$ rpki-client -vvf repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft File: DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft (raw, json) Hash identifier: y2IGsnHjAF/G2fSXeBDrwqCdtM//Z6ZgpPZmGLusY0k= Subject key identifier: 4E:26:4F:DD:14:54:60:93:3F:C2:43:30:38:18:11:D0:B3:A6:A1:A6 Authority key identifier: DE:76:C6:11:73:80:1C:DB:71:8B:A5:8B:1A:4A:40:B5:C9:4E:9C:70 Certificate issuer: /CN=DE76C61173801CDB718BA58B1A4A40B5C94E9C70 Certificate serial: 01889A6196E535E7F0C49D7255F91FD4494AF0C5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft Manifest number: D8 Signing time: Tue 01 Jul 2025 18:50:02 +0000 Manifest this update: Tue 01 Jul 2025 18:45:02 +0000 Manifest next update: Fri 04 Jul 2025 23:45:02 +0000 Files and hashes: 1: DE76C61173801CDB718BA58B1A4A40B5C94E9C70.crl (hash: gnodW4oCaJCqZbdorehH/LneHnLSOvHtBC5KTw5eyPo=) 2: 3130332e38302e3234302e302f32322d3234203d3e20313336303534.roa (hash: rxBcvYlSzsa7LvAtTgr9iAlrA1pyphm/JuM/Rkc6s+c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.crl rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 15:45:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:88:9a:61:96:e5:35:e7:f0:c4:9d:72:55:f9:1f:d4:49:4a:f0:c5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE76C61173801CDB718BA58B1A4A40B5C94E9C70 Validity Not Before: Jul 1 18:45:02 2025 GMT Not After : Jul 4 23:45:02 2025 GMT Subject: CN=4E264FDD145460933FC24330381811D0B3A6A1A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:37:45:cb:a4:a4:15:2b:50:47:d0:a4:46:c9: e9:ef:4d:5c:51:8c:c8:b3:bb:29:bc:bb:a1:a9:8b: d1:4b:10:ac:d1:cf:48:57:ed:72:eb:7c:66:ef:23: 64:0d:d4:68:36:7b:2b:1c:68:ca:88:38:77:87:5d: d7:b4:ad:3e:58:64:4e:ad:2f:5f:b5:55:97:ae:45: 01:32:f5:a1:2b:fc:55:5d:6e:7b:54:d4:3c:eb:22: 94:b7:93:8b:b2:46:97:99:03:03:6c:8b:67:55:09: 53:8c:c6:4f:1d:7b:86:69:e7:6c:4c:af:67:12:5c: ca:04:ea:10:13:a7:5b:da:1c:f7:96:e8:e6:52:9b: 18:9a:23:51:85:72:40:7b:52:04:45:77:03:1e:15: 27:55:76:df:cf:b8:62:b9:f2:a9:56:d6:cc:90:de: 7b:86:c6:d4:b7:6a:9a:e3:bb:03:42:a1:f3:ff:94: 30:84:3e:50:7b:11:5b:84:d7:d9:19:73:03:d2:d4: 5d:fd:03:19:0d:af:4d:37:c5:0f:4c:bc:24:e4:21: 3a:1a:12:68:43:8d:c0:33:56:81:a7:34:18:64:f8: 52:e4:83:5e:33:9a:e8:35:cf:b6:9c:d0:c7:2c:6d: 96:2d:af:7b:df:00:db:95:1e:37:e6:61:6f:fa:3e: f9:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4E:26:4F:DD:14:54:60:93:3F:C2:43:30:38:18:11:D0:B3:A6:A1:A6 X509v3 Authority Key Identifier: keyid:DE:76:C6:11:73:80:1C:DB:71:8B:A5:8B:1A:4A:40:B5:C9:4E:9C:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f09cbb9-1aad-4b1a-bd4e-06fd84472fd7/0/DE76C61173801CDB718BA58B1A4A40B5C94E9C70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:55:20:e6:d3:f0:33:e4:b6:8f:28:d0:6e:d6:6e:3a:ae:21: 