$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft File: DFE92467290F9E190072585C1045251D6F8B05A3.mft (raw, json) Hash identifier: qjQYaJMdvDNqmGMlA1wf3ipRqaL8QZdXlfWxT6tVxYA= Subject key identifier: 37:1F:CF:FE:81:50:6F:CC:3E:BF:A4:6B:AE:23:D5:30:D6:AA:66:A7 Authority key identifier: DF:E9:24:67:29:0F:9E:19:00:72:58:5C:10:45:25:1D:6F:8B:05:A3 Certificate issuer: /CN=DFE92467290F9E190072585C1045251D6F8B05A3 Certificate serial: 6CB4B21DFAD71D6A82E4680AE24E3989DF2D02EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFE92467290F9E190072585C1045251D6F8B05A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft Manifest number: 0243 Signing time: Sat 18 Oct 2025 08:02:25 +0000 Manifest this update: Sat 18 Oct 2025 07:57:25 +0000 Manifest next update: Tue 21 Oct 2025 11:40:25 +0000 Files and hashes: 1: 3130332e3138352e35322e302f32332d3234203d3e20313339343536.roa (hash: haaSHQN0sWh09iak7Jfz/FWXF5gl4JL5L2Lm/giP904=) 2: DFE92467290F9E190072585C1045251D6F8B05A3.crl (hash: K4ABzQ8LidLacUD44zB7trTEoGaYYJKDwcVRXkzJf8g=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.crl rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFE92467290F9E190072585C1045251D6F8B05A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 11:40:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:b4:b2:1d:fa:d7:1d:6a:82:e4:68:0a:e2:4e:39:89:df:2d:02:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFE92467290F9E190072585C1045251D6F8B05A3 Validity Not Before: Oct 18 07:57:25 2025 GMT Not After : Oct 21 11:40:25 2025 GMT Subject: CN=371FCFFE81506FCC3EBFA46BAE23D530D6AA66A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:51:27:e5:e6:14:ff:a6:cb:32:db:a6:ff:4f: 6e:09:d0:7d:e1:8b:79:ad:03:aa:73:26:ea:ad:e3: 89:4c:50:5b:44:b2:27:89:fc:89:a4:47:38:09:8e: 85:5f:c0:f8:f9:84:06:6a:6a:b3:64:23:28:1c:ea: 58:0c:57:2f:f5:e7:81:41:94:cd:72:d1:5d:8e:bd: 5f:97:10:cf:e3:27:f5:81:c5:d6:18:1a:66:f7:5e: 2c:e5:3a:8b:d2:79:53:d9:60:9b:bd:e8:c0:3f:69: 98:f9:84:f5:89:8a:d7:10:5d:e6:2f:c3:67:5e:b2: 4e:07:86:18:b7:8c:a7:23:95:c8:8e:c8:c1:b9:70: f6:07:e0:e2:df:6f:42:3b:bc:db:87:81:22:b6:f1: 57:09:47:07:f1:20:47:15:52:10:cb:0b:2d:dc:a5: c1:56:66:96:c6:f3:e4:6a:8e:5a:bb:07:77:2d:c3: 49:33:c9:d3:79:7b:f2:8d:eb:1c:25:e0:7f:68:78: 05:f9:32:01:6a:86:0e:86:45:c7:1e:ef:3b:77:68: 93:d4:9b:4c:77:a5:a2:61:f6:03:b4:c9:4f:ce:92: 4b:84:77:a8:8a:8c:00:bc:dc:d7:b5:cb:39:8c:cb: 76:08:6b:55:90:63:52:7f:5a:bc:b5:ae:94:ab:02: cb:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 37:1F:CF:FE:81:50:6F:CC:3E:BF:A4:6B:AE:23:D5:30:D6:AA:66:A7 X509v3 Authority Key Identifier: