$ rpki-client -vvf repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft File: DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft (raw, json) Hash identifier: zNp3cKBG2xanaHtvdkX/4YkEYSmkHs70/MgK3nMFHIg= Subject key identifier: DA:50:C8:1E:F9:8D:4C:BC:61:BD:00:57:36:AE:A3:19:03:13:C8:FB Authority key identifier: DC:34:C8:B5:F4:38:B8:D4:CB:13:F2:45:1A:D1:F0:95:5E:5F:7F:BB Certificate issuer: /CN=DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB Certificate serial: 53978E55D25C24AE074F90D0CC97EA35D383131F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft Manifest number: 0469 Signing time: Sat 28 Jun 2025 21:21:36 +0000 Manifest this update: Sat 28 Jun 2025 21:16:36 +0000 Manifest next update: Wed 02 Jul 2025 08:23:36 +0000 Files and hashes: 1: DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.crl (hash: 8el8D6bTADhg4kWAbpIxt6x9KjIQ5q4pIk272hm4/Gw=) 2: 323030313a6466363a313830303a3a2f34382d3438203d3e20313331373535.roa (hash: HGlDA4/8VVAgy1tfZNlAnPXlJMICAK8Z05H6MVK5yJM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.crl rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:97:8e:55:d2:5c:24:ae:07:4f:90:d0:cc:97:ea:35:d3:83:13:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB Validity Not Before: Jun 28 21:16:36 2025 GMT Not After : Jul 2 08:23:36 2025 GMT Subject: CN=DA50C81EF98D4CBC61BD005736AEA3190313C8FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:f8:d4:77:97:a4:16:ea:b0:18:70:31:7c:46: 7e:5a:b6:ad:9c:1e:8a:ce:51:9e:28:43:3a:14:a0: ee:09:04:8b:20:97:23:d9:86:f4:b2:90:55:68:1c: 8f:99:65:c6:71:1a:60:3e:d0:72:93:19:53:11:29: 8a:21:59:fe:11:1f:2e:05:28:5c:fb:92:eb:bc:03: 0b:f0:9a:f1:ac:d9:d5:0d:4f:a7:9c:99:37:f6:1b: 99:32:41:15:24:71:0c:6f:25:8c:df:b7:08:00:6a: ca:40:2b:5d:4e:0b:58:e4:0c:2e:27:47:2e:82:fb: d9:e7:f7:19:48:a3:fe:87:52:b6:33:aa:48:88:1d: 62:74:99:44:a5:21:a1:43:f1:1f:b0:fa:f9:de:83: ff:b2:a5:76:91:fe:98:c5:a8:ed:55:65:66:4d:8d: 1c:65:84:c6:54:ee:13:02:c2:97:23:c2:94:57:90: 36:23:80:e8:09:10:d3:aa:54:07:71:0d:fa:dc:39: f3:e2:49:09:e0:c9:53:d0:8a:0d:2d:09:bf:6e:42: e5:11:ab:44:95:b0:cd:3e:c6:e2:90:52:b4:06:e9: fd:fe:fd:02:74:33:37:04:92:c9:e8:5a:87:cf:1b: a9:40:21:a0:c8:ab:ae:27:e9:1e:fd:e4:17:e3:8e: fe:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DA:50:C8:1E:F9:8D:4C:BC:61:BD:00:57:36:AE:A3:19:03:13:C8:FB X509v3 Authority Key Identifier: keyid:DC:34:C8:B5:F4:38:B8:D4:CB:13:F2:45:1A:D1:F0:95:5E:5F:7F:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:6e:89:fe:b9:64:12:86:de:1f:3a:37:5f:74:a4:04:a7:d4: 