$ rpki-client -vvf repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft File: DF3717861F6521730921F11365C5A826CFF24DAA.mft (raw, json) Hash identifier: yzv3OMkAIdU25jxNDwmWPCfl/ySn1BZK0AC2AFgGPgQ= Subject key identifier: 0C:D6:E3:04:11:9F:49:09:16:10:1A:DE:4E:5C:F8:B1:34:D9:18:B9 Authority key identifier: DF:37:17:86:1F:65:21:73:09:21:F1:13:65:C5:A8:26:CF:F2:4D:AA Certificate issuer: /CN=DF3717861F6521730921F11365C5A826CFF24DAA Certificate serial: 2756344B5D9356CCD2A2F540A6AF2E6EB04EF2EE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft Manifest number: D8 Signing time: Sun 04 May 2025 04:50:00 +0000 Manifest this update: Sun 04 May 2025 04:45:00 +0000 Manifest next update: Wed 07 May 2025 13:37:00 +0000 Files and hashes: 1: 323030313a6466333a356263303a3a2f34382d3438203d3e20313532303832.roa (hash: CPvUwm70xz0Zan3lOCIYHo9DBeIR2F+H1Vf/c92c+cs=) 2: DF3717861F6521730921F11365C5A826CFF24DAA.crl (hash: DpFEBMR35NkAE2DhywSIIbAMfwfhDHHmMoBa/2s5ojA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.crl rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 07 May 2025 13:37:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:56:34:4b:5d:93:56:cc:d2:a2:f5:40:a6:af:2e:6e:b0:4e:f2:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF3717861F6521730921F11365C5A826CFF24DAA Validity Not Before: May 4 04:45:00 2025 GMT Not After : May 7 13:37:00 2025 GMT Subject: CN=0CD6E304119F490916101ADE4E5CF8B134D918B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:bf:22:6f:ae:9f:29:fd:41:68:b8:4b:8c:0f: f4:4c:91:21:09:07:74:dc:37:da:d1:6c:00:ca:c0: 8d:64:a9:e9:5f:75:30:18:45:1f:b6:9d:e7:f6:9d: d1:ed:00:59:84:85:1d:b0:ed:b2:02:05:24:f8:72: b1:33:53:4f:83:77:91:a2:18:8c:19:e1:72:3b:b3: 5b:05:91:04:63:d1:1e:42:9b:64:30:02:15:cf:ea: 72:50:85:8b:e4:df:c0:70:65:ae:52:c1:c5:8b:59: 6b:67:a2:fa:8d:31:84:40:55:0c:9a:5a:f0:f4:44: 78:c3:f9:2c:89:a7:63:38:81:1a:b3:b2:58:c2:5b: 86:9b:75:99:c6:97:92:5e:5b:cc:49:c7:74:6e:ef: bd:70:eb:d8:3b:1e:fe:6b:65:8f:9e:44:0b:b2:3b: 1f:0a:64:c6:6c:60:65:4d:5e:f5:7e:90:2f:c4:c4: 53:6d:a0:b6:33:29:9c:44:c6:d2:11:f5:58:24:55: 87:ea:26:e4:14:f6:4e:38:53:5b:b9:ef:84:41:7d: dc:6d:62:81:f4:f6:e0:22:9c:5e:f8:25:51:11:cf: 7b:b7:00:10:d0:7f:22:31:ba:f1:d4:ef:3e:8c:84: 8f:b8:3c:15:e1:f7:25:7a:7b:2d:c8:c6:7e:50:91: ff:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:D6:E3:04:11:9F:49:09:16:10:1A:DE:4E:5C:F8:B1:34:D9:18:B9 X509v3 Authority Key Identifier: keyid:DF:37:17:86:1F:65:21:73:09:21:F1:13:65:C5:A8:26:CF:F2:4D:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:d7:9a:c7:37:38:58:ae:6d:ea:08:f5:c1:1b:33:85:53:48: b2:71:72:ae:b0:61:44:29:7d:3f:65:48:26:3f:43:8b:5b:22: 8d:3f:c7:c7:54:44:5f:84:9d:5f:3b:00:72:c8:a1:d8:19:91: 46:b6:c5:e8:4a:a8:7c:f4:d9:ea:73:0c:49:3e:3e:85:38:1a: fa:09:2f:41:ea:d2:4d:6c:04:a2:ca:86:11:6f:b5:2d:f2:c6: b1:d7:74:88:3c:b8:96:61:8d:a9:bf:3f:1b:7b:24:a4:f5:d2: 54:42:65:49:78:07:0d:4c:1f:5e:3c:b4:f9:36:00:8e:ee:96: cc:23:73:3e:5a:e8:0f:54:d8:c7:ee:29:d7:96:c5:27:a9:bd: 9b:c1:e2:77:96:12:b2:51:12:37:c1:4e:0c:d1:d4:13:bc:3a: 1a:e3:08:13:c1:96:bc:67:80:89:f7:35:a8:ee:3e:1c:d7:9f: 48:94:67:b4:c9:6c:7d:d8:50:77:c9:53:e1:33:62:d5:a6:ab: 83:e6:d2:ac:cb:20:06:e1:8e:ce:1e:34:28:b8:37:21:c5:84: f1:42:9a:3f:65:7a:1b:28:36:f4:20:38:33:f8:95:e6:79:49: 98:f5:80:54:6c:52:cb:33:64:cc:80:b0:ae:e5:f7:12:84:ac: b8:40:50:0c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJ1Y0S12TVszSovVApq8ubrBO8u4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYzNzE3ODYxRjY1MjE3MzA5MjFGMTEzNjVDNUE4MjZD RkYyNERBQTAeFw0yNTA1MDQwNDQ1MDBaFw0yNTA1MDcxMzM3MDBaMDMxMTAvBgNV BAMTKDBDRDZFMzA0MTE5RjQ5MDkxNjEwMUFERTRFNUNGOEIxMzREOTE4QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnvyJvrp8p/UFouEuMD/RMkSEJ B3TcN9rRbADKwI1kqelfdTAYRR+2nef2ndHtAFmEhR2w7bICBST4crEzU0+Dd5Gi GIwZ4XI7s1sFkQRj0R5Cm2QwAhXP6nJQhYvk38BwZa5SwcWLWWtnovqNMYRAVQya WvD0RHjD+SyJp2M4gRqzsljCW4abdZnGl5JeW8xJx3Ru771w69g7Hv5rZY+eRAuy Ox8KZMZsYGVNXvV+kC/ExFNtoLYzKZxExtIR9VgkVYfqJuQU9k44U1u574RBfdxt YoH09uAinF74JVERz3u3ABDQfyIxuvHU7z6MhI+4PBXh9yV6ey3Ixn5Qkf+ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDNbjBBGfSQkWEBreTlz4sTTZGLkwHwYDVR0j BBgwFoAU3zcXhh9lIXMJIfETZcWoJs/yTaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NDdjZDVhMi1hNzQyLTQ1MGMtYjE5MC01MDBlNzU0NTIwZGUvMS9ERjM3MTc4NjFG NjUyMTczMDkyMUYxMTM2NUM1QTgyNkNGRjI0REFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREYzNzE3ODYxRjY1MjE3MzA5MjFGMTEzNjVDNUE4MjZDRkYy NERBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTQ3Y2Q1YTItYTc0Mi00NTBjLWIx OTAtNTAwZTc1NDUyMGRlLzEvREYzNzE3ODYxRjY1MjE3MzA5MjFGMTEzNjVDNUE4 MjZDRkYyNERBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADjXmsc3OFiubeoI9cEbM4VTSLJxcq6wYUQp fT9lSCY/Q4tbIo0/x8dURF+EnV87AHLIodgZkUa2xehKqHz02epzDEk+PoU4GvoJ L0Hq0k1sBKLKhhFvtS3yxrHXdIg8uJZhjam/Pxt7JKT10lRCZUl4Bw1MH148tPk2 AI7ulswjcz5a6A9U2MfuKdeWxSepvZvB4neWErJREjfBTgzR1BO8OhrjCBPBlrxn gIn3NajuPhzXn0iUZ7TJbH3YUHfJU+EzYtWmq4Pm0qzLIAbhjs4eNCi4NyHFhPFC mj9lehsoNvQgODP4leZ5SZj1gFRsUsszZMyAsK7l9xKErLhAUAw= -----END CERTIFICATE-----Generated at Tue May 6 23:18:23 2025 by rpki-client