$ rpki-client -vvf repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.mft File: DE4325727D17555F6DABCC72788E361C741D47CF.mft (raw, json) Hash identifier: LMVm2EQRs+a6+mzIq7RWnF99W0XY0svvxzP2DUummjc= Subject key identifier: 4D:8C:C5:4C:20:A3:DF:E0:CC:04:BD:10:C2:57:AC:6B:72:1D:50:1B Authority key identifier: DE:43:25:72:7D:17:55:5F:6D:AB:CC:72:78:8E:36:1C:74:1D:47:CF Certificate issuer: /CN=DE4325727D17555F6DABCC72788E361C741D47CF Certificate serial: 2C084F8ACDFAABB1347B2567D2CA0AA3C2D4CD31 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE4325727D17555F6DABCC72788E361C741D47CF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.mft Manifest number: 01AF Signing time: Sat 19 Jul 2025 07:40:03 +0000 Manifest this update: Sat 19 Jul 2025 07:35:03 +0000 Manifest next update: Tue 22 Jul 2025 18:28:03 +0000 Files and hashes: 1: DE4325727D17555F6DABCC72788E361C741D47CF.crl (hash: /rdd3PKJMezD/WDx7wFqVkGJGD8YGIUl932CEXf2piQ=) 2: 3130332e3135352e32342e302f32342d3234203d3e20313431303734.roa (hash: frVX3KU+95dnNdoEu8zY99nlhl5o8DK8rzkyAoketnM=) 3: 3130332e3135352e32342e302f32332d3233203d3e20313431303734.roa (hash: 6aU9uz5CHHldU1HIevUJsAf5erVKI657uWFvNEr+ic0=) 4: 3130332e3135352e32352e302f32342d3234203d3e20313431303734.roa (hash: G51YluNBJVnWJJLUM3oLTxL1SDaPjGOTZwYfGpp2BCE=) 5: 323430363a363263303a3a2f33322d3332203d3e20313431303734.roa (hash: 2Lk6auTAFU1KMFXNa9pRSBxyYyKqC713tFzsVGAw9EU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.crl rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE4325727D17555F6DABCC72788E361C741D47CF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 18:28:03 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:08:4f:8a:cd:fa:ab:b1:34:7b:25:67:d2:ca:0a:a3:c2:d4:cd:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DE4325727D17555F6DABCC72788E361C741D47CF Validity Not Before: Jul 19 07:35:03 2025 GMT Not After : Jul 22 18:28:03 2025 GMT Subject: CN=4D8CC54C20A3DFE0CC04BD10C257AC6B721D501B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:2a:9f:e8:10:23:59:22:47:f2:d2:4b:a1:8a: 77:9f:f0:17:a4:3a:20:2d:43:26:dd:e9:b8:b5:ff: 20:e8:78:1e:1f:33:41:b6:ac:2f:93:a8:62:7c:31: bc:a8:b4:c9:b2:b3:84:a5:0c:ab:92:58:7f:16:54: b9:93:18:cf:b6:e5:50:ad:ab:7a:a4:6d:52:48:ed: 1b:28:59:e4:e7:75:b0:d4:f9:21:2a:4b:79:6d:53: 76:a2:9d:5b:94:fd:60:1e:a8:8b:45:fc:d9:61:79: 56:62:a0:52:c8:3e:81:50:69:bb:b5:fe:2b:a8:4b: 60:a4:31:09:6b:83:e3:45:b8:d6:2c:d5:71:7f:3d: be:98:49:a2:c0:5b:76:88:80:e5:46:a6:01:d2:84: 16:24:ae:82:e7:a0:08:a7:02:98:31:67:be:8a:01: e7:10:6b:fd:c5:17:74:47:34:1c:75:cf:48:87:76: c2:d5:50:d6:78:8f:c3:f8:6e:b1:bd:b8:7d:20:bf: c9:6b:98:43:83:f6:6d:e4:f4:f0:21:fa:6d:c7:82: 23:1b:48:bc:4b:b8:57:b4:00:0a:31:9c:19:24:6c: 3d:67:d5:64:c4:ab:a9:f7:4c:44:d0:bc:a5:b5:05: ac:0a:94:5f:17:5b:6b:06:b6:45:82:09:79:bf:9d: 72:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:8C:C5:4C:20:A3:DF:E0:CC:04:BD:10:C2:57:AC:6B:72:1D:50:1B