$ rpki-client -vvf repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft File: DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft (raw, json) Hash identifier: UluGRYw5aRhDqt00NSBCEO3dDMORn4fWn6TIqb3JLu8= Subject key identifier: 34:32:34:0D:C1:AA:E1:CF:D1:1A:E5:84:DA:DB:0D:DD:B2:D0:22:0A Authority key identifier: DF:8E:F2:99:4C:B5:42:09:F2:C2:A3:9A:7B:CE:7D:A0:D9:C3:4E:4A Certificate issuer: /CN=DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A Certificate serial: 022BF91705A9C494677A31D26B497361364F71A6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft Manifest number: 0307 Signing time: Sat 10 May 2025 10:31:14 +0000 Manifest this update: Sat 10 May 2025 10:26:14 +0000 Manifest next update: Tue 13 May 2025 14:37:14 +0000 Files and hashes: 1: 3130332e3133322e31322e302f32322d3234203d3e20313331373336.roa (hash: ypT2E/4mQi8ZinwGIb3ksHfodPA0Ub74zZ/WxvTHyYI=) 2: DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.crl (hash: NW+jIsHaF7vQRbIkWh0Jz90WW+ZJffeu2SELyLaMWCA=) 3: 323430343a326363303a323a3a2f34382d3438203d3e20313331373336.roa (hash: Y94ACgKRW/B6r5u1l5R9++TiByrUg/dDZ6VyKO+Pxik=) 4: 323430343a326363303a3a2f33322d3438203d3e20313331373336.roa (hash: MmDjqY0in3Ron4tXoyw1IFEdlRaJCNk65DIgw6xUgLY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.crl rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 13 May 2025 14:37:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:2b:f9:17:05:a9:c4:94:67:7a:31:d2:6b:49:73:61:36:4f:71:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A Validity Not Before: May 10 10:26:14 2025 GMT Not After : May 13 14:37:14 2025 GMT Subject: CN=3432340DC1AAE1CFD11AE584DADB0DDDB2D0220A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:95:79:25:01:b4:64:a2:15:4f:12:32:89:0c: f3:ac:56:a2:db:ed:0c:5e:a3:8e:46:ee:3c:51:37: a3:44:db:4c:a5:b5:26:18:89:94:c5:08:78:c7:3b: e1:4e:c6:33:2b:e2:22:f9:4f:e0:21:11:69:4f:da: cb:ec:9c:8d:cc:5d:e8:6c:cf:df:dc:49:b1:d9:ae: 8d:86:af:6d:28:92:ab:34:2b:0a:8f:1f:1d:09:4b: d9:53:7e:5a:06:43:89:ab:95:94:2d:be:2b:39:5d: 60:a1:53:e1:dd:34:73:a6:98:32:55:3a:ea:f7:70: d0:a7:1c:d2:3c:79:f4:ac:3a:54:da:09:3d:6c:cd: 59:c9:ff:0c:c1:aa:09:9d:20:4a:99:c0:88:c7:69: ec:e7:cc:3b:13:47:53:e9:7d:3f:d4:5d:7f:14:05: c6:c4:4a:87:48:c8:a9:0f:4b:58:07:1e:7d:72:73: e9:37:47:49:17:d9:51:2a:c4:d3:9b:96:db:98:10: b1:78:c7:93:0d:bb:34:86:b2:50:49:b6:c1:4c:e9: 36:b1:b1:b1:4b:f6:dc:71:9f:14:44:e3:fe:78:fe: 75:99:35:3c:de:dd:aa:ec:9f:44:c7:1c:4d:fe:6c: 52:71:6f:b3:04:6a:b0:24:93:42:31:d1:3b:5b:58: d8:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:32:34:0D:C1:AA:E1:CF:D1:1A:E5:84:DA:DB:0D:DD:B2:D0:22:0A X509v3 Authority Key