$ rpki-client -vvf repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft File: DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft (raw, json) Hash identifier: wxk9L9CmBgJKjN7nnYRgCWOOP9+t9RLO2NSNPGwO1Hk= Subject key identifier: 63:22:9E:A1:A5:E5:1C:06:A2:EB:62:8E:90:D0:00:75:F9:E0:6F:41 Authority key identifier: DC:34:C8:B5:F4:38:B8:D4:CB:13:F2:45:1A:D1:F0:95:5E:5F:7F:BB Certificate issuer: /CN=DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB Certificate serial: 6633227D6F6F7F555C86F7CB2812639902FA9F04 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft Manifest number: 0482 Signing time: Sat 23 Aug 2025 11:53:25 +0000 Manifest this update: Sat 23 Aug 2025 11:48:25 +0000 Manifest next update: Tue 26 Aug 2025 17:52:25 +0000 Files and hashes: 1: DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.crl (hash: uxsgeleh9Xht0TIH1ZO0rY36aM//rVhrXvnr5OILZoc=) 2: 323030313a6466363a313830303a3a2f34382d3438203d3e20313331373535.roa (hash: HGlDA4/8VVAgy1tfZNlAnPXlJMICAK8Z05H6MVK5yJM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.crl rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 13:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:33:22:7d:6f:6f:7f:55:5c:86:f7:cb:28:12:63:99:02:fa:9f:04 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB Validity Not Before: Aug 23 11:48:25 2025 GMT Not After : Aug 26 17:52:25 2025 GMT Subject: CN=63229EA1A5E51C06A2EB628E90D00075F9E06F41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:05:b8:42:55:8b:e9:a2:4a:51:ab:68:39:d0: d0:bb:ed:5a:fd:ab:37:43:52:a2:61:56:ea:a2:80: 51:be:ec:0b:8c:cf:d1:33:50:8d:8a:62:f3:b9:ce: 40:eb:80:85:3e:56:d0:cc:a8:53:b1:ee:14:ac:f8: 49:b8:f7:fa:b8:6b:38:25:fc:f7:1d:23:da:cd:56: 41:bd:c7:26:1e:21:98:94:d3:9d:78:93:79:cc:09: ca:5c:d9:22:fd:e9:a0:14:6a:a2:84:47:05:80:7e: bc:35:bc:c0:40:f3:43:12:fa:0a:70:e0:b4:55:6b: c4:c8:1f:ce:f5:21:35:1c:05:1e:97:58:c9:02:f6: 2e:e8:96:0b:fb:fc:bc:a3:48:c6:b7:1b:21:c1:32: 80:1a:82:74:52:7f:53:13:d7:60:b7:46:7d:18:79: 0a:68:19:f8:8c:96:5e:57:44:b8:c9:1e:42:50:24: 84:20:fe:7f:e5:94:2e:23:f7:8d:ca:74:a2:2a:d6: f9:98:75:13:5f:19:dd:1a:82:d6:c9:41:e1:1b:12: 05:cb:9f:71:57:db:47:d5:08:5e:4a:72:20:1f:72: 43:ca:44:27:2f:ed:d7:37:e4:b8:ce:06:c3:37:55: d2:6a:88:32:f2:ca:33:41:87:89:5e:5a:e8:9b:10: b7:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:22:9E:A1:A5:E5:1C:06:A2:EB:62:8E:90:D0:00:75:F9:E0:6F:41 X509v3 Authority Key Identifier: keyid:DC:34:C8:B5:F4:38:B8:D4:CB:13:F2:45:1A:D1:F0:95:5E:5F:7F:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:ab:c1:db:75:7b:bc:72:40:2d:c3:fa:84:8f:0f:1c:24:09: 