$ rpki-client -vvf repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.mft File: DF19949CE17DC116E7B7C2248C933405B7A1AEF2.mft (raw, json) Hash identifier: /lQwCM5W7HzA99iMP93omUQzM0ky/snkV6geJUS33c8= Subject key identifier: 48:45:67:ED:F5:0F:1A:49:EB:68:46:4A:4C:B2:AB:50:05:81:A6:97 Authority key identifier: DF:19:94:9C:E1:7D:C1:16:E7:B7:C2:24:8C:93:34:05:B7:A1:AE:F2 Certificate issuer: /CN=DF19949CE17DC116E7B7C2248C933405B7A1AEF2 Certificate serial: 76203DDC86A3F0FA7FB437959DFBC1620C6D8333 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.cer Subject info access: rsync://repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.mft Manifest number: 0244 Signing time: Sun 07 Sep 2025 00:01:55 +0000 Manifest this update: Sat 06 Sep 2025 23:56:55 +0000 Manifest next update: Wed 10 Sep 2025 02:26:55 +0000 Files and hashes: 1: DF19949CE17DC116E7B7C2248C933405B7A1AEF2.crl (hash: cvYBVEsD/RuKyDoBEmVkua1juo1HXoDzo17Cl/o23B0=) 2: 3130332e3136362e3233342e302f32342d3234203d3e20313430343037.roa (hash: sMfIE/u5AzCpsIXByAsN/oEvGS84+QQDQwr2MsQjPBU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.crl rsync://repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 02:26:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:20:3d:dc:86:a3:f0:fa:7f:b4:37:95:9d:fb:c1:62:0c:6d:83:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF19949CE17DC116E7B7C2248C933405B7A1AEF2 Validity Not Before: Sep 6 23:56:55 2025 GMT Not After : Sep 10 02:26:55 2025 GMT Subject: CN=484567EDF50F1A49EB68464A4CB2AB500581A697 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:54:cd:4c:b8:34:e8:58:fb:46:06:79:61:3c: 09:56:43:7b:6e:62:f4:81:ea:68:59:d6:fd:9a:b1: f7:e4:06:f1:10:f8:53:13:c6:67:5b:91:eb:49:32: b8:d7:4f:ee:01:0c:72:fb:6a:71:1a:6b:03:30:d5: 7e:cc:6a:09:01:50:9a:ea:e5:a4:e3:a3:90:bc:11: 06:35:81:01:a8:24:d7:3d:c4:22:2e:70:f7:69:dc: 39:52:4b:78:d6:7d:8a:d1:ae:55:46:e1:02:d4:27: cf:ad:48:62:c2:46:6c:26:b5:48:a6:9f:55:b8:7f: eb:95:4c:c4:a0:77:7d:27:b6:67:67:c2:dd:e0:71: 30:a9:4d:77:83:83:49:74:ac:cb:c2:ea:a9:91:60: 3b:34:55:6d:8e:22:a3:92:05:e9:d1:8e:95:73:83: 8b:41:60:8a:a9:05:17:f3:75:a3:03:1c:6a:08:b2: 9c:62:23:1f:41:b5:1f:34:3e:42:80:58:bb:1c:bb: 4e:33:43:32:85:c2:f1:22:30:43:53:fd:d7:ea:67: 5b:86:4d:42:b1:09:67:2e:40:c7:68:49:cc:df:8c: e6:0a:49:6d:68:f1:52:f1:b9:08:d2:76:a3:34:52: 70:d6:63:96:2f:a6:e1:19:60:ca:77:ae:31:cb:78: b9:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 48:45:67:ED:F5:0F:1A:49:EB:68:46:4A:4C:B2:AB:50:05:81:A6:97 X509v3 Authority Key Identifier: keyid:DF:19:94:9C:E1:7D:C1:16:E7:B7:C2:24:8C:93:34:05:B7:A1:AE:F2 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3aef786b-6226-44af-852d-1fb045c4deb3/0/DF19949CE17DC116E7B7C2248C933405B7A1AEF2.