$ rpki-client -vvf repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.mft File: DCD5207AC33E109E31052BBB7F811DBF6DA180BB.mft (raw, json) Hash identifier: BmRK7Ofs05TeLw/XlVWyonvc833g7oJbcVwXrojIa9Y= Subject key identifier: 33:24:EB:17:BA:85:84:FE:36:8A:D6:9F:57:CB:BC:E5:9D:12:4B:7C Authority key identifier: DC:D5:20:7A:C3:3E:10:9E:31:05:2B:BB:7F:81:1D:BF:6D:A1:80:BB Certificate issuer: /CN=DCD5207AC33E109E31052BBB7F811DBF6DA180BB Certificate serial: 55A36312DD016B04318679C5201D20E93E4CCBD2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.mft Manifest number: 65 Signing time: Fri 22 Aug 2025 23:51:57 +0000 Manifest this update: Fri 22 Aug 2025 23:46:57 +0000 Manifest next update: Tue 26 Aug 2025 11:15:57 +0000 Files and hashes: 1: 3136302e32322e3130312e302f32342d3234203d3e20313532383039.roa (hash: mizXQiZMhSS2dg4DmWjoCSbZiybtKsfGNPxNOZ0yF9I=) 2: DCD5207AC33E109E31052BBB7F811DBF6DA180BB.crl (hash: A8KzYXmRb9SEqDI0rB0XQdM6hJZAPkpB/yVIBgQLtNM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.crl rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:a3:63:12:dd:01:6b:04:31:86:79:c5:20:1d:20:e9:3e:4c:cb:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCD5207AC33E109E31052BBB7F811DBF6DA180BB Validity Not Before: Aug 22 23:46:57 2025 GMT Not After : Aug 26 11:15:57 2025 GMT Subject: CN=3324EB17BA8584FE368AD69F57CBBCE59D124B7C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:b2:c0:c2:61:6e:5a:e8:fc:ec:c2:cd:f0:80: 72:74:b0:dd:c0:4b:c0:2a:8c:f6:8a:5a:f8:2a:31: fb:e4:7b:05:cd:44:45:03:67:52:c9:ca:54:24:9f: 62:fa:ac:d4:22:ee:32:f1:ad:a0:f6:eb:8a:0a:fe: 35:1a:85:4d:b9:a3:b0:3f:1b:4a:01:fe:b7:8f:a7: 25:f5:0a:35:25:aa:d8:9c:6d:d1:d5:d6:c2:35:43: 24:ad:bd:76:87:c8:16:a5:ee:02:b2:70:14:f3:29: c3:80:0c:f7:87:9a:78:61:86:ca:70:27:33:81:b4: 61:19:9b:fe:28:36:a1:9d:ff:24:b0:34:1f:7a:9d: 23:a2:f3:ee:a0:f7:05:9e:3f:ce:3c:9c:5e:4b:41: 26:47:56:ed:d7:7a:3e:56:15:e2:04:f1:16:24:33: c2:11:5c:b6:d2:a1:fa:3e:db:6b:ac:7d:59:7f:a3: 78:be:bd:86:e5:9a:49:db:cb:58:2d:0b:30:09:4f: a5:b2:f4:b2:1f:23:d3:a8:b2:17:3b:9e:58:6d:b6: 52:37:87:c5:ef:6b:27:b4:25:80:44:f4:71:ef:79: 1d:7c:8a:14:bf:61:9d:27:f5:5e:fd:0a:11:39:9f: 6c:4d:7a:73:a7:3a:f7:dc:fb:0d:4a:07:86:23:b9: dc:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 33:24:EB:17:BA:85:84:FE:36:8A:D6:9F:57:CB:BC:E5:9D:12:4B:7C X509v3 Authority Key Identifier: keyid:DC:D5:20:7A:C3:3E:10:9E:31:05:2B:BB:7F:81:1D:BF:6D:A1:80:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:4f:bb:7e:43:ca:d4:df:39:06:31:61:0c:27:d8:e2:e7:80: fc:2f:16:17:71:6e:85:1e:90:bd:b7:53:1d:24:d3:34:52:d3: b0:31:6f:c7:0d:ae:10:ef:1d:65:a0:91:3c:18:7e:9b:47:de: 06:ae:4e:76:ab:a2:0c:0a:a8:0c:45:27:39:bb:71:fa:7c:a9: b4:13:d8:c8:2b:2a:8b:7b:f5:c6:8d:03:73:9d:50:1e:b0:82: 35:35:3f:3f:a3:f3:7f:28:7a:7e:8d:c0:9c:8e:13:f5:7b:c1: f7:f7:5e:af:fa:77:9a:dd:05:eb:2e:68:ac:62:c0:7f:f6:29: 0b:39:a0:7b:26:a3:60:3a:a8:df:14:9d:1d:fd:d5:b2:40:b2: 68:62:bb:df:f3:ea:c5:dc:95:6c:2e:9d:39:1d:d3:18:8d:f4: 3b:01:8c:a8:bd:a3:43:62:d5:38:2a:4f:4f:40:47:81:92:ba: d4:fa:da:8a:be:4b:fe:d9:92:aa:40:0b:90:47:3b:94:c4:0d: ac:cb:83:64:fd:30:89:17:74:8a:a1:6e:4d:22:1c:3e:35:89: 8a:59:62:ec:d4:3a:2f:a7:fb:3d:79:56:26:99:bd:0c:01:29: 8a:16:7a:d2:56:48:91:8f:e7:b2:4c:dc:32:4b:86:ff:64:2e: d5:19:de:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVaNjEt0BawQxhnnFIB0g6T5My9IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENENTIwN0FDMzNFMTA5RTMxMDUyQkJCN0Y4MTFEQkY2 REExODBCQjAeFw0yNTA4MjIyMzQ2NTdaFw0yNTA4MjYxMTE1NTdaMDMxMTAvBgNV BAMTKDMzMjRFQjE3QkE4NTg0RkUzNjhBRDY5RjU3Q0JCQ0U1OUQxMjRCN0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAssDCYW5a6Pzsws3wgHJ0sN3A S8AqjPaKWvgqMfvkewXNREUDZ1LJylQkn2L6rNQi7jLxraD264oK/jUahU25o7A/ G0oB/rePpyX1CjUlqticbdHV1sI1QyStvXaHyBal7gKycBTzKcOADPeHmnhhhspw JzOBtGEZm/4oNqGd/ySwNB96nSOi8+6g9wWeP848nF5LQSZHVu3Xej5WFeIE8RYk M8IRXLbSofo+22usfVl/o3i+vYblmknby1gtCzAJT6Wy9LIfI9Ooshc7nlhttlI3 h8Xvaye0JYBE9HHveR18ihS/YZ0n9V79ChE5n2xNenOnOvfc+w1KB4YjudyhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMyTrF7qFhP42itafV8u85Z0SS3wwHwYDVR0j BBgwFoAU3NUgesM+EJ4xBSu7f4Edv22hgLswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDhlZjExOS03ZGRmLTQ1ZTUtODYzNC0zOGI3NzI1OGNiY2MvMC9EQ0Q1MjA3QUMz M0UxMDlFMzEwNTJCQkI3RjgxMURCRjZEQTE4MEJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRENENTIwN0FDMzNFMTA5RTMxMDUyQkJCN0Y4MTFEQkY2REEx ODBCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ4ZWYxMTktN2RkZi00NWU1LTg2 MzQtMzhiNzcyNThjYmNjLzAvRENENTIwN0FDMzNFMTA5RTMxMDUyQkJCN0Y4MTFE QkY2REExODBCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKBPu35DytTfOQYxYQwn2OLngPwvFhdxboUe kL23Ux0k0zRS07Axb8cNrhDvHWWgkTwYfptH3gauTnarogwKqAxFJzm7cfp8qbQT 2MgrKot79caNA3OdUB6wgjU1Pz+j838oen6NwJyOE/V7wff3Xq/6d5rdBesuaKxi wH/2KQs5oHsmo2A6qN8UnR391bJAsmhiu9/z6sXclWwunTkd0xiN9DsBjKi9o0Ni 1TgqT09AR4GSutT62oq+S/7ZkqpAC5BHO5TEDazLg2T9MIkXdIqhbk0iHD41iYpZ YuzUOi+n+z15ViaZvQwBKYoWetJWSJGP57JM3DJLhv9kLtUZ3m0= -----END CERTIFICATE-----Generated at Sat Aug 23 19:57:32 2025 by rpki-client