$ rpki-client -vvf repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.mft File: DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.mft (raw, json) Hash identifier: FS7ATxyLU5+Z0mgBwYGbYwwK+nJuXE6jmFWEIDC3wfk= Subject key identifier: 26:A5:60:46:13:C3:80:65:17:E3:E2:7D:0E:39:D1:97:3C:A7:2A:89 Authority key identifier: DC:FC:FE:4E:81:97:FF:AF:B9:A5:79:20:BD:40:DC:C1:AC:F0:F3:0F Certificate issuer: /CN=DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F Certificate serial: 57C12B0E7CA861E4FDFE6910006464BF31018CF4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.mft Manifest number: 01F5 Signing time: Sat 28 Jun 2025 15:01:56 +0000 Manifest this update: Sat 28 Jun 2025 14:56:56 +0000 Manifest next update: Tue 01 Jul 2025 15:02:56 +0000 Files and hashes: 1: 323030313a6466343a393130303a3a2f34382d3438203d3e20313337333233.roa (hash: NYSNKUm/BgmT5rJhU5PDu3zm0ji32HyB3xQtf69bB+8=) 2: DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.crl (hash: ZTIEDpT+G5RXEKQB+Iem2M3maqvizcs3Puq+Vpp0WZU=) 3: 3130332e3131312e3231382e302f32342d3234203d3e20313337333233.roa (hash: Zv0VjyXOs/YJcxUITNpIWw5z1xu1WaEnf3VgeGVypQs=) 4: 3130332e3131312e3231392e302f32342d3234203d3e20313337333233.roa (hash: N8Hp5zFXrvVRTETGbbuYPmuPvC+hIoWpg8/FhaH5avg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.crl rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 15:02:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:c1:2b:0e:7c:a8:61:e4:fd:fe:69:10:00:64:64:bf:31:01:8c:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F Validity Not Before: Jun 28 14:56:56 2025 GMT Not After : Jul 1 15:02:56 2025 GMT Subject: CN=26A5604613C3806517E3E27D0E39D1973CA72A89 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:2b:86:4a:4b:7e:fd:ad:e5:3a:33:07:d7:ea: d4:a6:d2:d9:3f:c6:06:de:51:4e:0b:a5:c4:08:ec: 0b:2c:15:33:44:a4:e9:a0:74:33:5b:d5:6a:c0:33: 22:a5:c0:75:39:5f:58:e0:d0:c1:e7:54:a9:77:5b: bb:71:dd:a1:cc:f6:3b:63:9e:0f:72:3f:8a:21:e9: 7b:f7:da:6f:cf:79:0b:de:d9:55:ae:26:03:00:8b: 41:cb:a4:ec:f1:99:b7:d8:59:3c:f9:1b:cd:19:10: 6d:07:a1:6e:c9:6e:ad:42:5c:36:33:54:28:5b:60: 58:75:02:6a:c9:2a:bd:84:5a:91:e5:df:02:7d:f3: 44:53:3c:72:1f:d5:79:a7:4d:e7:6e:ae:b1:87:78: 69:33:1f:d0:53:5b:29:d0:ea:0e:07:c3:b3:6d:8c: 23:e2:90:93:71:4f:0a:87:8f:01:5b:e4:f4:82:34: 60:f6:2e:e8:36:78:e7:41:95:49:23:8f:22:c6:be: fb:83:ed:01:c2:b4:c6:9a:72:0d:60:81:83:cf:72: f0:04:ed:9d:1c:bf:4a:23:e1:37:4d:0d:a7:fd:66: bb:03:1f:7c:2e:7c:be:11:33:4c:c6:e1:73:c4:fe: 61:1a:45:93:b4:4f:02:32:d7:9d:b4:b4:8d:e1:78: b1:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:A5:60:46:13:C3:80:65:17:E3:E2:7D:0E:39:D1:97:3C:A7:2A:89 X509v3 Authority Key Identifier: keyid:DC:FC:FE:4E:81:97:FF:AF:B9:A5:79:20:BD:40:DC:C1:AC:F0:F3:0F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e1af144b-b92e-4fff-b641-e46fdde8c6df/0/DCFCFE4E8197FFAFB9A57920BD40DCC1ACF0F30F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:f8:87:12:4d:62:57:01:81:7d:ca:b5:ab:74:e0:ef:3d:3e: 4b:3f:02:95:58:a8:e7:0e:45:92:4b:4e:25:52:82:55:03:9b: ea:19:f8:d9:8d:39:d7:a0:37:70:24:bd:6b:5e:35:d4:31:c6: 88:8c:ff:f8:d9:b9:a0:99:11:01:79:1d:32:cf:93:59:eb:7b: eb:16:c5:9e:6f:32:69:ff:0c:22:3c:ef:2e:5e:13:55:1b:b5: 77:33:cb:2f:8e:0e:07:3d:a4:6c:91:8f:91:39:45:1f:4b:49: a1:dc:c8:f6:1c:35:24:1c:55:93:85:fa:2d:c0:81:b3:f7:0c: b5:b3:a4:32:fe:f8:2e:47:bd:41:7f:f1:33:96:8b:96:5d:51: c8:df:4a:8e:6a:2e:3b:71:f5:79:b2:e6:8f:0d:61:3f:33:5d: 57:04:6b:42:b3:42:79:7c:1e:cf:58:6c:11:83:4b:dc:dc:9a: f8:bc:68:8d:b4:28:35:fa:30:97:17:d9:ec:f7:45:93:ab:99: 19:9d:25:b0:8d:f3:46:35:72:79:39:ca:98:6f:e3:a2:ec:1c: 72:d7:30:df:cd:c7:fb:f3:b5:95:01:69:2e:dc:b3:91:ea:ae: 89:cf:39:d0:4c:02:31:0c:2d:ff:15:21:47:be:47:67:dd:e5: 10:29:61:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUV8ErDnyoYeT9/mkQAGRkvzEBjPQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENGQ0ZFNEU4MTk3RkZBRkI5QTU3OTIwQkQ0MERDQzFB Q0YwRjMwRjAeFw0yNTA2MjgxNDU2NTZaFw0yNTA3MDExNTAyNTZaMDMxMTAvBgNV BAMTKDI2QTU2MDQ2MTNDMzgwNjUxN0UzRTI3RDBFMzlEMTk3M0NBNzJBODkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNK4ZKS379reU6MwfX6tSm0tk/ xgbeUU4LpcQI7AssFTNEpOmgdDNb1WrAMyKlwHU5X1jg0MHnVKl3W7tx3aHM9jtj ng9yP4oh6Xv32m/PeQve2VWuJgMAi0HLpOzxmbfYWTz5G80ZEG0HoW7Jbq1CXDYz VChbYFh1AmrJKr2EWpHl3wJ980RTPHIf1XmnTedurrGHeGkzH9BTWynQ6g4Hw7Nt jCPikJNxTwqHjwFb5PSCNGD2Lug2eOdBlUkjjyLGvvuD7QHCtMaacg1ggYPPcvAE 7Z0cv0oj4TdNDaf9ZrsDH3wufL4RM0zG4XPE/mEaRZO0TwIy1520tI3heLGtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJqVgRhPDgGUX4+J9DjnRlzynKokwHwYDVR0j BBgwFoAU3Pz+ToGX/6+5pXkgvUDcwazw8w8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l MWFmMTQ0Yi1iOTJlLTRmZmYtYjY0MS1lNDZmZGRlOGM2ZGYvMC9EQ0ZDRkU0RTgx OTdGRkFGQjlBNTc5MjBCRDQwRENDMUFDRjBGMzBGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRENGQ0ZFNEU4MTk3RkZBRkI5QTU3OTIwQkQ0MERDQzFBQ0Yw RjMwRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTFhZjE0NGItYjkyZS00ZmZmLWI2 NDEtZTQ2ZmRkZThjNmRmLzAvRENGQ0ZFNEU4MTk3RkZBRkI5QTU3OTIwQkQ0MERD QzFBQ0YwRjMwRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAP4hxJNYlcBgX3Ktat04O89Pks/ApVYqOcO RZJLTiVSglUDm+oZ+NmNOdegN3AkvWteNdQxxoiM//jZuaCZEQF5HTLPk1nre+sW xZ5vMmn/DCI87y5eE1UbtXczyy+ODgc9pGyRj5E5RR9LSaHcyPYcNSQcVZOF+i3A gbP3DLWzpDL++C5HvUF/8TOWi5ZdUcjfSo5qLjtx9Xmy5o8NYT8zXVcEa0KzQnl8 Hs9YbBGDS9zcmvi8aI20KDX6MJcX2ez3RZOrmRmdJbCN80Y1cnk5yphv46LsHHLX MN/Nx/vztZUBaS7cs5HqronPOdBMAjEMLf8VIUe+R2fd5RApYeI= -----END CERTIFICATE-----Generated at Mon Jun 30 01:11:57 2025 by rpki-client