$ rpki-client -vvf repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.mft File: DE39DBDBFB23D179870083C94A086E2890E8B7AD.mft (raw, json) Hash identifier: rjQ/V9XVSPgOfnleMnH1NrmdpzU2SMfVOAYhE70I8os= Subject key identifier: 95:19:64:D3:9C:F6:2C:CF:5C:FC:D1:0A:13:C7:97:A1:F9:DA:13:FF Authority key identifier: DE:39:DB:DB:FB:23:D1:79:87:00:83:C9:4A:08:6E:28:90:E8:B7:AD Certificate issuer: /CN=DE39DBDBFB23D179870083C94A086E2890E8B7AD Certificate serial: 4281A72C441165AFC6DFB9BDC23132C797200BC7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE39DBDBFB23D179870083C94A086E2890E8B7AD.cer Subject info access: rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.mft Manifest number: 0148 Signing time: Sat 28 Jun 2025 13:12:19 +0000 Manifest this update: Sat 28 Jun 2025 13:07:19 +0000 Manifest next update: Tue 01 Jul 2025 23:20:19 +0000 Files and hashes: 1: 3130332e3231382e3138332e302f32342d3234203d3e20313530323636.roa (hash: O7ET++3mrznHJVvRoGpVQYJjcUAO15sAg0dKj486xb0=) 2: 323030313a6466323a376234303a3a2f34382d3438203d3e20313530323636.roa (hash: yQ+O0JgELxkJNBYJ1Ujm9yhO9nL92pk3Pdtypqzo9H4=) 3: 3130332e39312e3133372e302f32342d3234203d3e20313530323636.roa (hash: PmPPRQTTkJqVTyMLWeDylYP3YNddNNCX4NFRmE7faZ4=) 4: DE39DBDBFB23D179870083C94A086E2890E8B7AD.crl (hash: QaIObZrW5gZuAhALMhKSXGlEd6k5sURaD1RyOWXD694=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.crl rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE39DBDBFB23D179870083C94A086E2890E8B7AD.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 23:20:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:81:a7:2c:44:11:65:af:c6:df:b9:bd:c2:31:32:c7:97:20:0b:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE39DBDBFB23D179870083C94A086E2890E8B7AD Validity Not Before: Jun 28 13:07:19 2025 GMT Not After : Jul 1 23:20:19 2025 GMT Subject: CN=951964D39CF62CCF5CFCD10A13C797A1F9DA13FF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:0b:da:ca:35:66:87:db:e2:24:ca:07:c3:4a: a1:9d:48:1b:06:c9:19:7b:d7:cc:84:e8:c4:39:56: 60:c7:53:fa:99:0c:34:b7:d0:4b:2b:18:eb:6b:16: 59:4d:b7:b3:f4:06:46:bd:df:85:88:20:79:27:ed: a1:1e:2c:7c:74:06:57:1d:74:e9:b1:6c:fa:34:82: d0:6b:56:7d:44:0f:5b:32:19:35:9f:f3:ab:97:65: 8a:f2:0f:5d:9d:51:f2:16:eb:b4:45:4d:dc:70:70: 12:16:ce:10:dd:f0:1b:9d:5f:33:7d:d8:4c:67:98: 0f:7b:84:17:27:f6:4e:f7:9d:41:a5:59:a3:f9:98: 40:8e:22:a8:3a:2c:0e:bd:23:cc:e9:c6:32:09:58: 01:be:ef:39:2f:e6:33:0c:f7:de:85:b3:43:08:57: bd:eb:75:bc:02:ec:2f:d1:68:88:e3:eb:8f:a8:03: b2:fb:a0:69:28:26:28:0f:49:93:fa:9a:16:ab:62: ed:e7:11:34:6d:8f:50:91:97:cc:4e:1f:ac:8a:1f: 48:23:0c:71:b5:40:f2:50:3b:ce:82:38:3a:ec:51: 94:a1:98:e8:ac:37:7d:1e:59:4f:f4:9b:28:72:74: f5:14:1e:44:cd:9f:a8:bf:4e:43:d7:0a:f5:c9:9b: 7a:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:19:64:D3:9C:F6:2C:CF:5C:FC:D1:0A:13:C7:97:A1:F9:DA:13:FF X509v3 Authority Key Identifier: keyid:DE:39:DB:DB:FB:23:D1:79:87:00:83:C9:4A:08:6E:28:90:E8:B7:AD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE39DBDBFB23D179870083C94A086E2890E8B7AD.