65:f8:1c:86:66:a3:95:40:18:a1:ae:c5:91:9f:77:f9:71:26: 82:62:84:fb:28:94:cd:11:ac:37:cc:e7:5d:80:db:fe:23:c3: 05:02:66:f5:03:cc:d6:ed:ed:30:4c:59:09:a6:b1:c0:83:9a: bc:49:bb:9e:e9:78:9c:a5:1a:14:e9:55:be:94:9d:4d:99:e2: ca:c5:71:bb:4d:91:9f:b7:cf:26:f3:3a:32:80:bf:bf:35:ba: ae:6b:7a:40:23:fb:2e:ca:61:20:04:3c:1f:81:58:5a:06:26: ec:8e:cb:0b:41:fa:5e:f5:d6:7e:79:05:1e:6f:a0:e8:61:0d: 85:b6:09:62:4b:82:01:9b:2f:2c:b0:13:37:fb:fd:cc:18:b0: 6d:f4:48:9e:1b:b4:3d:e8:70:2b:65:8d:06:ff:42:65:40:cb: 75:7d:3d:27:26:5c:6b:ae:78:94:4d:2d:7f:03:f2:eb:1f:fe: ac:b3:15:02:4e:54:75:b1:12:6e:30:db:9e:f1:f3:3c:ff:1f: 5a:be:c2:34:74:a3:e2:c5:48:8e:ae:b9:61:b8:e6:5d:2b:cc: 08:4c:6d:07:3b:e7:51:9c:ae:3c:26:57:b4:ec:04:ca:ce:4d: 17:3c:f1:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAYiaYZblNefwxJ1yVfkf1ElK8MUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU3NkM2MTE3MzgwMUNEQjcxOEJBNThCMUE0QTQwQjVD OTRFOUM3MDAeFw0yNTA3MDExODQ1MDJaFw0yNTA3MDQyMzQ1MDJaMDMxMTAvBgNV BAMTKDRFMjY0RkREMTQ1NDYwOTMzRkMyNDMzMDM4MTgxMUQwQjNBNkExQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfN0XLpKQVK1BH0KRGyenvTVxR jMizuym8u6Gpi9FLEKzRz0hX7XLrfGbvI2QN1Gg2eyscaMqIOHeHXde0rT5YZE6t L1+1VZeuRQEy9aEr/FVdbntU1DzrIpS3k4uyRpeZAwNsi2dVCVOMxk8de4Zp52xM r2cSXMoE6hATp1vaHPeW6OZSmxiaI1GFckB7UgRFdwMeFSdVdt/PuGK58qlW1syQ 3nuGxtS3aprjuwNCofP/lDCEPlB7EVuE19kZcwPS1F39AxkNr003xQ9MvCTkIToa EmhDjcAzVoGnNBhk+FLkg14zmug1z7ac0McsbZYtr3vfANuVHjfmYW/6PvnTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTiZP3RRUYJM/wkMwOBgR0LOmoaYwHwYDVR0j BBgwFoAU3nbGEXOAHNtxi6WLGkpAtclOnHAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjA5Y2JiOS0xYWFkLTRiMWEtYmQ0ZS0wNmZkODQ0NzJmZDcvMC9ERTc2QzYxMTcz ODAxQ0RCNzE4QkE1OEIxQTRBNDBCNUM5NEU5QzcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU3NkM2MTE3MzgwMUNEQjcxOEJBNThCMUE0QTQwQjVDOTRF OUM3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGYwOWNiYjktMWFhZC00YjFhLWJk NGUtMDZmZDg0NDcyZmQ3LzAvREU3NkM2MTE3MzgwMUNEQjcxOEJBNThCMUE0QTQw QjVDOTRFOUM3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKVVIObT8DPkto8o0G7WbjquIWX4HIZmo5VA GKGuxZGfd/lxJoJihPsolM0RrDfM512A2/4jwwUCZvUDzNbt7TBMWQmmscCDmrxJ u57peJylGhTpVb6UnU2Z4srFcbtNkZ+3zybzOjKAv781uq5rekAj+y7KYSAEPB+B WFoGJuyOywtB+l711n55BR5voOhhDYW2CWJLggGbLyywEzf7/cwYsG30SJ4btD3o cCtljQb/QmVAy3V9PScmXGuueJRNLX8D8usf/qyzFQJOVHWxEm4w257x8zz/H1q+ wjR0o+LFSI6uuWG45l0rzAhMbQc751GcrjwmV7TsBMrOTRc88aU= -----END CERTIFICATE-----Generated at Tue Jul 1 23:23:32 2025 by rpki-client