$ rpki-client -vvf repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft File: DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft (raw, json) Hash identifier: vMVIlcEVtaiFUgjRT5+NXd0I/ryS9QNZHI7u4ryRNx4= Subject key identifier: 9D:15:DC:97:AA:EF:11:BA:7B:D7:67:F2:B8:A0:CC:38:44:E8:44:1B Authority key identifier: DA:39:6A:1D:C6:29:9D:C3:BB:9E:8D:D7:65:0D:36:FA:BA:94:49:67 Certificate issuer: /CN=DA396A1DC6299DC3BB9E8DD7650D36FABA944967 Certificate serial: 1B96007ADE36B364B2707256F18C9C049E8265E8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft Manifest number: 01E6 Signing time: Sat 28 Jun 2025 08:40:53 +0000 Manifest this update: Sat 28 Jun 2025 08:35:53 +0000 Manifest next update: Tue 01 Jul 2025 19:40:53 +0000 Files and hashes: 1: 3130332e3136362e34382e302f32332d3234203d3e20313339343630.roa (hash: 0a2CK00YtHnEd2JmEamQH3BHgmE0sjYsMU62NZCZSoM=) 2: DA396A1DC6299DC3BB9E8DD7650D36FABA944967.crl (hash: bZfizK5aTx2a+iHF3D9PPz/F9tpybGYawObcrkR4zaU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.crl rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 19:40:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:96:00:7a:de:36:b3:64:b2:70:72:56:f1:8c:9c:04:9e:82:65:e8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA396A1DC6299DC3BB9E8DD7650D36FABA944967 Validity Not Before: Jun 28 08:35:53 2025 GMT Not After : Jul 1 19:40:53 2025 GMT Subject: CN=9D15DC97AAEF11BA7BD767F2B8A0CC3844E8441B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:bb:06:c8:50:fb:54:04:a2:a8:b2:fa:c7:ce: bf:91:64:de:67:da:52:19:e4:8a:9b:2a:1d:2c:88: d9:d6:9b:43:ed:94:7d:96:d3:69:c4:3f:a3:7b:6a: 02:ed:49:71:f8:ca:42:4f:ef:5e:26:e5:06:7a:89: 51:09:51:63:81:0d:f9:ac:f9:52:9f:5e:f5:bf:cd: 51:ec:8d:6f:e7:f2:c7:d9:2c:a1:b6:0d:67:a9:7f: 66:80:76:ee:b3:6f:4c:cb:f3:a1:26:67:1a:61:74: 80:14:06:c8:a3:a4:6e:a2:d9:8c:8e:62:ef:01:bd: 13:1a:bd:43:ba:c3:69:82:d1:80:9e:56:71:9a:1d: 8a:19:3d:62:b2:64:f6:7b:bf:d4:43:a2:c6:3d:7d: 9e:d4:64:fd:f1:d9:37:20:17:0a:fe:98:2d:72:d8: 92:dc:11:23:ff:6d:5f:41:e5:57:0a:a6:d2:93:62: 07:05:0a:4e:0c:7d:5a:74:a0:53:5c:37:4c:42:8f: ca:76:29:78:4f:93:58:49:e6:e7:e6:f5:ad:2b:c7: 89:5c:5b:8f:e3:0a:d5:6d:31:c3:24:25:cc:e9:ec: 86:98:a4:9f:c5:c5:ca:8b:94:5b:a0:2e:ce:03:ae: 14:55:55:5d:f0:d7:1d:e3:5c:d4:92:3c:7d:5d:2e: f7:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:15:DC:97:AA:EF:11:BA:7B:D7:67:F2:B8:A0:CC:38:44:E8:44:1B X509v3 Authority Key Identifier: keyid:DA:39:6A:1D:C6:29:9D:C3:BB:9E:8D:D7:65:0D:36:FA:BA:94:49:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:7e:41:45:ed:de:80:1d:56:a5:cc:00:8f:d5:bf:a9:d3:1a: d7:6d:fd:12:96:b9:4f:fc:2e:8e:b9:25:86:f6:35:b5:d5:e0: 35:d6:c6:18:6c:21:d2:55:83:9f:76:82:66:36:d6:da:f5:f0: 6b:1a:15:54:c7:fd:bd:40:4f:8c:2a:c9:f0:95:12:39:fd:4c: d5:34:07:31:cb:a3:a4:35:eb:11:b3:fd:6e:65:03:c3:83:d2: 7c:ea:7f:62:74:dc:bc:29:36:76:df:ca:2e:8a:1f:0e:e0:d1: 6b:e7:82:19:84:0d:12:04:96:5e:b0:95:a7:9b:57:d5:40:40: 50:04:17:77:99:1b:bc:be:48:c0:62:3d:b3:cc:a7:b9:cb:c8: 8c:77:b2:0f:4a:02:34:5a:f7:63:88:4d:bf:50:de:76:c8:a1: d5:4b:11:cc:3a:85:d3:84:12:95:72:ce:0b:94:3b:52:99:ae: d0:ca:e8:d0:54:1a:00:e6:9a:35:22:26:74:b9:67:73:1d:81: 18:eb:27:34:3d:fd:c3:ad:4f:4a:f9:ff:1d:16:ed:d7:45:a9: be:da:87:da:6c:90:53:2b:b6:89:c6:bb:46:bb:a1:c4:fc:8f: a7:ab:36:66:c5:1a:12:fe:9c:0e:ef:8e:67:ac:9a:4b:cb:b5: e9:8d:33:39 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUG5YAet42s2SycHJW8YycBJ6CZegwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREEzOTZBMURDNjI5OURDM0JCOUU4REQ3NjUwRDM2RkFC QTk0NDk2NzAeFw0yNTA2MjgwODM1NTNaFw0yNTA3MDExOTQwNTNaMDMxMTAvBgNV BAMTKDlEMTVEQzk3QUFFRjExQkE3QkQ3NjdGMkI4QTBDQzM4NDRFODQ0MUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZuwbIUPtUBKKosvrHzr+RZN5n 2lIZ5IqbKh0siNnWm0PtlH2W02nEP6N7agLtSXH4ykJP714m5QZ6iVEJUWOBDfms +VKfXvW/zVHsjW/n8sfZLKG2DWepf2aAdu6zb0zL86EmZxphdIAUBsijpG6i2YyO Yu8BvRMavUO6w2mC0YCeVnGaHYoZPWKyZPZ7v9RDosY9fZ7UZP3x2TcgFwr+mC1y 2JLcESP/bV9B5VcKptKTYgcFCk4MfVp0oFNcN0xCj8p2KXhPk1hJ5ufm9a0rx4lc W4/jCtVtMcMkJczp7IaYpJ/FxcqLlFugLs4DrhRVVV3w1x3jXNSSPH1dLvcnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnRXcl6rvEbp712fyuKDMOEToRBswHwYDVR0j BBgwFoAU2jlqHcYpncO7no3XZQ02+rqUSWcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OGI2M2U3ZC1hNjE3LTRlOGMtYTgyMS02MjM5NTZkNGQ0YWUvMC9EQTM5NkExREM2 Mjk5REMzQkI5RThERDc2NTBEMzZGQUJBOTQ0OTY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREEzOTZBMURDNjI5OURDM0JCOUU4REQ3NjUwRDM2RkFCQTk0 NDk2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZThiNjNlN2QtYTYxNy00ZThjLWE4 MjEtNjIzOTU2ZDRkNGFlLzAvREEzOTZBMURDNjI5OURDM0JCOUU4REQ3NjUwRDM2 RkFCQTk0NDk2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGR+QUXt3oAdVqXMAI/Vv6nTGtdt/RKWuU/8 Lo65JYb2NbXV4DXWxhhsIdJVg592gmY21tr18GsaFVTH/b1AT4wqyfCVEjn9TNU0 BzHLo6Q16xGz/W5lA8OD0nzqf2J03LwpNnbfyi6KHw7g0WvnghmEDRIEll6wlaeb V9VAQFAEF3eZG7y+SMBiPbPMp7nLyIx3sg9KAjRa92OITb9Q3nbIodVLEcw6hdOE EpVyzguUO1KZrtDK6NBUGgDmmjUiJnS5Z3MdgRjrJzQ9/cOtT0r5/x0W7ddFqb7a h9pskFMrtonGu0a7ocT8j6erNmbFGhL+nA7vjmesmkvLtemNMzk= -----END CERTIFICATE-----Generated at Mon Jun 30 16:25:09 2025 by rpki-client