$ rpki-client -vvf repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft File: DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft (raw, json) Hash identifier: 0rWCFSEsJ7wSynuS/OqyMSyWRfEAZUzC7jTmjXZKVXo= Subject key identifier: EA:36:1F:1A:86:1C:A0:7A:55:B2:72:F6:8E:B5:5E:FD:85:6D:59:8E Authority key identifier: DA:6C:3D:41:56:C0:5B:74:E3:B5:C0:49:F7:98:B0:0D:C6:34:2B:70 Certificate issuer: /CN=DA6C3D4156C05B74E3B5C049F798B00DC6342B70 Certificate serial: 7496512E785C18A52D764A52AE785A816FADC2DB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft Manifest number: FC Signing time: Sat 28 Jun 2025 22:11:41 +0000 Manifest this update: Sat 28 Jun 2025 22:06:41 +0000 Manifest next update: Wed 02 Jul 2025 04:06:41 +0000 Files and hashes: 1: 3130332e3234392e3232362e302f32342d3234203d3e20313531353236.roa (hash: d/FCKrPQVsgurMvNGz2oQ2iPyKXsXoRnlEaxs4nJ5ko=) 2: DA6C3D4156C05B74E3B5C049F798B00DC6342B70.crl (hash: rVA1E7fVPgMvYTgLiu3Tdp1p3oCF3VutZ5J2YzYUS2c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.crl rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 04:06:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:96:51:2e:78:5c:18:a5:2d:76:4a:52:ae:78:5a:81:6f:ad:c2:db Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA6C3D4156C05B74E3B5C049F798B00DC6342B70 Validity Not Before: Jun 28 22:06:41 2025 GMT Not After : Jul 2 04:06:41 2025 GMT Subject: CN=EA361F1A861CA07A55B272F68EB55EFD856D598E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:b0:ce:53:99:01:09:2d:f3:c8:60:85:ce:0a: 8a:64:95:59:12:b7:8d:cb:a9:21:cb:31:7f:d3:15: 67:ed:78:d6:58:6d:39:38:21:ca:cb:a5:8e:43:c9: 0a:df:62:a3:5b:7c:77:56:a2:53:6f:d4:82:b3:30: 97:f9:e6:20:63:7a:5b:85:35:ad:54:1a:58:19:7f: 02:14:ec:58:da:db:b9:f2:04:2f:42:08:11:e8:fb: ef:e3:da:e2:5a:a8:c3:fc:e9:a1:13:5a:cb:8e:05: 12:1b:65:23:92:fd:69:c3:39:07:89:52:70:6f:8b: 9d:2b:1c:d7:6b:5a:61:3b:99:81:80:a1:45:69:7b: 73:0e:44:7b:b8:05:0e:92:8f:d0:f5:5a:a5:c1:89: 3f:8b:1f:e0:85:b0:92:aa:11:b2:76:2a:77:ef:4d: 68:a5:63:79:b8:7f:20:4c:38:28:06:16:ac:07:e2: 52:6f:48:dd:df:c2:c6:3e:85:b5:8f:7b:f7:da:28: 99:9a:78:4c:f4:55:f4:13:b2:b7:3b:cc:2b:00:b3: 12:cc:10:72:45:6a:da:f4:db:ed:0b:d9:9d:25:ad: d5:43:aa:46:6f:3d:5c:53:38:73:8a:65:46:aa:e4: be:1c:24:ad:40:f0:cf:47:fe:a6:db:b0:dc:7f:01: bb:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:36:1F:1A:86:1C:A0:7A:55:B2:72:F6:8E:B5:5E:FD:85:6D:59:8E X509v3 Authority Key Identifier: keyid:DA:6C:3D:41:56:C0:5B:74:E3:B5:C0:49:F7:98:B0:0D:C6:34:2B:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9b:2d:9a:0d:a7:77:8e:1f:f2:ea:86:21:c2:ab:33:5d:e5:c0: 