$ rpki-client -vvf repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft File: DF3717861F6521730921F11365C5A826CFF24DAA.mft (raw, json) Hash identifier: b0JmkUDzMhPKXyED2UMuitKViaPV+LVgN4PjVCwhZ5Q= Subject key identifier: F0:41:AC:7F:23:9A:F2:96:CE:E1:10:81:4D:31:73:62:F1:25:AB:16 Authority key identifier: DF:37:17:86:1F:65:21:73:09:21:F1:13:65:C5:A8:26:CF:F2:4D:AA Certificate issuer: /CN=DF3717861F6521730921F11365C5A826CFF24DAA Certificate serial: 720C022AEBB7C7033D3F12D030C49E799F99802D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft Manifest number: F1 Signing time: Sun 29 Jun 2025 08:00:00 +0000 Manifest this update: Sun 29 Jun 2025 07:55:00 +0000 Manifest next update: Wed 02 Jul 2025 08:04:00 +0000 Files and hashes: 1: DF3717861F6521730921F11365C5A826CFF24DAA.crl (hash: V13yTD/mKtQ1C0mRvCEr8zfmkj4AA9Q98nxY150jnT8=) 2: 323030313a6466333a356263303a3a2f34382d3438203d3e20313532303832.roa (hash: CPvUwm70xz0Zan3lOCIYHo9DBeIR2F+H1Vf/c92c+cs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.crl rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:0c:02:2a:eb:b7:c7:03:3d:3f:12:d0:30:c4:9e:79:9f:99:80:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF3717861F6521730921F11365C5A826CFF24DAA Validity Not Before: Jun 29 07:55:00 2025 GMT Not After : Jul 2 08:04:00 2025 GMT Subject: CN=F041AC7F239AF296CEE110814D317362F125AB16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:d3:eb:ad:2d:c6:4e:f9:23:b6:3d:7f:98:35: 2a:3e:83:b6:47:9a:85:52:b4:15:d4:b9:6c:05:c9: d1:f8:a2:dc:25:92:48:06:f5:1e:4f:93:bb:b3:e0: 1a:77:3a:99:2d:05:00:74:fe:3c:f5:d8:da:0d:ef: db:ae:58:07:c2:a7:a6:cc:ca:3c:72:7d:98:47:7b: 94:63:12:44:00:f1:43:b1:46:b0:4a:cd:34:d7:19: 87:80:5e:18:51:0d:d0:04:4a:86:12:54:c3:24:f7: ec:77:9d:09:dc:8e:d0:80:c6:6d:c8:74:5e:ba:f8: 71:1b:f7:95:e6:8d:5f:40:5a:db:80:cf:d7:68:36: 76:a6:8c:02:9d:1a:e3:05:e6:f4:f2:dc:39:98:c6: f6:91:76:31:39:a5:31:8a:cc:5e:a8:d9:33:d4:04: ca:21:00:86:2d:39:e0:1e:1f:6f:d9:d2:54:e5:36: 42:00:72:b3:b9:8b:f0:55:f8:8f:de:fa:18:9f:a2: b9:b0:47:c6:e5:14:b4:8b:c3:5a:27:ff:a2:18:ed: 5c:86:5b:fb:96:d4:bd:9a:78:f9:43:77:6c:d7:83: 0e:32:3e:6f:49:b9:95:79:83:05:a7:7b:fd:21:85: 9a:04:95:00:74:9f:4e:5d:1a:57:23:ad:9b:9c:4e: a5:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:41:AC:7F:23:9A:F2:96:CE:E1:10:81:4D:31:73:62:F1:25:AB:16 X509v3 Authority Key Identifier: keyid:DF:37:17:86:1F:65:21:73:09:21:F1:13:65:C5:A8:26:CF:F2:4D:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:e9:0e:88:0d:fd:7f:60:ab:b8:da:81:7e:86:d8:85:af:f1: 