$ rpki-client -vvf repo-rpki.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DFAE11418F2175A57D01D8F80A61497CC1F5306C.mft File: DFAE11418F2175A57D01D8F80A61497CC1F5306C.mft (raw, json) Hash identifier: HVIXbmlKD/7jSvPNxDQIuSeVSGlQUVJD+pTnAViM1QQ= Subject key identifier: 9C:23:36:3F:03:59:73:14:8E:40:E8:5D:6F:14:C4:36:18:80:2E:6C Authority key identifier: DF:AE:11:41:8F:21:75:A5:7D:01:D8:F8:0A:61:49:7C:C1:F5:30:6C Certificate issuer: /CN=DFAE11418F2175A57D01D8F80A61497CC1F5306C Certificate serial: 45F8D08A6267554F345F61AE2B9428695B26ACC7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFAE11418F2175A57D01D8F80A61497CC1F5306C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DFAE11418F2175A57D01D8F80A61497CC1F5306C.mft Manifest number: 033D Signing time: Sat 19 Jul 2025 13:21:26 +0000 Manifest this update: Sat 19 Jul 2025 13:16:26 +0000 Manifest next update: Tue 22 Jul 2025 14:12:26 +0000 Files and hashes: 1: 3130332e3137312e3138342e302f32342d3234203d3e20313432333734.roa (hash: 6aMZ4xs6I3z2wIHDjzXkkCFtdMcUice/aLHdynSzMx8=) 2: 3130332e3137312e3138352e302f32342d3234203d3e20313432333734.roa (hash: Un4jBswELs85PKZIKBQlwX0Wi2V6PoeRbOj08OHDeeg=) 3: DFAE11418F2175A57D01D8F80A61497CC1F5306C.crl (hash: MUViuw3rtdUOLe3N0/u/pCDT/PJnxxfzeHdmk9OoTcc=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DFAE11418F2175A57D01D8F80A61497CC1F5306C.crl rsync://repo-rpki.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DFAE11418F2175A57D01D8F80A61497CC1F5306C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFAE11418F2175A57D01D8F80A61497CC1F5306C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 14:12:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:f8:d0:8a:62:67:55:4f:34:5f:61:ae:2b:94:28:69:5b:26:ac:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFAE11418F2175A57D01D8F80A61497CC1F5306C Validity Not Before: Jul 19 13:16:26 2025 GMT Not After : Jul 22 14:12:26 2025 GMT Subject: CN=9C23363F035973148E40E85D6F14C43618802E6C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:26:7f:39:91:94:4c:e9:59:c7:5f:9a:f6:da: 74:a2:97:81:14:43:27:ed:7a:88:8e:6f:b7:54:c3: 77:00:6a:08:83:1d:a9:1a:a1:46:35:32:e0:9a:48: c0:93:c2:b2:3e:79:d6:37:10:c9:17:67:7a:aa:ce: ce:2e:3a:5d:9a:fc:41:01:75:20:4c:ce:4a:1b:3f: 0f:6e:17:c7:ef:e0:89:b5:85:a4:42:c6:9f:20:2b: 60:81:69:3d:d8:6e:ac:d6:ae:b2:08:7f:2c:48:0c: 64:79:ff:83:9a:6e:f3:68:92:8c:fe:93:9c:79:9f: 4c:3b:6c:60:9b:fb:0e:af:97:bf:8b:41:cb:5c:2e: 5a:08:d7:35:83:17:23:6f:c2:38:b3:65:8e:0b:95: f2:34:46:21:d2:09:20:cf:a6:d2:d3:61:66:eb:7b: 8c:94:7f:7a:1c:b0:c5:8e:27:9a:f6:fc:6e:1a:6f: 0d:ef:e2:c2:c9:12:4a:04:e3:97:9f:19:1f:ee:c1: 61:c1:1c:61:6f:d1:81:e3:28:5f:a5:09:f6:d4:12: 69:f4:7e:66:ea:7f:20:11:8c:be:29:2c:9c:be:29: 33:85:7f:44:1c:d6:4f:2f:20:bf:ae:bf:23:f5:ed: a3:a1:b8:85:db:55:12:9c:d8:63:35:be:6f:02:5b: 89:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:23:36:3F:03:59:73:14:8E:40:E8:5D:6F:14:C4:36:18:80:2E:6C X509v3 