Identifier: keyid:DF:8E:F2:99:4C:B5:42:09:F2:C2:A3:9A:7B:CE:7D:A0:D9:C3:4E:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:cd:d4:5c:d5:dc:5d:10:00:00:ed:d3:e8:38:0e:4c:05:70: 80:51:b7:ef:f4:14:01:1b:36:cf:c6:dc:1d:3d:ed:85:b3:90: a2:1c:21:ba:d8:3b:67:c7:65:21:56:e1:b9:a4:7c:65:7e:be: 0b:ea:e2:fb:c9:8e:ad:cc:8f:fc:d4:fa:16:46:6f:f9:ee:fc: fa:16:b5:a2:e8:1a:39:71:3e:3a:45:67:83:3e:22:8d:25:2c: 03:72:bc:69:3e:c1:97:f2:ca:81:b0:ad:65:43:e7:4b:d0:a0: 0a:1e:5b:e7:84:20:bf:5f:38:df:30:0f:93:da:d6:5f:6b:fe: 78:b6:d7:07:85:be:76:45:93:75:ae:66:e7:da:78:aa:d2:17: 34:fa:76:2f:ee:ac:b7:a9:0b:c5:dc:a2:29:08:bd:79:1a:95: 11:e9:08:1e:f4:ec:0f:d3:a3:87:ec:5a:9e:1f:f7:a4:0f:35: c0:57:a8:53:be:70:bb:eb:f8:08:c3:f9:0f:1a:5e:fa:cd:c1: 66:7a:f2:fa:da:36:b7:4a:fb:a1:6f:b1:47:34:b2:40:76:b7: 4d:28:c1:c9:dd:97:67:5d:ed:91:cd:25:d3:42:4c:b5:53:32: 6b:de:a0:c3:f8:6c:82:40:71:55:e0:c3:59:1c:b5:51:49:61: 3c:3f:b7:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAiv5FwWpxJRnejHSa0lzYTZPcaYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY4RUYyOTk0Q0I1NDIwOUYyQzJBMzlBN0JDRTdEQTBE OUMzNEU0QTAeFw0yNTA1MTAxMDI2MTRaFw0yNTA1MTMxNDM3MTRaMDMxMTAvBgNV BAMTKDM0MzIzNDBEQzFBQUUxQ0ZEMTFBRTU4NERBREIwREREQjJEMDIyMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSlXklAbRkohVPEjKJDPOsVqLb 7Qxeo45G7jxRN6NE20yltSYYiZTFCHjHO+FOxjMr4iL5T+AhEWlP2svsnI3MXehs z9/cSbHZro2Gr20okqs0KwqPHx0JS9lTfloGQ4mrlZQtvis5XWChU+HdNHOmmDJV Our3cNCnHNI8efSsOlTaCT1szVnJ/wzBqgmdIEqZwIjHaeznzDsTR1PpfT/UXX8U BcbESodIyKkPS1gHHn1yc+k3R0kX2VEqxNObltuYELF4x5MNuzSGslBJtsFM6Tax sbFL9txxnxRE4/54/nWZNTze3arsn0THHE3+bFJxb7MEarAkk0Ix0TtbWNh7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNDI0DcGq4c/RGuWE2tsN3bLQIgowHwYDVR0j BBgwFoAU347ymUy1QgnywqOae859oNnDTkowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjVjZGEzNi02OTNhLTRjMWEtYmE5ZS1lMGUxNzgxMTIxNDAvMC9ERjhFRjI5OTRD QjU0MjA5RjJDMkEzOUE3QkNFN0RBMEQ5QzM0RTRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREY4RUYyOTk0Q0I1NDIwOUYyQzJBMzlBN0JDRTdEQTBEOUMz NEU0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTI1Y2RhMzYtNjkzYS00YzFhLWJh OWUtZTBlMTc4MTEyMTQwLzAvREY4RUYyOTk0Q0I1NDIwOUYyQzJBMzlBN0JDRTdE QTBEOUMzNEU0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFrN1FzV3F0QAADt0+g4DkwFcIBRt+/0FAEb Ns/G3B097YWzkKIcIbrYO2fHZSFW4bmkfGV+vgvq4vvJjq3Mj/zU+hZGb/nu/PoW taLoGjlxPjpFZ4M+Io0lLANyvGk+wZfyyoGwrWVD50vQoAoeW+eEIL9fON8wD5Pa 1l9r/ni21weFvnZFk3WuZufaeKrSFzT6di/urLepC8XcoikIvXkalRHpCB707A/T o4fsWp4f96QPNcBXqFO+cLvr+AjD+Q8aXvrNwWZ68vraNrdK+6FvsUc0skB2t00o wcndl2dd7ZHNJdNCTLVTMmveoMP4bIJAcVXgw1kctVFJYTw/t58= -----END CERTIFICATE-----Generated at Sun May 11 17:12:53 2025 by rpki-client