$ rpki-client -vvf repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft File: DFE92467290F9E190072585C1045251D6F8B05A3.mft (raw, json) Hash identifier: zUsD9ofE38VVHZGUXAI95TK2JiFWv2IxHHILcw/QO04= Subject key identifier: 19:09:10:57:CE:08:59:25:DF:A0:20:25:B5:30:09:69:B7:6B:5C:9F Authority key identifier: DF:E9:24:67:29:0F:9E:19:00:72:58:5C:10:45:25:1D:6F:8B:05:A3 Certificate issuer: /CN=DFE92467290F9E190072585C1045251D6F8B05A3 Certificate serial: 763E4A1F75166A341D53C23353D1E7DCBD1112FD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFE92467290F9E190072585C1045251D6F8B05A3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft Manifest number: 021B Signing time: Sun 20 Jul 2025 15:42:20 +0000 Manifest this update: Sun 20 Jul 2025 15:37:20 +0000 Manifest next update: Wed 23 Jul 2025 23:31:20 +0000 Files and hashes: 1: 3130332e3138352e35322e302f32332d3234203d3e20313339343536.roa (hash: haaSHQN0sWh09iak7Jfz/FWXF5gl4JL5L2Lm/giP904=) 2: DFE92467290F9E190072585C1045251D6F8B05A3.crl (hash: V8JUD1xHu1Trx0PBy2VGnH+9w5gE7fZv9c4Z0OjwvG0=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.crl rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFE92467290F9E190072585C1045251D6F8B05A3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 23:31:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:3e:4a:1f:75:16:6a:34:1d:53:c2:33:53:d1:e7:dc:bd:11:12:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFE92467290F9E190072585C1045251D6F8B05A3 Validity Not Before: Jul 20 15:37:20 2025 GMT Not After : Jul 23 23:31:20 2025 GMT Subject: CN=19091057CE085925DFA02025B5300969B76B5C9F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:65:fd:54:51:6b:b1:67:b4:f9:08:32:1d:eb: 46:22:b5:3c:c4:c4:01:6e:dc:50:b1:65:9d:11:08: 84:bc:ad:e1:1a:25:01:76:ea:01:f9:81:fd:f5:2a: 56:df:90:53:0d:cb:a7:33:91:c0:d0:70:da:a2:de: 00:a7:ac:e3:37:23:48:bb:e9:07:7f:00:ec:a2:a3: 65:9d:d2:96:0a:38:e7:51:43:4a:5c:f5:d7:da:28: 14:c3:49:9e:78:9d:57:48:b4:c7:d2:80:17:33:06: 59:f0:57:c5:92:52:85:6c:43:d3:a1:bf:a9:e5:b8: ed:bb:19:84:64:9d:4f:c2:77:21:e7:ad:bc:a7:ff: da:5d:2e:4a:2c:22:f7:f8:76:c3:e7:d3:f8:b0:a3: 23:30:4f:d7:ad:33:8f:8e:38:c0:82:d1:74:06:7e: 80:fd:5f:cc:69:b2:52:1d:f5:19:c1:53:f4:5c:e1: ad:f2:df:92:de:08:ff:41:3a:7d:b4:98:71:77:e8: e4:1a:89:bc:e1:68:fa:3c:07:55:57:88:df:77:e1: 77:83:90:40:cc:f8:7b:f7:de:89:d5:41:12:64:74: c7:c2:9f:07:8b:69:e2:ab:a5:7d:04:ef:0d:d4:0b: 97:77:68:6d:79:d4:6d:f4:e7:25:8a:3f:18:38:98: c5:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:09:10:57:CE:08:59:25:DF:A0:20:25:B5:30:09:69:B7:6B:5C:9F X509v3 Authority Key Identifier: keyid:DF:E9:24:67:29:0F:9E:19:00:72:58:5C:10:45:25:1D:6F:8B:05:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFE92467290F9E190072585C1045251D6F8B05A3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c4574e2-3b94-4160-8eb8-8f09aad82c2c/0/DFE92467290F9E190072585C1045251D6F8B05A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:f9:c2:8d:4c:fd:6b:e5:33:80:f0:02:a8:16:65:ea:41:79: fe:80:3b:e8:2d:fc:41:e9:d2:48:0c:ad:00:3c:9f:e8:44:6e: 8c:c1:bc:a2:2f:5b:8f:f4:51:6c:b6:41:32:1f:3c:aa:ed:bd: a5:20:91:5b:09:f3:94:29:bd:5d:91:a5:69:85:3e:f7:1c:80: 49:04:23:75:77:6c:e9:1f:20:a4:81:59:a5:ef:9d:bd:92:1d: 93:db:06:fc:63:23:b3:d5:f0:a3:96:64:78:95:a4:98:b2:d5: ba:42:7f:39:2d:e6:f4:4e:49:09:fb:a6:60:a2:5b:b5:28:a6: b7:49:48:30:ed:74:e2:0b:42:4b:d6:85:65:26:c2:e1:aa:d1: 5f:b3:5a:e0:2a:1b:1e:29:61:2d:20:66:27:67:30:1c:d3:16: 80:7a:e1:e8:55:5f:a2:4c:8e:de:bc:66:c1:8c:ea:cd:11:25: 72:68:fc:cd:88:7a:e3:d6:e9:67:c6:74:b4:b2:86:39:55:bc: 0e:73:fc:75:23:30:6d:9d:ee:35:77:6d:cc:07:4e:c1:10:c0: 67:91:3b:67:92:3c:63:80:d0:9b:ba:3d:98:c2:6f:b2:4a:2b: 37:0e:c0:b7:4f:af:6d:76:35:5c:e9:58:73:25:c3:07:d2:35: 74:05:66:3b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdj5KH3UWajQdU8IzU9Hn3L0REv0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZFOTI0NjcyOTBGOUUxOTAwNzI1ODVDMTA0NTI1MUQ2 RjhCMDVBMzAeFw0yNTA3MjAxNTM3MjBaFw0yNTA3MjMyMzMxMjBaMDMxMTAvBgNV BAMTKDE5MDkxMDU3Q0UwODU5MjVERkEwMjAyNUI1MzAwOTY5Qjc2QjVDOUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyZf1UUWuxZ7T5CDId60YitTzE xAFu3FCxZZ0RCIS8reEaJQF26gH5gf31KlbfkFMNy6czkcDQcNqi3gCnrOM3I0i7 6Qd/AOyio2Wd0pYKOOdRQ0pc9dfaKBTDSZ54nVdItMfSgBczBlnwV8WSUoVsQ9Oh v6nluO27GYRknU/CdyHnrbyn/9pdLkosIvf4dsPn0/iwoyMwT9etM4+OOMCC0XQG foD9X8xpslId9RnBU/Rc4a3y35LeCP9BOn20mHF36OQaibzhaPo8B1VXiN934XeD kEDM+Hv33onVQRJkdMfCnweLaeKrpX0E7w3UC5d3aG151G305yWKPxg4mMVxAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUGQkQV84IWSXfoCAltTAJabdrXJ8wHwYDVR0j BBgwFoAU3+kkZykPnhkAclhcEEUlHW+LBaMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 YzQ1NzRlMi0zYjk0LTQxNjAtOGViOC04ZjA5YWFkODJjMmMvMC9ERkU5MjQ2NzI5 MEY5RTE5MDA3MjU4NUMxMDQ1MjUxRDZGOEIwNUEzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREZFOTI0NjcyOTBGOUUxOTAwNzI1ODVDMTA0NTI1MUQ2RjhC MDVBMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNmM0NTc0ZTItM2I5NC00MTYwLThl YjgtOGYwOWFhZDgyYzJjLzAvREZFOTI0NjcyOTBGOUUxOTAwNzI1ODVDMTA0NTI1 MUQ2RjhCMDVBMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABz5wo1M/WvlM4DwAqgWZepBef6AO+gt/EHp 0kgMrQA8n+hEbozBvKIvW4/0UWy2QTIfPKrtvaUgkVsJ85QpvV2RpWmFPvccgEkE I3V3bOkfIKSBWaXvnb2SHZPbBvxjI7PV8KOWZHiVpJiy1bpCfzkt5vROSQn7pmCi W7UoprdJSDDtdOILQkvWhWUmwuGq0V+zWuAqGx4pYS0gZidnMBzTFoB64ehVX6JM jt68ZsGM6s0RJXJo/M2IeuPW6WfGdLSyhjlVvA5z/HUjMG2d7jV3bcwHTsEQwGeR O2eSPGOA0Ju6PZjCb7JKKzcOwLdPr212NVzpWHMlwwfSNXQFZjs= -----END CERTIFICATE-----Generated at Mon Jul 21 18:06:03 2025 by rpki-client