$ rpki-client -vvf repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.mft File: DCD5207AC33E109E31052BBB7F811DBF6DA180BB.mft (raw, json) Hash identifier: i1wxQigajxNp+mF6MxAQEXK1x2053HM5jv8MKnzqrSI= Subject key identifier: CD:1A:B9:E2:5C:55:E7:69:12:C3:E1:32:B4:88:7D:3A:EB:A0:6F:DC Authority key identifier: DC:D5:20:7A:C3:3E:10:9E:31:05:2B:BB:7F:81:1D:BF:6D:A1:80:BB Certificate issuer: /CN=DCD5207AC33E109E31052BBB7F811DBF6DA180BB Certificate serial: 079326B2188D187036004155BF5068F78B26C621 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.mft Manifest number: 4E Signing time: Mon 30 Jun 2025 19:02:07 +0000 Manifest this update: Mon 30 Jun 2025 18:57:07 +0000 Manifest next update: Fri 04 Jul 2025 06:43:07 +0000 Files and hashes: 1: 3136302e32322e3130312e302f32342d3234203d3e20313532383039.roa (hash: mizXQiZMhSS2dg4DmWjoCSbZiybtKsfGNPxNOZ0yF9I=) 2: DCD5207AC33E109E31052BBB7F811DBF6DA180BB.crl (hash: IGNSSEzZgn/DM0qQGN2hc9tH2MMJzVMLSBC2IjAWMLc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.crl rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 06:43:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 07:93:26:b2:18:8d:18:70:36:00:41:55:bf:50:68:f7:8b:26:c6:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCD5207AC33E109E31052BBB7F811DBF6DA180BB Validity Not Before: Jun 30 18:57:07 2025 GMT Not After : Jul 4 06:43:07 2025 GMT Subject: CN=CD1AB9E25C55E76912C3E132B4887D3AEBA06FDC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:2c:b7:39:cc:a5:07:2a:91:df:64:1c:d7:6d: 73:26:f0:50:db:f9:bc:b7:0b:0a:68:98:d0:83:97: 8d:0f:19:dc:8c:bc:35:2b:92:75:1c:aa:6a:2a:5e: e8:98:fa:ed:28:91:8b:ab:cf:0d:37:b2:b0:3b:a2: 9a:e6:1b:e0:1c:c0:eb:16:0d:d8:80:6d:74:56:fd: 0d:2d:09:17:90:09:70:d9:1d:52:0d:73:2d:63:2f: 61:35:12:d2:25:2f:09:74:0e:a4:24:af:f2:ff:cb: ec:c0:38:3e:36:c3:d7:b8:b1:81:55:cb:e7:0f:e0: d9:c4:81:41:eb:a7:32:0e:39:f5:f1:7e:99:7e:7e: 55:e8:4b:82:b0:2d:33:bb:c0:48:1e:99:b9:70:b5: c7:45:d4:b2:ea:f3:24:81:8a:13:9f:28:b1:bd:fb: 1b:c5:87:7e:7b:df:0e:fb:6f:25:72:0c:b2:b0:d7: ec:3c:79:84:aa:09:ef:c7:2a:79:c5:88:74:52:13: 6b:db:6e:ba:a6:b6:31:85:e8:34:42:f7:d8:75:0e: 54:f0:dd:58:a5:f3:8c:34:b7:56:8c:45:f1:31:4e: 87:82:1c:69:fd:87:c2:f3:d3:41:c8:6b:0f:50:87: 12:54:f1:34:5f:87:ed:9e:37:d4:8a:bf:ae:f8:0c: 6d:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:1A:B9:E2:5C:55:E7:69:12:C3:E1:32:B4:88:7D:3A:EB:A0:6F:DC X509v3 Authority Key Identifier: keyid:DC:D5:20:7A:C3:3E:10:9E:31:05:2B:BB:7F:81:1D:BF:6D:A1:80:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:18:06:0c:32:72:77:4b:b3:d1:84:1a:66:47:88:d1:dc:98: 