1d:f2:f3:eb:c2:a9:31:e6:93:2a:ee:35:ba:69:5d:09:0e:ec: d7:c7:03:cf:2a:91:7d:c6:27:0b:d6:fa:5e:e8:ee:d7:62:7d: ec:d2:ab:b0:d4:af:3f:92:6e:07:43:e2:b6:80:11:63:4a:77: b4:db:19:a5:a5:6b:be:e1:c3:10:e8:b8:b6:e9:bc:c5:c0:10: e5:4f:61:0d:9f:99:17:1c:c8:df:78:89:1e:3d:64:4c:29:f2: a9:ae:8f:34:06:2f:db:0b:77:35:d6:66:5c:0e:9e:5d:63:8b: 2f:79:ed:9b:ca:d6:30:77:55:18:63:21:74:62:d1:69:15:8a: 96:45:f9:56:aa:f4:20:bb:c1:c2:dd:29:d1:7d:d9:c2:e1:ff: 5e:73:c5:fb:d3:4a:fa:78:8b:16:29:fd:01:67:41:12:8d:19: 4f:a1:4d:a6:17:18:d2:64:b9:00:fd:b9:39:69:03:3f:6f:ef: ce:38:18:a2:4f:bd:0b:a0:bb:63:49:ca:a3:cc:9e:07:77:cf: fb:d4:3b:35:7b:45:d8:70:fe:ce:50:d2:06:94:e0:ca:3d:a9: 6c:1e:11:a6:f9:45:37:c9:21:2a:21:a1:a7:e9:2a:31:34:70: b7:3b:6a:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdJZRLnhcGKUtdkpSrnhagW+twtswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE2QzNENDE1NkMwNUI3NEUzQjVDMDQ5Rjc5OEIwMERD NjM0MkI3MDAeFw0yNTA2MjgyMjA2NDFaFw0yNTA3MDIwNDA2NDFaMDMxMTAvBgNV BAMTKEVBMzYxRjFBODYxQ0EwN0E1NUIyNzJGNjhFQjU1RUZEODU2RDU5OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8sM5TmQEJLfPIYIXOCopklVkS t43LqSHLMX/TFWfteNZYbTk4IcrLpY5DyQrfYqNbfHdWolNv1IKzMJf55iBjeluF Na1UGlgZfwIU7Fja27nyBC9CCBHo++/j2uJaqMP86aETWsuOBRIbZSOS/WnDOQeJ UnBvi50rHNdrWmE7mYGAoUVpe3MORHu4BQ6Sj9D1WqXBiT+LH+CFsJKqEbJ2Knfv TWilY3m4fyBMOCgGFqwH4lJvSN3fwsY+hbWPe/faKJmaeEz0VfQTsrc7zCsAsxLM EHJFatr02+0L2Z0lrdVDqkZvPVxTOHOKZUaq5L4cJK1A8M9H/qbbsNx/AbtdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6jYfGoYcoHpVsnL2jrVe/YVtWY4wHwYDVR0j BBgwFoAU2mw9QVbAW3TjtcBJ95iwDcY0K3AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NzhhOGIzOS0zYWUzLTRkZTctOTM2Ni0yMWY5ZWEwNDMyNWEvMC9EQTZDM0Q0MTU2 QzA1Qjc0RTNCNUMwNDlGNzk4QjAwREM2MzQyQjcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREE2QzNENDE1NkMwNUI3NEUzQjVDMDQ5Rjc5OEIwMERDNjM0 MkI3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTc4YThiMzktM2FlMy00ZGU3LTkz NjYtMjFmOWVhMDQzMjVhLzAvREE2QzNENDE1NkMwNUI3NEUzQjVDMDQ5Rjc5OEIw MERDNjM0MkI3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJstmg2nd44f8uqGIcKrM13lwB3y8+vCqTHm kyruNbppXQkO7NfHA88qkX3GJwvW+l7o7tdifezSq7DUrz+SbgdD4raAEWNKd7Tb GaWla77hwxDouLbpvMXAEOVPYQ2fmRccyN94iR49ZEwp8qmujzQGL9sLdzXWZlwO nl1jiy957ZvK1jB3VRhjIXRi0WkVipZF+Vaq9CC7wcLdKdF92cLh/15zxfvTSvp4 ixYp/QFnQRKNGU+hTaYXGNJkuQD9uTlpAz9v7844GKJPvQugu2NJyqPMngd3z/vU OzV7Rdhw/s5Q0gaU4Mo9qWweEab5RTfJISohoafpKjE0cLc7ags= -----END CERTIFICATE-----Generated at Sun Jun 29 22:15:59 2025 by rpki-client