$ rpki-client -vvf repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.mft File: DEF44331E724964F28697DEABAF2313CDCEEFACE.mft (raw, json) Hash identifier: qd9DWnKUQ2vE6JI0h2ZTXjvVGWI0huV5IAckCTETl48= Subject key identifier: 85:23:F9:B8:27:5F:FC:EC:2C:1F:B1:CC:84:A3:C9:0A:9C:F6:E6:72 Authority key identifier: DE:F4:43:31:E7:24:96:4F:28:69:7D:EA:BA:F2:31:3C:DC:EE:FA:CE Certificate issuer: /CN=DEF44331E724964F28697DEABAF2313CDCEEFACE Certificate serial: 3E64AA365A53D9FE83B6857EA2B41FB399B58304 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEF44331E724964F28697DEABAF2313CDCEEFACE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.mft Manifest number: 04E3 Signing time: Sat 28 Jun 2025 23:40:55 +0000 Manifest this update: Sat 28 Jun 2025 23:35:55 +0000 Manifest next update: Wed 02 Jul 2025 10:37:55 +0000 Files and hashes: 1: DEF44331E724964F28697DEABAF2313CDCEEFACE.crl (hash: mhiINnzQ3qEXyzeC0IaK3ItYvHpuvWXbDxawmMHhRys=) 2: 3130332e3130382e3139312e302f32342d3234203d3e20313337333132.roa (hash: rUdT5hgB1MoqDtYNUlsd/H7JJhMR5l8B8KRXMe+OwOs=) 3: 323030313a6466343a316630303a3a2f34382d3438203d3e20313337333132.roa (hash: JRR7XEn+B9iX1MKG6S3DWTWk+XJaRXgwa3RueWQgr7k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.crl rsync://repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEF44331E724964F28697DEABAF2313CDCEEFACE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 07:23:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:64:aa:36:5a:53:d9:fe:83:b6:85:7e:a2:b4:1f:b3:99:b5:83:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEF44331E724964F28697DEABAF2313CDCEEFACE Validity Not Before: Jun 28 23:35:55 2025 GMT Not After : Jul 2 10:37:55 2025 GMT Subject: CN=8523F9B8275FFCEC2C1FB1CC84A3C90A9CF6E672 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:7e:20:de:c6:14:c0:e4:a8:d8:e1:60:13:70: db:f3:56:e0:7e:ac:17:9e:50:94:10:39:94:83:2c: 77:3e:5e:8c:45:c2:24:06:9d:1b:1d:6d:01:a7:b2: bb:08:78:f8:af:ce:1c:bc:64:79:16:81:94:b3:3d: 88:5b:9c:29:6c:2a:4e:61:e0:37:5d:b9:1d:9b:4e: 43:ab:9c:91:8c:cd:9d:69:b7:5f:91:13:76:52:d4: 9c:49:8b:9d:a1:6d:f9:55:03:97:bf:be:45:fe:3c: d0:0c:15:dc:f6:04:0a:19:df:6a:30:1a:2f:50:14: af:da:0f:f1:0a:65:d7:c2:3a:45:36:ff:ae:d8:49: b1:92:a4:72:40:06:7e:5f:1c:21:8a:21:18:bf:d1: 6f:1d:0c:9a:7c:87:8c:6e:36:31:c6:2f:05:f6:b0: fa:bc:52:69:15:45:2c:bf:af:40:05:26:ab:c2:a0: 5d:cf:52:98:e0:37:15:e7:6d:38:35:d2:18:ed:01: ed:5e:b1:e3:18:ea:b9:7d:ca:5a:6c:7b:d8:c5:8f: 09:af:28:6f:48:0d:b2:66:6c:e4:4c:5b:39:08:34: 48:72:f7:ee:31:ca:2d:6c:f7:2f:11:bd:31:7a:91: d8:4a:55:94:d0:f1:d0:f3:81:5c:61:66:8a:95:f6: 1c:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:23:F9:B8:27:5F:FC:EC:2C:1F:B1:CC:84:A3:C9:0A:9C:F6:E6:72 X509v3 Authority Key Identifier: keyid:DE:F4:43:31:E7:24:96:4F:28:69:7D:EA:BA:F2:31:3C:DC:EE:FA:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEF44331E724964F28697DEABAF2313CDCEEFACE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:c6:25:bd:ff:d3:cb:6f:8f:55:80:88:16:18:5a:ee:f3:79: fd:57:85:14:dc:d3:c5:aa:cb:33:db:44:50:f9:ef:bc:84:bb: 12:76:b1:94:3a:08:9e:87:05:cb:9e:c2:4c:fc:42:6e:90:38: ce:7e:67:89:91:26:ce:15:ee:ff:a4:58:73:26:ea:84:ab:24: ed:a2:34:67:f8:b4:ed:e5:d5:dc:fd:e2:7b:a4:23:08:25:a8: 9a:c3:2c:5d:42:87:89:70:49:7e:bb:2c:97:f0:c8:5b:bb:cd: 24:93:3d:23:da:4f:39:12:7d:f5:d9:58:ed:09:8e:f6:cb:d7: f7:ad:44:27:22:00:76:8e:2d:86:11:ab:02:13:d4:ef:9f:cb: be:3c:21:e9:4d:c1:b1:bf:57:60:05:3f:35:5c:cd:d6:f7:74: 38:63:a7:83:9f:60:73:ff:a7:4e:49:c4:14:9b:24:79:f8:40: 3c:78:da:75:ec:21:83:63:a9:fb:b0:77:c1:4b:47:d9:7e:d0: d0:02:9f:fd:46:bd:eb:1f:c2:50:35:28:04:63:6a:e0:9c:03: a0:26:45:93:5c:41:f9:f6:c1:17:16:e8:e0:8f:22:76:b6:68: 1c:65:8c:87:17:a3:85:b0:e2:cc:fa:c2:2b:af:f6:e9:c6:5c: dd:d0:0d:3e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPmSqNlpT2f6DtoV+orQfs5m1gwQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVGNDQzMzFFNzI0OTY0RjI4Njk3REVBQkFGMjMxM0NE Q0VFRkFDRTAeFw0yNTA2MjgyMzM1NTVaFw0yNTA3MDIxMDM3NTVaMDMxMTAvBgNV BAMTKDg1MjNGOUI4Mjc1RkZDRUMyQzFGQjFDQzg0QTNDOTBBOUNGNkU2NzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEfiDexhTA5KjY4WATcNvzVuB+ rBeeUJQQOZSDLHc+XoxFwiQGnRsdbQGnsrsIePivzhy8ZHkWgZSzPYhbnClsKk5h 4DdduR2bTkOrnJGMzZ1pt1+RE3ZS1JxJi52hbflVA5e/vkX+PNAMFdz2BAoZ32ow Gi9QFK/aD/EKZdfCOkU2/67YSbGSpHJABn5fHCGKIRi/0W8dDJp8h4xuNjHGLwX2 sPq8UmkVRSy/r0AFJqvCoF3PUpjgNxXnbTg10hjtAe1eseMY6rl9ylpse9jFjwmv KG9IDbJmbORMWzkINEhy9+4xyi1s9y8RvTF6kdhKVZTQ8dDzgVxhZoqV9hxLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhSP5uCdf/OwsH7HMhKPJCpz25nIwHwYDVR0j BBgwFoAU3vRDMecklk8oaX3quvIxPNzu+s4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MTkwYzM3ZS0yNjU1LTQyYjEtYmFmNy00MmVjMWNmMTkyYWEvMC9ERUY0NDMzMUU3 MjQ5NjRGMjg2OTdERUFCQUYyMzEzQ0RDRUVGQUNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREVGNDQzMzFFNzI0OTY0RjI4Njk3REVBQkFGMjMxM0NEQ0VF RkFDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjE5MGMzN2UtMjY1NS00MmIxLWJh ZjctNDJlYzFjZjE5MmFhLzAvREVGNDQzMzFFNzI0OTY0RjI4Njk3REVBQkFGMjMx M0NEQ0VFRkFDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIfGJb3/08tvj1WAiBYYWu7zef1XhRTc08Wq yzPbRFD577yEuxJ2sZQ6CJ6HBcuewkz8Qm6QOM5+Z4mRJs4V7v+kWHMm6oSrJO2i NGf4tO3l1dz94nukIwglqJrDLF1Ch4lwSX67LJfwyFu7zSSTPSPaTzkSffXZWO0J jvbL1/etRCciAHaOLYYRqwIT1O+fy748IelNwbG/V2AFPzVczdb3dDhjp4OfYHP/ p05JxBSbJHn4QDx42nXsIYNjqfuwd8FLR9l+0NACn/1GvesfwlA1KARjauCcA6Am RZNcQfn2wRcW6OCPIna2aBxljIcXo4Ww4sz6wiuv9unGXN3QDT4= -----END CERTIFICATE-----Generated at Sun Jun 29 18:07:50 2025 by rpki-client