$ rpki-client -vvf repo-rpki.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/DA3283EBD45CCF7056D92A914183FB7825C66692.mft File: DA3283EBD45CCF7056D92A914183FB7825C66692.mft (raw, json) Hash identifier: Q2othW1EUf9nHLIhLeoVAZ/yb6N0on5E/2kBZ/JOgVg= Subject key identifier: 66:3D:8B:42:22:EA:F4:1C:97:C2:8B:89:CF:72:09:82:5B:09:9C:05 Authority key identifier: DA:32:83:EB:D4:5C:CF:70:56:D9:2A:91:41:83:FB:78:25:C6:66:92 Certificate issuer: /CN=DA3283EBD45CCF7056D92A914183FB7825C66692 Certificate serial: 49A1020BCF9BA81D728757A5299F97FEFE540423 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA3283EBD45CCF7056D92A914183FB7825C66692.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/DA3283EBD45CCF7056D92A914183FB7825C66692.mft Manifest number: 035D Signing time: Wed 18 Jun 2025 06:51:15 +0000 Manifest this update: Wed 18 Jun 2025 06:46:15 +0000 Manifest next update: Sat 21 Jun 2025 13:59:15 +0000 Files and hashes: 1: 3130332e3136362e33362e302f32332d3234203d3e203137393935.roa (hash: UCkFJwGn7KbxLC7kdPU1kA5YxB/v64VWKdnsapg9BD0=) 2: DA3283EBD45CCF7056D92A914183FB7825C66692.crl (hash: 2EEfWZlCfpuTLBW/pTudKs0BEcgrKMVMfLsU2AdhHqU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/DA3283EBD45CCF7056D92A914183FB7825C66692.crl rsync://repo-rpki.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/DA3283EBD45CCF7056D92A914183FB7825C66692.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA3283EBD45CCF7056D92A914183FB7825C66692.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 12:16:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 49:a1:02:0b:cf:9b:a8:1d:72:87:57:a5:29:9f:97:fe:fe:54:04:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA3283EBD45CCF7056D92A914183FB7825C66692 Validity Not Before: Jun 18 06:46:15 2025 GMT Not After : Jun 21 13:59:15 2025 GMT Subject: CN=663D8B4222EAF41C97C28B89CF7209825B099C05 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:3c:57:fa:d8:c1:55:3b:42:2e:e6:b5:55:1d: ba:16:9e:5c:88:be:e9:15:9b:a3:55:e6:d1:ac:3f: 29:e6:a5:15:0b:68:46:b9:ef:88:3f:8f:07:d0:5f: d5:23:a1:bf:b1:7a:4e:c0:ed:bd:e6:4e:26:3d:fc: 2a:09:a5:ba:a5:87:e3:9e:9b:e1:8b:86:92:a2:74: 93:40:b6:7b:46:d2:69:cf:75:85:69:b6:66:50:29: 19:4e:93:8c:f0:4b:b5:dd:a4:3e:2a:e9:63:e4:52: 5d:5f:dd:16:4b:35:6b:70:65:47:68:3f:d7:b2:0c: 12:22:92:7f:73:d7:9e:89:78:75:93:62:47:50:64: 43:89:d8:ef:8f:f4:c8:e2:42:23:8f:7d:61:07:43: 60:b7:1b:5a:a8:d7:44:24:b6:93:ea:fe:60:bb:d1: 62:10:00:4f:6a:09:ac:3f:6b:69:f0:e2:eb:77:ba: 69:a3:9b:60:33:55:79:37:f2:29:a6:a2:cf:5b:0b: 13:6f:c1:d0:a4:42:9d:20:e8:fc:d1:bd:5a:0b:c0: 43:17:1d:5e:04:59:4c:8b:af:17:74:cd:42:5e:6e: b8:fd:38:84:6f:43:0b:ce:48:ed:cc:52:d8:b7:5c: 78:af:42:f4:b3:02:c4:51:06:05:f2:9a:0f:c6:3a: 7d:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:3D:8B:42:22:EA:F4:1C:97:C2:8B:89:CF:72:09:82:5B:09:9C:05 X509v3 Authority Key Identifier: keyid:DA:32:83:EB:D4:5C:CF:70:56:D9:2A:91:41:83:FB:78:25:C6:66:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/DA3283EBD45CCF7056D92A914183FB7825C66692.