$ rpki-client -vvf repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft File: DF3717861F6521730921F11365C5A826CFF24DAA.mft (raw, json) Hash identifier: 5zIdcVghovQMmuvYGpF2jQ1EzZXMPn4F++Z2CnWkLSY= Subject key identifier: AF:FC:8F:94:D5:33:91:49:D8:3A:B3:1B:CD:F0:F4:65:07:0D:FB:37 Authority key identifier: DF:37:17:86:1F:65:21:73:09:21:F1:13:65:C5:A8:26:CF:F2:4D:AA Certificate issuer: /CN=DF3717861F6521730921F11365C5A826CFF24DAA Certificate serial: 68C2D7CE6A64AED928676E0B244F0656A024230B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft Manifest number: CB Signing time: Sat 05 Apr 2025 10:00:00 +0000 Manifest this update: Sat 05 Apr 2025 09:55:00 +0000 Manifest next update: Tue 08 Apr 2025 11:43:00 +0000 Files and hashes: 1: DF3717861F6521730921F11365C5A826CFF24DAA.crl (hash: 8DB8vXaIH+ZCkhh8pFwi/MvSLmGficXY+ILxPgs8MvQ=) 2: 323030313a6466333a356263303a3a2f34382d3438203d3e20313532303832.roa (hash: CPvUwm70xz0Zan3lOCIYHo9DBeIR2F+H1Vf/c92c+cs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.crl rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:c2:d7:ce:6a:64:ae:d9:28:67:6e:0b:24:4f:06:56:a0:24:23:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF3717861F6521730921F11365C5A826CFF24DAA Validity Not Before: Apr 5 09:55:00 2025 GMT Not After : Apr 8 11:43:00 2025 GMT Subject: CN=AFFC8F94D5339149D83AB31BCDF0F465070DFB37 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:37:93:c9:22:2f:3b:e4:be:44:8c:49:5f:8e: eb:0b:4b:2c:64:f8:82:75:d4:2f:b6:21:7c:ac:45: 1a:3f:a2:72:99:71:80:c3:59:05:fb:a1:89:7a:bc: 0a:bf:ce:30:a9:a9:88:b7:2d:15:e2:1c:c0:80:87: 3f:4a:79:ef:e7:b8:46:2d:16:b3:14:86:ee:4b:1a: 02:62:75:44:45:d2:50:a2:d0:23:7f:12:8e:1d:d9: 51:25:c0:c7:87:19:00:1b:65:f7:97:08:ab:68:59: db:78:ac:e8:bc:92:a4:2e:26:05:b5:1e:9b:63:6f: 8d:a3:f0:31:ef:39:07:f6:b3:be:6c:43:6f:8b:75: e5:e0:af:90:18:39:12:87:f0:79:2e:3e:03:df:28: 67:8b:e0:48:5b:f3:85:ef:6c:91:0f:e3:78:6e:48: 40:38:e3:34:99:ce:d7:a6:31:aa:ca:1f:1d:f4:0e: fc:ca:11:fa:8a:b4:cd:fb:1c:8f:65:85:3b:2c:f8: 72:fb:b6:d7:09:42:20:e0:0c:a2:d4:62:72:9d:9c: f8:65:17:3b:11:f0:53:9e:f4:d6:b9:96:9f:40:a0: c8:5e:a9:00:44:03:ed:85:ca:bb:34:e0:0d:1a:96: 6c:e1:37:64:da:e4:18:09:3c:36:df:d4:fa:07:09: 06:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AF:FC:8F:94:D5:33:91:49:D8:3A:B3:1B:CD:F0:F4:65:07:0D:FB:37 X509v3 Authority Key Identifier: keyid:DF:37:17:86:1F:65:21:73:09:21:F1:13:65:C5:A8:26:CF:F2:4D:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:00:ae:59:dd:2a:69:3b:16:a3:1b:7b:bd:fa:17:34:9a:2f: 