$ rpki-client -vvf repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.mft File: DF19949CE17DC116E7B7C2248C933405B7A1AEF2.mft (raw, json) Hash identifier: 2ZCDbe318N929dahJ3rdz3RYNTsbe++znLLEhik0P+Q= Subject key identifier: B5:24:B5:A5:9C:01:F9:3D:E0:A6:28:87:70:29:97:17:89:B0:FF:E0 Authority key identifier: DF:19:94:9C:E1:7D:C1:16:E7:B7:C2:24:8C:93:34:05:B7:A1:AE:F2 Certificate issuer: /CN=DF19949CE17DC116E7B7C2248C933405B7A1AEF2 Certificate serial: 761A565063491129A43944BC0D8A760E4FDA64EF Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.mft Manifest number: 0230 Signing time: Thu 24 Jul 2025 04:01:53 +0000 Manifest this update: Thu 24 Jul 2025 03:56:53 +0000 Manifest next update: Sun 27 Jul 2025 05:29:53 +0000 Files and hashes: 1: DF19949CE17DC116E7B7C2248C933405B7A1AEF2.crl (hash: GimoU79RaA7O9ehdt4BsO1z2yeFMmfz1oZmkEJWY2dU=) 2: 3130332e3136362e3233342e302f32342d3234203d3e20313430343037.roa (hash: sMfIE/u5AzCpsIXByAsN/oEvGS84+QQDQwr2MsQjPBU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.crl rsync://repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 05:29:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:1a:56:50:63:49:11:29:a4:39:44:bc:0d:8a:76:0e:4f:da:64:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF19949CE17DC116E7B7C2248C933405B7A1AEF2 Validity Not Before: Jul 24 03:56:53 2025 GMT Not After : Jul 27 05:29:53 2025 GMT Subject: CN=B524B5A59C01F93DE0A628877029971789B0FFE0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:3f:68:6a:1d:18:9d:e9:13:54:e3:f7:10:87: 22:84:d3:01:97:27:be:dc:fa:9f:2d:ad:d5:9e:47: d7:14:90:8c:ce:0f:a5:28:87:f0:ab:de:82:37:f8: 5e:f8:74:69:5d:9b:10:59:4e:60:9f:96:fc:d3:10: 10:98:8f:bf:b8:a3:e8:03:1b:4b:0e:68:c6:f5:9c: 2d:b2:2d:d2:9b:0b:fc:1e:3f:66:00:6c:f5:17:c5: 4b:09:b8:bf:a0:e8:cb:2a:c9:0e:46:7f:33:aa:6b: c0:35:6b:52:90:55:14:0c:a5:4d:57:7a:86:f0:44: 1b:3a:9b:af:db:33:62:e0:62:33:df:e9:16:9d:67: 40:80:3a:d4:86:65:5f:20:21:58:fa:75:8f:32:71: 63:98:10:37:3b:9b:61:42:2a:1c:3a:f0:29:bc:f8: 7e:be:a1:c2:2e:82:3c:4a:53:ef:97:e4:30:f8:fb: b4:25:6e:c1:07:97:c5:18:c9:2e:82:4a:bf:04:47: da:a3:b1:2a:de:ca:6f:59:7c:22:24:e9:8f:55:b4: 9f:16:04:e0:f9:13:c4:3f:1b:6f:e9:e6:44:a8:8f: cd:7a:47:5a:76:0e:4f:16:9b:8b:d0:a2:7d:43:4e: 55:8b:f3:2a:d0:39:01:d5:5b:d5:35:9a:80:2d:39: 4d:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:24:B5:A5:9C:01:F9:3D:E0:A6:28:87:70:29:97:17:89:B0:FF:E0 X509v3 Authority Key Identifier: keyid:DF:19:94:9C:E1:7D:C1:16:E7:B7:C2:24:8C:93:34:05:B7:A1:AE:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:68:45:41:69:60:76:ca:ec:b3:c3:93:db:14:0e:5d:78:d6: 