$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft File: DFE92467290F9E190072585C1045251D6F8B05A3.mft (raw, json) Hash identifier: IXlcrkpj70fW+EDgxVr6Jjx0uhca+yZZNrJAgQoKOhY= Subject key identifier: A9:E3:FA:02:A3:49:CD:97:23:25:D8:41:09:08:72:D0:A6:7A:22:1D Authority key identifier: DF:E9:24:67:29:0F:9E:19:00:72:58:5C:10:45:25:1D:6F:8B:05:A3 Certificate issuer: /CN=DFE92467290F9E190072585C1045251D6F8B05A3 Certificate serial: 135D5B5726FC2848E1F34A9357D5EC51BDCE134A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFE92467290F9E190072585C1045251D6F8B05A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft Manifest number: 0211 Signing time: Sat 28 Jun 2025 11:12:19 +0000 Manifest this update: Sat 28 Jun 2025 11:07:19 +0000 Manifest next update: Tue 01 Jul 2025 20:20:19 +0000 Files and hashes: 1: 3130332e3138352e35322e302f32332d3234203d3e20313339343536.roa (hash: haaSHQN0sWh09iak7Jfz/FWXF5gl4JL5L2Lm/giP904=) 2: DFE92467290F9E190072585C1045251D6F8B05A3.crl (hash: wpDHs319O+vMiLiJ5hsCctAMNd9vHkDoF6im/jbMXcw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.crl rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFE92467290F9E190072585C1045251D6F8B05A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 20:20:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:5d:5b:57:26:fc:28:48:e1:f3:4a:93:57:d5:ec:51:bd:ce:13:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFE92467290F9E190072585C1045251D6F8B05A3 Validity Not Before: Jun 28 11:07:19 2025 GMT Not After : Jul 1 20:20:19 2025 GMT Subject: CN=A9E3FA02A349CD972325D841090872D0A67A221D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:ad:5d:b5:3a:25:bd:55:ba:a6:b6:7b:05:ed: 9a:e4:84:ae:06:41:2d:c6:c5:07:ae:1e:8e:c8:9c: 2e:95:c1:87:31:dd:7d:2d:0a:1b:64:ea:3c:35:6a: d2:e0:dd:c4:79:1a:a1:61:2b:e9:f6:e4:fe:de:a7: fc:b5:e7:66:84:58:25:e2:a8:c1:2d:25:e9:46:cd: 30:87:98:14:da:6b:ee:a1:51:29:91:15:29:6a:4c: 3b:aa:a4:8a:c1:f5:f6:b5:cb:ca:ee:d6:68:4e:98: 7c:9d:f3:e5:b8:82:b8:9a:5b:21:6e:b6:80:19:f1: cf:78:be:40:3c:78:fb:b6:4d:0f:20:71:95:22:e7: 4e:b0:ab:2b:95:7d:bb:a3:ab:99:e4:9a:89:a1:70: 13:11:38:04:f3:89:d7:41:48:be:6b:e7:a4:e1:1e: b5:47:91:bc:ee:8b:aa:9d:fe:f3:e5:f1:4a:61:2c: 64:07:ea:0c:b3:ad:f1:60:ca:9f:c7:ae:3e:ab:f2: 75:16:3b:90:fd:58:66:66:b0:97:07:70:21:c8:d3: 5f:3a:56:90:11:bc:9e:06:7c:e7:c1:56:78:69:6d: 31:2d:af:f8:cf:12:0a:b4:fa:b8:c8:e8:ee:a9:9b: cc:00:0a:08:76:f8:c0:51:63:2b:c5:76:8c:07:aa: b8:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:E3:FA:02:A3:49:CD:97:23:25:D8:41:09:08:72:D0:A6:7A:22:1D X509v3 Authority Key Identifier: keyid:DF:E9:24:67:29:0F:9E:19:00:72:58:5C:10:45:25:1D:6F:8B:05:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFE92467290F9E190072585C1045251D6F8B05A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9d:c6:9d:10:32:59:c5:24:ae:26:75:58:ba:82:89:49:e7:82: a7:dd:22:c3:70:46:c5:19:a3:88:34:be:aa:d2:9c:98:51:a6: c3:10:6d:cd:77:01:d1:1e:a4:30:3d:c8:37:db:73:cc:a9:44: 22:49:8e:70:1d:fc:6e:37:2a:85:b3:da:3a:13:ae:d7:35:4f: 63:bd:b9:52:ff:00:15:42:95:b6:b1:98:27:54:79:10:5a:18: b7:fa:23:cd:1a:7d:f9:55:bf:ff:db:d0:7e:f5:af:f0:c6:68: 8a:6f:fe:5b:d5:c2:81:23:38:79:d3:bf:db:2c:84:65:10:8c: 76:a9:5b:5c:59:58:dc:0b:98:27:60:71:b4:6f:9e:a2:db:b5: d9:3a:e4:09:67:8d:09:a7:59:db:36:00:06:d3:23:5b:e9:67: c0:1d:6b:31:1f:ea:27:f4:96:e1:4e:12:2f:b5:d4:db:02:6d: 0c:4d:ec:ea:3f:ed:ad:cc:5c:06:bb:78:de:5a:d6:52:85:6a: b2:22:68:2f:6a:11:d7:02:26:41:e7:be:53:f3:05:fc:47:3b: b0:68:3e:ba:47:70:57:34:88:d5:1c:a3:79:d2:bb:35:a1:13: bc:5f:9b:e0:1b:73:70:76:02:65:b1:27:dd:9a:f0:b2:1e:5d: d4:db:36:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE11bVyb8KEjh80qTV9XsUb3OE0owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZFOTI0NjcyOTBGOUUxOTAwNzI1ODVDMTA0NTI1MUQ2 RjhCMDVBMzAeFw0yNTA2MjgxMTA3MTlaFw0yNTA3MDEyMDIwMTlaMDMxMTAvBgNV BAMTKEE5RTNGQTAyQTM0OUNEOTcyMzI1RDg0MTA5MDg3MkQwQTY3QTIyMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6rV21OiW9VbqmtnsF7ZrkhK4G QS3GxQeuHo7InC6VwYcx3X0tChtk6jw1atLg3cR5GqFhK+n25P7ep/y152aEWCXi qMEtJelGzTCHmBTaa+6hUSmRFSlqTDuqpIrB9fa1y8ru1mhOmHyd8+W4griaWyFu toAZ8c94vkA8ePu2TQ8gcZUi506wqyuVfbujq5nkmomhcBMROATziddBSL5r56Th HrVHkbzui6qd/vPl8UphLGQH6gyzrfFgyp/Hrj6r8nUWO5D9WGZmsJcHcCHI0186 VpARvJ4GfOfBVnhpbTEtr/jPEgq0+rjI6O6pm8wACgh2+MBRYyvFdowHqrhTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqeP6AqNJzZcjJdhBCQhy0KZ6Ih0wHwYDVR0j BBgwFoAU3+kkZykPnhkAclhcEEUlHW+LBaMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YzQ1NzRlMi0zYjk0LTQxNjAtOGViOC04ZjA5YWFkODJjMmMvMC9ERkU5MjQ2NzI5 MEY5RTE5MDA3MjU4NUMxMDQ1MjUxRDZGOEIwNUEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREZFOTI0NjcyOTBGOUUxOTAwNzI1ODVDMTA0NTI1MUQ2RjhC MDVBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmM0NTc0ZTItM2I5NC00MTYwLThl YjgtOGYwOWFhZDgyYzJjLzAvREZFOTI0NjcyOTBGOUUxOTAwNzI1ODVDMTA0NTI1 MUQ2RjhCMDVBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJ3GnRAyWcUkriZ1WLqCiUnngqfdIsNwRsUZ o4g0vqrSnJhRpsMQbc13AdEepDA9yDfbc8ypRCJJjnAd/G43KoWz2joTrtc1T2O9 uVL/ABVClbaxmCdUeRBaGLf6I80afflVv//b0H71r/DGaIpv/lvVwoEjOHnTv9ss hGUQjHapW1xZWNwLmCdgcbRvnqLbtdk65AlnjQmnWds2AAbTI1vpZ8AdazEf6if0 luFOEi+11NsCbQxN7Oo/7a3MXAa7eN5a1lKFarIiaC9qEdcCJkHnvlPzBfxHO7Bo PrpHcFc0iNUco3nSuzWhE7xfm+Abc3B2AmWxJ92a8LIeXdTbNoA= -----END CERTIFICATE-----Generated at Mon Jun 30 01:10:46 2025 by rpki-client