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:b4:bf:78:a6:a3:85:c9:8a:bc:cb:8e:79:c8:ad:3b:71:10: 29:44:03:a1:c6:01:48:e2:07:6a:1a:58:67:31:67:02:42:12: bd:67:8d:3e:f0:7a:10:b0:d8:68:45:b5:16:2c:1f:b0:3a:2b: e2:a2:ca:03:ea:28:b8:ab:51:1e:57:80:32:b4:15:b8:c0:4f: 58:c5:58:47:19:57:0a:92:24:60:b5:85:dc:fb:dc:bb:fe:cd: 88:8e:c9:ef:15:37:a2:77:37:29:3f:e8:97:d3:48:da:d5:b8: ac:da:39:b7:45:63:be:18:cc:5d:8e:d5:15:e5:f2:7e:73:48: bb:86:a8:16:44:d5:00:19:d4:13:95:69:f1:99:ad:53:02:6b: 91:8d:2a:d3:6c:eb:24:2d:b9:7a:c0:46:31:19:b7:18:9e:3a: 50:7f:78:9c:70:60:09:ea:b4:ca:42:45:44:5b:33:0f:12:7f: 07:03:e3:5f:04:61:d5:55:ff:61:22:49:b3:b4:9c:85:e7:50: 65:f0:6d:a2:47:0e:71:72:a4:e8:87:f7:79:ae:26:ac:3b:8e: e4:42:08:8a:3f:d0:d8:f0:af:1e:4c:aa:f0:8c:9e:1f:00:f8: 62:06:4e:cf:59:26:80:11:39:8f:bb:42:65:4b:b8:89:cf:c3: 83:64:36:e1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdiA93Iaj8Pp/tDeVnfvBYgxtgzMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYxOTk0OUNFMTdEQzExNkU3QjdDMjI0OEM5MzM0MDVC N0ExQUVGMjAeFw0yNTA5MDYyMzU2NTVaFw0yNTA5MTAwMjI2NTVaMDMxMTAvBgNV BAMTKDQ4NDU2N0VERjUwRjFBNDlFQjY4NDY0QTRDQjJBQjUwMDU4MUE2OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1VM1MuDToWPtGBnlhPAlWQ3tu YvSB6mhZ1v2asffkBvEQ+FMTxmdbketJMrjXT+4BDHL7anEaawMw1X7MagkBUJrq 5aTjo5C8EQY1gQGoJNc9xCIucPdp3DlSS3jWfYrRrlVG4QLUJ8+tSGLCRmwmtUim n1W4f+uVTMSgd30ntmdnwt3gcTCpTXeDg0l0rMvC6qmRYDs0VW2OIqOSBenRjpVz g4tBYIqpBRfzdaMDHGoIspxiIx9BtR80PkKAWLscu04zQzKFwvEiMENT/dfqZ1uG TUKxCWcuQMdoSczfjOYKSW1o8VLxuQjSdqM0UnDWY5YvpuEZYMp3rjHLeLl5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSEVn7fUPGknraEZKTLKrUAWBppcwHwYDVR0j BBgwFoAU3xmUnOF9wRbnt8IkjJM0BbehrvIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z YWVmNzg2Yi02MjI2LTQ0YWYtODUyZC0xZmIwNDVjNGRlYjMvMC9ERjE5OTQ5Q0Ux N0RDMTE2RTdCN0MyMjQ4QzkzMzQwNUI3QTFBRUYyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREYxOTk0OUNFMTdEQzExNkU3QjdDMjI0OEM5MzM0MDVCN0Ex QUVGMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2FlZjc4NmItNjIyNi00NGFmLTg1 MmQtMWZiMDQ1YzRkZWIzLzAvREYxOTk0OUNFMTdEQzExNkU3QjdDMjI0OEM5MzM0 MDVCN0ExQUVGMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADm0v3imo4XJirzLjnnIrTtxEClEA6HGAUji B2oaWGcxZwJCEr1njT7wehCw2GhFtRYsH7A6K+KiygPqKLirUR5XgDK0FbjAT1jF WEcZVwqSJGC1hdz73Lv+zYiOye8VN6J3Nyk/6JfTSNrVuKzaObdFY74YzF2O1RXl 8n5zSLuGqBZE1QAZ1BOVafGZrVMCa5GNKtNs6yQtuXrARjEZtxieOlB/eJxwYAnq tMpCRURbMw8SfwcD418EYdVV/2EiSbO0nIXnUGXwbaJHDnFypOiH93muJqw7juRC CIo/0Njwrx5MqvCMnh8A+GIGTs9ZJoAROY+7QmVLuInPw4NkNuE= -----END CERTIFICATE-----Generated at Tue Sep 9 02:35:03 2025 by rpki-client