$ rpki-client -vvf repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft File: DF3717861F6521730921F11365C5A826CFF24DAA.mft (raw, json) Hash identifier: ol+GfAC/75huuux3heXSVLrat9w/qJfccIcVvJQcf1Q= Subject key identifier: E5:53:8A:73:8D:BB:CD:93:DE:18:26:FB:5E:25:3A:28:BC:C0:F6:61 Authority key identifier: DF:37:17:86:1F:65:21:73:09:21:F1:13:65:C5:A8:26:CF:F2:4D:AA Certificate issuer: /CN=DF3717861F6521730921F11365C5A826CFF24DAA Certificate serial: 5E53590023DEED560D175031E013F4AE307EDF28 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft Manifest number: 0102 Signing time: Wed 06 Aug 2025 09:30:00 +0000 Manifest this update: Wed 06 Aug 2025 09:25:00 +0000 Manifest next update: Sat 09 Aug 2025 19:12:00 +0000 Files and hashes: 1: DF3717861F6521730921F11365C5A826CFF24DAA.crl (hash: i1f5ffgtxx4PmmCgqEwzYrcjPcHJrdmSRVf+mRjNieY=) 2: 323030313a6466333a356263303a3a2f34382d3438203d3e20313532303832.roa (hash: CPvUwm70xz0Zan3lOCIYHo9DBeIR2F+H1Vf/c92c+cs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.crl rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 19:12:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:53:59:00:23:de:ed:56:0d:17:50:31:e0:13:f4:ae:30:7e:df:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF3717861F6521730921F11365C5A826CFF24DAA Validity Not Before: Aug 6 09:25:00 2025 GMT Not After : Aug 9 19:12:00 2025 GMT Subject: CN=E5538A738DBBCD93DE1826FB5E253A28BCC0F661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:fb:e7:0b:0b:50:7e:6c:d8:85:97:ec:93:02: 83:a9:48:f5:f3:f1:ba:16:01:6d:0e:c4:61:60:b0: 6e:71:f4:97:75:7f:b6:41:d9:b4:2e:d6:db:08:45: 25:19:c1:cf:ee:41:75:49:30:0a:e0:a5:19:41:2d: 88:c5:7c:99:f9:b9:2c:88:1e:72:dd:32:f3:ca:66: f4:77:bf:ed:66:cb:33:06:ff:11:3b:c8:a3:5d:c3: 64:d5:27:81:78:d2:34:35:25:28:46:7f:ae:0b:f3: 56:0b:e1:a2:99:ba:62:ad:48:5a:a7:2b:bd:cf:6f: 1d:bf:a2:a8:63:ff:cb:78:cb:ac:8b:6a:e6:36:b0: ea:13:bb:2c:d7:9d:b7:ba:35:b2:ac:ae:64:87:d9: d5:02:48:82:94:f3:20:4f:b7:68:05:88:43:1f:77: 4f:e3:d0:45:26:1d:06:c3:5e:fb:ca:2c:0a:4d:92: bc:7d:03:59:c4:f4:bb:67:38:e9:53:6f:85:0f:6f: bc:63:ab:91:df:21:4b:b7:f2:2e:f1:74:29:8a:0c: 7b:9a:2f:50:7d:21:b1:16:fb:ac:b1:40:1b:e8:a7: 8b:29:3c:2f:70:7c:d8:fd:8b:1a:18:ad:79:9c:0b: 7d:55:94:7a:d0:34:ef:c3:0a:44:41:ae:a8:0f:8b: f5:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:53:8A:73:8D:BB:CD:93:DE:18:26:FB:5E:25:3A:28:BC:C0:F6:61 X509v3 Authority Key Identifier: keyid:DF:37:17:86:1F:65:21:73:09:21:F1:13:65:C5:A8:26:CF:F2:4D:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:fe:79:ef:54:c4:13:8e:76:a5:4a:5a:7e:57:1e:f3:ad:98: 