X509v3 Authority Key Identifier: keyid:DE:43:25:72:7D:17:55:5F:6D:AB:CC:72:78:8E:36:1C:74:1D:47:CF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DE4325727D17555F6DABCC72788E361C741D47CF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/907608ce-c3f8-44eb-aee7-b784ae20c9c7/0/DE4325727D17555F6DABCC72788E361C741D47CF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:b3:e7:b1:25:ff:d7:16:48:aa:3f:82:9a:81:18:f0:aa:fd: 5d:a5:4f:7f:ec:b7:a9:6a:3c:28:99:cb:6a:c4:e9:ca:d4:6f: 16:c0:60:61:58:ac:d6:79:2b:e5:0a:79:67:fa:0f:24:b7:24: 85:84:2a:84:e8:c6:c8:17:2f:ee:55:55:72:8c:d3:b4:e8:9b: f3:c7:83:a9:e7:b1:34:08:2e:77:2d:fe:07:2b:75:25:e0:4e: 9b:b5:cb:cd:15:fa:ec:79:93:04:52:65:8e:49:b8:37:71:18: 44:4c:95:86:fb:8c:f8:09:e8:37:ea:42:bb:6c:43:a1:ad:58: 2d:34:db:6d:b8:88:4a:5a:a8:2a:c1:7e:98:4a:eb:db:2c:3c: 28:37:cc:89:24:21:c3:01:0f:e7:b2:47:f7:8c:42:37:2f:0f: d4:7a:ec:bc:1a:38:eb:bc:0a:09:13:a2:a0:98:c2:af:65:83: 06:d0:52:f9:3e:5a:f0:34:75:66:7b:10:dc:0f:df:d4:89:6d: af:ce:ab:81:46:47:6a:bf:f8:c1:0b:47:5f:83:f8:31:63:3a: ab:a2:d8:08:82:c1:eb:19:c1:5a:51:fc:97:57:b4:2e:4b:37: 60:94:67:4d:2d:a0:16:a8:e4:7b:a9:1a:e4:3f:d5:21:19:2f: 38:f2:8e:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULAhPis36q7E0eyVn0soKo8LUzTEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREU0MzI1NzI3RDE3NTU1RjZEQUJDQzcyNzg4RTM2MUM3 NDFENDdDRjAeFw0yNTA3MTkwNzM1MDNaFw0yNTA3MjIxODI4MDNaMDMxMTAvBgNV BAMTKDREOENDNTRDMjBBM0RGRTBDQzA0QkQxMEMyNTdBQzZCNzIxRDUwMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVKp/oECNZIkfy0kuhinef8Bek OiAtQybd6bi1/yDoeB4fM0G2rC+TqGJ8MbyotMmys4SlDKuSWH8WVLmTGM+25VCt q3qkbVJI7RsoWeTndbDU+SEqS3ltU3ainVuU/WAeqItF/NlheVZioFLIPoFQabu1 /iuoS2CkMQlrg+NFuNYs1XF/Pb6YSaLAW3aIgOVGpgHShBYkroLnoAinApgxZ76K AecQa/3FF3RHNBx1z0iHdsLVUNZ4j8P4brG9uH0gv8lrmEOD9m3k9PAh+m3HgiMb SLxLuFe0AAoxnBkkbD1n1WTEq6n3TETQvKW1BawKlF8XW2sGtkWCCXm/nXKnAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTYzFTCCj3+DMBL0Qwlesa3IdUBswHwYDVR0j BBgwFoAU3kMlcn0XVV9tq8xyeI42HHQdR88wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MDc2MDhjZS1jM2Y4LTQ0ZWItYWVlNy1iNzg0YWUyMGM5YzcvMC9ERTQzMjU3MjdE MTc1NTVGNkRBQkNDNzI3ODhFMzYxQzc0MUQ0N0NGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREU0MzI1NzI3RDE3NTU1RjZEQUJDQzcyNzg4RTM2MUM3NDFE NDdDRi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTA3NjA4Y2UtYzNmOC00NGViLWFl ZTctYjc4NGFlMjBjOWM3LzAvREU0MzI1NzI3RDE3NTU1RjZEQUJDQzcyNzg4RTM2 MUM3NDFENDdDRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKyz57El/9cWSKo/gpqBGPCq/V2lT3/st6lq PCiZy2rE6crUbxbAYGFYrNZ5K+UKeWf6DyS3JIWEKoToxsgXL+5VVXKM07Tom/PH g6nnsTQILnct/gcrdSXgTpu1y80V+ux5kwRSZY5JuDdxGERMlYb7jPgJ6DfqQrts Q6GtWC002224iEpaqCrBfphK69ssPCg3zIkkIcMBD+eyR/eMQjcvD9R67LwaOOu8 CgkToqCYwq9lgwbQUvk+WvA0dWZ7ENwP39SJba/Oq4FGR2q/+MELR1+D+DFjOqui 2AiCwesZwVpR/JdXtC5LN2CUZ00toBao5HupGuQ/1SEZLzjyjpY= -----END CERTIFICATE-----Generated at Mon Jul 21 18:11:06 2025 by rpki-client