$ rpki-client -vvf repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft File: DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft (raw, json) Hash identifier: f8Z1OgX2rzH0F38Z9FcrMeXISHYoX0AozIompkA4cS4= Subject key identifier: BE:A0:02:E9:06:FD:AB:D1:30:6A:D4:F0:85:F1:56:49:01:47:F9:69 Authority key identifier: DA:39:6A:1D:C6:29:9D:C3:BB:9E:8D:D7:65:0D:36:FA:BA:94:49:67 Certificate issuer: /CN=DA396A1DC6299DC3BB9E8DD7650D36FABA944967 Certificate serial: 75CCD9642DD0777DB64331EE89E2AAC6E117E6E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft Manifest number: 01E0 Signing time: Sat 14 Jun 2025 07:20:52 +0000 Manifest this update: Sat 14 Jun 2025 07:15:52 +0000 Manifest next update: Tue 17 Jun 2025 14:04:52 +0000 Files and hashes: 1: 3130332e3136362e34382e302f32332d3234203d3e20313339343630.roa (hash: 0a2CK00YtHnEd2JmEamQH3BHgmE0sjYsMU62NZCZSoM=) 2: DA396A1DC6299DC3BB9E8DD7650D36FABA944967.crl (hash: WINeS29XL7/SvL3CiU/xoca7HJgiUFCkME/pz+tsXUg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.crl rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 14:04:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:cc:d9:64:2d:d0:77:7d:b6:43:31:ee:89:e2:aa:c6:e1:17:e6:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA396A1DC6299DC3BB9E8DD7650D36FABA944967 Validity Not Before: Jun 14 07:15:52 2025 GMT Not After : Jun 17 14:04:52 2025 GMT Subject: CN=BEA002E906FDABD1306AD4F085F156490147F969 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:78:b7:1c:b6:46:f6:0a:75:13:40:3d:5c:a3: 2f:b3:03:ed:ad:64:6a:b2:75:42:92:f8:02:70:ba: 35:4c:f5:ef:b8:f2:e0:51:39:b5:9f:7c:8d:70:37: 6d:73:0b:f6:29:64:27:b4:97:11:78:07:63:4c:72: 8a:ba:2c:3c:d1:23:0e:fd:dc:61:d1:21:6c:60:3b: 6b:18:7f:97:03:df:57:b2:e8:de:20:3b:d9:93:0d: 43:44:88:5a:6b:e9:16:25:6c:75:35:92:c3:f1:60: 54:9f:40:ba:8a:c4:19:7e:bc:17:bf:79:e8:a4:88: 81:4b:6a:34:85:19:5e:e0:a6:e7:f4:ac:7d:d6:65: 89:51:0a:e7:33:50:ed:11:c7:71:a9:63:5b:ad:51: 04:90:0b:ea:98:e8:27:e8:e0:54:f7:d3:55:77:67: 6c:43:80:54:89:db:44:60:48:fd:78:19:48:8e:4d: 38:1b:c1:c7:58:18:fc:d1:ec:37:fc:33:77:ca:12: 4c:1d:57:1a:a7:52:bd:62:8c:45:2e:08:2d:71:2f: a4:0c:e7:85:36:97:ae:20:97:ec:27:1c:07:41:93: d5:1b:03:f1:99:d4:a2:0e:df:b7:6d:ce:6b:c1:7d: 21:e5:93:28:32:e4:9f:a7:b9:c5:74:dc:ea:ba:9b: 0b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BE:A0:02:E9:06:FD:AB:D1:30:6A:D4:F0:85:F1:56:49:01:47:F9:69 X509v3 Authority Key Identifier: keyid:DA:39:6A:1D:C6:29:9D:C3:BB:9E:8D:D7:65:0D:36:FA:BA:94:49:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:8a:59:74:62:39:e2:fa:6a:d6:e3:1a:45:20:01:40:18:e4: dc:e9:45:82:e4:78:40:9b:14:1f:e5:08:4a:8d:76:ac:05:ff: 08:e8:58:b8:39:52:85:78:0a:56:c0:9a:a7:79:55:e2:dc:77: ab:c7:d5:b5:95:c6:8f:57:20:8b:69:b8:99:37:fd:36:80:04: 26:70:98:26:15:35:a8:65:8c:57:10:b3:7f:60:89:0e:e3:b1: 44:b2:cd:0f:77:57:f9:c2:1a:6b:88:f5:15:7a:94:60:0c:61: 08:bb:b7:48:78:b1:e7:40:94:89:f0:7a:df:0c:8a:12:96:f7: ae:d2:de:8f:59:02:f4:1a:25:d8:94:a5:ac:98:98:ee:f8:ab: 81:a3:09:74:9c:a2:72:8d:50:56:c2:2b:18:90:60:15:73:60: c0:64:c0:67:75:6f:b9:76:7e:0c:8a:24:00:66:86:3c:b1:62: 22:81:05:4e:78:c4:6e:c3:e5:6b:88:cd:1b:5c:00:f0:0c:9d: 04:5e:01:34:f9:bd:2f:e5:9e:da:44:54:9d:1e:49:94:27:6c: d3:91:6e:a0:31:4d:bd:ae:db:9d:52:5f:bd:a8:87:5a:7f:b7: e5:f6:c3:76:c2:fa:b1:66:4a:45:fd:15:9a:00:d4:bc:9b:f3: 0b:c6:82:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdczZZC3Qd322QzHuieKqxuEX5ucwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREEzOTZBMURDNjI5OURDM0JCOUU4REQ3NjUwRDM2RkFC QTk0NDk2NzAeFw0yNTA2MTQwNzE1NTJaFw0yNTA2MTcxNDA0NTJaMDMxMTAvBgNV BAMTKEJFQTAwMkU5MDZGREFCRDEzMDZBRDRGMDg1RjE1NjQ5MDE0N0Y5NjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2eLcctkb2CnUTQD1coy+zA+2t ZGqydUKS+AJwujVM9e+48uBRObWffI1wN21zC/YpZCe0lxF4B2NMcoq6LDzRIw79 3GHRIWxgO2sYf5cD31ey6N4gO9mTDUNEiFpr6RYlbHU1ksPxYFSfQLqKxBl+vBe/ eeikiIFLajSFGV7gpuf0rH3WZYlRCuczUO0Rx3GpY1utUQSQC+qY6Cfo4FT301V3 Z2xDgFSJ20RgSP14GUiOTTgbwcdYGPzR7Df8M3fKEkwdVxqnUr1ijEUuCC1xL6QM 54U2l64gl+wnHAdBk9UbA/GZ1KIO37dtzmvBfSHlkygy5J+nucV03Oq6mwsBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvqAC6Qb9q9EwatTwhfFWSQFH+WkwHwYDVR0j BBgwFoAU2jlqHcYpncO7no3XZQ02+rqUSWcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OGI2M2U3ZC1hNjE3LTRlOGMtYTgyMS02MjM5NTZkNGQ0YWUvMC9EQTM5NkExREM2 Mjk5REMzQkI5RThERDc2NTBEMzZGQUJBOTQ0OTY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREEzOTZBMURDNjI5OURDM0JCOUU4REQ3NjUwRDM2RkFCQTk0 NDk2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZThiNjNlN2QtYTYxNy00ZThjLWE4 MjEtNjIzOTU2ZDRkNGFlLzAvREEzOTZBMURDNjI5OURDM0JCOUU4REQ3NjUwRDM2 RkFCQTk0NDk2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEiKWXRiOeL6atbjGkUgAUAY5NzpRYLkeECb FB/lCEqNdqwF/wjoWLg5UoV4ClbAmqd5VeLcd6vH1bWVxo9XIItpuJk3/TaABCZw mCYVNahljFcQs39giQ7jsUSyzQ93V/nCGmuI9RV6lGAMYQi7t0h4sedAlInwet8M ihKW967S3o9ZAvQaJdiUpayYmO74q4GjCXSconKNUFbCKxiQYBVzYMBkwGd1b7l2 fgyKJABmhjyxYiKBBU54xG7D5WuIzRtcAPAMnQReATT5vS/lntpEVJ0eSZQnbNOR bqAxTb2u251SX72oh1p/t+X2w3bC+rFmSkX9FZoA1Lyb8wvGgoA= -----END CERTIFICATE-----Generated at Mon Jun 16 15:38:19 2025 by rpki-client