$ rpki-client -vvf repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft File: DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft (raw, json) Hash identifier: dfGm7Z4xJphzVHkEHdNiJ4erZyTbob9fGtPnYuar0cM= Subject key identifier: D0:E8:03:13:67:42:71:1D:97:A6:39:F6:3A:20:1A:FB:6E:17:D1:92 Authority key identifier: DE:23:EE:57:18:0D:61:B3:92:DC:88:85:9F:E6:54:C7:A8:AC:F1:FF Certificate issuer: /CN=DE23EE57180D61B392DC88859FE654C7A8ACF1FF Certificate serial: 425BD4F4C31AFF7E300954C6B5E1F72C80C5C7D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft Manifest number: 0173 Signing time: Fri 18 Jul 2025 19:51:46 +0000 Manifest this update: Fri 18 Jul 2025 19:46:46 +0000 Manifest next update: Tue 22 Jul 2025 07:13:46 +0000 Files and hashes: 1: 3130332e3139312e3137312e302f32342d3234203d3e20313439393333.roa (hash: kEwMr1mIRZGwTHrXfoM+k+XYrDWcsMsreXoEQMVJdUg=) 2: DE23EE57180D61B392DC88859FE654C7A8ACF1FF.crl (hash: jMtZYtd2NEI2RwY+WxoWn8YyuTqnTmNSUkmfofi0j/Y=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.crl rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 07:13:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 42:5b:d4:f4:c3:1a:ff:7e:30:09:54:c6:b5:e1:f7:2c:80:c5:c7:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE23EE57180D61B392DC88859FE654C7A8ACF1FF Validity Not Before: Jul 18 19:46:46 2025 GMT Not After : Jul 22 07:13:46 2025 GMT Subject: CN=D0E803136742711D97A639F63A201AFB6E17D192 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:07:06:52:cc:b7:9a:27:c1:2c:6c:51:78:81: 0d:b6:b3:56:33:d4:27:00:04:ff:3c:61:30:bb:87: bf:75:a1:9e:8c:fa:a2:c1:cc:ee:45:d3:71:8c:ba: e1:87:16:07:63:2c:fc:37:9a:2f:f8:8a:31:79:c4: 3e:6f:bd:2a:1f:80:61:52:35:c0:7f:b3:f1:a3:10: 1d:c5:c9:33:11:0c:67:1a:2a:f4:7e:bd:97:84:2d: 46:9e:26:5d:af:8e:4f:e8:06:78:2c:2e:91:ab:1c: 48:fe:54:32:14:ae:53:0c:6e:84:b5:e1:07:4d:45: 92:65:cb:34:ba:55:58:d6:2c:38:97:80:ed:e3:4a: 1f:2e:2f:e8:74:02:ef:97:ff:e0:cb:33:1e:1c:fc: a1:72:a1:08:5c:f6:51:38:95:5b:9f:04:3e:7d:1f: 2f:1e:d3:ed:20:31:d2:ee:66:3c:a5:0e:ec:e2:5f: 2d:6a:a2:38:fb:2e:a6:29:ea:32:33:59:a7:b5:fa: 2c:64:e8:4a:42:71:9e:61:26:39:5e:56:98:51:5b: eb:2d:d9:59:8e:c4:39:b5:93:8f:62:76:6e:a3:a4: 95:19:3b:ab:de:2e:25:36:a4:20:61:7d:f3:57:a0: ba:29:4f:62:fd:48:4e:ff:2f:05:3d:2a:23:de:74: e3:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:E8:03:13:67:42:71:1D:97:A6:39:F6:3A:20:1A:FB:6E:17:D1:92 X509v3 Authority Key Identifier: keyid:DE:23:EE:57:18:0D:61:B3:92:DC:88:85:9F:E6:54:C7:A8:AC:F1:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/05c1e2f3-4fbd-44bb-83f0-bb5afe64575e/0/DE23EE57180D61B392DC88859FE654C7A8ACF1FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:e4:59:e3:3d:94:08:08:95:fb:8f:48:33:67:ea:5d:15:52: df:84:a2:35:1f:04:bf:c7:51:35:55:5d:07:08:3c:f8:33:34: 22:d7:b0:37:cc:91:fd:b9:cd:8b:86:da:af:ea:65:f1:b6:3c: d7:97:e0:0c:eb:39:be:0e:0b:26:63:7e:96:8b:23:2f:07:52: 0a:dc:ac:3f:a9:ec:f6:17:6e:50:5a:b3:f1:85:04:51:b8:4e: 5c:88:71:6f:de:dd:71:6f:ce:0b:a1:b3:d4:f7:13:7b:02:a5: 15:d9:71:dd:33:3c:95:d9:bc:6e:bf:9d:d3:e5:a7:19:f3:eb: 63:a2:52:2b:df:2a:97:b2:78:9f:81:18:8d:79:6e:75:ed:a2: f4:23:84:0a:49:18:25:f5:3c:55:ee:64:2d:4d:4b:9a:2a:65: fa:bf:c6:2b:a2:c0:bf:4c:f4:d3:94:e0:23:d1:b5:f8:c3:25: d9:8e:47:d5:87:12:0e:64:f9:b0:b5:f4:27:84:30:9a:75:cf: 04:fa:8d:25:69:bf:10:27:ec:d7:bc:14:23:93:87:ea:42:5c: 59:bc:b8:5e:3d:7a:f7:1b:f4:3a:99:08:e1:92:f3:35:82:f9: cf:a3:70:8f:3e:0f:12:97:48:0f:ad:a6:30:b9:ec:49:a8:9a: e9:7a:01:31 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQlvU9MMa/34wCVTGteH3LIDFx9gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREUyM0VFNTcxODBENjFCMzkyREM4ODg1OUZFNjU0QzdB OEFDRjFGRjAeFw0yNTA3MTgxOTQ2NDZaFw0yNTA3MjIwNzEzNDZaMDMxMTAvBgNV BAMTKEQwRTgwMzEzNjc0MjcxMUQ5N0E2MzlGNjNBMjAxQUZCNkUxN0QxOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHBwZSzLeaJ8EsbFF4gQ22s1Yz 1CcABP88YTC7h791oZ6M+qLBzO5F03GMuuGHFgdjLPw3mi/4ijF5xD5vvSofgGFS NcB/s/GjEB3FyTMRDGcaKvR+vZeELUaeJl2vjk/oBngsLpGrHEj+VDIUrlMMboS1 4QdNRZJlyzS6VVjWLDiXgO3jSh8uL+h0Au+X/+DLMx4c/KFyoQhc9lE4lVufBD59 Hy8e0+0gMdLuZjylDuziXy1qojj7LqYp6jIzWae1+ixk6EpCcZ5hJjleVphRW+st 2VmOxDm1k49idm6jpJUZO6veLiU2pCBhffNXoLopT2L9SE7/LwU9KiPedONPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0OgDE2dCcR2Xpjn2OiAa+24X0ZIwHwYDVR0j BBgwFoAU3iPuVxgNYbOS3IiFn+ZUx6is8f8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NWMxZTJmMy00ZmJkLTQ0YmItODNmMC1iYjVhZmU2NDU3NWUvMC9ERTIzRUU1NzE4 MEQ2MUIzOTJEQzg4ODU5RkU2NTRDN0E4QUNGMUZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREUyM0VFNTcxODBENjFCMzkyREM4ODg1OUZFNjU0QzdBOEFD RjFGRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDVjMWUyZjMtNGZiZC00NGJiLTgz ZjAtYmI1YWZlNjQ1NzVlLzAvREUyM0VFNTcxODBENjFCMzkyREM4ODg1OUZFNjU0 QzdBOEFDRjFGRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACTkWeM9lAgIlfuPSDNn6l0VUt+EojUfBL/H UTVVXQcIPPgzNCLXsDfMkf25zYuG2q/qZfG2PNeX4AzrOb4OCyZjfpaLIy8HUgrc rD+p7PYXblBas/GFBFG4TlyIcW/e3XFvzguhs9T3E3sCpRXZcd0zPJXZvG6/ndPl pxnz62OiUivfKpeyeJ+BGI15bnXtovQjhApJGCX1PFXuZC1NS5oqZfq/xiuiwL9M 9NOU4CPRtfjDJdmOR9WHEg5k+bC19CeEMJp1zwT6jSVpvxAn7Ne8FCOTh+pCXFm8 uF49evcb9DqZCOGS8zWC+c+jcI8+DxKXSA+tpjC57Emomul6ATE= -----END CERTIFICATE-----Generated at Sun Jul 20 21:34:35 2025 by rpki-client