$ rpki-client -vvf repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.mft File: DF19949CE17DC116E7B7C2248C933405B7A1AEF2.mft (raw, json) Hash identifier: HYRz5gVnPyQZLsIuxC9R6tDR1p8g/Jlp61wrTwYCAmg= Subject key identifier: B5:24:C5:CA:50:C4:AD:C1:17:BD:47:6F:22:44:C4:B8:24:B0:04:4A Authority key identifier: DF:19:94:9C:E1:7D:C1:16:E7:B7:C2:24:8C:93:34:05:B7:A1:AE:F2 Certificate issuer: /CN=DF19949CE17DC116E7B7C2248C933405B7A1AEF2 Certificate serial: 3B03591C95279B646F628E13BCCB497FBF956627 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.mft Manifest number: 021F Signing time: Sun 15 Jun 2025 04:11:53 +0000 Manifest this update: Sun 15 Jun 2025 04:06:53 +0000 Manifest next update: Wed 18 Jun 2025 13:33:53 +0000 Files and hashes: 1: 3130332e3136362e3233342e302f32342d3234203d3e20313430343037.roa (hash: sMfIE/u5AzCpsIXByAsN/oEvGS84+QQDQwr2MsQjPBU=) 2: DF19949CE17DC116E7B7C2248C933405B7A1AEF2.crl (hash: fvMHo82o6xi1UhftA2Sn3IeoxkLA/1AOsnSd1zmJv30=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.crl rsync://repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 11:39:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:03:59:1c:95:27:9b:64:6f:62:8e:13:bc:cb:49:7f:bf:95:66:27 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF19949CE17DC116E7B7C2248C933405B7A1AEF2 Validity Not Before: Jun 15 04:06:53 2025 GMT Not After : Jun 18 13:33:53 2025 GMT Subject: CN=B524C5CA50C4ADC117BD476F2244C4B824B0044A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:00:ab:2c:3b:95:6a:07:41:19:cf:2d:96:db: 52:3b:56:e4:f3:f5:d7:e2:c4:49:b3:3e:f7:54:e0: 49:d3:97:6b:40:d7:68:74:c2:e2:4a:d6:60:e0:36: fc:4c:6f:60:16:c8:0c:94:58:ee:09:3f:b3:2b:ff: 0d:4e:8e:02:6d:7b:78:ed:a6:87:48:b4:cc:38:3a: 0e:ca:3a:08:ba:e7:48:a5:6d:c4:8d:78:50:84:66: ab:6a:9c:73:a1:3c:41:71:d7:0a:57:aa:1c:68:cf: 6e:54:4a:18:e4:9c:cf:7b:61:da:0f:f7:ed:89:57: 2b:08:b5:8f:29:a5:eb:25:2a:fa:9f:cc:ce:4a:3e: 5b:76:58:ef:f4:50:75:f6:58:5b:2b:a2:ef:40:55: 08:af:73:36:f8:63:3f:2f:ff:ee:1c:be:f8:a0:26: 9f:bb:7e:9d:12:9d:f3:5c:ee:76:9a:78:23:27:62: 1b:06:0c:71:de:b5:18:b1:0d:de:77:7f:2f:12:6b: 72:65:26:0b:ba:79:9b:d3:41:49:10:be:bd:f4:ae: ba:a6:0b:2e:c5:7d:75:cd:fa:86:48:c3:e3:c3:20: e0:04:71:79:82:f2:b9:a3:2d:b8:44:95:21:40:50: 91:5a:20:65:16:b6:04:e5:a9:1a:f5:ae:da:b1:d0: 2f:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:24:C5:CA:50:C4:AD:C1:17:BD:47:6F:22:44:C4:B8:24:B0:04:4A X509v3 Authority Key Identifier: keyid:DF:19:94:9C:E1:7D:C1:16:E7:B7:C2:24:8C:93:34:05:B7:A1:AE:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:91:c6:94:8e:dc:1a:13:0d:8c:2b:68:f2:9e:5d:22:94:73: 