8a:2b:31:d8:c3:0e:83:7d:6d:3b:cd:a4:31:cf:b2:c0:82:e5: 1b:96:28:83:de:21:69:29:70:d9:30:e8:b4:63:2c:47:98:76: b4:cf:eb:13:cc:9e:ae:53:a5:c3:73:fb:07:a6:b2:cc:1d:b7: d6:ec:b9:4e:c6:a3:c0:8e:24:d0:bb:f1:d8:d4:88:d3:e6:6d: bd:eb:30:b5:c1:cb:81:33:29:44:2f:3c:27:b5:6c:d2:00:bf: 29:08:6f:a9:3a:74:11:9e:cf:66:e9:3a:9b:02:22:96:f4:ca: 50:73:c9:07:68:f3:5f:c5:85:b2:1b:96:8d:73:7e:62:b0:24: 52:07:1c:84:84:aa:87:2b:d3:3b:a6:d4:78:67:a4:dc:a2:e3: 9a:aa:10:64:68:2f:2a:74:1d:ea:e2:64:cc:b3:d3:31:ca:e1: 2a:49:d2:3d:69:c4:c7:76:6a:ce:5a:98:1a:a0:a0:22:36:a1: 1f:41:9b:c7:55:ff:ee:68:1c:c1:c1:84:f8:62:ed:5e:7b:fb: 61:54:c6:2f:34:c9:a6:68:06:9a:65:0c:fc:89:0a:81:f1:4a: 5f:0c:80:48:ba:a0:26:0e:03:cf:33:53:ba:7c:7b:a5:cb:e7: d6:a2:42:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaMLXzmpkrtkoZ24LJE8GVqAkIwswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYzNzE3ODYxRjY1MjE3MzA5MjFGMTEzNjVDNUE4MjZD RkYyNERBQTAeFw0yNTA0MDUwOTU1MDBaFw0yNTA0MDgxMTQzMDBaMDMxMTAvBgNV BAMTKEFGRkM4Rjk0RDUzMzkxNDlEODNBQjMxQkNERjBGNDY1MDcwREZCMzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnN5PJIi875L5EjElfjusLSyxk +IJ11C+2IXysRRo/onKZcYDDWQX7oYl6vAq/zjCpqYi3LRXiHMCAhz9Kee/nuEYt FrMUhu5LGgJidURF0lCi0CN/Eo4d2VElwMeHGQAbZfeXCKtoWdt4rOi8kqQuJgW1 Hptjb42j8DHvOQf2s75sQ2+LdeXgr5AYORKH8HkuPgPfKGeL4Ehb84XvbJEP43hu SEA44zSZztemMarKHx30DvzKEfqKtM37HI9lhTss+HL7ttcJQiDgDKLUYnKdnPhl FzsR8FOe9Na5lp9AoMheqQBEA+2Fyrs04A0almzhN2Ta5BgJPDbf1PoHCQYXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUr/yPlNUzkUnYOrMbzfD0ZQcN+zcwHwYDVR0j BBgwFoAU3zcXhh9lIXMJIfETZcWoJs/yTaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NDdjZDVhMi1hNzQyLTQ1MGMtYjE5MC01MDBlNzU0NTIwZGUvMS9ERjM3MTc4NjFG NjUyMTczMDkyMUYxMTM2NUM1QTgyNkNGRjI0REFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREYzNzE3ODYxRjY1MjE3MzA5MjFGMTEzNjVDNUE4MjZDRkYy NERBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTQ3Y2Q1YTItYTc0Mi00NTBjLWIx OTAtNTAwZTc1NDUyMGRlLzEvREYzNzE3ODYxRjY1MjE3MzA5MjFGMTEzNjVDNUE4 MjZDRkYyNERBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAG8ArlndKmk7FqMbe736FzSaL4orMdjDDoN9 bTvNpDHPssCC5RuWKIPeIWkpcNkw6LRjLEeYdrTP6xPMnq5TpcNz+wemsswdt9bs uU7Go8COJNC78djUiNPmbb3rMLXBy4EzKUQvPCe1bNIAvykIb6k6dBGez2bpOpsC Ipb0ylBzyQdo81/FhbIblo1zfmKwJFIHHISEqocr0zum1HhnpNyi45qqEGRoLyp0 HeriZMyz0zHK4SpJ0j1pxMd2as5amBqgoCI2oR9Bm8dV/+5oHMHBhPhi7V57+2FU xi80yaZoBpplDPyJCoHxSl8MgEi6oCYOA88zU7p8e6XL59aiQmA= -----END CERTIFICATE-----Generated at Sat Apr 5 16:40:07 2025 by rpki-client