$ rpki-client -vvf repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft File: DF3717861F6521730921F11365C5A826CFF24DAA.mft (raw, json) Hash identifier: J4017OF9+7oX0m632sgeLcMX4dGm7tD7GOj6Xb7GVlU= Subject key identifier: 39:5B:2C:87:53:76:46:52:D0:3D:72:28:B3:B8:18:C8:06:DB:8D:08 Authority key identifier: DF:37:17:86:1F:65:21:73:09:21:F1:13:65:C5:A8:26:CF:F2:4D:AA Certificate issuer: /CN=DF3717861F6521730921F11365C5A826CFF24DAA Certificate serial: 0DBA8BD663B8B91E7212B84F67369DEAA3EA260F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft Manifest number: 0123 Signing time: Sun 19 Oct 2025 06:20:00 +0000 Manifest this update: Sun 19 Oct 2025 06:15:00 +0000 Manifest next update: Wed 22 Oct 2025 10:29:00 +0000 Files and hashes: 1: 323030313a6466333a356263303a3a2f34382d3438203d3e20313532303832.roa (hash: CPvUwm70xz0Zan3lOCIYHo9DBeIR2F+H1Vf/c92c+cs=) 2: DF3717861F6521730921F11365C5A826CFF24DAA.crl (hash: 6JfSzOPu+6XYhhu3F8mTgz3gXQSrIHfhLYoyC5kQ/TQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.crl rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 10:29:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:ba:8b:d6:63:b8:b9:1e:72:12:b8:4f:67:36:9d:ea:a3:ea:26:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF3717861F6521730921F11365C5A826CFF24DAA Validity Not Before: Oct 19 06:15:00 2025 GMT Not After : Oct 22 10:29:00 2025 GMT Subject: CN=395B2C8753764652D03D7228B3B818C806DB8D08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:dc:aa:ce:7b:b6:38:70:8b:f6:99:e0:3c:13: 5a:dd:73:a2:79:b4:38:ca:ac:66:89:5a:61:88:98: 01:23:d4:24:9f:ad:f8:06:57:57:0b:2b:2a:fb:6d: 92:05:ca:ea:19:37:7d:c7:30:18:c2:0e:fc:b8:cd: 88:f0:d0:91:c6:c7:b7:02:76:e2:d0:ee:d4:24:7b: 95:c4:40:8b:95:60:7a:78:28:7d:40:3f:a5:3e:7d: ec:16:a8:02:59:df:e2:bf:84:6d:62:0d:7c:f0:43: 87:75:90:92:3b:02:3f:a4:82:50:44:32:6a:9e:b0: 2d:95:d6:2b:a8:f8:be:24:dc:d1:b2:aa:ef:89:4d: 8c:5d:bb:55:57:9d:1e:f1:3a:19:41:e2:82:f4:92: d6:d0:9d:d3:b1:e8:02:b2:7b:f0:8d:3d:c1:cb:47: 76:c6:7b:7c:17:d6:97:18:83:88:14:42:0b:58:81: 84:61:52:ab:a6:c3:55:96:af:55:43:9b:b8:7a:c6: ef:26:93:36:5e:08:ab:46:7f:b3:23:45:3a:d4:ef: 7b:5e:3f:8d:25:c3:3a:34:9a:0a:53:eb:08:45:48: d3:62:16:b4:61:43:92:a8:79:e3:0f:79:af:e1:86: e3:a4:5f:6b:b8:46:a7:01:f6:77:ed:4e:19:b3:e0: de:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 39:5B:2C:87:53:76:46:52:D0:3D:72:28:B3:B8:18:C8:06:DB:8D:08 X509v3 Authority Key Identifier: keyid:DF:37:17:86:1F:65:21:73:09:21:F1:13:65:C5:A8:26:CF:F2:4D:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:cb:92:8d:fa:e1:ae:66:f9:04:75:72:43:a2:dc:96:1f:aa: 