$ rpki-client -vvf repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft File: DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft (raw, json) Hash identifier: tBiAeKF25XWhUwYbvHR1svtaPWLCmGjEJ5337k35hSY= Subject key identifier: 91:C9:9D:E4:27:B4:37:52:AC:7E:FD:14:F9:A9:AA:67:02:5F:74:F4 Authority key identifier: DF:68:55:96:DA:F9:D3:65:4A:2E:2F:21:CE:11:AA:0B:B8:0E:45:D1 Certificate issuer: /CN=DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1 Certificate serial: 62F37505991231F63D4E48F458A32A941215C221 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft Manifest number: 031A Signing time: Fri 09 May 2025 14:30:35 +0000 Manifest this update: Fri 09 May 2025 14:25:35 +0000 Manifest next update: Tue 13 May 2025 00:32:35 +0000 Files and hashes: 1: 3130332e3136392e3235342e302f32342d3234203d3e20313432333730.roa (hash: TptDi2yJ3flSSMDSqc9f0+quKLm9aeSrjexrkn5vS9o=) 2: DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.crl (hash: PnBKpe36JQvFnU3SRsQb872l/x060Q7B+tO/4RQDVAk=) 3: 3130332e3136392e3235342e302f32332d3233203d3e20313432333730.roa (hash: DLJmEfbL3ZCZVVlEJnye8kD0RQcM/dIeZcFOFRkwePE=) 4: 3130332e3136392e3235352e302f32342d3234203d3e20313432333730.roa (hash: zXQVHsRu+F6s1MVNzrtFO+eU8maZ8ipfm8/30hkR/TA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.crl rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 12 May 2025 14:30:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:f3:75:05:99:12:31:f6:3d:4e:48:f4:58:a3:2a:94:12:15:c2:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1 Validity Not Before: May 9 14:25:35 2025 GMT Not After : May 13 00:32:35 2025 GMT Subject: CN=91C99DE427B43752AC7EFD14F9A9AA67025F74F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:c9:f3:55:75:97:81:22:d8:0b:df:46:54:85: d8:69:9e:b2:fc:06:36:ad:52:f4:1a:76:d9:31:68: ed:e0:fa:d3:a1:21:04:90:87:2f:30:ba:af:63:51: 45:9a:21:c3:bc:40:01:fb:7f:97:14:e7:47:48:73: 32:dd:cb:da:ac:4c:49:96:28:d2:b3:2e:6d:cf:82: 17:eb:70:ae:1d:1d:b7:b4:0c:88:f6:4d:56:1d:e7: f5:39:29:0d:79:99:99:99:16:93:23:e4:5b:4a:f8: 71:6d:f9:9a:0e:67:87:6e:d1:96:cb:02:ef:88:52: 39:e8:56:e3:a8:ce:b0:6a:13:a5:0a:3c:87:c0:15: ca:5a:07:17:86:55:05:30:2d:07:83:6c:bb:9b:f2: 9f:52:ec:fa:f4:18:0a:fb:6f:fb:30:58:fc:c9:58: 39:aa:e5:91:d3:d8:26:66:93:fb:9e:af:db:b7:b2: 22:c3:84:db:74:b4:52:30:d4:70:e0:af:15:6b:b0: b1:db:5d:9c:5c:13:cd:1e:72:e8:d2:28:7d:e7:10: ba:8f:97:b6:9f:fd:03:a4:82:3d:5d:f8:74:e1:37: e1:24:b8:78:cd:e1:81:f1:2f:4c:b6:99:56:18:ca: 1d:fd:3e:14:4b:70:4c:bb:c5:e9:20:24:8c:81:7c: 06:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:C9:9D:E4:27:B4:37:52:AC:7E:FD:14:F9:A9:AA:67:02:5F:74:F4 X509v3 Authority