$ rpki-client -vvf repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft File: DF3717861F6521730921F11365C5A826CFF24DAA.mft (raw, json) Hash identifier: KBaSlK9j5d2TEa974uj5fb20NF3XqQLJTd3AFkzbLoI= Subject key identifier: 59:E6:7D:95:8C:67:C0:EB:2B:CE:8F:56:A2:5B:30:FF:1D:D3:26:2F Authority key identifier: DF:37:17:86:1F:65:21:73:09:21:F1:13:65:C5:A8:26:CF:F2:4D:AA Certificate issuer: /CN=DF3717861F6521730921F11365C5A826CFF24DAA Certificate serial: 7D6A1625572586E4A0337B733842C8E3211E5A3F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft Manifest number: 012A Signing time: Tue 04 Nov 2025 06:40:00 +0000 Manifest this update: Tue 04 Nov 2025 06:35:00 +0000 Manifest next update: Fri 07 Nov 2025 17:45:00 +0000 Files and hashes: 1: 323030313a6466333a356263303a3a2f34382d3438203d3e20313532303832.roa (hash: CPvUwm70xz0Zan3lOCIYHo9DBeIR2F+H1Vf/c92c+cs=) 2: DF3717861F6521730921F11365C5A826CFF24DAA.crl (hash: ewTU7PZRno7MXA4f72KRw7oBBdCIJICDym3OCLlQh0U=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.crl rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 17:45:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:6a:16:25:57:25:86:e4:a0:33:7b:73:38:42:c8:e3:21:1e:5a:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF3717861F6521730921F11365C5A826CFF24DAA Validity Not Before: Nov 4 06:35:00 2025 GMT Not After : Nov 7 17:45:00 2025 GMT Subject: CN=59E67D958C67C0EB2BCE8F56A25B30FF1DD3262F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:e4:3f:05:27:fa:7c:9b:8a:68:0a:02:4c:ae: 2f:1e:66:69:3a:18:39:53:19:a1:11:a3:e9:61:e7: 35:ac:80:ac:33:f4:13:e1:2a:e5:e1:cd:8f:d1:23: 26:24:64:c7:6a:c2:d0:c4:3f:3e:4a:1d:93:6d:83: 7c:3b:bd:2e:19:e0:44:44:34:24:8b:7a:da:41:46: 1c:32:cc:c3:a4:f2:24:cd:4e:33:f9:c2:01:55:61: 44:ce:22:9a:9c:39:d1:9f:e9:e1:7a:e2:75:79:88: 39:2d:0e:43:02:15:d1:9d:25:86:6a:82:13:a1:6b: 6f:70:bf:d4:24:c8:97:33:b1:9d:c2:91:53:13:f8: 85:d8:08:c9:ad:ac:18:d7:59:f1:3e:6c:8f:dc:16: 88:5f:9a:d0:4e:07:9f:35:b6:68:56:98:1f:ff:50: 03:f5:e4:69:4e:8c:75:3e:cd:dd:c2:17:4a:1b:35: 75:3b:90:b9:95:cf:4c:e2:3b:4b:23:44:b3:49:fd: 47:8e:4a:97:ff:47:62:a6:ce:f1:72:1b:2d:e4:40: 4c:a3:f6:e3:2b:5d:8e:6b:60:00:54:ff:58:10:6c: ee:8b:16:49:d4:66:0e:bb:93:fb:7e:10:59:e8:12: 0a:43:f1:08:1d:89:c6:89:d3:0f:5b:54:5e:a4:86: d0:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:E6:7D:95:8C:67:C0:EB:2B:CE:8F:56:A2:5B:30:FF:1D:D3:26:2F X509v3 Authority Key Identifier: keyid:DF:37:17:86:1F:65:21:73:09:21:F1:13:65:C5:A8:26:CF:F2:4D:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:b1:5d:e1:e2:68:eb:eb:27:ec:58:84:8e:8b:22:0d:0d:13: 