$ rpki-client -vvf repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.mft File: DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.mft (raw, json) Hash identifier: lUtevTH5DKQcSHkHo7d0xsMnaGHIz6j0Z2O4ckLJwMc= Subject key identifier: 47:2D:93:BB:D9:1E:89:65:5F:6D:BA:09:F4:6C:32:E1:A2:53:4A:56 Authority key identifier: DC:FC:FE:4E:81:97:FF:AF:B9:A5:79:20:BD:40:DC:C1:AC:F0:F3:0F Certificate issuer: /CN=DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F Certificate serial: 4555C3CD3D7A637AAA1B5AE0D45F2F35BE586522 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.mft Manifest number: 01EF Signing time: Sun 15 Jun 2025 00:31:55 +0000 Manifest this update: Sun 15 Jun 2025 00:26:55 +0000 Manifest next update: Wed 18 Jun 2025 10:55:55 +0000 Files and hashes: 1: 3130332e3131312e3231392e302f32342d3234203d3e20313337333233.roa (hash: N8Hp5zFXrvVRTETGbbuYPmuPvC+hIoWpg8/FhaH5avg=) 2: DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.crl (hash: qTWRkxHIOvQedw26ckCEWuylIMuY/aY4gWYIYN0n8+I=) 3: 3130332e3131312e3231382e302f32342d3234203d3e20313337333233.roa (hash: Zv0VjyXOs/YJcxUITNpIWw5z1xu1WaEnf3VgeGVypQs=) 4: 323030313a6466343a393130303a3a2f34382d3438203d3e20313337333233.roa (hash: NYSNKUm/BgmT5rJhU5PDu3zm0ji32HyB3xQtf69bB+8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.crl rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 10:55:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:55:c3:cd:3d:7a:63:7a:aa:1b:5a:e0:d4:5f:2f:35:be:58:65:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F Validity Not Before: Jun 15 00:26:55 2025 GMT Not After : Jun 18 10:55:55 2025 GMT Subject: CN=472D93BBD91E89655F6DBA09F46C32E1A2534A56 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:dd:e9:ed:d9:cc:36:c8:09:e1:b3:51:ae:4c: 75:a2:f9:6e:f0:ef:5c:29:66:7b:84:cb:3d:8c:28: 5e:11:8d:66:50:05:34:4c:4e:01:21:40:56:60:5a: cc:bd:e3:8e:09:eb:02:3d:05:ad:06:1f:fc:63:71: 60:ee:27:89:5c:bb:f7:36:e1:58:3a:c7:ff:1b:4e: 20:85:bd:89:29:f2:ef:a9:81:81:10:40:87:24:5a: 65:6f:d6:90:d7:1f:be:58:35:22:ba:82:67:ad:cd: 34:57:fd:9e:9b:68:6f:c5:b4:96:b2:10:55:d7:f1: a9:21:88:a5:b7:78:5a:6e:18:de:fc:f4:b4:f2:02: e9:0a:0a:f1:71:30:fc:6e:72:59:2c:ea:e4:a3:f8: 23:74:57:6d:dd:be:0c:60:41:7e:44:31:72:6c:75: fa:48:da:ed:bb:74:97:17:82:3f:30:91:c0:7a:33: 51:89:df:c4:e9:7e:c7:d9:7c:66:19:5e:9d:57:4e: f8:45:24:ea:b7:bb:50:b5:86:a4:88:7b:7b:7c:1e: 61:f0:dc:19:6b:28:97:20:37:82:ef:15:a4:b3:4b: fb:e6:bd:57:f8:f4:18:d1:1d:11:a1:61:30:d1:1d: 5e:65:2f:63:99:90:fd:d6:b3:90:0c:fb:05:51:81: 4d:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 47:2D:93:BB:D9:1E:89:65:5F:6D:BA:09:F4:6C:32:E1:A2:53:4A:56 X509v3 