$ rpki-client -vvf repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.mft File: DEF44331E724964F28697DEABAF2313CDCEEFACE.mft (raw, json) Hash identifier: kzk9/XNrAZjCdg5fhz3E00bYsdBhZ+facLg1X8k/+W0= Subject key identifier: A2:61:38:CD:38:31:FD:82:DD:DD:0F:CE:2F:58:19:7A:24:AC:23:B6 Authority key identifier: DE:F4:43:31:E7:24:96:4F:28:69:7D:EA:BA:F2:31:3C:DC:EE:FA:CE Certificate issuer: /CN=DEF44331E724964F28697DEABAF2313CDCEEFACE Certificate serial: 6011861786E629692928F8E082BA6022F58CE2D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEF44331E724964F28697DEABAF2313CDCEEFACE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.mft Manifest number: 04DD Signing time: Sun 15 Jun 2025 08:30:55 +0000 Manifest this update: Sun 15 Jun 2025 08:25:55 +0000 Manifest next update: Wed 18 Jun 2025 14:09:55 +0000 Files and hashes: 1: 3130332e3130382e3139312e302f32342d3234203d3e20313337333132.roa (hash: rUdT5hgB1MoqDtYNUlsd/H7JJhMR5l8B8KRXMe+OwOs=) 2: 323030313a6466343a316630303a3a2f34382d3438203d3e20313337333132.roa (hash: JRR7XEn+B9iX1MKG6S3DWTWk+XJaRXgwa3RueWQgr7k=) 3: DEF44331E724964F28697DEABAF2313CDCEEFACE.crl (hash: XkKeuubrzHmwrqH1W73eskxdYNbTptAUY7hLYuQdMV4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.crl rsync://repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEF44331E724964F28697DEABAF2313CDCEEFACE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 11:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:11:86:17:86:e6:29:69:29:28:f8:e0:82:ba:60:22:f5:8c:e2:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEF44331E724964F28697DEABAF2313CDCEEFACE Validity Not Before: Jun 15 08:25:55 2025 GMT Not After : Jun 18 14:09:55 2025 GMT Subject: CN=A26138CD3831FD82DDDD0FCE2F58197A24AC23B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:b8:51:e0:f5:91:8e:8d:c4:30:8a:57:80:67: b0:c2:fb:23:52:a9:10:41:7f:d1:63:99:6f:eb:34: 69:b3:8f:20:80:44:1d:16:ab:93:66:c9:fc:e4:2a: 30:7d:94:44:0b:18:06:88:ec:0f:79:23:57:81:ad: 58:e4:74:64:f1:9a:eb:e7:9e:e3:a3:8f:eb:15:4d: 73:b6:4d:2d:f8:ba:38:65:c1:28:bb:e9:94:25:0c: 90:e6:49:f0:bc:4c:34:67:67:8a:a2:df:da:73:3a: 37:b6:c7:54:03:8f:10:9b:1d:3a:de:ae:18:40:ea: 65:46:46:4a:d9:99:ee:7e:16:94:56:cd:08:a9:47: 6f:6d:ce:c5:50:f7:a0:3b:2a:c9:d1:df:33:bc:61: 30:27:7d:01:10:3d:ef:5a:00:3b:10:27:61:c5:04: 18:7e:64:e2:68:4e:73:1d:e6:04:56:9b:3b:6d:d0: 2b:c6:ea:a5:5d:21:e2:1c:07:eb:73:d3:24:f7:55: 99:a4:fc:90:ed:87:8e:01:5a:ab:b6:76:4f:c8:6c: d3:3c:db:42:66:eb:ab:93:2d:69:10:29:73:92:cf: 0b:b6:c1:f8:8a:13:5c:3e:a2:57:9a:b1:70:e9:5a: 33:d7:f3:67:79:2a:41:63:31:43:71:1a:b2:73:a5: 99:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:61:38:CD:38:31:FD:82:DD:DD:0F:CE:2F:58:19:7A:24:AC:23:B6 X509v3 Authority Key Identifier: keyid:DE:F4:43:31:E7:24:96:4F:28:69:7D:EA:BA:F2:31:3C:DC:EE:FA:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEF44331E724964F28697DEABAF2313CDCEEFACE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 88:54:9c:14:51:07:2e:e3:98:9a:9a:95:2e:60:4b:b2:40:b4: 5e:03:a3:05:24:84:a1:e1:bf:46:4d:aa:fc:ab:50:fb:cb:ea: df:a3:4a:f3:7a:aa:8d:41:85:e7:a4:11:a1:27:ab:94:e3:b3: ec:66:34:ef:7b:30:8a:73:2b:c2:d3:32:6f:e9:cd:75:ed:c2: a0:6b:20:09:02:51:63:09:b6:09:fb:8e:65:f2:2c:90:60:c7: 5b:14:65:3c:d4:eb:65:ec:4b:6b:7c:b6:72:05:d7:03:08:fe: e5:f0:18:80:83:e5:b4:09:0d:88:3d:d5:c4:be:4c:db:d4:1f: 20:69:c6:b1:e2:2f:d0:cc:91:8b:ce:40:1e:f2:1e:42:e3:96: 9c:20:3c:41:dd:e9:85:ea:c8:70:92:84:95:12:cb:cb:d2:23: 39:90:db:ee:7e:0d:2b:e5:64:8f:c4:fe:09:67:be:76:96:6f: 35:dd:a5:b8:7c:ad:14:c2:e5:d6:20:07:89:97:06:dc:8b:07: a8:1e:cc:8d:19:a8:bd:dd:de:4d:1c:38:0a:43:a6:89:e3:27: 01:0b:61:37:17:5f:bc:8a:bf:b8:7f:28:a1:a8:ba:17:96:e4: 2b:41:fa:fc:42:8a:30:95:5a:f2:fc:61:a0:a6:ec:b8:ab:60: 68:5f:60:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYBGGF4bmKWkpKPjggrpgIvWM4tEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVGNDQzMzFFNzI0OTY0RjI4Njk3REVBQkFGMjMxM0NE Q0VFRkFDRTAeFw0yNTA2MTUwODI1NTVaFw0yNTA2MTgxNDA5NTVaMDMxMTAvBgNV BAMTKEEyNjEzOENEMzgzMUZEODJEREREMEZDRTJGNTgxOTdBMjRBQzIzQjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1uFHg9ZGOjcQwileAZ7DC+yNS qRBBf9FjmW/rNGmzjyCARB0Wq5NmyfzkKjB9lEQLGAaI7A95I1eBrVjkdGTxmuvn nuOjj+sVTXO2TS34ujhlwSi76ZQlDJDmSfC8TDRnZ4qi39pzOje2x1QDjxCbHTre rhhA6mVGRkrZme5+FpRWzQipR29tzsVQ96A7KsnR3zO8YTAnfQEQPe9aADsQJ2HF BBh+ZOJoTnMd5gRWmztt0CvG6qVdIeIcB+tz0yT3VZmk/JDth44BWqu2dk/IbNM8 20Jm66uTLWkQKXOSzwu2wfiKE1w+oleasXDpWjPX82d5KkFjMUNxGrJzpZljAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUomE4zTgx/YLd3Q/OL1gZeiSsI7YwHwYDVR0j BBgwFoAU3vRDMecklk8oaX3quvIxPNzu+s4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MTkwYzM3ZS0yNjU1LTQyYjEtYmFmNy00MmVjMWNmMTkyYWEvMC9ERUY0NDMzMUU3 MjQ5NjRGMjg2OTdERUFCQUYyMzEzQ0RDRUVGQUNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREVGNDQzMzFFNzI0OTY0RjI4Njk3REVBQkFGMjMxM0NEQ0VF RkFDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjE5MGMzN2UtMjY1NS00MmIxLWJh ZjctNDJlYzFjZjE5MmFhLzAvREVGNDQzMzFFNzI0OTY0RjI4Njk3REVBQkFGMjMx M0NEQ0VFRkFDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIhUnBRRBy7jmJqalS5gS7JAtF4DowUkhKHh v0ZNqvyrUPvL6t+jSvN6qo1BheekEaEnq5Tjs+xmNO97MIpzK8LTMm/pzXXtwqBr IAkCUWMJtgn7jmXyLJBgx1sUZTzU62XsS2t8tnIF1wMI/uXwGICD5bQJDYg91cS+ TNvUHyBpxrHiL9DMkYvOQB7yHkLjlpwgPEHd6YXqyHCShJUSy8vSIzmQ2+5+DSvl ZI/E/glnvnaWbzXdpbh8rRTC5dYgB4mXBtyLB6gezI0ZqL3d3k0cOApDponjJwEL YTcXX7yKv7h/KKGouheW5CtB+vxCijCVWvL8YaCm7LirYGhfYFE= -----END CERTIFICATE-----Generated at Mon Jun 16 01:28:45 2025 by rpki-client