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/552beae1-3480-4e92-a3a9-5a54fbbacd2d/0/DE39DBDBFB23D179870083C94A086E2890E8B7AD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:c0:7e:f1:13:63:a5:67:d0:5c:be:6e:87:8b:f8:22:88:f6: a6:49:5d:7e:22:ad:de:a6:24:69:99:1b:b3:2f:60:14:c9:4a: 27:6c:d8:31:06:76:b4:91:d3:c2:5f:0e:8b:60:b3:2a:b4:88: 92:9a:31:2f:81:c0:8b:0d:41:78:6f:8e:84:2f:96:68:88:cd: b5:92:5d:ed:3b:da:1b:8f:2f:7d:e5:fa:93:e8:5e:b4:e3:32: 61:a9:fe:8a:cf:9a:d9:af:75:0b:e7:88:a8:7e:4c:99:ff:d9: 0f:d7:41:2e:ea:1b:be:57:81:87:ef:03:64:7b:62:67:59:05: 50:dd:db:ec:f0:62:b6:05:95:de:5a:59:76:2b:68:0f:e6:ee: 6c:e3:c1:45:b4:1e:af:9b:14:7a:0e:dc:6f:5a:2c:f4:e8:96: 5d:65:2e:9c:82:f5:a1:b4:b5:ef:7d:da:bd:cb:d1:a4:73:65: 1a:12:9c:88:f1:43:68:34:cc:8e:3c:e7:01:d4:15:d6:fc:01: 62:63:87:74:20:40:96:ad:03:1b:03:e2:39:1b:fb:2c:99:fd: 95:e8:da:6a:a2:a0:2b:b4:9a:d1:e9:37:77:35:35:c7:41:cc: 63:8a:e5:c8:b4:0d:d8:1c:54:d0:46:7a:9b:0b:31:ad:9a:d4: 95:ae:e7:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQoGnLEQRZa/G37m9wjEyx5cgC8cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUzOURCREJGQjIzRDE3OTg3MDA4M0M5NEEwODZFMjg5 MEU4QjdBRDAeFw0yNTA2MjgxMzA3MTlaFw0yNTA3MDEyMzIwMTlaMDMxMTAvBgNV BAMTKDk1MTk2NEQzOUNGNjJDQ0Y1Q0ZDRDEwQTEzQzc5N0ExRjlEQTEzRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNC9rKNWaH2+IkygfDSqGdSBsG yRl718yE6MQ5VmDHU/qZDDS30EsrGOtrFllNt7P0Bka934WIIHkn7aEeLHx0Blcd dOmxbPo0gtBrVn1ED1syGTWf86uXZYryD12dUfIW67RFTdxwcBIWzhDd8BudXzN9 2ExnmA97hBcn9k73nUGlWaP5mECOIqg6LA69I8zpxjIJWAG+7zkv5jMM996Fs0MI V73rdbwC7C/RaIjj64+oA7L7oGkoJigPSZP6mharYu3nETRtj1CRl8xOH6yKH0gj DHG1QPJQO86CODrsUZShmOisN30eWU/0myhydPUUHkTNn6i/TkPXCvXJm3q5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUlRlk05z2LM9c/NEKE8eXofnaE/8wHwYDVR0j BBgwFoAU3jnb2/sj0XmHAIPJSghuKJDot60wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 NTJiZWFlMS0zNDgwLTRlOTItYTNhOS01YTU0ZmJiYWNkMmQvMC9ERTM5REJEQkZC MjNEMTc5ODcwMDgzQzk0QTA4NkUyODkwRThCN0FELmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREUzOURCREJGQjIzRDE3OTg3MDA4M0M5NEEwODZFMjg5MEU4 QjdBRC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNTUyYmVhZTEtMzQ4MC00ZTkyLWEz YTktNWE1NGZiYmFjZDJkLzAvREUzOURCREJGQjIzRDE3OTg3MDA4M0M5NEEwODZF Mjg5MEU4QjdBRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKDAfvETY6Vn0Fy+boeL+CKI9qZJXX4ird6m JGmZG7MvYBTJSids2DEGdrSR08JfDotgsyq0iJKaMS+BwIsNQXhvjoQvlmiIzbWS Xe072huPL33l+pPoXrTjMmGp/orPmtmvdQvniKh+TJn/2Q/XQS7qG75XgYfvA2R7 YmdZBVDd2+zwYrYFld5aWXYraA/m7mzjwUW0Hq+bFHoO3G9aLPToll1lLpyC9aG0 te992r3L0aRzZRoSnIjxQ2g0zI485wHUFdb8AWJjh3QgQJatAxsD4jkb+yyZ/ZXo 2mqioCu0mtHpN3c1NcdBzGOK5ci0DdgcVNBGepsLMa2a1JWu59w= -----END CERTIFICATE-----Generated at Mon Jun 30 10:33:47 2025 by rpki-client