$ rpki-client -vvf repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft File: DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft (raw, json) Hash identifier: /98IwMC2t75sRqTiRxv/jwZbxVMn9/fTBsm3VEhkI+U= Subject key identifier: 05:57:2D:4A:64:AB:63:EE:F1:E1:54:B1:1E:63:C3:08:E5:6B:11:47 Authority key identifier: DF:8E:F2:99:4C:B5:42:09:F2:C2:A3:9A:7B:CE:7D:A0:D9:C3:4E:4A Certificate issuer: /CN=DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A Certificate serial: 222C274EE26B18E88AAB056FCA75FD44DB85A127 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft Manifest number: 0323 Signing time: Mon 30 Jun 2025 01:11:13 +0000 Manifest this update: Mon 30 Jun 2025 01:06:13 +0000 Manifest next update: Thu 03 Jul 2025 07:29:13 +0000 Files and hashes: 1: 323430343a326363303a323a3a2f34382d3438203d3e20313331373336.roa (hash: zPirjw68goF9ylHxOtcUqyoIsGV38h/23WQgUJ1Ori8=) 2: DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.crl (hash: nnh26FENEb4F4tQegFgo2ZU6rgs9CObDGlrkjVuQoUo=) 3: 3130332e3133322e31332e302f32342d3234203d3e20313331373336.roa (hash: 2cxxZUWkJsO3oT8bqHDC+csSkm6PFb2gUAHDSh62gR8=) 4: 3130332e3133322e31322e302f32342d3234203d3e20313331373336.roa (hash: yYY5Xasn+MhbZ/7PqdrXZuQAXqu+qcVQtvVv3ePHTro=) 5: 3130332e3133322e31352e302f32342d3234203d3e20313331373336.roa (hash: YsQ/6eOY7UY889dueTFqI5fZ9jzbm6RP7AZHDvdYNjo=) 6: 323430343a326363303a3a2f33322d3438203d3e20313331373336.roa (hash: h8DSOqlAB7DM5TJQosNDXf2STLaxOgc/wT91U1wd/Qs=) 7: 3130332e3133322e31342e302f32342d3234203d3e20313331373336.roa (hash: XPqP92iiEQWlwXCwRpR2WN8Lt9Zye6dCVSvcRgh/30k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.crl rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 07:29:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:2c:27:4e:e2:6b:18:e8:8a:ab:05:6f:ca:75:fd:44:db:85:a1:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A Validity Not Before: Jun 30 01:06:13 2025 GMT Not After : Jul 3 07:29:13 2025 GMT Subject: CN=05572D4A64AB63EEF1E154B11E63C308E56B1147 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:89:a8:02:c3:30:c7:32:5a:de:db:92:4f:91: 16:4b:4b:4f:60:c7:e3:7f:d2:b2:5d:93:e0:5a:aa: 1f:ee:20:95:05:04:d3:75:80:4f:66:46:fb:05:94: 02:ba:15:84:a6:55:9b:03:b8:e0:af:ec:56:97:29: cb:b0:50:b4:48:07:b6:7e:50:10:2c:df:8f:cd:55: 9e:f4:b7:9a:6c:81:92:3c:65:27:18:a6:19:50:4a: ba:64:90:30:a1:d4:2c:7a:70:c9:67:d9:f7:79:e3: 6c:4c:02:c0:aa:0a:a7:e8:d0:49:7a:36:4e:ff:f5: 80:d3:08:1b:b0:24:44:08:1e:ae:1e:3d:a5:5b:45: 4a:75:ed:5b:6c:6f:7c:23:08:4a:3f:39:30:8c:f7: f8:07:59:45:8a:7f:d5:c7:fa:05:2e:cf:d1:00:98: b6:d8:c2:09:cf:c8:6d:8a:87:f6:5f:0b:1a:24:1f: 16:2c:58:d3:32:f1:49:65:cd:fb:a0:c4:2b:99:25: e1:a1:ba:bd:2d:6d:d7:dc:dd:59:fe:eb:20:ff:b4: a9:0f:93:eb:f9:14:da:68:7a:73:30:06:b1:77:9c: 2e:2e:73:fe:51:3e:99:ce:b5:57:d5:f2:c7:34:ce: 