$ rpki-client -vvf repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.mft File: DF19949CE17DC116E7B7C2248C933405B7A1AEF2.mft (raw, json) Hash identifier: sUlyUo1slmkcjPs6RHaPGe3c9eHK9CbixesDpQPggSQ= Subject key identifier: BC:E6:CC:05:54:55:34:5F:4D:0A:F6:C5:C3:B9:19:E8:04:EA:A9:EB Authority key identifier: DF:19:94:9C:E1:7D:C1:16:E7:B7:C2:24:8C:93:34:05:B7:A1:AE:F2 Certificate issuer: /CN=DF19949CE17DC116E7B7C2248C933405B7A1AEF2 Certificate serial: 0EED41CB19852B060D1E8F7B096994B47B3DC611 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.mft Manifest number: 0235 Signing time: Mon 04 Aug 2025 16:21:59 +0000 Manifest this update: Mon 04 Aug 2025 16:16:59 +0000 Manifest next update: Thu 07 Aug 2025 18:30:59 +0000 Files and hashes: 1: 3130332e3136362e3233342e302f32342d3234203d3e20313430343037.roa (hash: sMfIE/u5AzCpsIXByAsN/oEvGS84+QQDQwr2MsQjPBU=) 2: DF19949CE17DC116E7B7C2248C933405B7A1AEF2.crl (hash: tz44HgyBbyhD6cd3JgMjL+cr0q6yFAcZto7NunqNNqU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.crl rsync://repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 Aug 2025 18:30:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:ed:41:cb:19:85:2b:06:0d:1e:8f:7b:09:69:94:b4:7b:3d:c6:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF19949CE17DC116E7B7C2248C933405B7A1AEF2 Validity Not Before: Aug 4 16:16:59 2025 GMT Not After : Aug 7 18:30:59 2025 GMT Subject: CN=BCE6CC055455345F4D0AF6C5C3B919E804EAA9EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7f:ed:39:28:45:20:49:db:ce:fe:8d:85:6f: 31:88:aa:ff:36:2c:b1:aa:52:1e:0e:b1:5a:74:37: 2d:68:ea:c7:0e:7e:41:ed:73:16:76:74:60:d2:fd: a5:c1:51:80:5d:64:09:34:bf:af:87:4c:9c:c1:d4: be:cc:a3:1b:9a:d4:09:c5:a5:50:ea:49:e8:e6:90: cb:56:38:92:10:16:2b:5d:df:b3:b9:cc:42:98:5a: 03:bb:da:75:26:49:ea:90:18:03:47:28:48:75:5a: 72:c3:e7:21:50:d9:a3:71:58:86:6b:10:5a:d0:1a: a8:72:06:cf:5f:bb:bf:7f:1d:dd:d5:d7:0b:63:5c: db:3e:e3:63:01:e1:6c:5a:f5:cd:4c:45:80:6d:02: a5:f2:0c:89:5b:0c:08:c6:8d:e9:0d:26:3d:da:4a: c1:22:7b:0f:ff:20:c0:2b:f9:c8:bc:19:3a:28:b4: eb:34:7e:37:ea:4a:7a:1b:b6:c5:2a:07:9c:8e:ca: 52:df:75:99:98:3e:b3:09:6c:c5:89:87:0c:e0:93: f6:11:0a:16:38:db:bc:08:a9:8b:b2:46:23:71:ad: 78:28:1a:81:c2:77:62:21:d2:61:56:b5:de:de:80: 25:93:02:9e:6b:05:a5:08:5b:49:45:b5:05:b5:c9: 9f:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:E6:CC:05:54:55:34:5F:4D:0A:F6:C5:C3:B9:19:E8:04:EA:A9:EB X509v3 Authority Key Identifier: keyid:DF:19:94:9C:E1:7D:C1:16:E7:B7:C2:24:8C:93:34:05:B7:A1:AE:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:ee:f2:20:91:84:42:e4:e3:f7:2f:2e:f5:72:8c:b3:10:e1: 