$ rpki-client -vvf repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft File: D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft (raw, json) Hash identifier: dOwbGeX9vnBwszys3bDcq8V5xUJ/TH/mgFfLkqdyFBk= Subject key identifier: 46:09:67:BE:DB:46:A2:56:AE:32:EC:2E:F8:90:DC:FA:C2:B8:F6:95 Authority key identifier: D0:FF:6F:09:3D:0D:EA:FB:5C:B4:2A:93:43:3F:A2:39:C9:03:EA:C0 Certificate issuer: /CN=D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0 Certificate serial: 5CC288917F711C701320D99A76C9692DB5128DCB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft Manifest number: 01E1 Signing time: Sat 28 Jun 2025 14:01:50 +0000 Manifest this update: Sat 28 Jun 2025 13:56:50 +0000 Manifest next update: Tue 01 Jul 2025 14:52:50 +0000 Files and hashes: 1: D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.crl (hash: wTostTgpjBT/IaEOl5+cKOqq5pmEq6oAAdaz47ClvCs=) 2: 3130332e3136312e3230322e302f32332d3234203d3e203338333230.roa (hash: BdsS4s7jPHig7lZYR1kjJB8vTutisx05tJ8qnuC/vHI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.crl rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 14:52:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:c2:88:91:7f:71:1c:70:13:20:d9:9a:76:c9:69:2d:b5:12:8d:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0 Validity Not Before: Jun 28 13:56:50 2025 GMT Not After : Jul 1 14:52:50 2025 GMT Subject: CN=460967BEDB46A256AE32EC2EF890DCFAC2B8F695 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:0f:29:6c:4a:5d:84:f9:17:d8:c2:91:46:3e: 57:9a:3b:1b:f6:07:2c:1e:2b:b2:49:d1:ae:9a:d1: 8d:00:20:87:41:db:52:35:d7:de:b6:99:32:bb:27: 67:81:30:d0:5c:70:95:b8:d8:aa:1f:9b:3c:c6:7b: dd:f1:5f:07:8f:34:1c:0a:08:14:41:e6:51:d0:6f: 95:52:cc:9a:5b:ec:69:d4:bd:03:f3:f0:82:c7:6c: 86:36:e9:9a:e6:9b:da:ff:bb:da:28:2e:fc:1b:ef: 72:66:bc:91:cb:c6:0a:e5:c9:7a:e8:8f:4e:7b:2f: 01:16:73:b2:71:73:d6:9d:61:4e:a0:58:ea:92:14: 3d:d5:fc:4b:a9:82:06:9e:14:7c:01:98:e7:40:9c: 9a:00:cf:72:69:c7:ab:ce:ce:81:40:b3:cc:7d:d0: 84:37:e2:48:2e:c9:a8:a5:7f:c9:d3:b8:48:d6:fd: 02:18:8a:5f:f2:a6:a0:82:16:c1:d9:39:3c:56:8f: be:ed:3d:a8:f2:b2:bc:1a:19:f6:a7:85:76:8b:7e: b7:01:c1:65:a1:9a:09:51:b4:11:e3:cc:a8:cd:c1: d7:98:db:0c:0f:0c:33:83:19:81:cf:ae:b5:28:c7: f1:b8:89:30:3b:30:77:98:37:ab:a8:bf:ab:a1:c3: 56:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 46:09:67:BE:DB:46:A2:56:AE:32:EC:2E:F8:90:DC:FA:C2:B8:F6:95 X509v3 Authority Key Identifier: keyid:D0:FF:6F:09:3D:0D:EA:FB:5C:B4:2A:93:43:3F:A2:39:C9:03:EA:C0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/67f9f562-7292-44f1-8e2c-440a0531c396/0/D0FF6F093D0DEAFB5CB42A93433FA239C903EAC0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 