keyid:DF:E9:24:67:29:0F:9E:19:00:72:58:5C:10:45:25:1D:6F:8B:05:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFE92467290F9E190072585C1045251D6F8B05A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:01:b7:79:49:3c:bf:7c:d8:d7:77:72:02:29:c7:35:9e:ae: e6:74:4f:ea:9a:15:99:aa:4b:cf:dd:a3:07:14:d7:fa:18:63: 54:6b:34:19:1d:cd:af:cb:c2:31:03:c9:57:e2:8c:f8:01:6c: f1:fe:ba:78:72:b5:1a:4d:cb:9b:b3:68:50:13:5c:94:75:45: 28:1e:94:a1:87:94:5a:7e:5a:04:7e:db:6e:6b:e5:f8:18:ea: e2:75:37:05:f2:9a:d2:25:27:48:0e:4d:eb:d8:5e:69:91:22: ab:b2:92:3c:24:66:98:10:3c:e4:a0:f9:ee:bd:e2:e1:f2:cf: e2:67:2c:0a:e5:34:a7:7f:46:fe:1c:59:f9:35:aa:6a:4b:28: b7:19:6b:aa:9d:fd:bb:9a:10:eb:40:97:6d:66:33:c4:ba:83: d6:26:d5:1c:91:95:84:68:7c:59:9c:99:0a:7b:c2:df:59:01: 4b:1a:5c:8f:66:7e:91:35:91:13:62:cf:9d:12:ac:36:20:1b: ba:91:c7:37:fc:1f:2f:3f:a5:11:62:dc:04:b3:c4:cf:95:4e: 32:44:2d:8d:a1:ea:8b:c6:a2:99:fe:4e:f8:d9:7b:0a:29:43: 58:f4:5e:28:12:80:7d:39:2a:ca:72:90:23:8c:62:cc:2e:b5: 44:99:b1:85 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbLSyHfrXHWqC5GgK4k45id8tAu4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZFOTI0NjcyOTBGOUUxOTAwNzI1ODVDMTA0NTI1MUQ2 RjhCMDVBMzAeFw0yNTEwMTgwNzU3MjVaFw0yNTEwMjExMTQwMjVaMDMxMTAvBgNV BAMTKDM3MUZDRkZFODE1MDZGQ0MzRUJGQTQ2QkFFMjNENTMwRDZBQTY2QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkUSfl5hT/pssy26b/T24J0H3h i3mtA6pzJuqt44lMUFtEsieJ/ImkRzgJjoVfwPj5hAZqarNkIygc6lgMVy/154FB lM1y0V2OvV+XEM/jJ/WBxdYYGmb3XizlOovSeVPZYJu96MA/aZj5hPWJitcQXeYv w2desk4Hhhi3jKcjlciOyMG5cPYH4OLfb0I7vNuHgSK28VcJRwfxIEcVUhDLCy3c pcFWZpbG8+Rqjlq7B3ctw0kzydN5e/KN6xwl4H9oeAX5MgFqhg6GRcce7zt3aJPU m0x3paJh9gO0yU/OkkuEd6iKjAC83Ne1yzmMy3YIa1WQY1J/Wry1rpSrAsvFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNx/P/oFQb8w+v6RrriPVMNaqZqcwHwYDVR0j BBgwFoAU3+kkZykPnhkAclhcEEUlHW+LBaMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YzQ1NzRlMi0zYjk0LTQxNjAtOGViOC04ZjA5YWFkODJjMmMvMC9ERkU5MjQ2NzI5 MEY5RTE5MDA3MjU4NUMxMDQ1MjUxRDZGOEIwNUEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREZFOTI0NjcyOTBGOUUxOTAwNzI1ODVDMTA0NTI1MUQ2RjhC MDVBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmM0NTc0ZTItM2I5NC00MTYwLThl YjgtOGYwOWFhZDgyYzJjLzAvREZFOTI0NjcyOTBGOUUxOTAwNzI1ODVDMTA0NTI1 MUQ2RjhCMDVBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEQBt3lJPL982Nd3cgIpxzWeruZ0T+qaFZmq S8/dowcU1/oYY1RrNBkdza/LwjEDyVfijPgBbPH+unhytRpNy5uzaFATXJR1RSge lKGHlFp+WgR+225r5fgY6uJ1NwXymtIlJ0gOTevYXmmRIquykjwkZpgQPOSg+e69 4uHyz+JnLArlNKd/Rv4cWfk1qmpLKLcZa6qd/buaEOtAl21mM8S6g9Ym1RyRlYRo fFmcmQp7wt9ZAUsaXI9mfpE1kRNiz50SrDYgG7qRxzf8Hy8/pRFi3ASzxM+VTjJE LY2h6ovGopn+TvjZewopQ1j0XigSgH05KspykCOMYswutUSZsYU= -----END CERTIFICATE-----Generated at Mon Oct 20 11:59:37 2025 by rpki-client