Key Identifier: keyid:DF:68:55:96:DA:F9:D3:65:4A:2E:2F:21:CE:11:AA:0B:B8:0E:45:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:85:86:b9:af:bd:c0:ee:2e:0d:ed:ec:bf:4e:f5:a5:94:66: 1e:18:31:a4:6a:7a:27:91:92:ee:87:aa:c9:62:03:f0:4f:6f: 97:53:56:83:08:5f:43:04:1b:53:1c:9e:a0:b4:1a:f0:af:0b: 5a:63:4f:94:59:96:38:de:dc:39:f1:b1:30:60:f2:53:d7:13: bd:44:cb:f1:e5:f3:2c:c3:6d:59:ad:ab:71:64:0e:81:94:a2: 94:f5:0c:24:40:84:99:be:4a:d9:1d:45:d7:b7:24:a2:98:b7: 04:2f:4a:fc:7b:b4:7a:b8:12:09:c4:f7:7d:0b:3a:e7:8d:1a: 3a:d5:c1:59:00:03:1e:3e:ec:a6:1f:1a:46:16:a2:fd:4c:d7: a7:95:fd:0b:78:dd:e4:91:4f:83:2f:c3:c9:85:d0:85:f7:c4: 4e:e9:46:36:b1:c4:d8:fb:97:d2:0f:51:5f:af:22:95:99:af: 98:94:81:5e:d5:a9:60:99:de:f8:5c:62:70:c8:17:c3:c5:76: 97:68:40:5e:11:a1:de:83:02:a9:91:64:e9:cc:30:e5:52:99: 00:70:32:c3:60:f4:aa:ab:77:a2:ca:51:af:66:11:76:37:46: 6c:f8:52:64:3c:f8:1c:88:c9:5e:47:bd:82:bc:6c:be:5a:1e: 3e:13:be:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYvN1BZkSMfY9Tkj0WKMqlBIVwiEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY2ODU1OTZEQUY5RDM2NTRBMkUyRjIxQ0UxMUFBMEJC ODBFNDVEMTAeFw0yNTA1MDkxNDI1MzVaFw0yNTA1MTMwMDMyMzVaMDMxMTAvBgNV BAMTKDkxQzk5REU0MjdCNDM3NTJBQzdFRkQxNEY5QTlBQTY3MDI1Rjc0RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDByfNVdZeBItgL30ZUhdhpnrL8 BjatUvQadtkxaO3g+tOhIQSQhy8wuq9jUUWaIcO8QAH7f5cU50dIczLdy9qsTEmW KNKzLm3PghfrcK4dHbe0DIj2TVYd5/U5KQ15mZmZFpMj5FtK+HFt+ZoOZ4du0ZbL Au+IUjnoVuOozrBqE6UKPIfAFcpaBxeGVQUwLQeDbLub8p9S7Pr0GAr7b/swWPzJ WDmq5ZHT2CZmk/uer9u3siLDhNt0tFIw1HDgrxVrsLHbXZxcE80ecujSKH3nELqP l7af/QOkgj1d+HThN+EkuHjN4YHxL0y2mVYYyh39PhRLcEy7xekgJIyBfAYrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkcmd5Ce0N1Ksfv0U+amqZwJfdPQwHwYDVR0j BBgwFoAU32hVltr502VKLi8hzhGqC7gORdEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NzUyYjNjMi0zZjMwLTQwNDAtOGIwNS04MzgyMTc3NzA0OGYvMC9ERjY4NTU5NkRB RjlEMzY1NEEyRTJGMjFDRTExQUEwQkI4MEU0NUQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREY2ODU1OTZEQUY5RDM2NTRBMkUyRjIxQ0UxMUFBMEJCODBF NDVEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjc1MmIzYzItM2YzMC00MDQwLThi MDUtODM4MjE3NzcwNDhmLzAvREY2ODU1OTZEQUY5RDM2NTRBMkUyRjIxQ0UxMUFB MEJCODBFNDVEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALiFhrmvvcDuLg3t7L9O9aWUZh4YMaRqeieR ku6HqsliA/BPb5dTVoMIX0MEG1McnqC0GvCvC1pjT5RZljje3DnxsTBg8lPXE71E y/Hl8yzDbVmtq3FkDoGUopT1DCRAhJm+StkdRde3JKKYtwQvSvx7tHq4EgnE930L OueNGjrVwVkAAx4+7KYfGkYWov1M16eV/Qt43eSRT4Mvw8mF0IX3xE7pRjaxxNj7 l9IPUV+vIpWZr5iUgV7VqWCZ3vhcYnDIF8PFdpdoQF4Rod6DAqmRZOnMMOVSmQBw MsNg9Kqrd6LKUa9mEXY3Rmz4UmQ8+ByIyV5HvYK8bL5aHj4TvkU= -----END CERTIFICATE-----Generated at Fri May 9 18:05:37 2025 by rpki-client