Authority Key Identifier: keyid:DC:FC:FE:4E:81:97:FF:AF:B9:A5:79:20:BD:40:DC:C1:AC:F0:F3:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:90:f5:f5:9c:4d:9d:3c:69:ae:85:f6:7f:52:dc:4a:1d:47: 3e:e6:13:ab:39:3f:12:35:c4:88:29:dc:f3:ee:70:7e:f5:b1: df:3f:ab:f6:67:f8:82:88:f4:61:69:10:d5:e0:29:a2:10:09: 6f:21:e7:39:61:7e:00:8f:3b:dd:43:71:8b:8c:d4:3c:f5:f7: 6d:55:0c:75:bc:d9:8d:df:75:46:1b:81:d6:87:57:be:cf:6c: 00:94:4a:be:b0:12:24:33:a8:e8:ed:f8:0a:19:e2:43:ac:38: e3:81:6c:f8:d6:25:29:a7:0b:1b:57:2c:e6:35:2e:e4:c2:41: 5b:56:df:9c:2c:d5:21:a7:99:32:06:55:10:9f:52:63:6d:a9: 16:29:d8:09:ec:89:ae:6f:63:c2:70:ed:47:1c:1c:29:38:7c: 05:98:7a:e8:84:c5:3c:57:91:d8:dc:8a:2e:b6:2c:43:2d:38: 26:fb:b8:22:e8:22:6b:a5:63:2a:dc:e6:cb:c8:20:0a:d7:db: 05:7d:c5:e9:a6:9f:dc:0c:8b:67:9b:e7:21:28:94:b4:02:e8: 72:01:58:4d:be:c2:95:32:d6:1c:5e:8e:93:9c:02:13:fb:12: e5:a0:13:de:96:8d:4d:09:53:3f:3e:b6:9d:03:74:08:3f:c3: b9:9a:1b:cc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURVXDzT16Y3qqG1rg1F8vNb5YZSIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENGQ0ZFNEU4MTk3RkZBRkI5QTU3OTIwQkQ0MERDQzFB Q0YwRjMwRjAeFw0yNTA2MTUwMDI2NTVaFw0yNTA2MTgxMDU1NTVaMDMxMTAvBgNV BAMTKDQ3MkQ5M0JCRDkxRTg5NjU1RjZEQkEwOUY0NkMzMkUxQTI1MzRBNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC13ent2cw2yAnhs1GuTHWi+W7w 71wpZnuEyz2MKF4RjWZQBTRMTgEhQFZgWsy9444J6wI9Ba0GH/xjcWDuJ4lcu/c2 4Vg6x/8bTiCFvYkp8u+pgYEQQIckWmVv1pDXH75YNSK6gmetzTRX/Z6baG/FtJay EFXX8akhiKW3eFpuGN789LTyAukKCvFxMPxuclks6uSj+CN0V23dvgxgQX5EMXJs dfpI2u27dJcXgj8wkcB6M1GJ38TpfsfZfGYZXp1XTvhFJOq3u1C1hqSIe3t8HmHw 3BlrKJcgN4LvFaSzS/vmvVf49BjRHRGhYTDRHV5lL2OZkP3Ws5AM+wVRgU29AgMB AAGjggI8MIICODAdBgNVHQ4EFgQURy2Tu9keiWVfbboJ9Gwy4aJTSlYwHwYDVR0j BBgwFoAU3Pz+ToGX/6+5pXkgvUDcwazw8w8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MWFmMTQ0Yi1iOTJlLTRmZmYtYjY0MS1lNDZmZGRlOGM2ZGYvMC9EQ0ZDRkU0RTgx OTdGRkFGQjlBNTc5MjBCRDQwRENDMUFDRjBGMzBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRENGQ0ZFNEU4MTk3RkZBRkI5QTU3OTIwQkQ0MERDQzFBQ0Yw RjMwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTFhZjE0NGItYjkyZS00ZmZmLWI2 NDEtZTQ2ZmRkZThjNmRmLzAvRENGQ0ZFNEU4MTk3RkZBRkI5QTU3OTIwQkQ0MERD QzFBQ0YwRjMwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFyQ9fWcTZ08aa6F9n9S3EodRz7mE6s5PxI1 xIgp3PPucH71sd8/q/Zn+IKI9GFpENXgKaIQCW8h5zlhfgCPO91DcYuM1Dz1921V DHW82Y3fdUYbgdaHV77PbACUSr6wEiQzqOjt+AoZ4kOsOOOBbPjWJSmnCxtXLOY1 LuTCQVtW35ws1SGnmTIGVRCfUmNtqRYp2Ansia5vY8Jw7UccHCk4fAWYeuiExTxX kdjcii62LEMtOCb7uCLoImulYyrc5svIIArX2wV9xemmn9wMi2eb5yEolLQC6HIB WE2+wpUy1hxejpOcAhP7EuWgE96WjU0JUz8+tp0DdAg/w7maG8w= -----END CERTIFICATE-----Generated at Tue Jun 17 05:16:59 2025 by rpki-client