$ rpki-client -vvf repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.mft File: DA680D591E9E6B4622614F94CF255933B6749212.mft (raw, json) Hash identifier: zGH0kuTMKesO/p62UzgHxdprKPBPiGCoH9p3G9qhago= Subject key identifier: 25:11:6C:CF:37:48:40:80:EA:ED:EC:6E:04:2F:74:91:6F:ED:C3:35 Authority key identifier: DA:68:0D:59:1E:9E:6B:46:22:61:4F:94:CF:25:59:33:B6:74:92:12 Certificate issuer: /CN=DA680D591E9E6B4622614F94CF255933B6749212 Certificate serial: 2A67A0D96F72041974CF88AF93EA0D115C057793 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DA680D591E9E6B4622614F94CF255933B6749212.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.mft Manifest number: E4 Signing time: Sat 28 Jun 2025 21:51:46 +0000 Manifest this update: Sat 28 Jun 2025 21:46:46 +0000 Manifest next update: Wed 02 Jul 2025 05:32:46 +0000 Files and hashes: 1: DA680D591E9E6B4622614F94CF255933B6749212.crl (hash: NtarBkFUIniM/7qCBfxb0oxvNSx3N103ulVzCXgBoMw=) 2: 3135372e31302e3138322e302f32342d3234203d3e20313532333434.roa (hash: zo0q/Qyr9+OM0Fi4S3qemAqF/9QAiZg3ou4qqrAMiyU=) 3: 3135372e31302e3138332e302f32342d3234203d3e20313532333434.roa (hash: bW5GhG+n2gDC7aNS0QQfawXhWxcHV8PEi1pP/7l6eDw=) 4: 3135372e31302e3138322e302f32332d3234203d3e20313532333434.roa (hash: i0rS2o3mTh9+/ZMOMUuCXL7VcRhfm2ZL+vmQMK6r/AQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.crl rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DA680D591E9E6B4622614F94CF255933B6749212.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 05:32:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:67:a0:d9:6f:72:04:19:74:cf:88:af:93:ea:0d:11:5c:05:77:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA680D591E9E6B4622614F94CF255933B6749212 Validity Not Before: Jun 28 21:46:46 2025 GMT Not After : Jul 2 05:32:46 2025 GMT Subject: CN=25116CCF37484080EAEDEC6E042F74916FEDC335 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7d:af:32:a1:1f:88:22:9f:95:a2:90:a5:52: 37:24:d4:e7:01:75:9d:87:73:8e:2c:5e:5e:39:79: 8a:4b:8e:fb:87:aa:73:0e:c5:82:38:0a:ff:ae:74: 35:6b:58:ad:ac:de:10:4b:88:53:68:b7:05:6c:65: e7:dc:d2:4d:d3:f4:94:82:0a:31:7f:55:85:8b:42: 75:47:a1:3f:c0:07:5c:5e:bf:35:3e:84:68:67:d7: cc:a6:96:54:6b:f8:7a:52:61:43:d8:02:19:24:c8: 79:06:74:bd:45:d4:e7:f0:41:9c:65:fc:45:b6:b9: 7a:57:c8:3a:58:c5:c7:38:a2:a4:42:e6:c8:01:79: 96:bc:51:5c:43:69:ca:4a:7c:be:45:6b:fc:16:94: 5c:fe:0b:be:be:7a:fb:04:bb:0b:c9:db:a5:82:79: 53:a9:6c:cf:17:2a:cb:2e:19:f7:70:54:12:7d:76: 06:23:73:ae:bc:b1:2b:ef:3a:56:cd:b6:27:72:82: 2f:db:64:76:b8:99:19:92:5c:94:f8:15:b8:0b:f5: 34:97:cb:fc:a5:c2:48:e6:47:a3:03:3f:0d:95:ee: 92:68:cb:a7:ad:a6:e4:84:34:4f:60:5a:17:fe:a0: 02:0e:70:f2:e6:45:90:99:de:35:0e:02:42:02:38: e6:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:11:6C:CF:37:48:40:80:EA:ED:EC:6E:04:2F:74:91:6F:ED:C3:35 X509v3 Authority Key Identifier: keyid:DA:68:0D:59:1E:9E:6B:46:22:61:4F:94:CF:25:59:33:B6:74:92:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DA680D591E9E6B4622614F94CF255933B6749212.