$ rpki-client -vvf repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft File: DF3717861F6521730921F11365C5A826CFF24DAA.mft (raw, json) Hash identifier: 263y16cdLIRKWM3/hKR+RFP87ldn9G3hWO8uhpgR3Z0= Subject key identifier: 48:92:A7:21:08:5E:05:52:A7:83:4A:D4:72:12:54:7C:10:8D:27:8C Authority key identifier: DF:37:17:86:1F:65:21:73:09:21:F1:13:65:C5:A8:26:CF:F2:4D:AA Certificate issuer: /CN=DF3717861F6521730921F11365C5A826CFF24DAA Certificate serial: 4A287D90C08DAA3FE17BF3511E0CD645FEC7F114 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft Manifest number: 0109 Signing time: Thu 21 Aug 2025 16:10:00 +0000 Manifest this update: Thu 21 Aug 2025 16:05:00 +0000 Manifest next update: Sun 24 Aug 2025 22:33:00 +0000 Files and hashes: 1: 323030313a6466333a356263303a3a2f34382d3438203d3e20313532303832.roa (hash: CPvUwm70xz0Zan3lOCIYHo9DBeIR2F+H1Vf/c92c+cs=) 2: DF3717861F6521730921F11365C5A826CFF24DAA.crl (hash: yKUHc//RBsVtbXbqVmxGNB0EKlLsiEYJqoD+OQWszRA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.crl rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 22:33:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:28:7d:90:c0:8d:aa:3f:e1:7b:f3:51:1e:0c:d6:45:fe:c7:f1:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF3717861F6521730921F11365C5A826CFF24DAA Validity Not Before: Aug 21 16:05:00 2025 GMT Not After : Aug 24 22:33:00 2025 GMT Subject: CN=4892A721085E0552A7834AD47212547C108D278C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:e6:db:42:a7:87:40:5f:ee:38:45:57:69:96: 6d:66:57:52:7c:b2:05:1d:dc:87:ad:bc:d3:35:97: 65:25:00:b1:99:8b:79:4c:95:d7:69:fe:fc:95:ef: f6:67:9c:83:1f:d0:78:d9:63:c9:85:9e:be:95:ab: 9a:a3:be:8e:04:71:d2:d9:82:68:a5:14:2c:ad:17: 56:d7:42:1f:3d:27:03:93:1a:35:33:cb:c3:da:89: 96:57:22:70:d0:79:84:b7:2c:a8:25:e4:e2:fe:6c: ad:cb:cf:e3:48:b6:5c:4a:68:34:8d:95:7d:6d:05: 17:25:3e:d4:d9:83:9a:08:d8:f3:7a:43:f4:76:87: e4:ee:53:5c:ad:44:8e:0c:a9:e0:2f:18:31:17:85: 52:39:78:fc:44:b8:7b:44:3f:18:e5:aa:7f:07:af: 27:b3:3a:1b:cc:dd:0e:ee:fb:dd:35:b2:d9:e8:0e: cc:e3:1b:2a:9b:a5:95:97:e9:95:9e:bc:17:f5:8e: 57:15:5a:62:2e:a1:d0:1c:e2:47:9a:3f:64:11:95: 61:4d:4f:1b:9c:b4:ea:e3:f7:47:a8:97:47:ab:c0: ac:61:9e:3b:a7:a3:b6:80:d3:30:82:6c:48:96:fc: b6:d5:3f:16:4e:89:1f:2e:b1:72:34:21:aa:eb:8c: 03:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:92:A7:21:08:5E:05:52:A7:83:4A:D4:72:12:54:7C:10:8D:27:8C X509v3 Authority Key Identifier: keyid:DF:37:17:86:1F:65:21:73:09:21:F1:13:65:C5:A8:26:CF:F2:4D:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:bf:9d:2a:d4:a3:cb:29:90:51:52:4c:86:ed:97:0e:e0:c8: