$ rpki-client -vvf repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.mft File: DA680D591E9E6B4622614F94CF255933B6749212.mft (raw, json) Hash identifier: PCaypJcIAV6i6fBv9pZjFCFWEa0/aMOzVXXbPABRoG8= Subject key identifier: A4:CF:7C:F5:22:22:6A:5A:D5:85:BC:F7:8A:75:64:D0:58:29:DC:1A Authority key identifier: DA:68:0D:59:1E:9E:6B:46:22:61:4F:94:CF:25:59:33:B6:74:92:12 Certificate issuer: /CN=DA680D591E9E6B4622614F94CF255933B6749212 Certificate serial: 64B0C63982CFE39DDD102B0ECE0E78CCC37E42EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DA680D591E9E6B4622614F94CF255933B6749212.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.mft Manifest number: DE Signing time: Sun 15 Jun 2025 16:31:45 +0000 Manifest this update: Sun 15 Jun 2025 16:26:45 +0000 Manifest next update: Thu 19 Jun 2025 01:37:45 +0000 Files and hashes: 1: 3135372e31302e3138322e302f32332d3234203d3e20313532333434.roa (hash: i0rS2o3mTh9+/ZMOMUuCXL7VcRhfm2ZL+vmQMK6r/AQ=) 2: DA680D591E9E6B4622614F94CF255933B6749212.crl (hash: mN8GabjRFR92/+BWfvB2OZ+jOLF9zrUMRDOm4EfQJys=) 3: 3135372e31302e3138332e302f32342d3234203d3e20313532333434.roa (hash: bW5GhG+n2gDC7aNS0QQfawXhWxcHV8PEi1pP/7l6eDw=) 4: 3135372e31302e3138322e302f32342d3234203d3e20313532333434.roa (hash: zo0q/Qyr9+OM0Fi4S3qemAqF/9QAiZg3ou4qqrAMiyU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.crl rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DA680D591E9E6B4622614F94CF255933B6749212.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 01:37:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:b0:c6:39:82:cf:e3:9d:dd:10:2b:0e:ce:0e:78:cc:c3:7e:42:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA680D591E9E6B4622614F94CF255933B6749212 Validity Not Before: Jun 15 16:26:45 2025 GMT Not After : Jun 19 01:37:45 2025 GMT Subject: CN=A4CF7CF522226A5AD585BCF78A7564D05829DC1A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:22:28:58:b3:e2:07:97:85:a7:4e:3e:0a:8a: 16:8d:e3:ee:e2:06:94:18:96:3b:82:4a:1d:7c:0a: 51:65:89:89:da:09:66:55:b9:06:b3:5d:57:18:b0: 6f:96:12:64:c8:bf:8c:79:7c:3b:82:be:ed:c3:f6: b8:b9:de:4a:dd:26:e8:d3:2a:96:27:30:76:ed:53: 66:d7:63:53:f9:eb:92:01:09:7b:5a:08:46:12:5b: 6c:8c:3c:4b:68:0e:20:eb:d6:59:53:d7:b6:ba:92: ef:4a:80:66:64:fb:8e:5c:eb:7f:5e:bb:7a:f4:e5: 4b:23:34:d0:14:63:20:95:eb:96:11:1a:cb:5f:ea: f7:2f:57:1f:40:03:4d:9a:b3:37:8d:13:95:53:5c: 8c:17:72:ce:84:86:e2:99:d0:f6:ad:88:a4:3c:c3: 3a:e5:8e:ec:d1:48:e1:55:20:55:1b:69:0d:a2:b7: 05:88:ad:dd:73:30:24:f8:f0:cf:7e:97:23:b0:b2: 3e:d1:d6:88:03:4a:6d:d4:f3:8a:a5:a2:b9:79:23: 63:84:58:25:34:08:3b:79:04:fd:1d:73:9c:5f:3b: e5:c1:21:a5:ad:65:33:52:f3:8d:4a:cb:52:5e:bf: 6a:63:73:56:ca:22:9b:ef:ab:3a:33:59:b6:cd:58: 6c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:CF:7C:F5:22:22:6A:5A:D5:85:BC:F7:8A:75:64:D0:58:29:DC:1A X509v3 Authority Key Identifier: keyid:DA:68:0D:59:1E:9E:6B:46:22:61:4F:94:CF:25:59:33:B6:74:92:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DA680D591E9E6B4622614F94CF255933B6749212.