58:61:cc:d2:d6:67:3b:0c:eb:70:28:a3:0b:3e:06:28:1b:e8: 93:16:ba:6b:3f:a0:5a:9b:7c:b4:89:d9:0a:1b:f2:f9:13:2a: d7:3f:6e:bd:40:d4:87:81:f1:79:df:cb:81:d6:85:6d:c1:aa: 32:78:f7:3d:4a:08:b2:fa:5e:10:81:4b:43:61:8e:c7:d2:3a: 9a:bd:e5:e4:0e:e2:c0:23:3b:2b:d6:92:9c:06:ba:4d:91:45: d5:60:a1:7f:10:a6:43:d7:8b:6d:cd:d5:58:06:be:6b:d5:30: 8b:fc:b3:42:18:0e:26:5d:c6:54:9f:e9:f7:7e:a8:b0:d1:29: df:d5:5c:9d:dd:1a:43:32:eb:6f:76:0c:2d:22:c0:76:8d:d0: b0:46:c1:5d:02:28:68:c1:09:be:14:cf:6e:f8:bf:cc:a1:49: ca:40:a2:8d:df:dd:38:53:21:2a:fb:7d:7a:6f:1b:84:51:b8: 47:8d:6a:4f:90:31:79:d8:41:aa:1c:a3:c7:03:d9:71:fe:e1: c3:85:70:11:2f:d5:5c:5b:82:21:bb:00:ca:d1:4b:60:15:59: 80:bd:42:42:33:56:1d:49:76:45:51:10:c8:0c:a9:bc:74:26: e7:49:2d:b1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXlNZACPe7VYNF1Ax4BP0rjB+3ygwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYzNzE3ODYxRjY1MjE3MzA5MjFGMTEzNjVDNUE4MjZD RkYyNERBQTAeFw0yNTA4MDYwOTI1MDBaFw0yNTA4MDkxOTEyMDBaMDMxMTAvBgNV BAMTKEU1NTM4QTczOERCQkNEOTNERTE4MjZGQjVFMjUzQTI4QkNDMEY2NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI++cLC1B+bNiFl+yTAoOpSPXz 8boWAW0OxGFgsG5x9Jd1f7ZB2bQu1tsIRSUZwc/uQXVJMArgpRlBLYjFfJn5uSyI HnLdMvPKZvR3v+1myzMG/xE7yKNdw2TVJ4F40jQ1JShGf64L81YL4aKZumKtSFqn K73Pbx2/oqhj/8t4y6yLauY2sOoTuyzXnbe6NbKsrmSH2dUCSIKU8yBPt2gFiEMf d0/j0EUmHQbDXvvKLApNkrx9A1nE9LtnOOlTb4UPb7xjq5HfIUu38i7xdCmKDHua L1B9IbEW+6yxQBvop4spPC9wfNj9ixoYrXmcC31VlHrQNO/DCkRBrqgPi/UDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5VOKc427zZPeGCb7XiU6KLzA9mEwHwYDVR0j BBgwFoAU3zcXhh9lIXMJIfETZcWoJs/yTaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NDdjZDVhMi1hNzQyLTQ1MGMtYjE5MC01MDBlNzU0NTIwZGUvMS9ERjM3MTc4NjFG NjUyMTczMDkyMUYxMTM2NUM1QTgyNkNGRjI0REFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREYzNzE3ODYxRjY1MjE3MzA5MjFGMTEzNjVDNUE4MjZDRkYy NERBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTQ3Y2Q1YTItYTc0Mi00NTBjLWIx OTAtNTAwZTc1NDUyMGRlLzEvREYzNzE3ODYxRjY1MjE3MzA5MjFGMTEzNjVDNUE4 MjZDRkYyNERBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKj+ee9UxBOOdqVKWn5XHvOtmFhhzNLWZzsM 63Aoows+Bigb6JMWums/oFqbfLSJ2Qob8vkTKtc/br1A1IeB8Xnfy4HWhW3BqjJ4 9z1KCLL6XhCBS0NhjsfSOpq95eQO4sAjOyvWkpwGuk2RRdVgoX8QpkPXi23N1VgG vmvVMIv8s0IYDiZdxlSf6fd+qLDRKd/VXJ3dGkMy6292DC0iwHaN0LBGwV0CKGjB Cb4Uz274v8yhScpAoo3f3ThTISr7fXpvG4RRuEeNak+QMXnYQaoco8cD2XH+4cOF cBEv1VxbgiG7AMrRS2AVWYC9QkIzVh1JdkVREMgMqbx0JudJLbE= -----END CERTIFICATE-----Generated at Thu Aug 7 05:01:52 2025 by rpki-client