86:4b:33:ec:0c:3e:3c:ee:b3:7c:67:f0:ac:42:d4:d0:68:61: bb:12:e3:8e:9d:9d:6d:b2:17:fc:c0:1c:df:e7:f2:1e:75:ed: 5e:d1:4c:f2:88:84:55:75:0f:7c:1b:ea:79:5f:b6:6b:91:8a: 86:70:9e:4b:24:f8:77:c5:c6:00:a9:47:dd:cc:04:79:f3:6d: f5:fa:d6:11:58:4e:db:a3:84:92:7c:c0:5d:8a:29:06:dc:ce: ac:0c:83:ba:2d:43:7e:43:04:f7:38:46:5b:4b:ca:4f:8a:79: d9:56:85:1a:0f:1c:c1:da:c3:cd:ea:fb:93:dc:51:be:32:4e: c0:78:c4:17:9c:d4:e0:f4:09:b1:18:ba:50:e7:fc:15:d0:d8: 4c:d1:64:1b:eb:8f:7c:91:d1:cd:23:1b:1d:3e:a3:0b:85:62: bb:d8:58:77:2d:a1:e6:82:63:4c:bd:59:94:e9:63:f7:4d:cc: 64:33:3d:d4:01:09:e7:ad:03:d8:e0:03:8a:91:7a:cc:4f:d8: 7e:67:25:41:3c:33:70:99:b6:7c:fd:5c:14:a8:b5:88:b4:5f: b6:c0:14:a3:ad:35:e6:2d:e9:77:16:a5:ec:df:97:ac:d9:23: 7a:29:64:f0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUB5MmshiNGHA2AEFVv1Bo94smxiEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENENTIwN0FDMzNFMTA5RTMxMDUyQkJCN0Y4MTFEQkY2 REExODBCQjAeFw0yNTA2MzAxODU3MDdaFw0yNTA3MDQwNjQzMDdaMDMxMTAvBgNV BAMTKENEMUFCOUUyNUM1NUU3NjkxMkMzRTEzMkI0ODg3RDNBRUJBMDZGREMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDLLc5zKUHKpHfZBzXbXMm8FDb +by3CwpomNCDl40PGdyMvDUrknUcqmoqXuiY+u0okYurzw03srA7oprmG+AcwOsW DdiAbXRW/Q0tCReQCXDZHVINcy1jL2E1EtIlLwl0DqQkr/L/y+zAOD42w9e4sYFV y+cP4NnEgUHrpzIOOfXxfpl+flXoS4KwLTO7wEgemblwtcdF1LLq8ySBihOfKLG9 +xvFh3573w77byVyDLKw1+w8eYSqCe/HKnnFiHRSE2vbbrqmtjGF6DRC99h1DlTw 3Vil84w0t1aMRfExToeCHGn9h8Lz00HIaw9QhxJU8TRfh+2eN9SKv674DG0XAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzRq54lxV52kSw+EytIh9Ouugb9wwHwYDVR0j BBgwFoAU3NUgesM+EJ4xBSu7f4Edv22hgLswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDhlZjExOS03ZGRmLTQ1ZTUtODYzNC0zOGI3NzI1OGNiY2MvMC9EQ0Q1MjA3QUMz M0UxMDlFMzEwNTJCQkI3RjgxMURCRjZEQTE4MEJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRENENTIwN0FDMzNFMTA5RTMxMDUyQkJCN0Y4MTFEQkY2REEx ODBCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ4ZWYxMTktN2RkZi00NWU1LTg2 MzQtMzhiNzcyNThjYmNjLzAvRENENTIwN0FDMzNFMTA5RTMxMDUyQkJCN0Y4MTFE QkY2REExODBCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD4YBgwycndLs9GEGmZHiNHcmIZLM+wMPjzu s3xn8KxC1NBoYbsS446dnW2yF/zAHN/n8h517V7RTPKIhFV1D3wb6nlftmuRioZw nksk+HfFxgCpR93MBHnzbfX61hFYTtujhJJ8wF2KKQbczqwMg7otQ35DBPc4RltL yk+KedlWhRoPHMHaw83q+5PcUb4yTsB4xBec1OD0CbEYulDn/BXQ2EzRZBvrj3yR 0c0jGx0+owuFYrvYWHctoeaCY0y9WZTpY/dNzGQzPdQBCeetA9jgA4qResxP2H5n JUE8M3CZtnz9XBSotYi0X7bAFKOtNeYt6XcWpezfl6zZI3opZPA= -----END CERTIFICATE-----Generated at Tue Jul 1 16:47:43 2025 by rpki-client