$ rpki-client -vvf repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.mft File: DA8C840CB41D2668581983C2C4E964E67EF2D6A1.mft (raw, json) Hash identifier: GLIQe3T6WOkcZwGBQ4rgdc7ob5iMFVgNXWGJeD73T84= Subject key identifier: 65:FB:63:2C:10:32:A3:61:10:49:81:00:15:5D:F5:EF:09:7A:40:7D Authority key identifier: DA:8C:84:0C:B4:1D:26:68:58:19:83:C2:C4:E9:64:E6:7E:F2:D6:A1 Certificate issuer: /CN=DA8C840CB41D2668581983C2C4E964E67EF2D6A1 Certificate serial: 1430665C4F92D9888C0F1C03C8210A0DC842557A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.mft Manifest number: 0235 Signing time: Tue 17 Jun 2025 01:01:43 +0000 Manifest this update: Tue 17 Jun 2025 00:56:43 +0000 Manifest next update: Fri 20 Jun 2025 03:54:43 +0000 Files and hashes: 1: 3130332e3137392e3231342e302f32332d3234203d3e20313439333735.roa (hash: ufTh3NuQ02tKvK6+AzJYb6zEYLra1UIfIsPq97spTJM=) 2: DA8C840CB41D2668581983C2C4E964E67EF2D6A1.crl (hash: y+bhTZAYmb4m1hg5aeC32LODm/3MdCpmguHi22cTHlI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.crl rsync://repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 03:54:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:30:66:5c:4f:92:d9:88:8c:0f:1c:03:c8:21:0a:0d:c8:42:55:7a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA8C840CB41D2668581983C2C4E964E67EF2D6A1 Validity Not Before: Jun 17 00:56:43 2025 GMT Not After : Jun 20 03:54:43 2025 GMT Subject: CN=65FB632C1032A36110498100155DF5EF097A407D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:0d:24:53:9e:0c:44:ad:15:8a:5a:80:8e:c2: 26:11:18:b0:ac:e0:4a:b7:8a:6e:c7:91:0b:ec:e4: 53:e9:05:c5:b3:4d:38:bc:1a:5a:96:80:07:4e:3d: ea:23:35:e6:c6:3b:c0:d2:95:11:74:6f:e0:1b:e7: 71:64:10:7b:57:ad:a3:ae:e5:38:b7:ee:f7:75:41: 28:5a:be:76:a0:08:d9:80:1b:37:ab:93:68:3d:de: 18:45:e8:9a:1f:02:0a:3b:65:7a:2d:62:21:69:bd: 9e:72:0d:bd:fe:0a:ea:e0:cc:14:0c:2e:d6:6b:f3: 24:76:8a:5a:53:88:b2:d8:49:91:e9:4f:d9:a9:33: b5:e8:f6:2f:09:cd:b6:2e:d9:93:1c:7a:63:70:12: 7f:e9:77:9a:a4:86:07:ab:30:8e:cb:f0:e7:e3:94: bd:2a:5f:5a:1b:7f:56:45:1c:e6:6d:f1:98:21:6a: 86:39:d9:bb:93:05:d4:e4:ed:cd:54:26:94:ab:76: ee:f9:a0:a8:71:13:3b:9f:82:73:40:47:43:be:32: 87:19:2b:61:88:22:46:08:c2:53:4f:99:0a:6d:f8: c6:d8:3a:5b:72:3c:0b:55:0f:2b:de:eb:34:bf:36: f4:b6:80:38:6a:c2:9f:b1:4a:93:e1:bc:0a:75:6c: 33:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:FB:63:2C:10:32:A3:61:10:49:81:00:15:5D:F5:EF:09:7A:40:7D X509v3 Authority Key Identifier: keyid:DA:8C:84:0C:B4:1D:26:68:58:19:83:C2:C4:E9:64:E6:7E:F2:D6:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 