$ rpki-client -vvf repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft File: DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft (raw, json) Hash identifier: R/dQP7OPi+DUt+xaNZvofFlUcy9UzUzxeOdzH3FCuuM= Subject key identifier: 6B:A1:2E:77:BE:48:AA:5D:2C:3B:AC:89:F6:A4:3D:C7:CB:A0:00:4E Authority key identifier: DF:68:55:96:DA:F9:D3:65:4A:2E:2F:21:CE:11:AA:0B:B8:0E:45:D1 Certificate issuer: /CN=DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1 Certificate serial: 52F57327E7BF17CF163EE057519964E92A9C939E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft Manifest number: 0314 Signing time: Mon 28 Apr 2025 02:20:34 +0000 Manifest this update: Mon 28 Apr 2025 02:15:34 +0000 Manifest next update: Thu 01 May 2025 09:25:34 +0000 Files and hashes: 1: 3130332e3136392e3235342e302f32342d3234203d3e20313432333730.roa (hash: cIZW3sdgonys96m+uORVonHJxNU9LIGcE2oXfVXwFxY=) 2: DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.crl (hash: zrpmus7JRMxa9nz2TGbOl86lf6tonYqLgWf2RrPl4Ng=) 3: 3130332e3136392e3235342e302f32332d3233203d3e20313432333730.roa (hash: DLJmEfbL3ZCZVVlEJnye8kD0RQcM/dIeZcFOFRkwePE=) 4: 3130332e3136392e3235352e302f32342d3234203d3e20313432333730.roa (hash: Q/U8Xb/QHxtCn198u1dLTqoleCD0AnXLqgQ7wOdppUk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.crl rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 09:25:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:f5:73:27:e7:bf:17:cf:16:3e:e0:57:51:99:64:e9:2a:9c:93:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1 Validity Not Before: Apr 28 02:15:34 2025 GMT Not After : May 1 09:25:34 2025 GMT Subject: CN=6BA12E77BE48AA5D2C3BAC89F6A43DC7CBA0004E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:ca:a8:df:ee:f1:9b:6a:2f:7d:3a:42:68:6e: 18:1e:fd:8f:72:43:19:ba:64:b0:60:2f:a6:00:2a: 98:b1:e6:f6:72:b2:a4:bd:16:7d:70:f2:87:33:20: 36:2f:e6:66:7d:ad:2d:c5:cc:2c:f4:e0:ef:67:ca: 8c:86:dc:39:1b:c4:4a:ba:7c:4b:8a:43:bf:03:8e: 5c:77:f6:46:ff:e8:61:6e:5b:88:f4:b4:33:71:5e: cb:fd:3c:99:3c:6b:e1:51:42:06:20:99:18:af:21: 21:8b:9e:a2:26:b5:96:fc:07:fb:cd:7e:c4:12:0f: 4c:2f:cf:ec:c7:35:13:95:60:71:9f:bf:f5:ea:12: 2a:7a:58:61:40:bb:31:25:62:26:79:63:57:c8:f6: 88:13:25:6b:38:07:fe:c8:28:12:fa:2a:ca:94:67: ee:e6:ff:fa:0c:5b:9a:91:99:a5:e7:c1:cd:28:1c: ff:92:8d:a4:f5:be:3f:88:e1:0c:cf:cd:30:da:04: 44:f6:4b:85:b1:d9:cc:c9:9f:be:7b:06:5e:a7:58: c7:b6:73:20:15:c0:42:a8:c3:fa:34:7f:9d:f4:fd: 26:e6:f9:ea:4f:4b:55:2c:d9:e9:2b:82:ac:b2:d6: 03:de:6f:ed:a5:2d:0b:4e:64:42:fa:e0:2b:86:05: ba:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:A1:2E:77:BE:48:AA:5D:2C:3B:AC:89:F6:A4:3D:C7:CB:A0:00:4E X509v3 Authority Key