13:c8:ac:f1:e2:4d:50:f6:67:16:da:db:ea:33:29:5c:d2:8e: 28:fc:08:3c:62:20:89:ab:85:a2:e0:06:19:5c:94:36:f6:c5: 00:52:18:cf:51:1f:71:a8:66:0b:fb:c9:a3:f2:a0:1a:d8:61: f3:7b:68:15:49:f7:20:29:8a:75:54:f0:54:79:15:44:68:54: e9:be:27:4f:9a:b0:6e:de:64:b3:96:aa:44:b8:b4:b9:c8:a7: 44:22:12:48:9b:79:9c:ca:a4:7e:60:3e:7b:b4:3b:fd:ec:64: fd:21:3d:ae:40:bb:97:4c:b5:6c:f0:a0:45:88:84:db:b2:3e: f4:5e:cb:cc:2a:fe:ee:9f:a4:e2:06:39:46:24:a0:b1:d9:42: 32:85:af:1b:6d:f4:b2:7f:9c:0d:f7:8f:c0:3f:bb:5d:b2:8d: 20:0e:e4:7a:1c:ae:e1:1f:27:95:ba:97:c0:c5:a2:38:3e:fc: 33:cf:e4:fb:b6:74:02:78:f5:e3:fc:9a:3c:5f:02:3f:b7:75: 36:83:97:a7:21:2e:bd:a9:93:be:7e:34:68:4a:69:24:f6:00: 0d:c7:47:76:c6:df:2b:c5:21:14:86:49:ce:78:96:ab:e7:30: 18:9a:b0:56 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU5eOVdJcJK4HT5DQzJfqNdODEx8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMzNEM4QjVGNDM4QjhENENCMTNGMjQ1MUFEMUYwOTU1 RTVGN0ZCQjAeFw0yNTA2MjgyMTE2MzZaFw0yNTA3MDIwODIzMzZaMDMxMTAvBgNV BAMTKERBNTBDODFFRjk4RDRDQkM2MUJEMDA1NzM2QUVBMzE5MDMxM0M4RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZ+NR3l6QW6rAYcDF8Rn5atq2c HorOUZ4oQzoUoO4JBIsglyPZhvSykFVoHI+ZZcZxGmA+0HKTGVMRKYohWf4RHy4F KFz7kuu8AwvwmvGs2dUNT6ecmTf2G5kyQRUkcQxvJYzftwgAaspAK11OC1jkDC4n Ry6C+9nn9xlIo/6HUrYzqkiIHWJ0mUSlIaFD8R+w+vneg/+ypXaR/pjFqO1VZWZN jRxlhMZU7hMCwpcjwpRXkDYjgOgJENOqVAdxDfrcOfPiSQngyVPQig0tCb9uQuUR q0SVsM0+xuKQUrQG6f3+/QJ0MzcEksnoWofPG6lAIaDIq64n6R795Bfjjv6RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2lDIHvmNTLxhvQBXNq6jGQMTyPswHwYDVR0j BBgwFoAU3DTItfQ4uNTLE/JFGtHwlV5ff7swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YThmMDQzNS00ZDM4LTQ3ZWYtODUwZi01MWJhNDYxN2ZiM2QvMC9EQzM0QzhCNUY0 MzhCOEQ0Q0IxM0YyNDUxQUQxRjA5NTVFNUY3RkJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREMzNEM4QjVGNDM4QjhENENCMTNGMjQ1MUFEMUYwOTU1RTVG N0ZCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE4ZjA0MzUtNGQzOC00N2VmLTg1 MGYtNTFiYTQ2MTdmYjNkLzAvREMzNEM4QjVGNDM4QjhENENCMTNGMjQ1MUFEMUYw OTU1RTVGN0ZCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFluif65ZBKG3h86N190pASn1BPIrPHiTVD2 Zxba2+ozKVzSjij8CDxiIImrhaLgBhlclDb2xQBSGM9RH3GoZgv7yaPyoBrYYfN7 aBVJ9yApinVU8FR5FURoVOm+J0+asG7eZLOWqkS4tLnIp0QiEkibeZzKpH5gPnu0 O/3sZP0hPa5Au5dMtWzwoEWIhNuyPvRey8wq/u6fpOIGOUYkoLHZQjKFrxtt9LJ/ nA33j8A/u12yjSAO5HocruEfJ5W6l8DFojg+/DPP5Pu2dAJ49eP8mjxfAj+3dTaD l6chLr2pk75+NGhKaST2AA3HR3bG3yvFIRSGSc54lqvnMBiasFY= -----END CERTIFICATE-----Generated at Sun Jun 29 18:47:19 2025 by rpki-client