$ rpki-client -vvf repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft File: DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft (raw, json) Hash identifier: CYCGfhqQW9eHs1O93GU5ZM1nw8N7pF0FJSf0DwXsCU0= Subject key identifier: 52:23:84:33:C2:DB:3C:17:25:E1:36:7D:26:BA:74:D2:D8:7E:4A:38 Authority key identifier: DF:77:06:1C:AE:F3:0A:8D:AF:6B:52:D8:A3:D9:FD:80:F3:72:0F:11 Certificate issuer: /CN=DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11 Certificate serial: 38A69609EC1934EDFF9431C2F0A6B841FB65FFE0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft Manifest number: 9E Signing time: Sat 14 Jun 2025 13:30:35 +0000 Manifest this update: Sat 14 Jun 2025 13:25:35 +0000 Manifest next update: Tue 17 Jun 2025 18:44:35 +0000 Files and hashes: 1: 323030313a6466333a663834303a3a2f34382d3438203d3e20313532383330.roa (hash: YS3oqm1Lbyd0/97yvUW9zyotUoDYQl3GyaLAxHR+Jqk=) 2: DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.crl (hash: qokT4HA7PPDxto9pgn4q2UYxEfGxsgjuiLh/on8/7j8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.crl rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 18:44:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:a6:96:09:ec:19:34:ed:ff:94:31:c2:f0:a6:b8:41:fb:65:ff:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11 Validity Not Before: Jun 14 13:25:35 2025 GMT Not After : Jun 17 18:44:35 2025 GMT Subject: CN=52238433C2DB3C1725E1367D26BA74D2D87E4A38 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:48:00:da:b4:eb:c2:14:5f:e1:df:7a:74:de: bf:b4:90:c0:f8:fb:36:02:f1:d9:b0:4e:09:30:2b: 79:df:66:d0:ef:e3:1b:a5:02:9b:f0:65:fc:12:c2: 97:bc:f7:de:58:01:42:27:05:5f:27:0a:d9:33:b1: ef:49:4d:aa:ee:30:b0:b5:81:92:a6:bb:72:53:74: ae:fc:47:fb:93:be:56:10:46:98:87:ab:e3:97:39: ec:fc:19:68:1d:3a:48:66:e1:a2:67:fb:5b:6d:cc: 4d:87:1e:01:33:8f:35:0c:aa:6b:fd:55:46:2e:9d: 65:e0:d6:2f:67:60:ee:dc:19:65:e0:74:5e:c2:bb: 7d:6a:a6:6c:9e:64:95:d4:4e:75:96:29:50:29:20: e3:5e:ee:53:2c:c2:c8:b5:f7:ee:91:bb:84:3c:3b: 6a:15:24:4f:0c:5e:fd:57:41:80:77:f1:37:58:51: d9:41:43:e5:12:dc:6f:14:25:10:fb:cd:a4:14:55: b7:d7:98:01:6b:6f:c6:99:a9:b8:5d:52:4f:24:97: 98:81:0d:96:8e:1c:ea:49:27:e6:82:80:78:1c:4e: aa:8c:44:29:fb:0c:72:fb:18:b6:34:3f:a2:a9:9b: 22:2d:1b:32:be:08:fc:d9:36:2d:8e:fb:7f:11:41: 9d:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:23:84:33:C2:DB:3C:17:25:E1:36:7D:26:BA:74:D2:D8:7E:4A:38 X509v3 Authority Key Identifier: keyid:DF:77:06:1C:AE:F3:0A:8D:AF:6B:52:D8:A3:D9:FD:80:F3:72:0F:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:b3:72:0e:64:9b:8d:a0:47:2c:a9:3e:17:95:e8:18:c5:5e: dd:af:b1:ab:5b:70:f0:79:1a:f4:c0:70:75:f8:c0:e7:74:a0: a5:bc:92:cc:a1:e9:b3:36:0d:dd:f1:ae:f4:3f:b6:6a:8b:e3: 57:7a:81:76:5d:16:26:ae:41:3c:51:42:59:9a:8b:3c:0f:b9: e2:fa:d8:42:c6:fc:5f:33:06:56:01:ec:62:1d:fd:22:c1:19: 0a:4a:78:ad:60:d4:13:cc:6e:12:86:44:36:bf:fa:7d:74:1a: 4e:cd:06:b0:61:4c:38:2a:71:c1:f8:a4:87:85:28:42:97:9f: ed:14:fd:e4:50:a3:d9:ab:e5:12:3b:30:0d:ce:85:ec:4f:4a: 47:43:34:20:c4:5a:ff:dd:dd:a7:ae:c9:7e:9c:ba:4b:2a:f4: 04:2b:1a:37:78:8e:2d:aa:97:6f:71:3a:39:d7:63:9a:6a:ae: 89:a2:00:f2:cb:d6:d0:e0:2c:f1:59:43:24:97:31:32:2f:0d: 8a:c1:0b:3a:fe:27:9e:70:b0:64:30:f6:a4:53:48:70:70:57: fb:cc:03:df:43:d0:1e:bb:77:55:5a:e2:f4:1e:81:01:a9:c2: 90:a1:08:17:c5:e4:dc:72:d0:3b:4a:59:9a:f4:0c:02:6d:96: 63:1f:c6:11 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOKaWCewZNO3/lDHC8Ka4Qftl/+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY3NzA2MUNBRUYzMEE4REFGNkI1MkQ4QTNEOUZEODBG MzcyMEYxMTAeFw0yNTA2MTQxMzI1MzVaFw0yNTA2MTcxODQ0MzVaMDMxMTAvBgNV BAMTKDUyMjM4NDMzQzJEQjNDMTcyNUUxMzY3RDI2QkE3NEQyRDg3RTRBMzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjSADatOvCFF/h33p03r+0kMD4 +zYC8dmwTgkwK3nfZtDv4xulApvwZfwSwpe8995YAUInBV8nCtkzse9JTaruMLC1 gZKmu3JTdK78R/uTvlYQRpiHq+OXOez8GWgdOkhm4aJn+1ttzE2HHgEzjzUMqmv9 VUYunWXg1i9nYO7cGWXgdF7Cu31qpmyeZJXUTnWWKVApIONe7lMswsi19+6Ru4Q8 O2oVJE8MXv1XQYB38TdYUdlBQ+US3G8UJRD7zaQUVbfXmAFrb8aZqbhdUk8kl5iB DZaOHOpJJ+aCgHgcTqqMRCn7DHL7GLY0P6KpmyItGzK+CPzZNi2O+38RQZ3/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUUiOEM8LbPBcl4TZ9Jrp00th+SjgwHwYDVR0j BBgwFoAU33cGHK7zCo2va1LYo9n9gPNyDxEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTAyMTBiMy1jY2EyLTQzYzUtODlmOS01YTkwODZhNjA3MDMvMS9ERjc3MDYxQ0FF RjMwQThEQUY2QjUyRDhBM0Q5RkQ4MEYzNzIwRjExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREY3NzA2MUNBRUYzMEE4REFGNkI1MkQ4QTNEOUZEODBGMzcy MEYxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EwMjEwYjMtY2NhMi00M2M1LTg5 ZjktNWE5MDg2YTYwNzAzLzEvREY3NzA2MUNBRUYzMEE4REFGNkI1MkQ4QTNEOUZE ODBGMzcyMEYxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEizcg5km42gRyypPheV6BjFXt2vsatbcPB5 GvTAcHX4wOd0oKW8ksyh6bM2Dd3xrvQ/tmqL41d6gXZdFiauQTxRQlmaizwPueL6 2ELG/F8zBlYB7GId/SLBGQpKeK1g1BPMbhKGRDa/+n10Gk7NBrBhTDgqccH4pIeF KEKXn+0U/eRQo9mr5RI7MA3OhexPSkdDNCDEWv/d3aeuyX6cuksq9AQrGjd4ji2q l29xOjnXY5pqromiAPLL1tDgLPFZQySXMTIvDYrBCzr+J55wsGQw9qRTSHBwV/vM A99D0B67d1Va4vQegQGpwpChCBfF5Nxy0DtKWZr0DAJtlmMfxhE= -----END CERTIFICATE-----Generated at Mon Jun 16 17:35:21 2025 by rpki-client