79:39:d6:aa:9b:01:8f:f6:b1:8f:c1:f8:7c:7f:27:4e:ea:a4: 10:97:09:e8:18:d1:1f:29:b7:bb:9c:43:6a:fd:44:3d:37:a6: dc:f7:ce:f1:11:3a:81:a2:e4:c9:6b:37:4e:40:d4:96:0a:d0: 6b:a2:df:d8:5b:58:f9:12:c5:d1:8f:c8:ee:5a:c7:83:ac:a8: fe:cc:0a:c6:06:01:17:f8:39:7f:d9:2b:4e:d9:1a:38:f4:38: 87:fb:20:b1:be:8c:c4:5f:d7:8a:bd:2a:5d:1a:ef:c0:6d:f5: 0d:bf:48:25:9e:52:42:5f:f7:5d:70:24:24:24:9b:66:ac:ad: 16:e0:fc:60:3e:9b:2f:8b:45:52:3d:32:cb:bf:bc:db:1f:f5: e5:06:74:45:ed:26:f9:c7:75:f0:4d:27:a4:46:51:ce:e4:61: 26:f1:8d:62:3a:54:82:3f:a9:d4:62:12:9d:a3:61:ec:9f:68: 8a:b9:3a:cd:1d:9d:8b:f9:2a:7a:c5:79:5b:45:1b:82:b3:75: 6d:59:fa:f2:6e:1d:f8:4c:d3:cc:28:fd:c6:73:a2:a4:81:02: a5:d7:c9:c7:df:45:3c:91:89:47:86:fe:8c:0d:5b:39:8f:59: dd:f6:56:c3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDbqL1mO4uR5yErhPZzad6qPqJg8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYzNzE3ODYxRjY1MjE3MzA5MjFGMTEzNjVDNUE4MjZD RkYyNERBQTAeFw0yNTEwMTkwNjE1MDBaFw0yNTEwMjIxMDI5MDBaMDMxMTAvBgNV BAMTKDM5NUIyQzg3NTM3NjQ2NTJEMDNENzIyOEIzQjgxOEM4MDZEQjhEMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDn3KrOe7Y4cIv2meA8E1rdc6J5 tDjKrGaJWmGImAEj1CSfrfgGV1cLKyr7bZIFyuoZN33HMBjCDvy4zYjw0JHGx7cC duLQ7tQke5XEQIuVYHp4KH1AP6U+fewWqAJZ3+K/hG1iDXzwQ4d1kJI7Aj+kglBE MmqesC2V1iuo+L4k3NGyqu+JTYxdu1VXnR7xOhlB4oL0ktbQndOx6AKye/CNPcHL R3bGe3wX1pcYg4gUQgtYgYRhUqumw1WWr1VDm7h6xu8mkzZeCKtGf7MjRTrU73te P40lwzo0mgpT6whFSNNiFrRhQ5KoeeMPea/hhuOkX2u4RqcB9nftThmz4N4RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUOVssh1N2RlLQPXIos7gYyAbbjQgwHwYDVR0j BBgwFoAU3zcXhh9lIXMJIfETZcWoJs/yTaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NDdjZDVhMi1hNzQyLTQ1MGMtYjE5MC01MDBlNzU0NTIwZGUvMS9ERjM3MTc4NjFG NjUyMTczMDkyMUYxMTM2NUM1QTgyNkNGRjI0REFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREYzNzE3ODYxRjY1MjE3MzA5MjFGMTEzNjVDNUE4MjZDRkYy NERBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTQ3Y2Q1YTItYTc0Mi00NTBjLWIx OTAtNTAwZTc1NDUyMGRlLzEvREYzNzE3ODYxRjY1MjE3MzA5MjFGMTEzNjVDNUE4 MjZDRkYyNERBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGvLko364a5m+QR1ckOi3JYfqnk51qqbAY/2 sY/B+Hx/J07qpBCXCegY0R8pt7ucQ2r9RD03ptz3zvEROoGi5MlrN05A1JYK0Gui 39hbWPkSxdGPyO5ax4OsqP7MCsYGARf4OX/ZK07ZGjj0OIf7ILG+jMRf14q9Kl0a 78Bt9Q2/SCWeUkJf911wJCQkm2asrRbg/GA+my+LRVI9Msu/vNsf9eUGdEXtJvnH dfBNJ6RGUc7kYSbxjWI6VII/qdRiEp2jYeyfaIq5Os0dnYv5KnrFeVtFG4KzdW1Z +vJuHfhM08wo/cZzoqSBAqXXycffRTyRiUeG/owNWzmPWd32VsM= -----END CERTIFICATE-----Generated at Mon Oct 20 22:42:40 2025 by rpki-client