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA3283EBD45CCF7056D92A914183FB7825C66692.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8f79a402-de5b-49e5-a6f5-eeabac084f41/0/DA3283EBD45CCF7056D92A914183FB7825C66692.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:27:52:8d:b1:ac:62:fd:7a:37:33:c8:a1:52:e2:6b:8d:18: 8c:6e:8f:f2:58:e2:fe:e5:ea:69:12:cd:54:25:42:c2:8e:8c: 05:a4:25:4e:5a:90:e3:c6:23:e2:c7:74:dc:2b:81:95:91:44: 98:2a:e6:7d:eb:cc:ee:9f:a4:ef:e8:60:06:fb:85:2e:5c:de: 16:51:a8:8a:21:13:ed:59:35:df:0a:8c:a6:b9:40:49:f1:13: 37:3d:4d:df:63:b2:99:80:ff:49:ff:c6:7c:af:7a:83:00:e5: c1:de:76:9b:32:b5:3e:41:59:7e:20:f5:05:fe:16:85:7e:77: 22:fa:63:a3:20:57:ca:81:3c:3a:21:70:08:21:f6:6f:fb:71: 62:df:34:b0:c1:44:ae:17:01:2d:6b:60:b3:3b:f6:0b:23:20: 95:5a:39:fe:e6:d9:ed:de:ab:1a:da:e5:ff:7a:e5:d3:d0:51: ab:f3:c3:14:ce:b6:8d:75:4f:6b:8a:5c:e7:d2:5a:35:20:b4: 4b:f1:54:10:e2:c4:e7:e9:a6:91:06:c8:ee:72:d5:39:09:21: 1f:b0:44:ff:8e:2a:01:3c:6d:36:0e:ef:ef:e9:f3:a0:b4:71: fb:21:2f:b8:43:8b:6a:46:a1:3f:fe:59:ba:98:5f:a6:ec:c6: ea:14:29:c7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSaECC8+bqB1yh1elKZ+X/v5UBCMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREEzMjgzRUJENDVDQ0Y3MDU2RDkyQTkxNDE4M0ZCNzgy NUM2NjY5MjAeFw0yNTA2MTgwNjQ2MTVaFw0yNTA2MjExMzU5MTVaMDMxMTAvBgNV BAMTKDY2M0Q4QjQyMjJFQUY0MUM5N0MyOEI4OUNGNzIwOTgyNUIwOTlDMDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUPFf62MFVO0Iu5rVVHboWnlyI vukVm6NV5tGsPynmpRULaEa574g/jwfQX9Ujob+xek7A7b3mTiY9/CoJpbqlh+Oe m+GLhpKidJNAtntG0mnPdYVptmZQKRlOk4zwS7XdpD4q6WPkUl1f3RZLNWtwZUdo P9eyDBIikn9z156JeHWTYkdQZEOJ2O+P9MjiQiOPfWEHQ2C3G1qo10QktpPq/mC7 0WIQAE9qCaw/a2nw4ut3ummjm2AzVXk38immos9bCxNvwdCkQp0g6PzRvVoLwEMX HV4EWUyLrxd0zUJebrj9OIRvQwvOSO3MUti3XHivQvSzAsRRBgXymg/GOn17AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZj2LQiLq9ByXwouJz3IJglsJnAUwHwYDVR0j BBgwFoAU2jKD69Rcz3BW2SqRQYP7eCXGZpIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Zjc5YTQwMi1kZTViLTQ5ZTUtYTZmNS1lZWFiYWMwODRmNDEvMC9EQTMyODNFQkQ0 NUNDRjcwNTZEOTJBOTE0MTgzRkI3ODI1QzY2NjkyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREEzMjgzRUJENDVDQ0Y3MDU2RDkyQTkxNDE4M0ZCNzgyNUM2 NjY5Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGY3OWE0MDItZGU1Yi00OWU1LWE2 ZjUtZWVhYmFjMDg0ZjQxLzAvREEzMjgzRUJENDVDQ0Y3MDU2RDkyQTkxNDE4M0ZC NzgyNUM2NjY5Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACQnUo2xrGL9ejczyKFS4muNGIxuj/JY4v7l 6mkSzVQlQsKOjAWkJU5akOPGI+LHdNwrgZWRRJgq5n3rzO6fpO/oYAb7hS5c3hZR qIohE+1ZNd8KjKa5QEnxEzc9Td9jspmA/0n/xnyveoMA5cHedpsytT5BWX4g9QX+ FoV+dyL6Y6MgV8qBPDohcAgh9m/7cWLfNLDBRK4XAS1rYLM79gsjIJVaOf7m2e3e qxra5f965dPQUavzwxTOto11T2uKXOfSWjUgtEvxVBDixOfpppEGyO5y1TkJIR+w RP+OKgE8bTYO7+/p86C0cfshL7hDi2pGoT/+WbqYX6bsxuoUKcc= -----END CERTIFICATE-----Generated at Wed Jun 18 20:59:55 2025 by rpki-client