$ rpki-client -vvf repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft File: DF3717861F6521730921F11365C5A826CFF24DAA.mft (raw, json) Hash identifier: vWOoBv143REaPrSv7cnJJpG3zYpkoRo7leBqug23rTc= Subject key identifier: 5F:8E:F3:76:2E:24:1E:1D:B3:67:81:F8:6E:97:51:BD:83:49:56:91 Authority key identifier: DF:37:17:86:1F:65:21:73:09:21:F1:13:65:C5:A8:26:CF:F2:4D:AA Certificate issuer: /CN=DF3717861F6521730921F11365C5A826CFF24DAA Certificate serial: 1E76B9FE6713462F1320B36BF189891B9BEB1529 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft Manifest number: FD Signing time: Sat 26 Jul 2025 14:30:00 +0000 Manifest this update: Sat 26 Jul 2025 14:25:00 +0000 Manifest next update: Tue 29 Jul 2025 17:29:00 +0000 Files and hashes: 1: 323030313a6466333a356263303a3a2f34382d3438203d3e20313532303832.roa (hash: CPvUwm70xz0Zan3lOCIYHo9DBeIR2F+H1Vf/c92c+cs=) 2: DF3717861F6521730921F11365C5A826CFF24DAA.crl (hash: tBlJAR4716VUqvvVUCmNPBmGTW2eYhpvIcC/Rp+7tHg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.crl rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 29 Jul 2025 17:29:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:76:b9:fe:67:13:46:2f:13:20:b3:6b:f1:89:89:1b:9b:eb:15:29 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF3717861F6521730921F11365C5A826CFF24DAA Validity Not Before: Jul 26 14:25:00 2025 GMT Not After : Jul 29 17:29:00 2025 GMT Subject: CN=5F8EF3762E241E1DB36781F86E9751BD83495691 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:2b:00:2c:67:09:e9:9a:2d:35:c4:88:5c:98: 53:39:21:0d:72:a4:11:89:b9:62:98:b4:c2:78:1d: 6a:53:1c:e1:94:6a:06:4a:6f:b0:a9:b6:42:e2:99: eb:7b:6e:a2:ea:64:00:0d:a4:30:b1:60:48:43:48: ce:ff:4f:af:5e:83:0b:1c:64:a9:ba:c3:e7:b4:b9: bd:cb:f0:92:00:a3:57:d6:a8:0f:e8:a5:8b:01:ad: 5f:04:92:00:4f:ab:98:a6:34:5d:c8:08:38:4d:4f: 9c:e2:4b:d6:76:af:e3:aa:c4:53:07:f3:05:ec:8f: d7:9a:cb:e4:1e:51:ab:fb:6d:78:af:d7:57:cd:65: 4e:e9:86:64:d7:53:b2:4c:75:5e:d8:b2:70:b2:14: 8a:2c:88:b5:2e:81:85:8f:38:86:de:47:c4:49:41: f6:c8:7a:e8:3a:fa:d4:bf:81:45:24:76:03:ce:c1: 23:a8:12:ff:e9:63:17:27:aa:ec:ab:c8:38:75:34: 5a:91:65:50:b2:01:25:f4:62:99:1d:38:ca:71:40: d1:b5:18:e7:d4:55:56:07:12:25:26:cd:f0:25:dc: 40:3a:af:84:06:f5:fa:e4:34:2f:c2:2d:1b:4e:b6: 4a:bf:79:b2:c7:67:5a:67:24:4e:07:34:a3:84:68: 23:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:8E:F3:76:2E:24:1E:1D:B3:67:81:F8:6E:97:51:BD:83:49:56:91 X509v3 Authority Key Identifier: keyid:DF:37:17:86:1F:65:21:73:09:21:F1:13:65:C5:A8:26:CF:F2:4D:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:e4:62:98:c9:61:15:bc:88:bc:fa:27:4a:f4:09:66:8e:9b: ce:06:a4:3b:4c:dc:41:b8:d6:0d:31:16:e3:4f:3e:0d:a8:98: 6a:0b:8e:a2:3a:f5:16:ee:7a:7e:77:59:f7:30:ed:34:41:09: 41:d4:cf:7a:e9:00:0c:d4:e4:ee:cd:7e:42:d9:9b:3d:12:37: 37:94:ec:b8:1f:00:0e:35:51:86:8e:87:c5:90:9e:d8:10:72: 37:c2:7b:92:a1:bb:15:d4:63:7f:4a:84:6d:68:c4:18:27:08: be:c2:65:a5:f9:f4:f6:c2:b7:6c:e4:b3:23:2a:cf:7e:2a:cf: 22:b6:e4:97:02:ba:c5:dc:48:fd:69:42:77:86:c0:be:ff:a7: 5a:6e:d7:82:e2:98:3a:d6:ea:a0:b9:4c:fd:2e:57:85:5f:9b: 68:5f:a0:e6:96:04:cd:f6:7c:79:a2:71:e7:eb:27:91:0b:71: 3e:97:e5:57:41:7d:c0:cf:55:69:86:a1:ac:f8:d5:5b:68:1d: 58:9a:c3:2f:7f:4e:27:84:f8:e7:de:95:8d:49:f7:72:1d:ad: 10:1b:54:95:85:1d:18:5e:b5:92:a3:fd:13:29:81:02:4a:87: e0:eb:d6:3a:d6:51:05:ef:00:0e:46:38:60:12:e5:7a:13:5d: 20:79:f0:a9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHna5/mcTRi8TILNr8YmJG5vrFSkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYzNzE3ODYxRjY1MjE3MzA5MjFGMTEzNjVDNUE4MjZD RkYyNERBQTAeFw0yNTA3MjYxNDI1MDBaFw0yNTA3MjkxNzI5MDBaMDMxMTAvBgNV BAMTKDVGOEVGMzc2MkUyNDFFMURCMzY3ODFGODZFOTc1MUJEODM0OTU2OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9KwAsZwnpmi01xIhcmFM5IQ1y pBGJuWKYtMJ4HWpTHOGUagZKb7CptkLimet7bqLqZAANpDCxYEhDSM7/T69egwsc ZKm6w+e0ub3L8JIAo1fWqA/opYsBrV8EkgBPq5imNF3ICDhNT5ziS9Z2r+OqxFMH 8wXsj9eay+QeUav7bXiv11fNZU7phmTXU7JMdV7YsnCyFIosiLUugYWPOIbeR8RJ QfbIeug6+tS/gUUkdgPOwSOoEv/pYxcnquyryDh1NFqRZVCyASX0YpkdOMpxQNG1 GOfUVVYHEiUmzfAl3EA6r4QG9frkNC/CLRtOtkq/ebLHZ1pnJE4HNKOEaCMRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUX47zdi4kHh2zZ4H4bpdRvYNJVpEwHwYDVR0j BBgwFoAU3zcXhh9lIXMJIfETZcWoJs/yTaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NDdjZDVhMi1hNzQyLTQ1MGMtYjE5MC01MDBlNzU0NTIwZGUvMS9ERjM3MTc4NjFG NjUyMTczMDkyMUYxMTM2NUM1QTgyNkNGRjI0REFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREYzNzE3ODYxRjY1MjE3MzA5MjFGMTEzNjVDNUE4MjZDRkYy NERBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTQ3Y2Q1YTItYTc0Mi00NTBjLWIx OTAtNTAwZTc1NDUyMGRlLzEvREYzNzE3ODYxRjY1MjE3MzA5MjFGMTEzNjVDNUE4 MjZDRkYyNERBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAALkYpjJYRW8iLz6J0r0CWaOm84GpDtM3EG4 1g0xFuNPPg2omGoLjqI69Rbuen53Wfcw7TRBCUHUz3rpAAzU5O7NfkLZmz0SNzeU 7LgfAA41UYaOh8WQntgQcjfCe5KhuxXUY39KhG1oxBgnCL7CZaX59PbCt2zksyMq z34qzyK25JcCusXcSP1pQneGwL7/p1pu14LimDrW6qC5TP0uV4Vfm2hfoOaWBM32 fHmicefrJ5ELcT6X5VdBfcDPVWmGoaz41VtoHViawy9/TieE+OfelY1J93IdrRAb VJWFHRhetZKj/RMpgQJKh+Dr1jrWUQXvAA5GOGAS5XoTXSB58Kk= -----END CERTIFICATE-----Generated at Sat Jul 26 19:32:44 2025 by rpki-client