$ rpki-client -vvf repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.mft File: DEF44331E724964F28697DEABAF2313CDCEEFACE.mft (raw, json) Hash identifier: nQMJx6jFQQmheUa+sviezGfEZrK1F81p2YLFbkIADMI= Subject key identifier: 45:BA:F6:BC:48:A9:C5:02:7E:11:D9:20:29:AF:B4:F9:BA:45:DD:47 Authority key identifier: DE:F4:43:31:E7:24:96:4F:28:69:7D:EA:BA:F2:31:3C:DC:EE:FA:CE Certificate issuer: /CN=DEF44331E724964F28697DEABAF2313CDCEEFACE Certificate serial: 0E83769DF0446B6C0A7D566079DB69D33CA8E004 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEF44331E724964F28697DEABAF2313CDCEEFACE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.mft Manifest number: 04EC Signing time: Sat 19 Jul 2025 06:40:55 +0000 Manifest this update: Sat 19 Jul 2025 06:35:55 +0000 Manifest next update: Tue 22 Jul 2025 09:48:55 +0000 Files and hashes: 1: DEF44331E724964F28697DEABAF2313CDCEEFACE.crl (hash: pMbI1Rj66+C4Uy9t8TYlr1pf9UCyfR5ypba9GBc5G88=) 2: 323030313a6466343a316630303a3a2f34382d3438203d3e20313337333132.roa (hash: JRR7XEn+B9iX1MKG6S3DWTWk+XJaRXgwa3RueWQgr7k=) 3: 3130332e3130382e3139312e302f32342d3234203d3e20313337333132.roa (hash: rUdT5hgB1MoqDtYNUlsd/H7JJhMR5l8B8KRXMe+OwOs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.crl rsync://repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEF44331E724964F28697DEABAF2313CDCEEFACE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 09:48:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0e:83:76:9d:f0:44:6b:6c:0a:7d:56:60:79:db:69:d3:3c:a8:e0:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DEF44331E724964F28697DEABAF2313CDCEEFACE Validity Not Before: Jul 19 06:35:55 2025 GMT Not After : Jul 22 09:48:55 2025 GMT Subject: CN=45BAF6BC48A9C5027E11D92029AFB4F9BA45DD47 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:02:a1:45:d5:03:33:c0:bd:9e:89:ab:c7:fa: 1f:4b:b7:9e:4d:58:99:3b:74:7a:ea:89:b2:d7:e2: 7c:2d:ba:2d:2b:a0:bf:ce:3f:69:d9:1d:ca:2d:27: 9e:be:67:e7:ba:f9:74:8b:5a:87:f2:55:99:97:f5: a1:8e:cc:cf:fd:bf:64:fc:23:36:c9:25:3c:4c:56: 86:da:da:c5:87:35:c1:65:40:45:53:a5:6c:ff:08: 6d:91:ac:00:09:9b:73:7b:29:e3:1b:b2:bb:bb:7d: 01:a8:f6:b1:5a:b2:2c:84:6a:5d:09:70:a3:c3:c3: b5:76:74:29:8f:58:7f:d8:70:14:59:77:ae:8f:3e: c0:54:8d:19:73:6f:e2:41:5f:ad:0a:62:97:8a:3e: 0d:87:56:1e:31:53:18:f9:84:2b:59:64:45:30:50: 9d:b0:42:2c:3f:d9:b8:99:db:f6:bb:8e:af:43:b2: 4a:d3:be:49:4b:1d:cc:f8:41:64:d6:68:36:e2:70: e0:c3:83:67:28:d6:e5:01:57:da:be:5d:25:0d:eb: 95:bf:56:19:e8:40:00:73:ad:5a:22:a5:95:f2:c3: 67:65:87:17:6b:1c:f2:24:16:ff:d8:5f:40:51:27: 66:66:36:6a:ea:2e:84:a3:bb:70:7d:05:08:37:cb: c1:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:BA:F6:BC:48:A9:C5:02:7E:11:D9:20:29:AF:B4:F9:BA:45:DD:47 X509v3 Authority Key Identifier: keyid:DE:F4:43:31:E7:24:96:4F:28:69:7D:EA:BA:F2:31:3C:DC:EE:FA:CE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DEF44331E724964F28697DEABAF2313CDCEEFACE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f190c37e-2655-42b1-baf7-42ec1cf192aa/0/DEF44331E724964F28697DEABAF2313CDCEEFACE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b6:02:cc:3d:23:79:f3:71:25:0f:e1:fc:e0:44:2c:b6:4f:fb: ce:ae:fd:28:0f:39:de:09:15:7b:db:7e:dd:7a:59:83:28:17: 82:f1:70:49:0c:65:f3:df:df:67:1c:7e:b6:88:bf:7b:77:d8: b6:ef:6c:b4:2c:af:df:3e:c6:99:27:de:a9:cc:59:56:a3:0a: 3c:8a:c9:60:46:7d:c6:bc:1b:3f:4f:02:30:06:a2:8c:23:b8: fd:e8:13:db:f0:6b:e4:c5:37:36:83:5a:da:90:0b:ee:eb:09: a4:fd:38:c2:51:3a:55:19:78:11:37:f2:2a:55:12:a3:e7:fe: 62:37:cf:eb:47:f8:a5:ce:c0:2e:06:76:15:ab:5d:be:b8:8d: 86:03:d2:23:89:16:81:12:a6:32:13:4d:e9:3c:5f:80:f2:9b: 54:a7:31:72:cf:8e:66:8b:b1:f3:53:fd:40:62:d3:cc:9c:fc: 09:02:39:c9:bd:ff:6b:6c:a0:75:c3:0d:ba:a8:e6:8d:9f:ab: 9f:ec:76:45:72:88:b3:d3:01:75:a1:a5:55:d7:63:e1:04:46: c1:c0:85:e1:09:df:33:39:a0:b9:76:0b:e3:5c:95:47:64:cb: 59:f6:cd:5b:19:c5:12:c2:c3:81:37:9a:fd:b0:18:d1:58:0a: 54:49:24:ba -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDoN2nfBEa2wKfVZgedtp0zyo4AQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREVGNDQzMzFFNzI0OTY0RjI4Njk3REVBQkFGMjMxM0NE Q0VFRkFDRTAeFw0yNTA3MTkwNjM1NTVaFw0yNTA3MjIwOTQ4NTVaMDMxMTAvBgNV BAMTKDQ1QkFGNkJDNDhBOUM1MDI3RTExRDkyMDI5QUZCNEY5QkE0NURENDcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWAqFF1QMzwL2eiavH+h9Lt55N WJk7dHrqibLX4nwtui0roL/OP2nZHcotJ56+Z+e6+XSLWofyVZmX9aGOzM/9v2T8 IzbJJTxMVoba2sWHNcFlQEVTpWz/CG2RrAAJm3N7KeMbsru7fQGo9rFasiyEal0J cKPDw7V2dCmPWH/YcBRZd66PPsBUjRlzb+JBX60KYpeKPg2HVh4xUxj5hCtZZEUw UJ2wQiw/2biZ2/a7jq9DskrTvklLHcz4QWTWaDbicODDg2co1uUBV9q+XSUN65W/ VhnoQABzrVoipZXyw2dlhxdrHPIkFv/YX0BRJ2ZmNmrqLoSju3B9BQg3y8FvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURbr2vEipxQJ+EdkgKa+0+bpF3UcwHwYDVR0j BBgwFoAU3vRDMecklk8oaX3quvIxPNzu+s4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m MTkwYzM3ZS0yNjU1LTQyYjEtYmFmNy00MmVjMWNmMTkyYWEvMC9ERUY0NDMzMUU3 MjQ5NjRGMjg2OTdERUFCQUYyMzEzQ0RDRUVGQUNFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREVGNDQzMzFFNzI0OTY0RjI4Njk3REVBQkFGMjMxM0NEQ0VF RkFDRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjE5MGMzN2UtMjY1NS00MmIxLWJh ZjctNDJlYzFjZjE5MmFhLzAvREVGNDQzMzFFNzI0OTY0RjI4Njk3REVBQkFGMjMx M0NEQ0VFRkFDRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALYCzD0jefNxJQ/h/OBELLZP+86u/SgPOd4J FXvbft16WYMoF4LxcEkMZfPf32ccfraIv3t32LbvbLQsr98+xpkn3qnMWVajCjyK yWBGfca8Gz9PAjAGoowjuP3oE9vwa+TFNzaDWtqQC+7rCaT9OMJROlUZeBE38ipV EqPn/mI3z+tH+KXOwC4GdhWrXb64jYYD0iOJFoESpjITTek8X4Dym1SnMXLPjmaL sfNT/UBi08yc/AkCOcm9/2tsoHXDDbqo5o2fq5/sdkVyiLPTAXWhpVXXY+EERsHA heEJ3zM5oLl2C+NclUdky1n2zVsZxRLCw4E3mv2wGNFYClRJJLo= -----END CERTIFICATE-----Generated at Mon Jul 21 08:59:28 2025 by rpki-client