$ rpki-client -vvf repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft File: DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft (raw, json) Hash identifier: 0zxKH/HqJZN1zFbzNSeJuPMUufi4DEQ0pbvHyxoHYxQ= Subject key identifier: 09:02:3F:8A:C8:7F:AB:C4:D4:C5:44:64:DE:27:5F:A8:FD:4D:BB:52 Authority key identifier: DF:0A:C6:ED:AE:FC:E4:FE:D1:EE:8A:4C:0A:7B:C4:EF:D6:22:FB:2E Certificate issuer: /CN=DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E Certificate serial: 73F6D8096AC512DC192FEC3E31FCAC5373251B67 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft Manifest number: 015A Signing time: Sat 28 Jun 2025 10:51:39 +0000 Manifest this update: Sat 28 Jun 2025 10:46:39 +0000 Manifest next update: Tue 01 Jul 2025 19:31:39 +0000 Files and hashes: 1: 3130332e3132372e3130362e302f32332d3234203d3e20313530393731.roa (hash: lW1DAyCSTgRvB6XQz9p6ZQqRRWcAHTlnodsMGbhnNcU=) 2: DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.crl (hash: eKbXjJShgiT5lZABVz+gVymRZNqI5qCapddmvofB8+M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.crl rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 19:31:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:f6:d8:09:6a:c5:12:dc:19:2f:ec:3e:31:fc:ac:53:73:25:1b:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E Validity Not Before: Jun 28 10:46:39 2025 GMT Not After : Jul 1 19:31:39 2025 GMT Subject: CN=09023F8AC87FABC4D4C54464DE275FA8FD4DBB52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f4:8e:1c:86:6a:eb:eb:95:45:b8:07:25:a9:e8: aa:cd:13:47:1f:4c:51:08:bf:e8:e3:7a:f8:5e:b9: 3e:1f:df:87:05:96:a8:ba:e9:73:9c:24:92:78:19: e0:e4:f0:af:0c:87:a9:4c:09:60:b5:38:b8:b3:db: 23:ac:61:fa:74:70:18:d8:97:56:f5:a7:7d:f7:ed: b6:9e:80:c3:bb:6d:51:ad:6b:6b:d3:50:12:4d:a4: 67:8e:71:80:5d:8e:06:cc:f0:01:d8:c9:93:f7:86: 72:a5:0e:38:05:a1:65:d2:6a:a7:14:44:3d:1b:a6: 7d:5d:91:f9:2b:52:ad:05:e6:a5:75:55:29:0f:03: 99:df:10:52:28:b4:d7:74:9a:b9:77:f0:42:be:ea: e2:b5:44:1d:ca:2c:de:5f:0f:2a:a3:e5:b1:66:af: fe:21:a6:9e:aa:69:80:f0:2e:1e:81:0d:f6:32:bb: 44:f3:d0:09:70:ec:89:7f:9c:97:19:93:7b:fa:b0: cf:79:46:6a:9f:6b:8d:25:d3:3f:76:62:c3:c0:78: 9d:24:e5:67:2c:9c:2d:1e:63:0c:48:34:37:3d:0b: 63:95:5f:24:89:e4:e2:cf:94:a9:e7:0b:09:c8:ae: 42:f7:46:e0:52:1b:ef:46:70:e8:3a:9e:a0:90:54: e3:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 09:02:3F:8A:C8:7F:AB:C4:D4:C5:44:64:DE:27:5F:A8:FD:4D:BB:52 X509v3 Authority Key Identifier: keyid:DF:0A:C6:ED:AE:FC:E4:FE:D1:EE:8A:4C:0A:7B:C4:EF:D6:22:FB:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:ef:a3:5a:c8:68:df:12:fe:28:df:97:c5:f2:94:10:7d:e4: e3:ba:31:13:25:b6:dd:47:20:6b:f6:d3:b4:ca:0b:05:0a:d3: da:94:c7:46:0f:83:a3:f9:f1:9e:e0:9d:06:5f:fb:72:98:80: c4:7a:38:02:dc:bd:03:48:79:06:15:87:3b:e3:cc:f2:57:dd: 30:a7:a7:9d:e9:d2:a1:c2:0f:e6:25:b6:8b:02:b7:b8:c2:7a: c1:97:e4:55:dd:b8:84:05:6c:3b:83:12:0b:f0:2d:34:34:ff: 1a:7e:fc:04:d4:e0:41:e4:20:e0:34:99:cd:f9:8f:f8:57:bc: 39:be:aa:f3:cf:be:cc:16:2e:de:fd:ae:33:2f:1b:95:ac:d4: 39:ea:86:ce:61:c1:88:b2:1b:5d:ae:aa:1a:0f:70:78:a1:1e: 89:f2:e4:de:a6:89:7c:0f:98:e3:24:a2:6a:a2:3b:d9:d6:dc: 22:32:80:fa:3a:ce:fd:ce:8e:56:9f:08:31:fd:84:a7:98:43: df:c8:da:77:fc:24:3a:4e:e0:90:f6:de:05:d4:00:d2:7e:f5: 3c:64:21:5b:e7:40:4a:dc:3d:2a:48:b1:55:1a:40:77:30:4f: cd:e9:46:d7:12:ad:d9:75:7c:e4:43:7a:3e:7a:0c:f5:4f:a0: fa:f1:d0:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc/bYCWrFEtwZL+w+MfysU3MlG2cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYwQUM2RURBRUZDRTRGRUQxRUU4QTRDMEE3QkM0RUZE NjIyRkIyRTAeFw0yNTA2MjgxMDQ2MzlaFw0yNTA3MDExOTMxMzlaMDMxMTAvBgNV BAMTKDA5MDIzRjhBQzg3RkFCQzRENEM1NDQ2NERFMjc1RkE4RkQ0REJCNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD0jhyGauvrlUW4ByWp6KrNE0cf TFEIv+jjevheuT4f34cFlqi66XOcJJJ4GeDk8K8Mh6lMCWC1OLiz2yOsYfp0cBjY l1b1p3337baegMO7bVGta2vTUBJNpGeOcYBdjgbM8AHYyZP3hnKlDjgFoWXSaqcU RD0bpn1dkfkrUq0F5qV1VSkPA5nfEFIotNd0mrl38EK+6uK1RB3KLN5fDyqj5bFm r/4hpp6qaYDwLh6BDfYyu0Tz0Alw7Il/nJcZk3v6sM95Rmqfa40l0z92YsPAeJ0k 5WcsnC0eYwxINDc9C2OVXySJ5OLPlKnnCwnIrkL3RuBSG+9GcOg6nqCQVOM1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCQI/ish/q8TUxURk3idfqP1Nu1IwHwYDVR0j BBgwFoAU3wrG7a785P7R7opMCnvE79Yi+y4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OGQ3YTAzOC1mOGExLTRlZDAtYTFhZi01NDk1MmU1NDNjNDMvMC9ERjBBQzZFREFF RkNFNEZFRDFFRThBNEMwQTdCQzRFRkQ2MjJGQjJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREYwQUM2RURBRUZDRTRGRUQxRUU4QTRDMEE3QkM0RUZENjIy RkIyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzhkN2EwMzgtZjhhMS00ZWQwLWEx YWYtNTQ5NTJlNTQzYzQzLzAvREYwQUM2RURBRUZDRTRGRUQxRUU4QTRDMEE3QkM0 RUZENjIyRkIyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEzvo1rIaN8S/ijfl8XylBB95OO6MRMltt1H IGv207TKCwUK09qUx0YPg6P58Z7gnQZf+3KYgMR6OALcvQNIeQYVhzvjzPJX3TCn p53p0qHCD+YltosCt7jCesGX5FXduIQFbDuDEgvwLTQ0/xp+/ATU4EHkIOA0mc35 j/hXvDm+qvPPvswWLt79rjMvG5Ws1Dnqhs5hwYiyG12uqhoPcHihHony5N6miXwP mOMkomqiO9nW3CIygPo6zv3OjlafCDH9hKeYQ9/I2nf8JDpO4JD23gXUANJ+9Txk IVvnQErcPSpIsVUaQHcwT83pRtcSrdl1fORDej56DPVPoPrx0G8= -----END CERTIFICATE-----Generated at Sun Jun 29 18:49:03 2025 by rpki-client