9b:b7:4b:7f:71:53:1c:51:b1:41:34:51:c3:d2:c9:9f:00:e0: 01:75:b3:2b:a9:61:b2:00:2f:63:9c:9e:a5:93:70:36:7f:c2: 8a:61:cc:dc:4d:eb:03:38:2b:bf:83:47:15:95:7b:9f:fe:c5: f3:c1:ae:ab:eb:fb:e3:5e:c1:06:01:25:c7:77:18:87:fa:a8: fc:8d:61:45:fb:ed:bc:f0:7f:2e:74:32:42:26:e1:33:7b:25: 88:63:82:6c:bc:c1:95:0b:a4:44:e1:4c:b9:bb:c0:11:ba:dc: 6b:d7:0f:f5:02:f2:45:24:cb:89:48:45:0e:ca:05:b1:67:8d: de:ea:2a:58:41:da:ec:93:93:54:9d:9c:d1:a1:35:18:c0:fc: 97:4e:69:5e:14:c8:9d:6f:97:2e:05:fe:78:40:18:35:44:7d: 49:77:29:b2:96:05:fe:9e:2e:0a:a8:a8:0b:8c:81:89:f5:5b: 63:02:12:71:86:93:4c:d6:6d:86:08:28:b5:fe:86:b8:0c:e6: d9:bd:9b:13:c3:45:21:8e:1f:d4:13:b6:7c:25:2f:dd:84:3f: 97:07:6d:fe:10:b0:09:23:19:43:87:5c:bd:7d:7d:3f:13:f1: 7a:b2:32:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdhpWUGNJESmkOUS8DYp2Dk/aZO8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYxOTk0OUNFMTdEQzExNkU3QjdDMjI0OEM5MzM0MDVC N0ExQUVGMjAeFw0yNTA3MjQwMzU2NTNaFw0yNTA3MjcwNTI5NTNaMDMxMTAvBgNV BAMTKEI1MjRCNUE1OUMwMUY5M0RFMEE2Mjg4NzcwMjk5NzE3ODlCMEZGRTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5P2hqHRid6RNU4/cQhyKE0wGX J77c+p8trdWeR9cUkIzOD6Uoh/Cr3oI3+F74dGldmxBZTmCflvzTEBCYj7+4o+gD G0sOaMb1nC2yLdKbC/weP2YAbPUXxUsJuL+g6MsqyQ5GfzOqa8A1a1KQVRQMpU1X eobwRBs6m6/bM2LgYjPf6RadZ0CAOtSGZV8gIVj6dY8ycWOYEDc7m2FCKhw68Cm8 +H6+ocIugjxKU++X5DD4+7QlbsEHl8UYyS6CSr8ER9qjsSreym9ZfCIk6Y9VtJ8W BOD5E8Q/G2/p5kSoj816R1p2Dk8Wm4vQon1DTlWL8yrQOQHVW9U1moAtOU2tAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUtSS1pZwB+T3gpiiHcCmXF4mw/+AwHwYDVR0j BBgwFoAU3xmUnOF9wRbnt8IkjJM0BbehrvIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YWVmNzg2Yi02MjI2LTQ0YWYtODUyZC0xZmIwNDVjNGRlYjMvMC9ERjE5OTQ5Q0Ux N0RDMTE2RTdCN0MyMjQ4QzkzMzQwNUI3QTFBRUYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREYxOTk0OUNFMTdEQzExNkU3QjdDMjI0OEM5MzM0MDVCN0Ex QUVGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2FlZjc4NmItNjIyNi00NGFmLTg1 MmQtMWZiMDQ1YzRkZWIzLzAvREYxOTk0OUNFMTdEQzExNkU3QjdDMjI0OEM5MzM0 MDVCN0ExQUVGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH1oRUFpYHbK7LPDk9sUDl141pu3S39xUxxR sUE0UcPSyZ8A4AF1syupYbIAL2OcnqWTcDZ/wophzNxN6wM4K7+DRxWVe5/+xfPB rqvr++NewQYBJcd3GIf6qPyNYUX77bzwfy50MkIm4TN7JYhjgmy8wZULpEThTLm7 wBG63GvXD/UC8kUky4lIRQ7KBbFnjd7qKlhB2uyTk1SdnNGhNRjA/JdOaV4UyJ1v ly4F/nhAGDVEfUl3KbKWBf6eLgqoqAuMgYn1W2MCEnGGk0zWbYYIKLX+hrgM5tm9 mxPDRSGOH9QTtnwlL92EP5cHbf4QsAkjGUOHXL19fT8T8XqyMrs= -----END CERTIFICATE-----Generated at Fri Jul 25 13:29:21 2025 by rpki-client