$ rpki-client -vvf repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft File: DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft (raw, json) Hash identifier: 8Hka/k54i9ibNv/yEisPHDrB/cvP1wTP2iIY9ShJNS4= Subject key identifier: 88:92:0E:DE:3E:E8:70:8B:01:05:9F:FD:6C:71:C6:D1:BF:A7:98:C1 Authority key identifier: DF:8E:F2:99:4C:B5:42:09:F2:C2:A3:9A:7B:CE:7D:A0:D9:C3:4E:4A Certificate issuer: /CN=DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A Certificate serial: 0F16C07934650AD226E1C961945A075795B8BE61 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft Manifest number: 0319 Signing time: Tue 17 Jun 2025 10:51:14 +0000 Manifest this update: Tue 17 Jun 2025 10:46:14 +0000 Manifest next update: Fri 20 Jun 2025 16:42:14 +0000 Files and hashes: 1: 323430343a326363303a3a2f33322d3438203d3e20313331373336.roa (hash: h8DSOqlAB7DM5TJQosNDXf2STLaxOgc/wT91U1wd/Qs=) 2: 323430343a326363303a323a3a2f34382d3438203d3e20313331373336.roa (hash: zPirjw68goF9ylHxOtcUqyoIsGV38h/23WQgUJ1Ori8=) 3: DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.crl (hash: 1OYK6/qRvrmU9VG/PYuIzuKj1D0+T2r7QUiW/8Zjq5Q=) 4: 3130332e3133322e31322e302f32322d3234203d3e20313331373336.roa (hash: UUq68ar7HAMDX81IMpy1nkM8WYEb11BQCvn3QoFFoCE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.crl rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 20 Jun 2025 16:42:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0f:16:c0:79:34:65:0a:d2:26:e1:c9:61:94:5a:07:57:95:b8:be:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A Validity Not Before: Jun 17 10:46:14 2025 GMT Not After : Jun 20 16:42:14 2025 GMT Subject: CN=88920EDE3EE8708B01059FFD6C71C6D1BFA798C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:37:0c:9b:fe:f5:fb:23:e8:5e:03:39:47:37: 48:de:25:e7:9d:91:b8:3d:25:05:46:92:ca:d5:5e: 6d:6e:52:df:e4:d8:27:40:15:32:27:ab:72:8b:61: d6:e0:01:1f:fc:f9:9f:57:0a:b3:d7:1e:3e:94:0c: b5:ea:64:c2:df:17:10:64:20:7b:90:76:77:6a:34: 66:98:ec:e5:ff:70:fe:d4:d7:73:12:a4:e8:e8:ea: 88:ff:18:15:8d:d6:97:0d:1d:5d:4c:88:23:b2:97: 14:0d:89:81:12:58:75:04:68:fa:3f:89:7b:e6:f4: a1:35:fe:37:13:f3:83:e5:2b:89:22:d8:ca:f0:39: 24:45:44:d9:dc:53:4d:c1:f7:58:7e:ab:14:48:be: 74:3a:9a:a3:88:cd:2b:da:1e:1b:c6:e9:47:0d:56: 57:9d:56:3c:02:4f:80:fc:21:54:0d:97:9e:53:d3: ee:88:08:eb:51:6f:ca:94:0d:e9:dd:fb:75:f5:66: a1:5e:c8:23:07:a7:cd:5e:3a:02:e0:d2:6f:e1:91: ff:cb:c8:96:7e:69:9c:66:72:d6:b9:62:3b:1c:18: d5:57:ca:82:df:e0:38:33:ed:a7:c3:48:44:68:e7: b8:38:99:86:14:b8:d8:3d:0f:5b:ed:dc:8c:2a:25: d0:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:92:0E:DE:3E:E8:70:8B:01:05:9F:FD:6C:71:C6:D1:BF:A7:98:C1 X509v3 Authority Key