$ rpki-client -vvf repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.mft File: DBF597EA29EF8A70656446AF75CF33F0618E8282.mft (raw, json) Hash identifier: U9dxjpwZEvuc2j+pSGw0kmhf8EhLawkC7tz2VRGjko4= Subject key identifier: E9:EE:91:DF:B2:12:07:1C:D6:CB:1A:3D:75:80:71:BC:3A:8E:5D:E6 Authority key identifier: DB:F5:97:EA:29:EF:8A:70:65:64:46:AF:75:CF:33:F0:61:8E:82:82 Certificate issuer: /CN=DBF597EA29EF8A70656446AF75CF33F0618E8282 Certificate serial: 1FCBAEB5EB9D1C07F3BFC6955FDE70879791D1A3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF597EA29EF8A70656446AF75CF33F0618E8282.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.mft Manifest number: 04E7 Signing time: Sun 29 Jun 2025 04:02:10 +0000 Manifest this update: Sun 29 Jun 2025 03:57:10 +0000 Manifest next update: Wed 02 Jul 2025 07:23:10 +0000 Files and hashes: 1: 323430363a363230303a3a2f33322d3438203d3e203233373536.roa (hash: RDF8kXfxQQ2EWR27pMBSl3bUi8DuM2mKbwzECDZeSOA=) 2: 3230322e362e3232342e302f32302d3234203d3e203233373536.roa (hash: RLSgg2xBR0eY1oQJ2Fkz63ShTm+IebfyQIgkaUmONdM=) 3: DBF597EA29EF8A70656446AF75CF33F0618E8282.crl (hash: u59OLp31nvhvWSNHyHtVpmwiLbuN/EvYoVX4u270s4Q=) 4: 3131372e3130322e3232342e302f31392d3234203d3e203233373536.roa (hash: TuGeKAZ5K1Zu0PRUHP6LxUEiVAWHwbRLn6V580rSqpM=) 5: 3135302e3130372e3133322e302f32322d3234203d3e203233373536.roa (hash: fVRsxuz3woE7uahLGANS8nBiT+UdU+qUUJ2Y/SNoU9E=) 6: 3130332e3234322e3230342e302f32322d3234203d3e203233373536.roa (hash: WzW/Sss6A/kpJfugXeZWPxd++ZE3y6mEfaDI33YMU+M=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.crl rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF597EA29EF8A70656446AF75CF33F0618E8282.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:cb:ae:b5:eb:9d:1c:07:f3:bf:c6:95:5f:de:70:87:97:91:d1:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBF597EA29EF8A70656446AF75CF33F0618E8282 Validity Not Before: Jun 29 03:57:10 2025 GMT Not After : Jul 2 07:23:10 2025 GMT Subject: CN=E9EE91DFB212071CD6CB1A3D758071BC3A8E5DE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:09:63:83:50:8e:b8:7b:39:2a:ef:bc:8a:b9: ba:21:1a:8e:b2:79:70:26:1e:fe:ba:cc:92:cf:42: 1b:51:eb:ad:33:86:c4:a6:39:01:68:bf:95:43:54: e5:03:83:ec:87:96:84:e1:89:fc:19:f9:70:48:a9: c8:f1:53:51:f3:d6:21:1f:62:39:5f:c2:17:20:ce: 30:14:b1:f2:1c:d3:97:b5:ca:d5:b4:39:6d:9d:49: 7a:51:fb:a4:39:c2:55:3e:c9:8f:93:a3:a8:36:1c: 56:a9:96:4c:9d:6f:40:d2:08:6d:89:f2:a5:cc:80: 47:fd:58:4f:89:7b:bf:b8:9c:ec:3d:9f:4f:10:ef: c1:18:11:98:c0:c8:dd:ed:0f:8c:3f:50:78:e0:cd: 9e:ca:82:e1:57:be:5c:8e:c6:f6:d4:9e:0e:89:a3: c0:5e:d3:4b:f0:f6:3c:a5:e8:0d:f5:9d:57:4a:29: de:0e:43:b2:ec:82:76:e3:dc:81:9d:7c:9b:e2:10: f9:cb:25:91:bd:45:85:b6:3e:fe:5c:ea:48:13:d5: e6:ae:15:b9:04:48:d6:71:46:6a:43:f6:72:d9:2c: c9:ad:03:e2:73:97:f4:72:22:9a:72:8a:56:d4:0a: ba:ca:cc:a1:93:83:6d:82:74:97:d1:51:f0:a6:4e: 68:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:EE:91:DF:B2:12:07:1C:D6:CB:1A:3D:75:80:71:BC:3A:8E:5D:E6 X509v3 Authority Key Identifier: keyid:DB:F5:97:EA:29:EF:8A:70:65:64:46:AF:75:CF:33:F0:61:8E:82:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF597EA29EF8A70656446AF75CF33F0618E8282.