$ rpki-client -vvf repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft File: DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft (raw, json) Hash identifier: NQs1VSmGB2edY9eRc3qJrxeYP+WxcGScZBWPex26ono= Subject key identifier: FF:1E:BB:85:68:82:DD:A5:BA:F7:85:BF:48:3A:4B:D1:67:C4:ED:E8 Authority key identifier: DF:68:55:96:DA:F9:D3:65:4A:2E:2F:21:CE:11:AA:0B:B8:0E:45:D1 Certificate issuer: /CN=DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1 Certificate serial: 135E3FAB0C321677BA05EB18428F6A118A56A4D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft Manifest number: 0330 Signing time: Sun 29 Jun 2025 01:20:36 +0000 Manifest this update: Sun 29 Jun 2025 01:15:36 +0000 Manifest next update: Wed 02 Jul 2025 09:49:36 +0000 Files and hashes: 1: DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.crl (hash: 36nNo6H3GfnHNbxkam+IAgW6XVHY93rsH3uL4Vyo42c=) 2: 3130332e3136392e3235352e302f32342d3234203d3e20313432333730.roa (hash: zXQVHsRu+F6s1MVNzrtFO+eU8maZ8ipfm8/30hkR/TA=) 3: 3130332e3136392e3235342e302f32342d3234203d3e20313432333730.roa (hash: TptDi2yJ3flSSMDSqc9f0+quKLm9aeSrjexrkn5vS9o=) 4: 3130332e3136392e3235342e302f32332d3233203d3e20313432333730.roa (hash: DLJmEfbL3ZCZVVlEJnye8kD0RQcM/dIeZcFOFRkwePE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.crl rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:5e:3f:ab:0c:32:16:77:ba:05:eb:18:42:8f:6a:11:8a:56:a4:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1 Validity Not Before: Jun 29 01:15:36 2025 GMT Not After : Jul 2 09:49:36 2025 GMT Subject: CN=FF1EBB856882DDA5BAF785BF483A4BD167C4EDE8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:58:b9:ac:0f:fc:9c:c1:c4:54:2b:0b:c2:8e: 5e:f1:32:71:de:5e:6a:e9:11:c3:dd:f7:a9:97:f3: f9:e1:c2:d0:89:8e:d9:c9:a7:62:c8:55:56:59:05: bd:ee:3f:5e:e6:2e:fc:e7:3d:c1:cc:3f:b2:17:b7: cf:f6:31:76:da:79:c5:2d:ae:9d:e5:67:19:62:2d: 2d:0b:db:7d:bf:6a:4c:84:fc:21:d3:33:f7:dc:17: 91:cd:b0:56:76:05:cb:50:b4:97:a8:75:1f:06:7a: fa:02:f1:eb:1f:7b:74:57:2c:3b:ca:82:d8:86:b8: 1d:ef:df:30:e4:99:59:09:71:96:3f:c8:d2:e7:a6: c6:b3:2c:e8:82:43:ba:6a:e8:28:ec:e5:87:8a:86: ee:52:15:a2:78:46:e1:cc:23:df:2e:3b:21:44:cf: 7a:5d:11:ef:ce:81:2c:c0:d1:4d:67:7f:3b:ce:f8: f3:cb:bc:56:aa:be:d4:11:fa:42:82:11:41:5e:5c: b5:40:53:3e:9f:64:0c:02:b1:ca:7b:c4:c7:e1:50: de:3c:24:23:cb:5d:76:23:e9:3e:0c:43:8c:50:b4: c3:14:21:a2:dc:46:b3:1d:9b:a9:8a:dd:b0:a4:36: c4:9e:d1:06:ac:70:4e:0c:5a:47:66:f4:48:a2:86: aa:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FF:1E:BB:85:68:82:DD:A5:BA:F7:85:BF:48:3A:4B:D1:67:C4:ED:E8 X509v3 Authority Key Identifier: keyid:DF:68:55:96:DA:F9:D3:65:4A:2E:2F:21:CE:11:AA:0B:B8:0E:45:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:b0:07:29:dc:fa:3a:03:ca:7e:1d:77:28:a1:36:39:f0:56: a0:77:25:b0:c9:11:78:b9:16:d5:66:cb:95:8d:1d:40:55:c6: 32:43:10:83:6d:84:6f:75:10:c6:1a:93:45:b6:be:23:b3:5c: 41:2e:a3:fd:a3:e7:1c:a1:f2:e6:86:46:e0:d8:10:a3:6f:16: 3d:c3:84:71:72:e6:35:5f:c5:6b:ce:5a:b7:b9:2b:3a:54:f1: ae:e6:d8:6f:d4:73:bc:05:1e:1e:79:b7:af:79:4c:d6:dd:99: 19:ed:e1:d2:36:f0:d0:fd:cc:3c:2e:8b:f6:6e:78:fd:fb:b5: d2:5c:3b:ad:57:a0:0b:5b:e7:6f:71:3e:d2:b4:ba:8f:0f:44: 93:2d:37:f5:24:6b:89:98:3b:39:eb:ae:73:cd:08:07:50:82: b5:56:10:27:c0:73:e6:16:af:aa:64:58:16:80:83:f3:6c:16: 8e:55:37:67:40:02:8c:4a:8c:19:c0:b7:83:5c:1a:51:34:b0: 43:77:6b:90:7d:de:68:7d:83:3b:9c:ac:85:c6:c0:14:66:02: 91:ec:9e:73:58:59:54:58:68:18:4e:59:3f:31:63:c7:1e:5f: 8a:75:75:92:2e:a7:36:f1:2b:b4:f5:42:45:7c:06:c4:bb:75: 1c:0d:9a:ed -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE14/qwwyFne6BesYQo9qEYpWpNIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY2ODU1OTZEQUY5RDM2NTRBMkUyRjIxQ0UxMUFBMEJC ODBFNDVEMTAeFw0yNTA2MjkwMTE1MzZaFw0yNTA3MDIwOTQ5MzZaMDMxMTAvBgNV BAMTKEZGMUVCQjg1Njg4MkREQTVCQUY3ODVCRjQ4M0E0QkQxNjdDNEVERTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyWLmsD/ycwcRUKwvCjl7xMnHe XmrpEcPd96mX8/nhwtCJjtnJp2LIVVZZBb3uP17mLvznPcHMP7IXt8/2MXbaecUt rp3lZxliLS0L232/akyE/CHTM/fcF5HNsFZ2BctQtJeodR8GevoC8esfe3RXLDvK gtiGuB3v3zDkmVkJcZY/yNLnpsazLOiCQ7pq6Cjs5YeKhu5SFaJ4RuHMI98uOyFE z3pdEe/OgSzA0U1nfzvO+PPLvFaqvtQR+kKCEUFeXLVAUz6fZAwCscp7xMfhUN48 JCPLXXYj6T4MQ4xQtMMUIaLcRrMdm6mK3bCkNsSe0QascE4MWkdm9Eiihqp3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU/x67hWiC3aW694W/SDpL0WfE7egwHwYDVR0j BBgwFoAU32hVltr502VKLi8hzhGqC7gORdEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NzUyYjNjMi0zZjMwLTQwNDAtOGIwNS04MzgyMTc3NzA0OGYvMC9ERjY4NTU5NkRB RjlEMzY1NEEyRTJGMjFDRTExQUEwQkI4MEU0NUQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREY2ODU1OTZEQUY5RDM2NTRBMkUyRjIxQ0UxMUFBMEJCODBF NDVEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjc1MmIzYzItM2YzMC00MDQwLThi MDUtODM4MjE3NzcwNDhmLzAvREY2ODU1OTZEQUY5RDM2NTRBMkUyRjIxQ0UxMUFB MEJCODBFNDVEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALiwBync+joDyn4ddyihNjnwVqB3JbDJEXi5 FtVmy5WNHUBVxjJDEINthG91EMYak0W2viOzXEEuo/2j5xyh8uaGRuDYEKNvFj3D hHFy5jVfxWvOWre5KzpU8a7m2G/Uc7wFHh55t695TNbdmRnt4dI28ND9zDwui/Zu eP37tdJcO61XoAtb529xPtK0uo8PRJMtN/Uka4mYOznrrnPNCAdQgrVWECfAc+YW r6pkWBaAg/NsFo5VN2dAAoxKjBnAt4NcGlE0sEN3a5B93mh9gzucrIXGwBRmApHs nnNYWVRYaBhOWT8xY8ceX4p1dZIupzbxK7T1QkV8BsS7dRwNmu0= -----END CERTIFICATE-----Generated at Sun Jun 29 20:03:48 2025 by rpki-client