$ rpki-client -vvf repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.mft File: D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.mft (raw, json) Hash identifier: Y7Ij2Ff6bKUyA7bwGbmiw5IQIc8/ojiWfCoCS8WzyKc= Subject key identifier: A1:E1:E1:A5:A5:0B:BB:54:A1:5F:19:38:10:8F:BA:74:84:21:D4:B1 Authority key identifier: D6:9B:38:7E:6B:9C:AF:1B:D2:6B:28:6A:94:8D:5A:77:FB:85:F8:0A Certificate issuer: /CN=D69B387E6B9CAF1BD26B286A948D5A77FB85F80A Certificate serial: 7B3CFF4F9EE9B7D7F603D0CDD8653E47B9F06E79 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.mft Manifest number: 8D Signing time: Sat 23 Aug 2025 02:32:15 +0000 Manifest this update: Sat 23 Aug 2025 02:27:15 +0000 Manifest next update: Tue 26 Aug 2025 07:14:15 +0000 Files and hashes: 1: D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.crl (hash: 8HJ2xRY0YFoeaaAi8J4JZ/0rHjJHjgWOhKSBQv/RdOc=) 2: 3130332e36352e3134322e302f32332d3234203d3e20313432333333.roa (hash: ebv5717pdfrOCM6UKJpRU8pwWSSBsU7X9vMbWD9pgi8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.crl rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 07:14:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:3c:ff:4f:9e:e9:b7:d7:f6:03:d0:cd:d8:65:3e:47:b9:f0:6e:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D69B387E6B9CAF1BD26B286A948D5A77FB85F80A Validity Not Before: Aug 23 02:27:15 2025 GMT Not After : Aug 26 07:14:15 2025 GMT Subject: CN=A1E1E1A5A50BBB54A15F1938108FBA748421D4B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:67:64:66:c9:fb:b8:89:ee:31:b2:63:58:01: 39:0d:26:3c:68:d6:45:b9:cb:53:35:c4:40:31:ff: a7:88:37:79:3c:1d:7c:cf:00:09:20:56:bc:4f:41: d0:04:05:1f:8b:fe:85:bd:0d:76:e1:27:1b:ad:55: 76:c3:56:37:06:cd:72:10:ce:35:62:7c:b6:2c:7a: f9:6c:bc:ad:79:a6:a0:8b:f9:7f:05:eb:5b:83:c7: f7:09:d3:1d:91:01:2f:74:1c:28:7f:c0:39:5f:ae: ad:27:51:81:01:a4:fd:ea:73:86:44:cd:25:6b:40: bc:cf:52:e0:6e:90:d3:9f:45:77:7e:3e:2d:a4:a3: 95:11:7d:b9:7e:70:c5:0c:70:b4:74:db:1c:42:86: 05:2e:a6:77:98:ee:23:0e:5e:40:33:94:af:62:96: 9c:fd:1d:3e:3e:fe:37:38:d5:9d:46:cd:26:0c:3d: ac:da:eb:45:0d:0e:72:41:8e:70:87:e5:d3:b9:e2: 11:e5:18:8f:6c:19:12:38:0b:11:ca:51:16:18:da: c2:2d:e9:e8:88:a5:5e:f0:a2:c6:8d:de:e0:18:36: b0:70:82:c8:81:5e:60:66:72:f4:ae:cc:dd:39:52: 81:4f:e7:50:e8:aa:75:b2:6f:e9:35:33:3a:2b:c9: 85:83 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A1:E1:E1:A5:A5:0B:BB:54:A1:5F:19:38:10:8F:BA:74:84:21:D4:B1 X509v3 Authority Key Identifier: keyid:D6:9B:38:7E:6B:9C:AF:1B:D2:6B:28:6A:94:8D:5A:77:FB:85:F8:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:5b:a5:15:e8:46:9c:64:65:6f:8b:1d:7b:07:d9:e0:9b:e8: a1:c2:af:23:82:91:df:13:24:10:49:f9:b2:a3:7e:75:ee:60: 9d:85:31:e6:f7:f1:57:f5:03:85:94:d1:75:67:c9:1c:44:ad: cb:47:1e:46:d6:83:ae:39:6c:95:fc:98:75:e4:8a:63:10:03: 96:63:b9:6e:31:a7:6e:a4:8e:4a:19:1e:f7:cb:d0:94:9e:17: cd:8b:57:82:ad:4e:84:f3:2e:52:23:f4:51:81:16:93:b8:16: fd:e0:58:4f:35:85:33:24:fe:8d:48:b6:f5:fe:84:3e:d3:d0: 13:d9:91:88:8b:03:d6:de:0a:34:e9:a5:b2:9a:1e:20:68:f6: a4:6e:05:53:13:b3:96:b8:1b:f9:b1:32:3b:fe:c1:5a:c3:88: 05:45:c4:8a:14:64:03:3b:4c:03:fd:b2:a2:f3:c6:19:74:69: 6c:0e:d5:1b:c6:5d:72:fc:59:bf:aa:81:ca:5c:9c:a7:9a:3b: 50:93:a0:a6:7a:72:90:cd:bf:a4:04:cb:18:89:a8:35:b3:53: bb:76:b1:6a:52:fa:2f:e5:40:03:8c:ad:fe:df:bc:f0:67:64: fb:ec:9c:00:48:72:32:c4:81:87:69:9e:aa:98:f5:a4:45:bb: a3:fa:cf:bf -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUezz/T57pt9f2A9DN2GU+R7nwbnkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY5QjM4N0U2QjlDQUYxQkQyNkIyODZBOTQ4RDVBNzdG Qjg1RjgwQTAeFw0yNTA4MjMwMjI3MTVaFw0yNTA4MjYwNzE0MTVaMDMxMTAvBgNV BAMTKEExRTFFMUE1QTUwQkJCNTRBMTVGMTkzODEwOEZCQTc0ODQyMUQ0QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCkZ2Rmyfu4ie4xsmNYATkNJjxo 1kW5y1M1xEAx/6eIN3k8HXzPAAkgVrxPQdAEBR+L/oW9DXbhJxutVXbDVjcGzXIQ zjVifLYsevlsvK15pqCL+X8F61uDx/cJ0x2RAS90HCh/wDlfrq0nUYEBpP3qc4ZE zSVrQLzPUuBukNOfRXd+Pi2ko5URfbl+cMUMcLR02xxChgUupneY7iMOXkAzlK9i lpz9HT4+/jc41Z1GzSYMPaza60UNDnJBjnCH5dO54hHlGI9sGRI4CxHKURYY2sIt 6eiIpV7wosaN3uAYNrBwgsiBXmBmcvSuzN05UoFP51DoqnWyb+k1MzoryYWDAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUoeHhpaULu1ShXxk4EI+6dIQh1LEwHwYDVR0j BBgwFoAU1ps4fmucrxvSayhqlI1ad/uF+AowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDM4ZjNhMS1hYzBmLTRmN2MtOWM2Yy02YjI3NTY2ZmU3MGMvMC9ENjlCMzg3RTZC OUNBRjFCRDI2QjI4NkE5NDhENUE3N0ZCODVGODBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDY5QjM4N0U2QjlDQUYxQkQyNkIyODZBOTQ4RDVBNzdGQjg1 RjgwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAzOGYzYTEtYWMwZi00ZjdjLTlj NmMtNmIyNzU2NmZlNzBjLzAvRDY5QjM4N0U2QjlDQUYxQkQyNkIyODZBOTQ4RDVB NzdGQjg1RjgwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAFbpRXoRpxkZW+LHXsH2eCb6KHCryOCkd8T JBBJ+bKjfnXuYJ2FMeb38Vf1A4WU0XVnyRxErctHHkbWg645bJX8mHXkimMQA5Zj uW4xp26kjkoZHvfL0JSeF82LV4KtToTzLlIj9FGBFpO4Fv3gWE81hTMk/o1ItvX+ hD7T0BPZkYiLA9beCjTppbKaHiBo9qRuBVMTs5a4G/mxMjv+wVrDiAVFxIoUZAM7 TAP9sqLzxhl0aWwO1RvGXXL8Wb+qgcpcnKeaO1CToKZ6cpDNv6QEyxiJqDWzU7t2 sWpS+i/lQAOMrf7fvPBnZPvsnABIcjLEgYdpnqqY9aRFu6P6z78= -----END CERTIFICATE-----Generated at Sat Aug 23 15:32:19 2025 by rpki-client