e6:bf:67:cd:89:09:8a:7c:35:07:a2:3c:6d:3f:db:d0:30:26: 1d:12:71:85:cf:4f:46:a2:b2:07:94:50:81:be:70:2b:c2:61: 83:13:b9:6f:3c:19:4d:6d:1d:84:db:28:d0:3f:12:f3:6c:37: be:15:fd:99:fe:b2:e9:88:e7:62:8c:ee:9f:e9:09:2f:09:bf: f4:3b:db:d8:59:69:24:a0:b6:d3:4f:c9:dc:b2:13:53:01:a4: 39:1a:b2:28:fa:09:eb:45:ea:2c:0e:1d:28:06:99:ac:56:97: 26:14:cb:ab:a3:d8:6e:9e:da:51:07:94:d9:c1:06:de:4b:cf: 0b:88:a2:d7:75:9c:11:a2:fb:ed:15:1b:c7:74:5c:4a:08:e6: b2:45:18:01:76:30:aa:08:50:28:fb:32:bf:22:0a:92:b8:7d: 50:01:59:47:24:fd:7a:21:a1:26:91:d9:d9:a8:4e:be:e6:c1: ca:33:d6:7f:41:b6:59:9f:22:dd:a4:3d:01:07:8b:93:db:22: a6:90:c1:4b:58:26:76:d1:09:00:cd:33:46:37:5f:41:a1:85: 96:73:9c:2b:73:fb:10:a4:33:99:d2:dd:0b:91:5c:b7:72:cf: a7:54:b3:8b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSih9kMCNqj/he/NRHgzWRf7H8RQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYzNzE3ODYxRjY1MjE3MzA5MjFGMTEzNjVDNUE4MjZD RkYyNERBQTAeFw0yNTA4MjExNjA1MDBaFw0yNTA4MjQyMjMzMDBaMDMxMTAvBgNV BAMTKDQ4OTJBNzIxMDg1RTA1NTJBNzgzNEFENDcyMTI1NDdDMTA4RDI3OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS5ttCp4dAX+44RVdplm1mV1J8 sgUd3IetvNM1l2UlALGZi3lMlddp/vyV7/ZnnIMf0HjZY8mFnr6Vq5qjvo4EcdLZ gmilFCytF1bXQh89JwOTGjUzy8PaiZZXInDQeYS3LKgl5OL+bK3Lz+NItlxKaDSN lX1tBRclPtTZg5oI2PN6Q/R2h+TuU1ytRI4MqeAvGDEXhVI5ePxEuHtEPxjlqn8H ryezOhvM3Q7u+901stnoDszjGyqbpZWX6ZWevBf1jlcVWmIuodAc4keaP2QRlWFN TxuctOrj90eol0erwKxhnjuno7aA0zCCbEiW/LbVPxZOiR8usXI0IarrjANlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSJKnIQheBVKng0rUchJUfBCNJ4wwHwYDVR0j BBgwFoAU3zcXhh9lIXMJIfETZcWoJs/yTaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NDdjZDVhMi1hNzQyLTQ1MGMtYjE5MC01MDBlNzU0NTIwZGUvMS9ERjM3MTc4NjFG NjUyMTczMDkyMUYxMTM2NUM1QTgyNkNGRjI0REFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREYzNzE3ODYxRjY1MjE3MzA5MjFGMTEzNjVDNUE4MjZDRkYy NERBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTQ3Y2Q1YTItYTc0Mi00NTBjLWIx OTAtNTAwZTc1NDUyMGRlLzEvREYzNzE3ODYxRjY1MjE3MzA5MjFGMTEzNjVDNUE4 MjZDRkYyNERBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAS/nSrUo8spkFFSTIbtlw7gyOa/Z82JCYp8 NQeiPG0/29AwJh0ScYXPT0aisgeUUIG+cCvCYYMTuW88GU1tHYTbKNA/EvNsN74V /Zn+sumI52KM7p/pCS8Jv/Q729hZaSSgttNPydyyE1MBpDkasij6CetF6iwOHSgG maxWlyYUy6uj2G6e2lEHlNnBBt5LzwuIotd1nBGi++0VG8d0XEoI5rJFGAF2MKoI UCj7Mr8iCpK4fVABWUck/XohoSaR2dmoTr7mwcoz1n9BtlmfIt2kPQEHi5PbIqaQ wUtYJnbRCQDNM0Y3X0GhhZZznCtz+xCkM5nS3QuRXLdyz6dUs4s= -----END CERTIFICATE-----Generated at Sat Aug 23 15:38:01 2025 by rpki-client