Authority Key Identifier: keyid:DF:AE:11:41:8F:21:75:A5:7D:01:D8:F8:0A:61:49:7C:C1:F5:30:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DFAE11418F2175A57D01D8F80A61497CC1F5306C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFAE11418F2175A57D01D8F80A61497CC1F5306C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DFAE11418F2175A57D01D8F80A61497CC1F5306C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:36:d9:a2:25:cb:2b:a1:28:55:1b:fc:20:9b:ce:b1:35:45: 42:a5:f9:24:a0:8e:f1:6f:e5:c0:75:00:f6:40:f1:36:d8:d8: 12:9d:e0:d0:e1:dc:0c:6f:38:de:d5:dc:db:94:c8:cc:5d:05: 9a:7d:59:af:72:83:5d:93:f4:f2:db:36:7c:e4:67:ea:4a:c4: c2:86:bc:fb:54:f7:bc:3b:5d:71:8e:62:92:51:94:cf:64:50: b1:e4:9d:42:8c:7c:15:eb:78:9f:2a:df:06:3c:3f:35:ca:68: 9b:24:dc:ec:b5:05:f1:c6:e0:73:61:6d:c9:70:90:92:25:e2: da:04:9c:50:e1:9d:52:2a:61:7d:f6:30:4c:d8:c5:17:34:82: 15:61:66:a6:14:6d:13:54:22:61:74:67:ef:2f:20:fc:3a:c7: 2c:05:78:87:15:32:f1:c8:4a:88:28:49:ab:20:e7:6e:c2:fb: 3f:b4:f1:c7:0b:48:2a:8c:8b:a4:4b:17:54:03:90:29:87:1e: 49:df:27:e3:c3:7b:16:ac:8b:d3:1b:76:a2:20:c5:c1:47:03: 36:14:54:55:a6:06:55:9d:9a:d3:f9:64:da:9c:b0:0d:b6:f2: 6c:bd:69:9c:cb:aa:8d:a3:6e:5c:c5:6b:2c:47:5d:31:38:7c: 48:47:6a:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURfjQimJnVU80X2GuK5QoaVsmrMcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZBRTExNDE4RjIxNzVBNTdEMDFEOEY4MEE2MTQ5N0ND MUY1MzA2QzAeFw0yNTA3MTkxMzE2MjZaFw0yNTA3MjIxNDEyMjZaMDMxMTAvBgNV BAMTKDlDMjMzNjNGMDM1OTczMTQ4RTQwRTg1RDZGMTRDNDM2MTg4MDJFNkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHJn85kZRM6VnHX5r22nSil4EU QyfteoiOb7dUw3cAagiDHakaoUY1MuCaSMCTwrI+edY3EMkXZ3qqzs4uOl2a/EEB dSBMzkobPw9uF8fv4Im1haRCxp8gK2CBaT3YbqzWrrIIfyxIDGR5/4OabvNokoz+ k5x5n0w7bGCb+w6vl7+LQctcLloI1zWDFyNvwjizZY4LlfI0RiHSCSDPptLTYWbr e4yUf3ocsMWOJ5r2/G4abw3v4sLJEkoE45efGR/uwWHBHGFv0YHjKF+lCfbUEmn0 fmbqfyARjL4pLJy+KTOFf0Qc1k8vIL+uvyP17aOhuIXbVRKc2GM1vm8CW4mDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnCM2PwNZcxSOQOhdbxTENhiALmwwHwYDVR0j BBgwFoAU364RQY8hdaV9Adj4CmFJfMH1MGwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODU1ZjQ1MC1lYjdmLTRhMjYtYTZjNC1mOTgyN2VlMGE1YjgvMC9ERkFFMTE0MThG MjE3NUE1N0QwMUQ4RjgwQTYxNDk3Q0MxRjUzMDZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREZBRTExNDE4RjIxNzVBNTdEMDFEOEY4MEE2MTQ5N0NDMUY1 MzA2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjg1NWY0NTAtZWI3Zi00YTI2LWE2 YzQtZjk4MjdlZTBhNWI4LzAvREZBRTExNDE4RjIxNzVBNTdEMDFEOEY4MEE2MTQ5 N0NDMUY1MzA2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACY22aIlyyuhKFUb/CCbzrE1RUKl+SSgjvFv 5cB1APZA8TbY2BKd4NDh3AxvON7V3NuUyMxdBZp9Wa9yg12T9PLbNnzkZ+pKxMKG vPtU97w7XXGOYpJRlM9kULHknUKMfBXreJ8q3wY8PzXKaJsk3Oy1BfHG4HNhbclw kJIl4toEnFDhnVIqYX32MEzYxRc0ghVhZqYUbRNUImF0Z+8vIPw6xywFeIcVMvHI SogoSasg527C+z+08ccLSCqMi6RLF1QDkCmHHknfJ+PDexasi9MbdqIgxcFHAzYU VFWmBlWdmtP5ZNqcsA228my9aZzLqo2jblzFayxHXTE4fEhHam8= -----END CERTIFICATE-----Generated at Mon Jul 21 08:34:47 2025 by rpki-client