89:02:28:0c:9d:ff:9d:b2:92:21:10:6a:1f:ad:00:b1:95:80: 0d:d4:07:a5:32:c4:aa:ab:d9:74:74:53:5f:e1:6b:28:d4:d5: cb:9e:79:58:a0:4a:79:85:0d:f3:77:53:bd:01:b6:fe:2e:c0: 64:71:02:fa:9e:36:8d:33:b6:b9:95:ba:8d:46:72:a4:c9:50: 2d:d8:ae:7c:78:91:bb:ed:61:19:64:92:71:80:39:3c:48:80: 34:f9:a7:4b:e3:ab:b2:17:5a:80:99:27:8f:0c:07:ba:00:c4: d5:1e:69:6b:43:70:4b:a4:4e:e7:f5:c1:f8:75:31:aa:99:7d: 73:9b:78:41:bb:b4:f7:4e:79:df:ce:5d:29:0e:2e:38:26:23: ac:43:1d:02:ef:36:92:c6:b4:95:95:2c:f4:e1:b8:aa:6d:c1: 25:6f:5a:5a:56:b7:35:26:b7:20:32:87:47:47:ab:02:f3:de: 7c:d6:06:06:3d:bf:2e:58:c8:85:ec:39:9c:f7:9e:aa:0c:a5: ca:a7:77:f7:72:e6:f5:32:2f:49:36:db:98:16:a3:c4:fb:9b: c3:90:15:eb:f2:f4:66:0c:a3:eb:4e:3c:40:ff:72:b4:30:91: 54:2f:7e:ce:6d:1f:d8:e9:95:67:15:5c:c4:57:ef:29:ad:3a: 66:b6:b6:0d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXMKIkX9xHHATINmadslpLbUSjcswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDBGRjZGMDkzRDBERUFGQjVDQjQyQTkzNDMzRkEyMzlD OTAzRUFDMDAeFw0yNTA2MjgxMzU2NTBaFw0yNTA3MDExNDUyNTBaMDMxMTAvBgNV BAMTKDQ2MDk2N0JFREI0NkEyNTZBRTMyRUMyRUY4OTBEQ0ZBQzJCOEY2OTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKDylsSl2E+RfYwpFGPleaOxv2 ByweK7JJ0a6a0Y0AIIdB21I11962mTK7J2eBMNBccJW42KofmzzGe93xXwePNBwK CBRB5lHQb5VSzJpb7GnUvQPz8ILHbIY26Zrmm9r/u9ooLvwb73JmvJHLxgrlyXro j057LwEWc7Jxc9adYU6gWOqSFD3V/EupggaeFHwBmOdAnJoAz3Jpx6vOzoFAs8x9 0IQ34kguyailf8nTuEjW/QIYil/ypqCCFsHZOTxWj77tPajysrwaGfanhXaLfrcB wWWhmglRtBHjzKjNwdeY2wwPDDODGYHPrrUox/G4iTA7MHeYN6uov6uhw1ZrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURglnvttGolauMuwu+JDc+sK49pUwHwYDVR0j BBgwFoAU0P9vCT0N6vtctCqTQz+iOckD6sAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 N2Y5ZjU2Mi03MjkyLTQ0ZjEtOGUyYy00NDBhMDUzMWMzOTYvMC9EMEZGNkYwOTNE MERFQUZCNUNCNDJBOTM0MzNGQTIzOUM5MDNFQUMwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDBGRjZGMDkzRDBERUFGQjVDQjQyQTkzNDMzRkEyMzlDOTAz RUFDMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjdmOWY1NjItNzI5Mi00NGYxLThl MmMtNDQwYTA1MzFjMzk2LzAvRDBGRjZGMDkzRDBERUFGQjVDQjQyQTkzNDMzRkEy MzlDOTAzRUFDMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIkCKAyd/52ykiEQah+tALGVgA3UB6UyxKqr 2XR0U1/hayjU1cueeVigSnmFDfN3U70Btv4uwGRxAvqeNo0ztrmVuo1GcqTJUC3Y rnx4kbvtYRlkknGAOTxIgDT5p0vjq7IXWoCZJ48MB7oAxNUeaWtDcEukTuf1wfh1 MaqZfXObeEG7tPdOed/OXSkOLjgmI6xDHQLvNpLGtJWVLPThuKptwSVvWlpWtzUm tyAyh0dHqwLz3nzWBgY9vy5YyIXsOZz3nqoMpcqnd/dy5vUyL0k225gWo8T7m8OQ Fevy9GYMo+tOPED/crQwkVQvfs5tH9jplWcVXMRX7ymtOma2tg0= -----END CERTIFICATE-----Generated at Sun Jun 29 18:52:45 2025 by rpki-client