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:21:38:b7:c7:4c:71:d7:dc:ba:68:6b:42:de:72:01:b6:3c: 83:be:1d:dc:2a:27:25:f9:f5:d8:0e:fa:9e:a4:5f:76:f9:13: 82:3b:60:3a:df:88:87:85:af:ed:65:35:37:4b:18:14:7e:c6: 2f:41:42:63:f9:fa:cb:09:82:c2:fb:db:c3:23:31:db:a1:fd: 2c:fd:06:c6:bb:37:c2:21:c0:e6:e5:20:5b:2c:8b:80:20:a3: d7:a7:10:1a:23:02:fe:37:5b:82:0b:f0:82:70:22:c3:eb:21: ca:8f:b1:e8:39:01:ad:d0:19:41:c8:b5:56:d8:a3:3d:90:1a: d7:e1:bc:59:7c:85:4e:8e:9f:f4:f3:fb:9b:fd:12:6e:c9:a0: 50:96:9e:ff:f2:14:36:96:9e:a2:05:a6:27:7c:0f:ea:d0:45: 23:e3:6e:46:d0:21:62:f4:91:9c:8b:5d:ea:d0:c6:5e:b8:d5: 02:10:e1:0e:b3:4d:16:36:ef:d4:33:bd:4e:ab:e5:76:fa:e1: fd:7a:8e:79:3c:58:d1:c4:7b:6c:a9:91:ba:83:2d:ce:07:25: a7:7d:4b:03:06:14:38:4b:7f:d2:d4:3e:f1:8e:29:da:f0:71: cd:1b:a9:52:ed:79:b9:31:5d:8a:17:94:77:04:a8:bf:5e:d9: 89:a1:1b:76 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZLDGOYLP453dECsOzg54zMN+Qu4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE2ODBENTkxRTlFNkI0NjIyNjE0Rjk0Q0YyNTU5MzNC Njc0OTIxMjAeFw0yNTA2MTUxNjI2NDVaFw0yNTA2MTkwMTM3NDVaMDMxMTAvBgNV BAMTKEE0Q0Y3Q0Y1MjIyMjZBNUFENTg1QkNGNzhBNzU2NEQwNTgyOURDMUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDYIihYs+IHl4WnTj4KihaN4+7i BpQYljuCSh18ClFliYnaCWZVuQazXVcYsG+WEmTIv4x5fDuCvu3D9ri53krdJujT KpYnMHbtU2bXY1P565IBCXtaCEYSW2yMPEtoDiDr1llT17a6ku9KgGZk+45c639e u3r05UsjNNAUYyCV65YRGstf6vcvVx9AA02aszeNE5VTXIwXcs6EhuKZ0PatiKQ8 wzrljuzRSOFVIFUbaQ2itwWIrd1zMCT48M9+lyOwsj7R1ogDSm3U84qlorl5I2OE WCU0CDt5BP0dc5xfO+XBIaWtZTNS841Ky1Jev2pjc1bKIpvvqzozWbbNWGz5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUpM989SIialrVhbz3inVk0Fgp3BowHwYDVR0j BBgwFoAU2mgNWR6ea0YiYU+UzyVZM7Z0khIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWRhMjNlOS04NGJlLTRhNTQtYmNhMC1lOWEwY2FmZDE2ZmUvMC9EQTY4MEQ1OTFF OUU2QjQ2MjI2MTRGOTRDRjI1NTkzM0I2NzQ5MjEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvREE2ODBENTkxRTlFNkI0NjIyNjE0Rjk0Q0YyNTU5MzNCNjc0 OTIxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFkYTIzZTktODRiZS00YTU0LWJj YTAtZTlhMGNhZmQxNmZlLzAvREE2ODBENTkxRTlFNkI0NjIyNjE0Rjk0Q0YyNTU5 MzNCNjc0OTIxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGohOLfHTHHX3Lpoa0LecgG2PIO+HdwqJyX5 9dgO+p6kX3b5E4I7YDrfiIeFr+1lNTdLGBR+xi9BQmP5+ssJgsL728MjMduh/Sz9 Bsa7N8IhwOblIFssi4Ago9enEBojAv43W4IL8IJwIsPrIcqPseg5Aa3QGUHItVbY oz2QGtfhvFl8hU6On/Tz+5v9Em7JoFCWnv/yFDaWnqIFpid8D+rQRSPjbkbQIWL0 kZyLXerQxl641QIQ4Q6zTRY279QzvU6r5Xb64f16jnk8WNHEe2ypkbqDLc4HJad9 SwMGFDhLf9LUPvGOKdrwcc0bqVLtebkxXYoXlHcEqL9e2YmhG3Y= -----END CERTIFICATE-----Generated at Mon Jun 16 18:14:57 2025 by rpki-client