$ rpki-client -vvf repo-rpki.idnic.net/repo/31cd4a67-bc8b-4ad7-81a1-c024c5a62d30/0/DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F.mft File: DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F.mft (raw, json) Hash identifier: PVtlq6Yskyp8q0sMJUZqptDBjBvlJieTxh9i1vRDKPA= Subject key identifier: 45:E1:DD:65:53:DF:27:BF:29:32:1E:A7:A2:CE:65:0C:9B:2B:4D:4E Authority key identifier: DE:57:8F:4E:41:04:BC:0B:17:EF:2C:75:FB:0E:3A:D2:78:D2:73:8F Certificate issuer: /CN=DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F Certificate serial: 696A34E49699E19EE07F8B1EB1603AE8BDF99497 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/31cd4a67-bc8b-4ad7-81a1-c024c5a62d30/0/DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F.mft Manifest number: 01ED Signing time: Sun 20 Jul 2025 01:12:17 +0000 Manifest this update: Sun 20 Jul 2025 01:07:17 +0000 Manifest next update: Wed 23 Jul 2025 01:29:17 +0000 Files and hashes: 1: 3130332e3138362e38312e302f32342d3234203d3e20313336313235.roa (hash: e4g62pWwoA6jmsCl2EWNbqG1RW6FRJlq4B+h5MuMaQY=) 2: DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F.crl (hash: 5WkU0PXWw8ita5YaeF6DL6lOw0W5iErRh44uMzW2hdw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/31cd4a67-bc8b-4ad7-81a1-c024c5a62d30/0/DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F.crl rsync://repo-rpki.idnic.net/repo/31cd4a67-bc8b-4ad7-81a1-c024c5a62d30/0/DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 01:29:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:6a:34:e4:96:99:e1:9e:e0:7f:8b:1e:b1:60:3a:e8:bd:f9:94:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F Validity Not Before: Jul 20 01:07:17 2025 GMT Not After : Jul 23 01:29:17 2025 GMT Subject: CN=45E1DD6553DF27BF29321EA7A2CE650C9B2B4D4E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:24:b5:ff:6c:b5:eb:22:4d:56:33:fb:49:cd: d4:45:d2:c4:cd:ce:19:b9:0d:ef:60:ed:ec:7f:59: cc:ef:a8:94:79:6e:17:7c:9e:67:84:33:ad:06:64: 80:e5:9a:59:a5:49:71:46:35:d5:a2:d3:c1:8d:96: d0:6a:a7:77:8f:50:d7:8c:62:67:fe:3b:81:97:0f: eb:81:e2:3e:6f:50:b7:8e:57:c8:d6:01:f5:bf:2a: 8c:ec:89:1d:9f:06:78:ef:9b:01:fc:ea:4d:0e:96: ee:12:5b:ac:b9:02:75:b3:35:f6:fd:48:cc:ac:7b: 0c:60:e2:63:86:a2:21:00:33:27:24:7e:c1:63:35: 9e:fd:37:0c:6d:fa:10:d2:20:14:92:dd:80:e3:a0: 93:20:6a:ed:78:5f:26:b8:60:e7:81:5c:10:d5:3a: 58:a5:c2:4b:13:9a:95:60:f9:67:ba:61:d3:7d:b1: 75:66:91:cb:5b:08:cc:b2:16:45:ab:d9:54:81:57: ac:e2:71:0c:3a:99:aa:f6:36:88:4c:69:ca:44:62: f5:75:35:c1:4a:bc:27:46:90:15:3f:0e:1d:a7:fd: d7:c9:a7:e4:e3:bb:e9:a7:37:13:4f:f5:04:1f:d5: be:e4:3e:7c:86:0f:e1:e6:d7:81:9e:bd:ae:78:7f: 20:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:E1:DD:65:53:DF:27:BF:29:32:1E:A7:A2:CE:65:0C:9B:2B:4D:4E X509v3 Authority Key Identifier: keyid:DE:57:8F:4E:41:04:BC:0B:17:EF:2C:75:FB:0E:3A:D2:78:D2:73:8F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/31cd4a67-bc8b-4ad7-81a1-c024c5a62d30/0/DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/31cd4a67-bc8b-4ad7-81a1-c024c5a62d30/0/DE578F4E4104BC0B17EF2C75FB0E3AD278D2738F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:e2:a6:75:cd:06:b8:c8:44:0e:f4:f0:e7:d0:41:54:52:64: f3:9a:0b:57:75:85:4f:7b:31:0e:be:09:5b:07:e4:38:c4:2a: 93:15:cc:e8:48:d4:3a:a4:9d:0c:07:a0:d4:20:79:ff:c3:e9: 14:6e:51:12:e9:25:86:7b:ac:74:c2:eb:03:69:e7:c6:aa:ab: ab:12:10:2f:f2:75:de:c4:48:2b:29:45:a0:ac:b0:28:3e:94: bb:d6:20:87:d4:33:d6:44:42:40:0a:42:9e:dd:cd:cf:37:bf: 63:65:0a:72:94:55:ba:bb:e9:aa:88:52:ac:15:53:80:78:6b: d6:f9:b7:41:fe:15:33:c4:c1:26:cf:6f:79:04:36:be:75:2f: ca:89:8d:bb:7f:87:8a:31:bc:5c:c5:3f:e2:c9:54:0a:d4:0f: fc:72:b3:78:d6:77:eb:46:e2:b5:79:9e:90:3e:71:4b:27:5d: 77:51:2d:1f:40:5a:be:fb:59:55:e9:2d:45:0f:b1:c0:f8:8b: 83:cf:d0:d8:79:64:a7:5b:94:69:5b:c1:74:e6:d8:14:5d:65: 82:e8:66:f3:61:33:15:cc:1b:69:14:96:32:a6:54:33:02:3e: 99:c4:b3:9b:2c:e5:36:75:98:05:83:09:eb:8d:c0:b8:41:da: ea:46:87:47 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaWo05JaZ4Z7gf4sesWA66L35lJcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU1NzhGNEU0MTA0QkMwQjE3RUYyQzc1RkIwRTNBRDI3 OEQyNzM4RjAeFw0yNTA3MjAwMTA3MTdaFw0yNTA3MjMwMTI5MTdaMDMxMTAvBgNV BAMTKDQ1RTFERDY1NTNERjI3QkYyOTMyMUVBN0EyQ0U2NTBDOUIyQjRENEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDZJLX/bLXrIk1WM/tJzdRF0sTN zhm5De9g7ex/WczvqJR5bhd8nmeEM60GZIDlmlmlSXFGNdWi08GNltBqp3ePUNeM Ymf+O4GXD+uB4j5vULeOV8jWAfW/KozsiR2fBnjvmwH86k0Olu4SW6y5AnWzNfb9 SMysewxg4mOGoiEAMyckfsFjNZ79Nwxt+hDSIBSS3YDjoJMgau14Xya4YOeBXBDV OlilwksTmpVg+We6YdN9sXVmkctbCMyyFkWr2VSBV6zicQw6mar2NohMacpEYvV1 NcFKvCdGkBU/Dh2n/dfJp+Tju+mnNxNP9QQf1b7kPnyGD+Hm14Geva54fyCjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUReHdZVPfJ78pMh6nos5lDJsrTU4wHwYDVR0j BBgwFoAU3lePTkEEvAsX7yx1+w460njSc48wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z MWNkNGE2Ny1iYzhiLTRhZDctODFhMS1jMDI0YzVhNjJkMzAvMC9ERTU3OEY0RTQx MDRCQzBCMTdFRjJDNzVGQjBFM0FEMjc4RDI3MzhGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU1NzhGNEU0MTA0QkMwQjE3RUYyQzc1RkIwRTNBRDI3OEQy NzM4Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzFjZDRhNjctYmM4Yi00YWQ3LTgx YTEtYzAyNGM1YTYyZDMwLzAvREU1NzhGNEU0MTA0QkMwQjE3RUYyQzc1RkIwRTNB RDI3OEQyNzM4Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEripnXNBrjIRA708OfQQVRSZPOaC1d1hU97 MQ6+CVsH5DjEKpMVzOhI1DqknQwHoNQgef/D6RRuURLpJYZ7rHTC6wNp58aqq6sS EC/ydd7ESCspRaCssCg+lLvWIIfUM9ZEQkAKQp7dzc83v2NlCnKUVbq76aqIUqwV U4B4a9b5t0H+FTPEwSbPb3kENr51L8qJjbt/h4oxvFzFP+LJVArUD/xys3jWd+tG 4rV5npA+cUsnXXdRLR9AWr77WVXpLUUPscD4i4PP0Nh5ZKdblGlbwXTm2BRdZYLo ZvNhMxXMG2kUljKmVDMCPpnEs5ss5TZ1mAWDCeuNwLhB2upGh0c= -----END CERTIFICATE-----Generated at Mon Jul 21 03:13:37 2025 by rpki-client