11:31:89:9e:58:e6:f6:c4:6f:1e:fe:ba:9c:a6:e1:7c:d0:1c: 35:37:39:86:af:c9:18:28:85:6b:94:2b:59:da:22:16:74:54: 55:0e:d0:e5:cc:3a:b9:aa:e1:1b:e0:b9:d2:7a:60:e1:eb:31: a7:80:15:7e:7a:26:73:c0:06:d6:df:0a:95:97:70:a7:df:82: b9:e9:49:4b:df:f3:fa:35:82:7e:d0:7c:5c:31:bd:bb:46:d0: 34:30:5b:3b:ff:35:25:a9:74:f8:47:a6:5d:f5:72:ba:cd:99: 27:55:a1:34:4d:52:02:f7:43:68:47:93:c0:5b:af:14:31:00: 7d:3b:7f:3b:9a:5d:b9:68:87:c8:da:65:9b:a8:d4:f3:fd:d7: 73:1e:b6:45:70:3a:2e:c5:0a:b5:e8:68:d0:e6:3a:03:2b:6e: b3:a2:6e:66:b2:c7:73:0e:7d:58:2a:60:4c:cd:e5:a8:b6:22: 26:28:1d:30:05:76:33:1d:31:8f:3f:d1:4e:1f:26:a7:4c:72: 24:76:36:84:4d:dc:57:13:ba:74:04:27:b5:b4:f6:35:bd:a4: 80:0f:6f:44:36:5a:55:44:46:25:9e:aa:c5:87:57:f2:04:2e: 99:17:d4:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDu1ByxmFKwYNHo97CWmUtHs9xhEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYxOTk0OUNFMTdEQzExNkU3QjdDMjI0OEM5MzM0MDVC N0ExQUVGMjAeFw0yNTA4MDQxNjE2NTlaFw0yNTA4MDcxODMwNTlaMDMxMTAvBgNV BAMTKEJDRTZDQzA1NTQ1NTM0NUY0RDBBRjZDNUMzQjkxOUU4MDRFQUE5RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDf+05KEUgSdvO/o2FbzGIqv82 LLGqUh4OsVp0Ny1o6scOfkHtcxZ2dGDS/aXBUYBdZAk0v6+HTJzB1L7Moxua1AnF pVDqSejmkMtWOJIQFitd37O5zEKYWgO72nUmSeqQGANHKEh1WnLD5yFQ2aNxWIZr EFrQGqhyBs9fu79/Hd3V1wtjXNs+42MB4Wxa9c1MRYBtAqXyDIlbDAjGjekNJj3a SsEiew//IMAr+ci8GTootOs0fjfqSnobtsUqB5yOylLfdZmYPrMJbMWJhwzgk/YR ChY427wIqYuyRiNxrXgoGoHCd2Ih0mFWtd7egCWTAp5rBaUIW0lFtQW1yZ9DAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvObMBVRVNF9NCvbFw7kZ6ATqqeswHwYDVR0j BBgwFoAU3xmUnOF9wRbnt8IkjJM0BbehrvIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YWVmNzg2Yi02MjI2LTQ0YWYtODUyZC0xZmIwNDVjNGRlYjMvMC9ERjE5OTQ5Q0Ux N0RDMTE2RTdCN0MyMjQ4QzkzMzQwNUI3QTFBRUYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREYxOTk0OUNFMTdEQzExNkU3QjdDMjI0OEM5MzM0MDVCN0Ex QUVGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2FlZjc4NmItNjIyNi00NGFmLTg1 MmQtMWZiMDQ1YzRkZWIzLzAvREYxOTk0OUNFMTdEQzExNkU3QjdDMjI0OEM5MzM0 MDVCN0ExQUVGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAL3u8iCRhELk4/cvLvVyjLMQ4RExiZ5Y5vbE bx7+upym4XzQHDU3OYavyRgohWuUK1naIhZ0VFUO0OXMOrmq4RvgudJ6YOHrMaeA FX56JnPABtbfCpWXcKffgrnpSUvf8/o1gn7QfFwxvbtG0DQwWzv/NSWpdPhHpl31 crrNmSdVoTRNUgL3Q2hHk8BbrxQxAH07fzuaXbloh8jaZZuo1PP913MetkVwOi7F CrXoaNDmOgMrbrOibmayx3MOfVgqYEzN5ai2IiYoHTAFdjMdMY8/0U4fJqdMciR2 NoRN3FcTunQEJ7W09jW9pIAPb0Q2WlVERiWeqsWHV/IELpkX1F4= -----END CERTIFICATE-----Generated at Wed Aug 6 05:49:47 2025 by rpki-client