E Certificate issuer: /CN=DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E Certificate serial: 0608C77550D375B23F0108F4EE61273C77628806 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft Manifest number: 0155 Signing time: Mon 16 Jun 2025 20:41:42 +0000 Manifest this update: Mon 16 Jun 2025 20:36:42 +0000 Manifest next update: Fri 20 Jun 2025 03:46:42 +0000 Files and hashes: 1: 3130332e3132372e3130362e302f32332d3234203d3e20313530393731.roa (hash: lW1DAyCSTgRvB6XQz9p6ZQqRRWcAHTlnodsMGbhnNcU=) 2: DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.crl (hash: A+IR/zhUbdhOx/c6kBfF8HxlrsWI0Dv41GzziS1j1J0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.crl rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 23:33:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:08:c7:75:50:d3:75:b2:3f:01:08:f4:ee:61:27:3c:77:62:88:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E Validity Not Before: Jun 16 20:36:42 2025 GMT Not After : Jun 20 03:46:42 2025 GMT Subject: CN=0EA387B9AB2EC489A14907E10465F09EF707A3E1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d2:e5:ed:5c:90:96:14:f0:46:ab:8e:39:17: 93:84:23:1d:a4:b4:df:cc:50:1c:47:d8:2a:17:26: 0b:2a:e0:b9:fa:de:39:5c:1a:8a:0b:1c:69:7d:72: d4:cf:78:18:1b:15:d8:37:f1:fa:e5:74:52:5e:62: 83:b5:9b:5f:f2:67:ae:f2:f1:f8:97:d5:15:35:d3: bf:ea:da:56:ea:db:85:2b:db:70:5f:fc:6c:64:8e: 3d:6c:56:99:96:65:82:90:b8:17:7c:cf:6a:c2:c2: e3:55:6c:de:88:f3:96:09:9a:db:b8:28:58:a8:0d: af:f6:24:3c:8c:5f:fd:09:3d:7f:9c:e5:bc:2b:9a: a6:6d:43:e3:6b:b2:cc:1b:27:e6:4c:c4:73:6d:52: e2:8c:a4:9c:af:74:b4:8d:20:df:d4:e8:82:25:89: be:c0:ac:07:1c:50:ee:42:31:1f:c6:b1:74:aa:9c: c9:9f:a2:18:25:eb:a4:df:15:1d:40:67:3b:df:a4: c2:c5:b7:0a:56:a9:f0:b9:8e:f2:15:df:8f:5a:32: f6:a4:63:08:90:f4:bf:10:52:49:6d:ae:48:4e:3e: 68:1e:ef:d9:79:22:9a:5b:a9:18:24:cd:52:4f:20: 7b:b4:80:88:70:24:4b:48:ca:eb:f1:b2:45:f6:50: 70:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0E:A3:87:B9:AB:2E:C4:89:A1:49:07:E1:04:65:F0:9E:F7:07:A3:E1 X509v3 Authority Key Identifier: keyid:DF:0A:C6:ED:AE:FC:E4:FE:D1:EE:8A:4C:0A:7B:C4:EF:D6:22:FB:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:d9:52:8e:23:d5:83:7e:30:7d:83:94:0e:e2:4d:d5:47:34: 60:25:89:94:6c:f9:09:2e:f1:5c:bb:02:aa:0e:ca:92:e1:64: 51:75:8c:c5:ce:6a:dd:ca:e6:ed:a8:25:c5:af:dc:91:ca:99: 