22:8d:86:cc:c1:bf:df:0a:f4:e2:1b:f9:42:b2:0a: cc:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 05:57:2D:4A:64:AB:63:EE:F1:E1:54:B1:1E:63:C3:08:E5:6B:11:47 X509v3 Authority Key Identifier: keyid:DF:8E:F2:99:4C:B5:42:09:F2:C2:A3:9A:7B:CE:7D:A0:D9:C3:4E:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 20:c3:8d:51:62:5e:77:bb:37:e1:36:ba:27:26:a7:eb:cb:7d: d9:dc:53:1d:4f:7f:b4:19:50:81:dd:2a:f5:3d:a2:d6:47:6a: 50:6d:72:60:af:96:ea:d9:91:4d:c3:cb:bc:07:09:1c:fb:cf: 11:59:50:f3:46:8e:58:98:c9:a3:40:69:dd:70:11:63:4e:b3: 67:b1:b6:9d:d3:2f:89:92:3d:3b:80:d5:77:df:a9:cd:ab:01: b4:99:1f:95:66:58:3e:4d:7d:98:f4:04:85:a7:00:10:55:1e: 20:6e:10:df:94:4b:5a:7b:c8:87:f7:05:9c:77:4e:73:ff:80: f8:e0:c0:a7:28:2b:83:34:2a:36:36:04:88:c1:bc:bd:72:78: ff:3c:9a:8f:24:7a:a9:f3:1d:9e:f4:b1:c9:27:dd:3c:55:56: 64:08:25:0e:a4:62:34:27:5d:7e:7c:95:73:9b:45:6e:70:47: 9e:f5:21:17:c7:a6:fa:a2:92:0a:22:5b:ac:c6:1c:1e:6d:0f: 7e:0f:73:ea:37:19:f4:35:40:c2:d5:99:49:1a:72:76:c3:0e: 35:32:6b:71:8a:18:75:51:f2:8f:4a:e5:b1:fc:50:5d:75:f1: ae:f4:e9:94:52:cf:f7:34:3b:01:a2:27:b3:1c:d8:74:8e:7d: e4:56:23:3a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIiwnTuJrGOiKqwVvynX9RNuFoScwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY4RUYyOTk0Q0I1NDIwOUYyQzJBMzlBN0JDRTdEQTBE OUMzNEU0QTAeFw0yNTA2MzAwMTA2MTNaFw0yNTA3MDMwNzI5MTNaMDMxMTAvBgNV BAMTKDA1NTcyRDRBNjRBQjYzRUVGMUUxNTRCMTFFNjNDMzA4RTU2QjExNDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCriagCwzDHMlre25JPkRZLS09g x+N/0rJdk+Baqh/uIJUFBNN1gE9mRvsFlAK6FYSmVZsDuOCv7FaXKcuwULRIB7Z+ UBAs34/NVZ70t5psgZI8ZScYphlQSrpkkDCh1Cx6cMln2fd542xMAsCqCqfo0El6 Nk7/9YDTCBuwJEQIHq4ePaVbRUp17Vtsb3wjCEo/OTCM9/gHWUWKf9XH+gUuz9EA mLbYwgnPyG2Kh/ZfCxokHxYsWNMy8UllzfugxCuZJeGhur0tbdfc3Vn+6yD/tKkP k+v5FNpoenMwBrF3nC4uc/5RPpnOtVfV8sc0ziKNhszBv98K9OIb+UKyCsyPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUBVctSmSrY+7x4VSxHmPDCOVrEUcwHwYDVR0j BBgwFoAU347ymUy1QgnywqOae859oNnDTkowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjVjZGEzNi02OTNhLTRjMWEtYmE5ZS1lMGUxNzgxMTIxNDAvMC9ERjhFRjI5OTRD QjU0MjA5RjJDMkEzOUE3QkNFN0RBMEQ5QzM0RTRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREY4RUYyOTk0Q0I1NDIwOUYyQzJBMzlBN0JDRTdEQTBEOUMz NEU0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTI1Y2RhMzYtNjkzYS00YzFhLWJh OWUtZTBlMTc4MTEyMTQwLzAvREY4RUYyOTk0Q0I1NDIwOUYyQzJBMzlBN0JDRTdE QTBEOUMzNEU0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACDDjVFiXne7N+E2uicmp+vLfdncUx1Pf7QZ UIHdKvU9otZHalBtcmCvlurZkU3Dy7wHCRz7zxFZUPNGjliYyaNAad1wEWNOs2ex tp3TL4mSPTuA1Xffqc2rAbSZH5VmWD5NfZj0BIWnABBVHiBuEN+US1p7yIf3BZx3 TnP/gPjgwKcoK4M0KjY2BIjBvL1yeP88mo8keqnzHZ70sckn3TxVVmQIJQ6kYjQn XX58lXObRW5wR571IRfHpvqikgoiW6zGHB5tD34Pc+o3GfQ1QMLVmUkacnbDDjUy a3GKGHVR8o9K5bH8UF118a706ZRSz/c0OwGiJ7Mc2HSOfeRWIzo= -----END CERTIFICATE-----Generated at Wed Jul 2 02:04:48 2025 by rpki-client