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:5b:f6:34:3c:8d:38:2b:94:6e:d0:e9:b4:3f:bc:68:be:23: f6:dc:69:9f:24:13:e4:97:d2:db:9c:ac:52:ea:de:80:85:54: 9e:e7:2b:7c:a5:84:65:91:b8:01:bf:48:ec:4c:0b:33:8f:12: f0:5a:0c:86:28:b0:7f:3e:43:dd:34:8d:6c:a6:fd:a9:7b:76: 98:6a:b7:6e:80:85:cf:b9:5f:34:e0:33:82:35:21:cd:10:e7: e0:94:54:41:c1:2e:f4:84:9a:6b:de:92:80:ff:f5:60:46:82: 44:27:69:8b:b1:8d:f6:18:57:0a:1c:be:37:9e:c7:49:ee:de: 49:24:10:86:47:7a:00:9a:f8:34:c1:62:70:09:73:2a:d8:97: 20:c4:4d:6b:38:96:68:ba:f0:e1:c6:ee:a9:5c:53:72:a7:1b: d9:e7:53:7a:01:f1:b5:79:c9:b1:04:7d:5f:71:a3:2b:cd:7f: 60:d6:ea:6b:c4:f2:32:9c:ca:63:1d:76:dc:67:f0:33:73:38: d8:b9:f3:19:17:4e:ef:62:21:39:dc:a4:8d:38:21:ae:48:cb: d3:6e:dc:09:02:7b:fe:72:01:8e:a7:b8:20:76:01:5f:14:8a: b0:c7:13:b1:83:72:ea:5e:9f:f0:86:27:8c:9d:6b:db:3d:73: 17:ba:01:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUH8uuteudHAfzv8aVX95wh5eR0aMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJGNTk3RUEyOUVGOEE3MDY1NjQ0NkFGNzVDRjMzRjA2 MThFODI4MjAeFw0yNTA2MjkwMzU3MTBaFw0yNTA3MDIwNzIzMTBaMDMxMTAvBgNV BAMTKEU5RUU5MURGQjIxMjA3MUNENkNCMUEzRDc1ODA3MUJDM0E4RTVERTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDICWODUI64ezkq77yKubohGo6y eXAmHv66zJLPQhtR660zhsSmOQFov5VDVOUDg+yHloThifwZ+XBIqcjxU1Hz1iEf YjlfwhcgzjAUsfIc05e1ytW0OW2dSXpR+6Q5wlU+yY+To6g2HFaplkydb0DSCG2J 8qXMgEf9WE+Je7+4nOw9n08Q78EYEZjAyN3tD4w/UHjgzZ7KguFXvlyOxvbUng6J o8Be00vw9jyl6A31nVdKKd4OQ7Lsgnbj3IGdfJviEPnLJZG9RYW2Pv5c6kgT1eau FbkESNZxRmpD9nLZLMmtA+Jzl/RyIppyilbUCrrKzKGTg22CdJfRUfCmTmjxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6e6R37ISBxzWyxo9dYBxvDqOXeYwHwYDVR0j BBgwFoAU2/WX6invinBlZEavdc8z8GGOgoIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZDBmMWE2ZS04M2I2LTQ1MzQtOTY3ZC1mOGRiM2MzNzExZjQvMC9EQkY1OTdFQTI5 RUY4QTcwNjU2NDQ2QUY3NUNGMzNGMDYxOEU4MjgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREJGNTk3RUEyOUVGOEE3MDY1NjQ0NkFGNzVDRjMzRjA2MThF ODI4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWQwZjFhNmUtODNiNi00NTM0LTk2 N2QtZjhkYjNjMzcxMWY0LzAvREJGNTk3RUEyOUVGOEE3MDY1NjQ0NkFGNzVDRjMz RjA2MThFODI4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABlb9jQ8jTgrlG7Q6bQ/vGi+I/bcaZ8kE+SX 0tucrFLq3oCFVJ7nK3ylhGWRuAG/SOxMCzOPEvBaDIYosH8+Q900jWym/al7dphq t26Ahc+5XzTgM4I1Ic0Q5+CUVEHBLvSEmmvekoD/9WBGgkQnaYuxjfYYVwocvjee x0nu3kkkEIZHegCa+DTBYnAJcyrYlyDETWs4lmi68OHG7qlcU3KnG9nnU3oB8bV5 ybEEfV9xoyvNf2DW6mvE8jKcymMddtxn8DNzONi58xkXTu9iITncpI04Ia5Iy9Nu 3AkCe/5yAY6nuCB2AV8UirDHE7GDcupen/CGJ4yda9s9cxe6ASI= -----END CERTIFICATE-----Generated at Sun Jun 29 18:43:42 2025 by rpki-client