8f:d8:55:8f:20:ea:0b:1a:b6:16:65:3b:e5:d0:0d:55:0f:95: fc:eb:b4:d1:74:4f:52:bb:b7:c7:c6:c8:24:93:c2:08:a8:c2: 81:7c:a0:7b:7d:16:18:1d:db:e5:4b:e9:36:d5:94:87:a0:e4: 11:59:3e:f3:3c:3a:18:04:e0:55:35:a4:d4:b6:ec:72:bc:b3: 43:39:20:09:d1:7c:20:53:09:6c:6d:de:f0:4e:e5:6e:8e:72: 6a:94:00:69:e5:32:6e:36:7f:1f:9c:43:30:5e:59:07:1d:e1: 89:49:69:11:e4:9b:64:ef:1f:06:3c:8e:fd:4e:4d:60:20:42: b5:f8:32:47:e4:5b:00:24:b1:d8:19:b7:1b:ae:6d:6b:9f:7d: a4:af:f3:06:62:1b:1a:2c:04:70:b0:f9:0c:aa:9b:8b:58:f5: 8d:79:9a:6b:6f:0d:21:9b:44:ff:27:28:ba:f6:b1:74:61:08: 44:2b:fd:73:ca:81:25:10:87:66:f5:8f:ca:e9:d0:c6:07:1d: 9f:16:1d:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBgjHdVDTdbI/AQj07mEnPHdiiAYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYwQUM2RURBRUZDRTRGRUQxRUU4QTRDMEE3QkM0RUZE NjIyRkIyRTAeFw0yNTA2MTYyMDM2NDJaFw0yNTA2MjAwMzQ2NDJaMDMxMTAvBgNV BAMTKDBFQTM4N0I5QUIyRUM0ODlBMTQ5MDdFMTA0NjVGMDlFRjcwN0EzRTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC80uXtXJCWFPBGq445F5OEIx2k tN/MUBxH2CoXJgsq4Ln63jlcGooLHGl9ctTPeBgbFdg38frldFJeYoO1m1/yZ67y 8fiX1RU107/q2lbq24Ur23Bf/Gxkjj1sVpmWZYKQuBd8z2rCwuNVbN6I85YJmtu4 KFioDa/2JDyMX/0JPX+c5bwrmqZtQ+NrsswbJ+ZMxHNtUuKMpJyvdLSNIN/U6IIl ib7ArAccUO5CMR/GsXSqnMmfohgl66TfFR1AZzvfpMLFtwpWqfC5jvIV349aMvak YwiQ9L8QUkltrkhOPmge79l5IppbqRgkzVJPIHu0gIhwJEtIyuvxskX2UHDPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDqOHuasuxImhSQfhBGXwnvcHo+EwHwYDVR0j BBgwFoAU3wrG7a785P7R7opMCnvE79Yi+y4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OGQ3YTAzOC1mOGExLTRlZDAtYTFhZi01NDk1MmU1NDNjNDMvMC9ERjBBQzZFREFF RkNFNEZFRDFFRThBNEMwQTdCQzRFRkQ2MjJGQjJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREYwQUM2RURBRUZDRTRGRUQxRUU4QTRDMEE3QkM0RUZENjIy RkIyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzhkN2EwMzgtZjhhMS00ZWQwLWEx YWYtNTQ5NTJlNTQzYzQzLzAvREYwQUM2RURBRUZDRTRGRUQxRUU4QTRDMEE3QkM0 RUZENjIyRkIyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAPZUo4j1YN+MH2DlA7iTdVHNGAliZRs+Qku 8Vy7AqoOypLhZFF1jMXOat3K5u2oJcWv3JHKmY/YVY8g6gsathZlO+XQDVUPlfzr tNF0T1K7t8fGyCSTwgiowoF8oHt9Fhgd2+VL6TbVlIeg5BFZPvM8OhgE4FU1pNS2 7HK8s0M5IAnRfCBTCWxt3vBO5W6OcmqUAGnlMm42fx+cQzBeWQcd4YlJaRHkm2Tv HwY8jv1OTWAgQrX4MkfkWwAksdgZtxuubWuffaSv8wZiGxosBHCw+Qyqm4tY9Y15 mmtvDSGbRP8nKLr2sXRhCEQr/XPKgSUQh2b1j8rp0MYHHZ8WHW0= -----END CERTIFICATE-----Generated at Tue Jun 17 00:15:41 2025 by rpki-client