$ rpki-client -vvf repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft File: DF3717861F6521730921F11365C5A826CFF24DAA.mft (raw, json) Hash identifier: DHvuwkZkgf4p8RICVTaFU/0AL4b2a5/gWTKFYqBU4iY= Subject key identifier: D2:F6:19:5C:A9:2B:BE:2E:04:F4:2A:27:F9:32:CE:6E:5E:27:1B:92 Authority key identifier: DF:37:17:86:1F:65:21:73:09:21:F1:13:65:C5:A8:26:CF:F2:4D:AA Certificate issuer: /CN=DF3717861F6521730921F11365C5A826CFF24DAA Certificate serial: 734B9274E165C61D94520F24786517A199EDF680 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft Manifest number: E7 Signing time: Sat 07 Jun 2025 09:20:00 +0000 Manifest this update: Sat 07 Jun 2025 09:15:00 +0000 Manifest next update: Tue 10 Jun 2025 15:23:00 +0000 Files and hashes: 1: DF3717861F6521730921F11365C5A826CFF24DAA.crl (hash: TArjdDrPx0BN12l+Cw8d0Aj0WPC194n3qLGP+BUf6f4=) 2: 323030313a6466333a356263303a3a2f34382d3438203d3e20313532303832.roa (hash: CPvUwm70xz0Zan3lOCIYHo9DBeIR2F+H1Vf/c92c+cs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.crl rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 10 Jun 2025 15:23:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:4b:92:74:e1:65:c6:1d:94:52:0f:24:78:65:17:a1:99:ed:f6:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF3717861F6521730921F11365C5A826CFF24DAA Validity Not Before: Jun 7 09:15:00 2025 GMT Not After : Jun 10 15:23:00 2025 GMT Subject: CN=D2F6195CA92BBE2E04F42A27F932CE6E5E271B92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:35:90:99:a5:b0:c4:47:ea:7a:d0:3c:4f:d9: 3c:09:b3:db:bc:b7:ab:79:86:0e:64:fb:70:c3:dc: 9b:5e:64:af:ea:0e:5c:81:61:a0:fe:85:bc:2d:d2: 20:7f:59:d0:67:ff:fb:87:7e:1e:57:0d:09:66:7d: 76:7a:3c:5d:ae:78:8a:d8:65:35:41:7b:28:14:b4: 88:83:89:e4:bd:fc:64:7d:03:12:a7:ac:95:f7:8f: bb:97:32:75:62:84:b7:e9:b8:aa:54:a2:95:9c:cd: e6:21:3f:5d:0f:86:5a:9f:33:f8:a5:fb:09:f4:d2: ff:29:67:78:a1:3f:85:18:25:e8:f5:96:93:fd:e9: 04:fc:42:50:c6:61:86:46:17:cb:21:f7:45:13:51: ef:43:6a:48:10:e6:23:e8:ee:0c:43:f4:b2:d2:e5: 7d:7e:58:f8:e5:97:23:92:72:eb:a3:37:09:53:54: ba:94:6f:fd:25:88:b4:8f:30:83:31:86:46:08:2c: e3:d1:9e:ac:2a:6c:cc:4d:79:27:0b:3d:97:bb:19: ae:2e:d4:2d:59:c6:d7:ec:aa:f6:aa:b2:ee:58:eb: d7:c1:06:16:29:a1:80:d6:e8:5d:9b:24:bd:d7:07: 5b:77:d2:ae:ad:97:55:32:28:08:d4:ab:9b:e8:6d: 7b:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D2:F6:19:5C:A9:2B:BE:2E:04:F4:2A:27:F9:32:CE:6E:5E:27:1B:92 X509v3 Authority Key Identifier: keyid:DF:37:17:86:1F:65:21:73:09:21:F1:13:65:C5:A8:26:CF:F2:4D:AA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF3717861F6521730921F11365C5A826CFF24DAA.