37:ee:cf:1c:2a:72:6b:b6:f4:c6:c0:aa:b5:10:50:43:4a:e6: c9:7b:66:54:93:d9:7d:90:dc:7a:c7:4e:ee:3a:e6:a4:a4:26: f1:81:23:53:56:c2:b0:2c:f2:b8:34:3c:e2:bb:0c:9d:b0:4c: 10:e9:2a:8c:07:35:31:c8:bb:66:a9:75:0b:ea:cd:f9:13:40: 11:f9:ed:32:7e:bc:2f:49:31:cb:c4:d4:54:c7:1d:b8:d3:a1: 2a:5a:87:75:bd:19:f2:44:10:5a:f9:1a:0e:98:b4:1e:c6:44: 25:b1:c9:5b:93:ca:83:4a:0f:c0:02:80:d0:43:1a:fb:38:91: e2:a5:e6:b6:82:dd:5a:46:ea:77:c7:30:b2:c0:28:1f:e2:28: bf:7d:65:8d:3e:f0:ff:b0:ea:67:28:20:eb:73:f8:fd:c5:9f: 9c:c0:29:1f:34:f7:04:20:49:27:8d:2c:e9:e7:55:60:fb:ab: 5d:a0:1d:89:92:75:bd:b1:9e:f3:8f:1c:48:0b:91:f1:cd:cb: f4:8e:42:1f:3e:af:dc:04:42:d0:71:1a:5c:2d:07:b5:88:88: 79:45:fe:b6:62:f8:f2:ca:38:49:c6:0b:41:2f:9c:d0:92:50: 31:55:16:78 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfWoWJVclhuSgM3tzOELI4yEeWj8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYzNzE3ODYxRjY1MjE3MzA5MjFGMTEzNjVDNUE4MjZD RkYyNERBQTAeFw0yNTExMDQwNjM1MDBaFw0yNTExMDcxNzQ1MDBaMDMxMTAvBgNV BAMTKDU5RTY3RDk1OEM2N0MwRUIyQkNFOEY1NkEyNUIzMEZGMUREMzI2MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC75D8FJ/p8m4poCgJMri8eZmk6 GDlTGaERo+lh5zWsgKwz9BPhKuXhzY/RIyYkZMdqwtDEPz5KHZNtg3w7vS4Z4ERE NCSLetpBRhwyzMOk8iTNTjP5wgFVYUTOIpqcOdGf6eF64nV5iDktDkMCFdGdJYZq ghOha29wv9QkyJczsZ3CkVMT+IXYCMmtrBjXWfE+bI/cFohfmtBOB581tmhWmB// UAP15GlOjHU+zd3CF0obNXU7kLmVz0ziO0sjRLNJ/UeOSpf/R2KmzvFyGy3kQEyj 9uMrXY5rYABU/1gQbO6LFknUZg67k/t+EFnoEgpD8QgdicaJ0w9bVF6khtAzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWeZ9lYxnwOsrzo9Wolsw/x3TJi8wHwYDVR0j BBgwFoAU3zcXhh9lIXMJIfETZcWoJs/yTaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NDdjZDVhMi1hNzQyLTQ1MGMtYjE5MC01MDBlNzU0NTIwZGUvMS9ERjM3MTc4NjFG NjUyMTczMDkyMUYxMTM2NUM1QTgyNkNGRjI0REFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREYzNzE3ODYxRjY1MjE3MzA5MjFGMTEzNjVDNUE4MjZDRkYy NERBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTQ3Y2Q1YTItYTc0Mi00NTBjLWIx OTAtNTAwZTc1NDUyMGRlLzEvREYzNzE3ODYxRjY1MjE3MzA5MjFGMTEzNjVDNUE4 MjZDRkYyNERBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAISxXeHiaOvrJ+xYhI6LIg0NEzfuzxwqcmu2 9MbAqrUQUENK5sl7ZlST2X2Q3HrHTu465qSkJvGBI1NWwrAs8rg0POK7DJ2wTBDp KowHNTHIu2apdQvqzfkTQBH57TJ+vC9JMcvE1FTHHbjToSpah3W9GfJEEFr5Gg6Y tB7GRCWxyVuTyoNKD8ACgNBDGvs4keKl5raC3VpG6nfHMLLAKB/iKL99ZY0+8P+w 6mcoIOtz+P3Fn5zAKR809wQgSSeNLOnnVWD7q12gHYmSdb2xnvOPHEgLkfHNy/SO Qh8+r9wEQtBxGlwtB7WIiHlF/rZi+PLKOEnGC0EvnNCSUDFVFng= -----END CERTIFICATE-----Generated at Wed Nov 5 00:53:29 2025 by rpki-client