40:f8:6d:7c:af:1e:68:cc:03:74:a7:60:f8:64:68:c3:e6:5a: 8c:56:45:91:97:0d:08:ca:47:7d:49:22:20:95:c1:f7:d6:14: 5d:d0:9c:9e:87:79:bb:11:a1:1d:60:9c:db:32:e2:a3:2e:4e: 28:24:76:32:d1:8b:d4:a8:cd:c6:6b:e2:2e:15:d2:b4:71:6f: 0c:fe:46:a6:b5:a1:4e:25:cf:87:11:8b:20:10:92:36:0d:af: ef:a9:f2:5e:ba:87:e4:c7:71:80:32:68:64:4d:f7:a5:95:75: 48:be:f8:7f:03:04:41:86:ce:59:d6:f2:ac:bf:5a:a3:a7:2c: 0e:4f:64:13:a9:dc:10:22:4d:4e:2f:79:3c:0a:39:7a:fd:1b: 9d:46:50:66:ad:f4:80:85:b0:51:e3:16:d4:bf:85:c2:83:04: 5b:f8:28:d0:75:05:eb:86:2b:74:3f:f0:c9:99:12:f6:b5:1e: 00:20:9d:05:93:a6:14:92:91:ba:6e:c2:d7:51:37:e7:96:cc: 1c:a2:a7:00:b9:b5:a9:eb:5f:69:75:b6:bb:5e:ba:e0:69:6a: 95:78:a4:85:29:3e:4a:58:dd:58:7f:b7:69:df:36:81:d1:de: 7c:b3:4d:2a:4f:ac:0c:76:7f:53:d7:34:08:78:23:cf:5e:9a: 68:19:03:01 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFDBmXE+S2YiMDxwDyCEKDchCVXowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE4Qzg0MENCNDFEMjY2ODU4MTk4M0MyQzRFOTY0RTY3 RUYyRDZBMTAeFw0yNTA2MTcwMDU2NDNaFw0yNTA2MjAwMzU0NDNaMDMxMTAvBgNV BAMTKDY1RkI2MzJDMTAzMkEzNjExMDQ5ODEwMDE1NURGNUVGMDk3QTQwN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3DSRTngxErRWKWoCOwiYRGLCs 4Eq3im7HkQvs5FPpBcWzTTi8GlqWgAdOPeojNebGO8DSlRF0b+Ab53FkEHtXraOu 5Ti37vd1QShavnagCNmAGzerk2g93hhF6JofAgo7ZXotYiFpvZ5yDb3+CurgzBQM LtZr8yR2ilpTiLLYSZHpT9mpM7Xo9i8JzbYu2ZMcemNwEn/pd5qkhgerMI7L8Ofj lL0qX1obf1ZFHOZt8ZghaoY52buTBdTk7c1UJpSrdu75oKhxEzufgnNAR0O+MocZ K2GIIkYIwlNPmQpt+MbYOltyPAtVDyve6zS/NvS2gDhqwp+xSpPhvAp1bDP3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZftjLBAyo2EQSYEAFV317wl6QH0wHwYDVR0j BBgwFoAU2oyEDLQdJmhYGYPCxOlk5n7y1qEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDgyN2NiOC0xYjJjLTQ0YjEtODE5MC05ODVkODIwNWE0NjQvMC9EQThDODQwQ0I0 MUQyNjY4NTgxOTgzQzJDNEU5NjRFNjdFRjJENkExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREE4Qzg0MENCNDFEMjY2ODU4MTk4M0MyQzRFOTY0RTY3RUYy RDZBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODA4MjdjYjgtMWIyYy00NGIxLTgx OTAtOTg1ZDgyMDVhNDY0LzAvREE4Qzg0MENCNDFEMjY2ODU4MTk4M0MyQzRFOTY0 RTY3RUYyRDZBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAED4bXyvHmjMA3SnYPhkaMPmWoxWRZGXDQjK R31JIiCVwffWFF3QnJ6HebsRoR1gnNsy4qMuTigkdjLRi9SozcZr4i4V0rRxbwz+ Rqa1oU4lz4cRiyAQkjYNr++p8l66h+THcYAyaGRN96WVdUi++H8DBEGGzlnW8qy/ WqOnLA5PZBOp3BAiTU4veTwKOXr9G51GUGat9ICFsFHjFtS/hcKDBFv4KNB1BeuG K3Q/8MmZEva1HgAgnQWTphSSkbpuwtdRN+eWzByipwC5tanrX2l1trteuuBpapV4 pIUpPkpY3Vh/t2nfNoHR3nyzTSpPrAx2f1PXNAh4I89emmgZAwE= -----END CERTIFICATE-----Generated at Wed Jun 18 05:35:01 2025 by rpki-client