Identifier: keyid:DF:68:55:96:DA:F9:D3:65:4A:2E:2F:21:CE:11:AA:0B:B8:0E:45:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:c4:a5:fe:69:06:12:fb:3a:40:22:16:d6:06:b6:39:29:07: 63:e2:17:f5:35:af:b6:30:8c:46:75:d5:7b:f7:89:b7:40:55: f0:c6:dd:f3:dd:1c:69:3b:d4:50:cf:a3:d8:26:08:e8:cc:58: 6e:b3:0b:ab:b0:ba:e6:95:91:e7:53:21:91:d0:eb:70:e5:15: 84:79:f4:ba:b5:83:89:15:51:0d:9a:38:97:dc:7b:4f:f0:1c: 63:d9:1c:ea:48:91:35:f8:fc:7f:4d:19:7c:41:c1:54:e4:06: a7:7d:79:99:6c:7c:f8:48:76:42:04:81:d3:90:65:de:cc:00: 00:fa:25:88:a0:b4:a8:f4:58:51:99:cd:d6:b8:27:51:eb:fb: 7e:8e:df:46:1e:4d:52:87:80:a5:18:17:fe:d2:3f:93:a7:7f: 55:0a:0a:4f:15:38:34:68:c9:1c:98:67:b2:03:2c:39:c3:c2: 1a:6a:7b:4c:30:37:e8:27:33:f7:92:08:2a:a4:64:9e:de:ea: ac:a5:42:cb:12:3d:af:06:c9:16:47:af:6e:d8:b4:fc:41:cb: e1:7b:c0:0a:53:a2:22:17:78:6c:bd:78:9f:72:28:13:55:a9: 70:63:97:c4:0e:78:54:dd:e1:98:ae:95:70:96:2e:69:e6:f8: cc:d3:33:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUvVzJ+e/F88WPuBXUZlk6Sqck54wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY2ODU1OTZEQUY5RDM2NTRBMkUyRjIxQ0UxMUFBMEJC ODBFNDVEMTAeFw0yNTA0MjgwMjE1MzRaFw0yNTA1MDEwOTI1MzRaMDMxMTAvBgNV BAMTKDZCQTEyRTc3QkU0OEFBNUQyQzNCQUM4OUY2QTQzREM3Q0JBMDAwNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxyqjf7vGbai99OkJobhge/Y9y Qxm6ZLBgL6YAKpix5vZysqS9Fn1w8oczIDYv5mZ9rS3FzCz04O9nyoyG3DkbxEq6 fEuKQ78Djlx39kb/6GFuW4j0tDNxXsv9PJk8a+FRQgYgmRivISGLnqImtZb8B/vN fsQSD0wvz+zHNROVYHGfv/XqEip6WGFAuzElYiZ5Y1fI9ogTJWs4B/7IKBL6KsqU Z+7m//oMW5qRmaXnwc0oHP+SjaT1vj+I4QzPzTDaBET2S4Wx2czJn757Bl6nWMe2 cyAVwEKow/o0f530/Sbm+epPS1Us2ekrgqyy1gPeb+2lLQtOZEL64CuGBborAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUa6Eud75Iql0sO6yJ9qQ9x8ugAE4wHwYDVR0j BBgwFoAU32hVltr502VKLi8hzhGqC7gORdEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NzUyYjNjMi0zZjMwLTQwNDAtOGIwNS04MzgyMTc3NzA0OGYvMC9ERjY4NTU5NkRB RjlEMzY1NEEyRTJGMjFDRTExQUEwQkI4MEU0NUQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREY2ODU1OTZEQUY5RDM2NTRBMkUyRjIxQ0UxMUFBMEJCODBF NDVEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjc1MmIzYzItM2YzMC00MDQwLThi MDUtODM4MjE3NzcwNDhmLzAvREY2ODU1OTZEQUY5RDM2NTRBMkUyRjIxQ0UxMUFB MEJCODBFNDVEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABzEpf5pBhL7OkAiFtYGtjkpB2PiF/U1r7Yw jEZ11Xv3ibdAVfDG3fPdHGk71FDPo9gmCOjMWG6zC6uwuuaVkedTIZHQ63DlFYR5 9Lq1g4kVUQ2aOJfce0/wHGPZHOpIkTX4/H9NGXxBwVTkBqd9eZlsfPhIdkIEgdOQ Zd7MAAD6JYigtKj0WFGZzda4J1Hr+36O30YeTVKHgKUYF/7SP5Onf1UKCk8VODRo yRyYZ7IDLDnDwhpqe0wwN+gnM/eSCCqkZJ7e6qylQssSPa8GyRZHr27YtPxBy+F7 wApToiIXeGy9eJ9yKBNVqXBjl8QOeFTd4ZiulXCWLmnm+MzTMyE= -----END CERTIFICATE-----Generated at Tue Apr 29 20:30:05 2025 by rpki-client