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e47cd5a2-a742-450c-b190-500e754520de/1/DF3717861F6521730921F11365C5A826CFF24DAA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4b:f6:24:07:2a:53:7d:75:92:e2:0c:b1:de:c6:e8:83:90:8d: 5b:61:01:9c:fc:59:b2:3f:2a:18:ce:8e:3e:4b:e6:93:ad:dc: cf:88:50:33:ce:01:48:8c:83:fb:e7:66:55:d0:83:8a:92:60: ed:ec:31:04:45:f9:d3:69:9e:7f:ab:8d:9c:cc:b7:c0:81:7e: 57:44:08:f7:b6:8d:d6:fa:91:79:8f:a7:ce:e8:46:e0:23:01: 5d:c4:89:b6:28:dc:38:ee:e3:ef:73:fd:39:a7:52:37:4c:86: 79:4e:f7:12:5c:73:c9:b1:04:d2:80:4d:54:6f:ab:d0:a0:6d: 30:5b:47:ef:8b:5e:ad:8f:d4:85:1d:75:45:4b:47:62:a1:df: 10:ea:61:f0:41:9f:76:d7:b8:3b:e2:9d:cb:bb:62:73:43:57: c9:74:c1:d4:48:d7:a6:cd:16:33:da:a4:5c:bd:73:0e:85:b0: 13:5d:71:e2:ca:66:41:a9:77:30:79:cc:53:58:3d:81:ee:f3: 1a:7a:fd:1f:c3:89:8f:98:69:03:52:cd:d6:1c:c0:42:9a:e6: 31:98:65:77:8e:10:4f:ef:a0:ab:1e:05:f2:ca:5b:e8:c4:97: f7:77:fa:3e:48:ec:63:4f:ef:34:45:30:f4:2e:85:ff:84:f8: 7e:4c:f5:ad -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUc0uSdOFlxh2UUg8keGUXoZnt9oAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYzNzE3ODYxRjY1MjE3MzA5MjFGMTEzNjVDNUE4MjZD RkYyNERBQTAeFw0yNTA2MDcwOTE1MDBaFw0yNTA2MTAxNTIzMDBaMDMxMTAvBgNV BAMTKEQyRjYxOTVDQTkyQkJFMkUwNEY0MkEyN0Y5MzJDRTZFNUUyNzFCOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJNZCZpbDER+p60DxP2TwJs9u8 t6t5hg5k+3DD3JteZK/qDlyBYaD+hbwt0iB/WdBn//uHfh5XDQlmfXZ6PF2ueIrY ZTVBeygUtIiDieS9/GR9AxKnrJX3j7uXMnVihLfpuKpUopWczeYhP10PhlqfM/il +wn00v8pZ3ihP4UYJej1lpP96QT8QlDGYYZGF8sh90UTUe9DakgQ5iPo7gxD9LLS 5X1+WPjllyOScuujNwlTVLqUb/0liLSPMIMxhkYILOPRnqwqbMxNeScLPZe7Ga4u 1C1Zxtfsqvaqsu5Y69fBBhYpoYDW6F2bJL3XB1t30q6tl1UyKAjUq5vobXupAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0vYZXKkrvi4E9Con+TLObl4nG5IwHwYDVR0j BBgwFoAU3zcXhh9lIXMJIfETZcWoJs/yTaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NDdjZDVhMi1hNzQyLTQ1MGMtYjE5MC01MDBlNzU0NTIwZGUvMS9ERjM3MTc4NjFG NjUyMTczMDkyMUYxMTM2NUM1QTgyNkNGRjI0REFBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREYzNzE3ODYxRjY1MjE3MzA5MjFGMTEzNjVDNUE4MjZDRkYy NERBQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTQ3Y2Q1YTItYTc0Mi00NTBjLWIx OTAtNTAwZTc1NDUyMGRlLzEvREYzNzE3ODYxRjY1MjE3MzA5MjFGMTEzNjVDNUE4 MjZDRkYyNERBQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEv2JAcqU311kuIMsd7G6IOQjVthAZz8WbI/ KhjOjj5L5pOt3M+IUDPOAUiMg/vnZlXQg4qSYO3sMQRF+dNpnn+rjZzMt8CBfldE CPe2jdb6kXmPp87oRuAjAV3EibYo3Dju4+9z/TmnUjdMhnlO9xJcc8mxBNKATVRv q9CgbTBbR++LXq2P1IUddUVLR2Kh3xDqYfBBn3bXuDvincu7YnNDV8l0wdRI16bN FjPapFy9cw6FsBNdceLKZkGpdzB5zFNYPYHu8xp6/R/DiY+YaQNSzdYcwEKa5jGY ZXeOEE/voKseBfLKW+jEl/d3+j5I7GNP7zRFMPQuhf+E+H5M9a0= -----END CERTIFICATE-----Generated at Sat Jun 7 21:16:42 2025 by rpki-client