35:92:5f:56:21:ea:46:a3:51:81:9a:97:f8:37:44:f5:c4:ef: 67:70:7c:a7:26:15:2b:d5:e7:df:5a:aa:77:89:ef:23:ee:0c: f3:31:ed:0d:0b:8b:d4:38:e2:6f:5f:35:a7:41:75:25:f1:3a: 84:48:d2:9a:73:79:37:57:73:7e:85:15:d3:3d:9a:3d:30:e3: dd:99:46:37:32:4b:4a:6c:ad:f6:55:f4:44:0a:d6:7f:e4:10: 4d:6f:1e:ec:6f:a1:9f:75:83:a6:cb:9c:32:9b:7e:20:ea:bb: d5:fc:e5:26:dd:30:58:68:ce:81:ad:ed:31:91:d5:fa:24:ff: 78:42:c6:95:cc:1d:92:37:c0:7a:2a:28:47:74:b0:38:97:44: 8d:60:d9:1f:6d:d0:bc:50:c4:64:04:af:01:b4:ea:7e:c4:5f: ab:44:19:f7:7a:c4:52:2a:bb:19:67:80:32:07:73:a7:89:f2: a2:35:02:19:34:bf:81:77:a1:46:85:da:8f:4c:47:2d:82:6f: 5b:69:11:6f:c4:b4:8e:5c:4e:61:fb:90:5e:5e:62:dc:c0:87: e5:25:81:75:d9:8b:b7:e8:81:2f:56:d3:0a:78:e8:4f:fe:9d: 1d:91:57:a5 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUOwNZHJUnm2RvYo4TvMtJf7+VZicwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYxOTk0OUNFMTdEQzExNkU3QjdDMjI0OEM5MzM0MDVC N0ExQUVGMjAeFw0yNTA2MTUwNDA2NTNaFw0yNTA2MTgxMzMzNTNaMDMxMTAvBgNV BAMTKEI1MjRDNUNBNTBDNEFEQzExN0JENDc2RjIyNDRDNEI4MjRCMDA0NEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTAKssO5VqB0EZzy2W21I7VuTz 9dfixEmzPvdU4EnTl2tA12h0wuJK1mDgNvxMb2AWyAyUWO4JP7Mr/w1OjgJte3jt podItMw4Og7KOgi650ilbcSNeFCEZqtqnHOhPEFx1wpXqhxoz25UShjknM97YdoP 9+2JVysItY8ppeslKvqfzM5KPlt2WO/0UHX2WFsrou9AVQivczb4Yz8v/+4cvvig Jp+7fp0SnfNc7naaeCMnYhsGDHHetRixDd53fy8Sa3JlJgu6eZvTQUkQvr30rrqm Cy7FfXXN+oZIw+PDIOAEcXmC8rmjLbhElSFAUJFaIGUWtgTlqRr1rtqx0C9hAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtSTFylDErcEXvUdvIkTEuCSwBEowHwYDVR0j BBgwFoAU3xmUnOF9wRbnt8IkjJM0BbehrvIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YWVmNzg2Yi02MjI2LTQ0YWYtODUyZC0xZmIwNDVjNGRlYjMvMC9ERjE5OTQ5Q0Ux N0RDMTE2RTdCN0MyMjQ4QzkzMzQwNUI3QTFBRUYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREYxOTk0OUNFMTdEQzExNkU3QjdDMjI0OEM5MzM0MDVCN0Ex QUVGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2FlZjc4NmItNjIyNi00NGFmLTg1 MmQtMWZiMDQ1YzRkZWIzLzAvREYxOTk0OUNFMTdEQzExNkU3QjdDMjI0OEM5MzM0 MDVCN0ExQUVGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEmRxpSO3BoTDYwraPKeXSKUczWSX1Yh6kaj UYGal/g3RPXE72dwfKcmFSvV599aqneJ7yPuDPMx7Q0Li9Q44m9fNadBdSXxOoRI 0ppzeTdXc36FFdM9mj0w492ZRjcyS0psrfZV9EQK1n/kEE1vHuxvoZ91g6bLnDKb fiDqu9X85SbdMFhozoGt7TGR1fok/3hCxpXMHZI3wHoqKEd0sDiXRI1g2R9t0LxQ xGQErwG06n7EX6tEGfd6xFIquxlngDIHc6eJ8qI1Ahk0v4F3oUaF2o9MRy2Cb1tp EW/EtI5cTmH7kF5eYtzAh+UlgXXZi7fogS9W0wp46E/+nR2RV6U= -----END CERTIFICATE-----Generated at Sun Jun 15 15:34:19 2025 by rpki-client