41:04:37:7b:56:be:c1:29:8a:ea:a7:b5:cc:06:21:7e:66:1c: 4d:30:0b:8c:18:4b:f5:dd:51:26:df:98:f7:03:66:23:bd:aa: 80:8b:f9:4f:5d:f5:e9:8d:9a:e9:33:35:5c:9b:21:ed:c1:4b: 55:c5:00:97:a3:b6:fd:3a:1d:3f:2f:10:33:6e:85:1e:98:8b: 8c:1f:9e:ce:9d:13:46:14:84:bd:6d:1e:c2:31:8c:f6:d7:06: 55:d5:20:54:3b:8d:19:09:63:a7:3d:5d:e1:cf:d2:98:1d:ad: 82:a6:b7:8f:a0:b5:75:82:52:6d:c5:1f:23:59:28:9e:0d:75: ec:a5:ec:de:8a:e1:6c:30:56:b1:b5:78:79:34:24:ca:3e:b9: fe:1f:ed:a9:28:75:3d:ab:0d:9f:6b:11:bf:9b:2d:4f:ae:12: ec:9d:16:3a:11:7a:ff:bd:16:5e:e5:21:a9:b4:ee:f6:e1:44: 29:11:23:73:b2:89:e9:c0:ff:f7:66:5c:45:ac:0d:aa:c6:66: 13:98:ca:3f:6a:bb:19:0a:25:84:70:71:48:7d:53:8d:95:62: 9a:7e:8f:24:8b:0a:b1:7c:40:fe:8e:9d:e3:7f:55:0b:16:2b: d0:4c:d9:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZjMifW9vf1VchvfLKBJjmQL6nwQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMzNEM4QjVGNDM4QjhENENCMTNGMjQ1MUFEMUYwOTU1 RTVGN0ZCQjAeFw0yNTA4MjMxMTQ4MjVaFw0yNTA4MjYxNzUyMjVaMDMxMTAvBgNV BAMTKDYzMjI5RUExQTVFNTFDMDZBMkVCNjI4RTkwRDAwMDc1RjlFMDZGNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHBbhCVYvpokpRq2g50NC77Vr9 qzdDUqJhVuqigFG+7AuMz9EzUI2KYvO5zkDrgIU+VtDMqFOx7hSs+Em49/q4azgl /PcdI9rNVkG9xyYeIZiU0514k3nMCcpc2SL96aAUaqKERwWAfrw1vMBA80MS+gpw 4LRVa8TIH871ITUcBR6XWMkC9i7olgv7/LyjSMa3GyHBMoAagnRSf1MT12C3Rn0Y eQpoGfiMll5XRLjJHkJQJIQg/n/llC4j943KdKIq1vmYdRNfGd0agtbJQeEbEgXL n3FX20fVCF5KciAfckPKRCcv7dc35LjOBsM3VdJqiDLyyjNBh4leWuibELfvAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYyKeoaXlHAai62KOkNAAdfngb0EwHwYDVR0j BBgwFoAU3DTItfQ4uNTLE/JFGtHwlV5ff7swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YThmMDQzNS00ZDM4LTQ3ZWYtODUwZi01MWJhNDYxN2ZiM2QvMC9EQzM0QzhCNUY0 MzhCOEQ0Q0IxM0YyNDUxQUQxRjA5NTVFNUY3RkJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREMzNEM4QjVGNDM4QjhENENCMTNGMjQ1MUFEMUYwOTU1RTVG N0ZCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE4ZjA0MzUtNGQzOC00N2VmLTg1 MGYtNTFiYTQ2MTdmYjNkLzAvREMzNEM4QjVGNDM4QjhENENCMTNGMjQ1MUFEMUYw OTU1RTVGN0ZCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKerwdt1e7xyQC3D+oSPDxwkCUEEN3tWvsEp iuqntcwGIX5mHE0wC4wYS/XdUSbfmPcDZiO9qoCL+U9d9emNmukzNVybIe3BS1XF AJejtv06HT8vEDNuhR6Yi4wfns6dE0YUhL1tHsIxjPbXBlXVIFQ7jRkJY6c9XeHP 0pgdrYKmt4+gtXWCUm3FHyNZKJ4Ndeyl7N6K4WwwVrG1eHk0JMo+uf4f7akodT2r DZ9rEb+bLU+uEuydFjoRev+9Fl7lIam07vbhRCkRI3OyienA//dmXEWsDarGZhOY yj9quxkKJYRwcUh9U42VYpp+jySLCrF8QP6OneN/VQsWK9BM2WY= -----END CERTIFICATE-----Generated at Sat Aug 23 15:32:43 2025 by rpki-client