6a:7b:f1:af:e1:e1:31:35:d2:a1:e9:e0:40:ad:aa:e4:f4:18: 07:bf:c1:9f:2b:71:b5:1f:3d:24:20:af:a2:3b:bd:9e:03:87: 18:14:0b:09:86:ab:dd:e5:7d:b2:64:c4:31:c5:10:c7:22:c8: 0b:43:16:04:51:b8:cd:f2:38:90:5f:1b:98:ce:f1:5f:82:2a: 04:87:e0:40:7f:89:2c:f9:ec:89:c5:c7:5a:54:36:89:13:aa: 90:86:ce:f5:c3:16:91:b5:44:65:b3:e9:ef:cc:95:54:95:ad: 5b:86:38:60:e1:ed:95:92:f2:a1:d9:71:64:73:76:03:69:65: bb:0f:08:1b:ea:62:6e:1f:f7:f3:93:f8:8d:2a:22:42:10:f9: b9:e8:1d:01:72:5c:d6:27:98:95:3f:be:cb:c7:30:62:a1:ff: 92:a3:b8:4d:1d:8e:f7:d2:26:69:d5:0e:e1:b8:89:70:ee:3c: 55:95:f0:a9:e9:fb:3d:54:19:5b:3f:91:e5:65:08:7b:4a:2c: 74:07:30:1d:fb:8a:2b:c8:cb:43:e0:40:29:ef:b4:b0:06:7a: 01:ac:bb:bf:20:c1:66:ad:05:a2:ef:23:3b:b0:a0:09:0e:ed: fa:b3:22:9b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUcgwCKuu3xwM9PxLQMMSeeZ+ZgC0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYzNzE3ODYxRjY1MjE3MzA5MjFGMTEzNjVDNUE4MjZD RkYyNERBQTAeFw0yNTA2MjkwNzU1MDBaFw0yNTA3MDIwODA0MDBaMDMxMTAvBgNV BAMTKEYwNDFBQzdGMjM5QUYyOTZDRUUxMTA4MTREMzE3MzYyRjEyNUFCMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/0+utLcZO+SO2PX+YNSo+g7ZH moVStBXUuWwFydH4otwlkkgG9R5Pk7uz4Bp3OpktBQB0/jz12NoN79uuWAfCp6bM yjxyfZhHe5RjEkQA8UOxRrBKzTTXGYeAXhhRDdAESoYSVMMk9+x3nQncjtCAxm3I dF66+HEb95XmjV9AWtuAz9doNnamjAKdGuMF5vTy3DmYxvaRdjE5pTGKzF6o2TPU BMohAIYtOeAeH2/Z0lTlNkIAcrO5i/BV+I/e+hiformwR8blFLSLw1on/6IY7VyG W/uW1L2aePlDd2zXgw4yPm9JuZV5gwWne/0hhZoElQB0n05dGlcjrZucTqXjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU8EGsfyOa8pbO4RCBTTFzYvElqxYwHwYDVR0j BBgwFoAU3zcXhh9lIXMJIfETZcWoJs/yTaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NDdjZDVhMi1hNzQyLTQ1MGMtYjE5MC01MDBlNzU0NTIwZGUvMS9ERjM3MTc4NjFG NjUyMTczMDkyMUYxMTM2NUM1QTgyNkNGRjI0REFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREYzNzE3ODYxRjY1MjE3MzA5MjFGMTEzNjVDNUE4MjZDRkYy NERBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTQ3Y2Q1YTItYTc0Mi00NTBjLWIx OTAtNTAwZTc1NDUyMGRlLzEvREYzNzE3ODYxRjY1MjE3MzA5MjFGMTEzNjVDNUE4 MjZDRkYyNERBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABnpDogN/X9gq7jagX6G2IWv8Wp78a/h4TE1 0qHp4ECtquT0GAe/wZ8rcbUfPSQgr6I7vZ4DhxgUCwmGq93lfbJkxDHFEMciyAtD FgRRuM3yOJBfG5jO8V+CKgSH4EB/iSz57InFx1pUNokTqpCGzvXDFpG1RGWz6e/M lVSVrVuGOGDh7ZWS8qHZcWRzdgNpZbsPCBvqYm4f9/OT+I0qIkIQ+bnoHQFyXNYn mJU/vsvHMGKh/5KjuE0djvfSJmnVDuG4iXDuPFWV8Knp+z1UGVs/keVlCHtKLHQH MB37iivIy0PgQCnvtLAGegGsu78gwWatBaLvIzuwoAkO7fqzIps= -----END CERTIFICATE-----Generated at Sun Jun 29 19:17:48 2025 by rpki-client