$ rpki-client -vvf repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.mft File: DEB4279F0D4CD8368462787573162FB753A9B04B.mft (raw, json) Hash identifier: tg3/oE99npUbbTB26kuPaSjk8M17QXEny2H9y77P2Fk= Subject key identifier: 67:65:8F:7E:1D:29:9D:7F:6E:C0:CE:5F:60:C4:DF:EF:0D:6B:86:B1 Authority key identifier: DE:B4:27:9F:0D:4C:D8:36:84:62:78:75:73:16:2F:B7:53:A9:B0:4B Certificate issuer: /CN=DEB4279F0D4CD8368462787573162FB753A9B04B Certificate serial: 09DF8771110EAFCF26447EA4A697C2902E97B6D7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEB4279F0D4CD8368462787573162FB753A9B04B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.mft Manifest number: 01B1 Signing time: Tue 01 Jul 2025 06:30:55 +0000 Manifest this update: Tue 01 Jul 2025 06:25:55 +0000 Manifest next update: Fri 04 Jul 2025 17:36:55 +0000 Files and hashes: 1: 3130332e33312e3234312e302f32342d3234203d3e20313339393532.roa (hash: G08Zsb0m7nLFy8P1hWnzM0k+V4xtFf95Ynj7WmJyU4w=) 2: DEB4279F0D4CD8368462787573162FB753A9B04B.crl (hash: 9ZOfK00mHIqsUcw0LhOC/5VQiKBW1OJ+vfCm2INkCww=) 3: 3130332e33312e3234302e302f32342d3234203d3e20313339393532.roa (hash: 28zVUwIfauOaNkqHnh0ZLVPJlAu2ZRa+tGqxdNY0Rgo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.crl rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEB4279F0D4CD8368462787573162FB753A9B04B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 17:36:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:df:87:71:11:0e:af:cf:26:44:7e:a4:a6:97:c2:90:2e:97:b6:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEB4279F0D4CD8368462787573162FB753A9B04B Validity Not Before: Jul 1 06:25:55 2025 GMT Not After : Jul 4 17:36:55 2025 GMT Subject: CN=67658F7E1D299D7F6EC0CE5F60C4DFEF0D6B86B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ba:50:b3:fd:66:ed:ab:fb:bc:93:c0:58:05: fb:2a:75:3b:38:57:91:d8:52:45:20:5a:f8:21:2f: d4:7e:7d:fb:ce:f4:9f:48:53:74:0f:42:37:82:e5: 97:60:57:87:5b:b1:c2:6b:f6:8b:06:53:f5:5a:19: 9d:fd:72:3d:3a:1a:cb:28:df:0a:ef:c1:56:55:54: ef:8b:2d:3f:ab:ed:b5:cb:af:cc:28:91:7a:51:9c: 7c:c3:01:06:81:7a:ba:c5:fa:6a:a0:51:95:91:0a: a9:d3:02:3d:e7:4c:c0:6a:8e:cd:37:79:e0:2f:96: a4:d2:53:be:4f:a9:43:88:e0:6e:43:27:ef:5f:8a: 1b:aa:95:14:75:60:12:9a:e6:ca:fc:8f:7c:23:77: 95:a0:b5:45:75:49:ec:6b:59:e7:2a:90:87:c9:0c: d9:0f:f0:83:1e:ae:3b:88:19:2c:4f:7b:5b:35:f2: 9a:9b:45:bd:86:7c:06:e5:52:b7:63:47:cb:b7:01: 4b:25:ca:fe:b4:87:d8:d1:2d:aa:5c:7f:92:0a:b5: 1a:f9:c8:06:c0:62:3e:53:38:49:a1:f3:df:a0:a6: 22:83:74:e3:bd:09:75:cd:76:b0:9c:7f:d7:e1:98: 39:f3:a7:35:4f:67:a3:d5:76:69:ca:f0:34:fe:25: 16:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:65:8F:7E:1D:29:9D:7F:6E:C0:CE:5F:60:C4:DF:EF:0D:6B:86:B1 X509v3 Authority Key Identifier: keyid:DE:B4:27:9F:0D:4C:D8:36:84:62:78:75:73:16:2F:B7:53:A9:B0:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEB4279F0D4CD8368462787573162FB753A9B04B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/643034aa-f39c-48f5-852e-d1bd7f17aa42/0/DEB4279F0D4CD8368462787573162FB753A9B04B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ec:42:cc:38:32:38:fb:38:b4:af:01:d6:2a:e4:7b:0c:71:a5: 0b:98:89:96:37:5f:64:f6:f2:b5:32:39:22:d9:4d:4b:18:e0: 11:bb:16:b6:b0:73:5f:82:3c:7f:e8:b1:a8:81:cb:19:ad:69: f9:02:37:f8:65:d5:3b:ec:e7:02:70:a2:e4:c2:fc:6d:5d:ca: 38:d4:d2:0f:c4:b9:df:69:92:cc:9a:e1:cc:a6:62:d5:97:48: 36:1a:82:0a:9c:5d:9d:ca:12:08:37:a8:ae:28:65:89:6e:91: 4c:f1:c0:b3:02:31:43:f5:1c:f3:8b:b6:4e:86:8f:97:e5:2e: f8:6b:74:c3:1f:6f:33:a4:73:18:14:08:05:e2:1e:6a:f5:30: 99:0b:85:30:32:01:08:c3:2f:f1:30:1e:b9:93:77:1c:bc:26: fb:5e:af:b5:88:1a:aa:27:ef:37:6c:a9:5b:4c:66:ef:d1:12: f3:90:28:c4:60:22:be:eb:0c:f4:b2:4c:03:39:e5:e9:cf:98: 69:43:90:ed:88:03:43:ed:95:cc:e3:8d:5a:32:66:a0:ff:d4: f9:aa:10:0e:d1:75:0f:37:12:2b:ad:1e:1d:fc:85:d1:f8:73: ee:a6:4c:69:85:b9:63:3f:98:63:86:cc:32:38:19:5c:13:d0: 0d:af:8d:e5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCd+HcREOr88mRH6kppfCkC6XttcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVCNDI3OUYwRDRDRDgzNjg0NjI3ODc1NzMxNjJGQjc1 M0E5QjA0QjAeFw0yNTA3MDEwNjI1NTVaFw0yNTA3MDQxNzM2NTVaMDMxMTAvBgNV BAMTKDY3NjU4RjdFMUQyOTlEN0Y2RUMwQ0U1RjYwQzRERkVGMEQ2Qjg2QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqulCz/Wbtq/u8k8BYBfsqdTs4 V5HYUkUgWvghL9R+ffvO9J9IU3QPQjeC5ZdgV4dbscJr9osGU/VaGZ39cj06Gsso 3wrvwVZVVO+LLT+r7bXLr8wokXpRnHzDAQaBerrF+mqgUZWRCqnTAj3nTMBqjs03 eeAvlqTSU75PqUOI4G5DJ+9fihuqlRR1YBKa5sr8j3wjd5WgtUV1SexrWecqkIfJ DNkP8IMerjuIGSxPe1s18pqbRb2GfAblUrdjR8u3AUslyv60h9jRLapcf5IKtRr5 yAbAYj5TOEmh89+gpiKDdOO9CXXNdrCcf9fhmDnzpzVPZ6PVdmnK8DT+JRbTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZ2WPfh0pnX9uwM5fYMTf7w1rhrEwHwYDVR0j BBgwFoAU3rQnnw1M2DaEYnh1cxYvt1OpsEswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NDMwMzRhYS1mMzljLTQ4ZjUtODUyZS1kMWJkN2YxN2FhNDIvMC9ERUI0Mjc5RjBE NENEODM2ODQ2Mjc4NzU3MzE2MkZCNzUzQTlCMDRCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREVCNDI3OUYwRDRDRDgzNjg0NjI3ODc1NzMxNjJGQjc1M0E5 QjA0Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjQzMDM0YWEtZjM5Yy00OGY1LTg1 MmUtZDFiZDdmMTdhYTQyLzAvREVCNDI3OUYwRDRDRDgzNjg0NjI3ODc1NzMxNjJG Qjc1M0E5QjA0Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAOxCzDgyOPs4tK8B1irkewxxpQuYiZY3X2T2 8rUyOSLZTUsY4BG7Frawc1+CPH/osaiByxmtafkCN/hl1Tvs5wJwouTC/G1dyjjU 0g/Eud9pksya4cymYtWXSDYaggqcXZ3KEgg3qK4oZYlukUzxwLMCMUP1HPOLtk6G j5flLvhrdMMfbzOkcxgUCAXiHmr1MJkLhTAyAQjDL/EwHrmTdxy8Jvter7WIGqon 7zdsqVtMZu/REvOQKMRgIr7rDPSyTAM55enPmGlDkO2IA0PtlczjjVoyZqD/1Pmq EA7RdQ83EiutHh38hdH4c+6mTGmFuWM/mGOGzDI4GVwT0A2vjeU= -----END CERTIFICATE-----Generated at Wed Jul 2 03:39:47 2025 by rpki-client