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:e9:68:53:f9:0d:91:8c:64:79:a3:01:d7:63:b6:5f:cc:d2: 1a:5e:27:fb:b2:be:95:7c:aa:1f:f9:0a:89:34:75:e8:0d:c2: 58:f0:88:27:37:5e:03:01:09:15:68:9b:ec:bf:d8:b4:e7:8a: a0:68:62:a4:b8:0b:be:03:f0:a0:b0:0d:23:5e:6f:cf:77:e9: 8f:36:3c:1e:06:de:cb:90:3a:13:fe:78:e2:bb:65:a2:bc:3c: 2d:c8:88:1b:62:93:22:1a:15:39:bb:5d:31:48:26:54:e5:de: 23:d8:10:39:0b:c8:cb:a9:df:8b:d0:49:d2:7e:72:43:22:7c: 2b:40:1f:a2:78:bf:b1:79:97:c9:13:2c:43:bd:49:5e:0b:3e: 36:bc:64:a8:59:9b:51:e6:22:38:53:12:82:f0:a6:68:09:94: 18:08:08:e5:69:9a:fd:22:65:49:15:59:0f:95:fe:6c:21:6f: b8:f2:7f:48:54:49:2c:b0:66:2f:33:fd:c6:02:67:a8:67:72: 34:17:68:21:54:1a:64:ce:62:8d:e1:14:b5:d9:f3:57:b7:67: 1f:46:3b:47:fa:3d:4a:8c:63:cd:fa:35:bb:26:fd:e8:d2:9e: e6:9d:45:17:df:f6:15:b7:54:ed:df:3c:b6:a5:1a:59:26:8c: d9:b1:6a:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKmeg2W9yBBl0z4ivk+oNEVwFd5MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE2ODBENTkxRTlFNkI0NjIyNjE0Rjk0Q0YyNTU5MzNC Njc0OTIxMjAeFw0yNTA2MjgyMTQ2NDZaFw0yNTA3MDIwNTMyNDZaMDMxMTAvBgNV BAMTKDI1MTE2Q0NGMzc0ODQwODBFQUVERUM2RTA0MkY3NDkxNkZFREMzMzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEfa8yoR+IIp+VopClUjck1OcB dZ2Hc44sXl45eYpLjvuHqnMOxYI4Cv+udDVrWK2s3hBLiFNotwVsZefc0k3T9JSC CjF/VYWLQnVHoT/AB1xevzU+hGhn18ymllRr+HpSYUPYAhkkyHkGdL1F1OfwQZxl /EW2uXpXyDpYxcc4oqRC5sgBeZa8UVxDacpKfL5Fa/wWlFz+C76+evsEuwvJ26WC eVOpbM8XKssuGfdwVBJ9dgYjc668sSvvOlbNtidygi/bZHa4mRmSXJT4FbgL9TSX y/ylwkjmR6MDPw2V7pJoy6etpuSENE9gWhf+oAIOcPLmRZCZ3jUOAkICOObLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJRFszzdIQIDq7exuBC90kW/twzUwHwYDVR0j BBgwFoAU2mgNWR6ea0YiYU+UzyVZM7Z0khIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWRhMjNlOS04NGJlLTRhNTQtYmNhMC1lOWEwY2FmZDE2ZmUvMC9EQTY4MEQ1OTFF OUU2QjQ2MjI2MTRGOTRDRjI1NTkzM0I2NzQ5MjEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvREE2ODBENTkxRTlFNkI0NjIyNjE0Rjk0Q0YyNTU5MzNCNjc0 OTIxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFkYTIzZTktODRiZS00YTU0LWJj YTAtZTlhMGNhZmQxNmZlLzAvREE2ODBENTkxRTlFNkI0NjIyNjE0Rjk0Q0YyNTU5 MzNCNjc0OTIxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA3paFP5DZGMZHmjAddjtl/M0hpeJ/uyvpV8 qh/5Cok0degNwljwiCc3XgMBCRVom+y/2LTniqBoYqS4C74D8KCwDSNeb8936Y82 PB4G3suQOhP+eOK7ZaK8PC3IiBtikyIaFTm7XTFIJlTl3iPYEDkLyMup34vQSdJ+ ckMifCtAH6J4v7F5l8kTLEO9SV4LPja8ZKhZm1HmIjhTEoLwpmgJlBgICOVpmv0i ZUkVWQ+V/mwhb7jyf0hUSSywZi8z/cYCZ6hncjQXaCFUGmTOYo3hFLXZ81e3Zx9G O0f6PUqMY836Nbsm/ejSnuadRRff9hW3VO3fPLalGlkmjNmxanc= -----END CERTIFICATE-----Generated at Mon Jun 30 16:41:45 2025 by rpki-client