$ rpki-client -vvf repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft File: DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft (raw, json) Hash identifier: bYYMNLSCtERVswBmj3bCwZib5DN+fGcxx6xBuuv/wic= Subject key identifier: 76:1C:93:4A:BB:36:43:AF:CC:54:6F:88:0B:A8:57:BB:C3:21:DA:19 Authority key identifier: DF:0A:C6:ED:AE:FC:E4:FE:D1:EE:8A:4C:0A:7B:C4:EF:D6:22:FB:2E Certificate issuer: /CN=DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E Certificate serial: 60D8DDA458C469E6800AD5A7FCEB96AB1BC9E26D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft Manifest number: 0173 Signing time: Sun 24 Aug 2025 00:31:38 +0000 Manifest this update: Sun 24 Aug 2025 00:26:38 +0000 Manifest next update: Wed 27 Aug 2025 02:36:38 +0000 Files and hashes: 1: 3130332e3132372e3130362e302f32332d3234203d3e20313530393731.roa (hash: lW1DAyCSTgRvB6XQz9p6ZQqRRWcAHTlnodsMGbhnNcU=) 2: DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.crl (hash: DKoga8zA3hIa+kgnmhoF8APdwrCSM2x06hQeBHJMJmg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.crl rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 27 Aug 2025 02:36:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:d8:dd:a4:58:c4:69:e6:80:0a:d5:a7:fc:eb:96:ab:1b:c9:e2:6d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E Validity Not Before: Aug 24 00:26:38 2025 GMT Not After : Aug 27 02:36:38 2025 GMT Subject: CN=761C934ABB3643AFCC546F880BA857BBC321DA19 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:b6:5c:f7:a3:1e:6c:b6:82:90:fa:f5:e7:31: 27:ac:a3:8b:02:ce:a9:dd:57:dd:6f:af:fc:14:8e: 37:13:94:57:7b:ec:a9:55:db:91:15:09:29:fa:27: ee:1b:30:b0:49:e2:5b:2c:7b:91:6b:06:c8:4a:91: ec:65:3d:c3:dc:f7:3b:0d:f6:ac:55:89:30:1e:96: 22:a7:fe:00:c8:01:9b:a4:48:d2:38:c5:97:02:b9: 31:1e:da:e8:ba:57:1b:3d:49:f0:ae:e0:49:86:a6: 10:ea:29:c9:13:fd:bf:61:1b:3e:d7:a6:4a:4b:b6: c3:29:ed:1a:8a:d8:68:32:bf:5b:71:49:bb:0e:9a: 72:32:06:14:1e:d4:28:a5:01:d6:10:ab:dc:34:c8: 70:df:6e:9d:3f:18:3c:7b:76:00:75:1b:99:f3:e6: 90:c5:da:a7:6b:c6:c5:4d:f8:44:bb:9b:11:f9:51: d7:72:87:34:c1:91:58:ac:01:da:72:71:eb:1d:e2: 86:1a:c9:00:5e:aa:70:46:61:ed:c0:b0:44:71:4a: f2:e4:94:a7:a4:20:8f:05:48:e3:da:96:6d:b8:fc: d9:38:3c:bc:ed:a4:16:66:3a:b9:4e:13:f8:64:15: 02:98:3c:03:da:3c:62:f5:99:dc:00:1a:fd:27:92: e1:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:1C:93:4A:BB:36:43:AF:CC:54:6F:88:0B:A8:57:BB:C3:21:DA:19 X509v3 Authority Key Identifier: keyid:DF:0A:C6:ED:AE:FC:E4:FE:D1:EE:8A:4C:0A:7B:C4:EF:D6:22:FB:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d2:17:65:b6:1c:98:84:83:47:b2:d4:15:5e:d9:4e:b0:ab:9d: b2:c3:e0:5b:0f:0a:a2:a9:08:9a:0b:17:2d:6b:af:c1:c4:c1: 3f:71:b4:84:60:a9:33:9b:93:34:57:b5:52:0e:6e:fa:98:eb: d4:b6:28:d5:0e:20:6f:2c:67:0a:b4:53:e3:ec:19:09:69:eb: 8e:5e:58:49:db:3d:91:68:0c:64:5f:06:6e:57:be:10:47:24: 75:dd:c7:41:fc:ad:b8:12:26:c7:2e:8a:a1:12:ec:72:40:58: f2:5d:ff:29:ee:16:d8:08:f5:09:56:05:b3:d0:94:7e:2d:8c: c6:4b:a7:8f:74:09:9f:8c:67:94:18:03:9f:0f:ef:10:0e:d6: 55:a2:aa:45:4e:f5:41:c8:92:84:25:57:1c:af:87:55:a7:79: 48:f9:08:9f:c1:26:2a:8a:60:05:45:22:7a:17:c4:cd:df:45: e1:e7:3c:d4:6e:fc:f4:49:15:37:c3:b7:e8:a1:3c:1a:4a:7e: 5b:c0:ff:6f:e9:aa:a6:38:d5:f2:b0:21:e5:38:e1:12:16:fc: 33:a6:fb:93:21:04:85:44:86:f4:30:a1:cf:9e:68:ba:f4:81: ce:65:5c:cd:20:ff:46:d6:02:b4:00:5e:12:da:19:33:35:f2: ca:47:a5:f3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYNjdpFjEaeaACtWn/OuWqxvJ4m0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYwQUM2RURBRUZDRTRGRUQxRUU4QTRDMEE3QkM0RUZE NjIyRkIyRTAeFw0yNTA4MjQwMDI2MzhaFw0yNTA4MjcwMjM2MzhaMDMxMTAvBgNV BAMTKDc2MUM5MzRBQkIzNjQzQUZDQzU0NkY4ODBCQTg1N0JCQzMyMURBMTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCttlz3ox5stoKQ+vXnMSeso4sC zqndV91vr/wUjjcTlFd77KlV25EVCSn6J+4bMLBJ4lsse5FrBshKkexlPcPc9zsN 9qxViTAeliKn/gDIAZukSNI4xZcCuTEe2ui6Vxs9SfCu4EmGphDqKckT/b9hGz7X pkpLtsMp7RqK2Ggyv1txSbsOmnIyBhQe1CilAdYQq9w0yHDfbp0/GDx7dgB1G5nz 5pDF2qdrxsVN+ES7mxH5UddyhzTBkVisAdpycesd4oYayQBeqnBGYe3AsERxSvLk lKekII8FSOPalm24/Nk4PLztpBZmOrlOE/hkFQKYPAPaPGL1mdwAGv0nkuF/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdhyTSrs2Q6/MVG+IC6hXu8Mh2hkwHwYDVR0j BBgwFoAU3wrG7a785P7R7opMCnvE79Yi+y4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OGQ3YTAzOC1mOGExLTRlZDAtYTFhZi01NDk1MmU1NDNjNDMvMC9ERjBBQzZFREFF RkNFNEZFRDFFRThBNEMwQTdCQzRFRkQ2MjJGQjJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREYwQUM2RURBRUZDRTRGRUQxRUU4QTRDMEE3QkM0RUZENjIy RkIyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzhkN2EwMzgtZjhhMS00ZWQwLWEx YWYtNTQ5NTJlNTQzYzQzLzAvREYwQUM2RURBRUZDRTRGRUQxRUU4QTRDMEE3QkM0 RUZENjIyRkIyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBANIXZbYcmISDR7LUFV7ZTrCrnbLD4FsPCqKp CJoLFy1rr8HEwT9xtIRgqTObkzRXtVIObvqY69S2KNUOIG8sZwq0U+PsGQlp645e WEnbPZFoDGRfBm5XvhBHJHXdx0H8rbgSJscuiqES7HJAWPJd/ynuFtgI9QlWBbPQ lH4tjMZLp490CZ+MZ5QYA58P7xAO1lWiqkVO9UHIkoQlVxyvh1WneUj5CJ/BJiqK YAVFInoXxM3fReHnPNRu/PRJFTfDt+ihPBpKflvA/2/pqqY41fKwIeU44RIW/DOm +5MhBIVEhvQwoc+eaLr0gc5lXM0g/0bWArQAXhLaGTM18spHpfM= -----END CERTIFICATE-----Generated at Sun Aug 24 04:09:45 2025 by rpki-client