Identifier: keyid:DF:8E:F2:99:4C:B5:42:09:F2:C2:A3:9A:7B:CE:7D:A0:D9:C3:4E:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 60:6e:19:9e:b4:8a:37:5e:10:a7:19:65:71:fa:bf:1c:97:c0: 18:4c:3a:1e:80:75:5b:84:bc:e6:7e:8b:75:24:ad:b6:93:88: f6:8c:d0:74:75:3b:c8:b1:73:86:91:17:b6:41:b1:8e:67:e4: db:46:03:0a:09:d7:b7:10:f9:1a:78:e2:8f:d1:cb:e6:fd:4a: 73:63:1d:af:42:d3:ec:2f:70:ee:33:af:18:a9:f5:b6:1a:dd: 21:19:b3:22:f3:1a:a1:8d:5e:92:c0:ed:05:63:94:7d:7c:6e: 02:57:2f:b2:5f:2b:f6:32:11:0d:33:f2:05:08:b7:bf:7f:f4: b0:5b:83:57:f9:2b:6c:78:64:9e:d5:f6:42:80:e7:e1:4d:bc: da:f9:44:6a:c4:ec:05:72:68:a7:38:74:73:c3:e6:c2:84:db: 30:23:53:c0:d8:3c:37:db:c9:9e:2c:5b:d0:40:90:07:51:7f: 92:a7:0c:16:03:f9:f8:19:19:54:a6:18:3b:64:14:d8:92:cf: 68:4b:53:aa:69:4c:fc:0a:25:b6:e1:8d:01:14:63:15:f0:00: af:1c:d3:ac:d7:0f:c2:b6:86:3c:a7:47:41:9e:39:23:41:0d: 33:23:55:b0:2a:de:b1:bd:4a:2a:13:4f:20:78:c7:69:62:c4: 45:78:95:1a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDxbAeTRlCtIm4clhlFoHV5W4vmEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY4RUYyOTk0Q0I1NDIwOUYyQzJBMzlBN0JDRTdEQTBE OUMzNEU0QTAeFw0yNTA2MTcxMDQ2MTRaFw0yNTA2MjAxNjQyMTRaMDMxMTAvBgNV BAMTKDg4OTIwRURFM0VFODcwOEIwMTA1OUZGRDZDNzFDNkQxQkZBNzk4QzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Nwyb/vX7I+heAzlHN0jeJeed kbg9JQVGksrVXm1uUt/k2CdAFTInq3KLYdbgAR/8+Z9XCrPXHj6UDLXqZMLfFxBk IHuQdndqNGaY7OX/cP7U13MSpOjo6oj/GBWN1pcNHV1MiCOylxQNiYESWHUEaPo/ iXvm9KE1/jcT84PlK4ki2MrwOSRFRNncU03B91h+qxRIvnQ6mqOIzSvaHhvG6UcN VledVjwCT4D8IVQNl55T0+6ICOtRb8qUDend+3X1ZqFeyCMHp81eOgLg0m/hkf/L yJZ+aZxmcta5YjscGNVXyoLf4Dgz7afDSERo57g4mYYUuNg9D1vt3IwqJdDpAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUiJIO3j7ocIsBBZ/9bHHG0b+nmMEwHwYDVR0j BBgwFoAU347ymUy1QgnywqOae859oNnDTkowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjVjZGEzNi02OTNhLTRjMWEtYmE5ZS1lMGUxNzgxMTIxNDAvMC9ERjhFRjI5OTRD QjU0MjA5RjJDMkEzOUE3QkNFN0RBMEQ5QzM0RTRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREY4RUYyOTk0Q0I1NDIwOUYyQzJBMzlBN0JDRTdEQTBEOUMz NEU0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTI1Y2RhMzYtNjkzYS00YzFhLWJh OWUtZTBlMTc4MTEyMTQwLzAvREY4RUYyOTk0Q0I1NDIwOUYyQzJBMzlBN0JDRTdE QTBEOUMzNEU0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGBuGZ60ijdeEKcZZXH6vxyXwBhMOh6AdVuE vOZ+i3UkrbaTiPaM0HR1O8ixc4aRF7ZBsY5n5NtGAwoJ17cQ+Rp44o/Ry+b9SnNj Ha9C0+wvcO4zrxip9bYa3SEZsyLzGqGNXpLA7QVjlH18bgJXL7JfK/YyEQ0z8gUI t79/9LBbg1f5K2x4ZJ7V9kKA5+FNvNr5RGrE7AVyaKc4dHPD5sKE2zAjU8DYPDfb yZ4sW9BAkAdRf5KnDBYD+fgZGVSmGDtkFNiSz2hLU6ppTPwKJbbhjQEUYxXwAK8c 06zXD8K2hjynR0GeOSNBDTMjVbAq3rG9SioTTyB4x2lixEV4lRo= -----END CERTIFICATE-----Generated at Wed Jun 18 06:25:55 2025 by rpki-client