$ rpki-client -vvf repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft File: DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft (raw, json) Hash identifier: /v8vEoGCGQn/9VqFvOvgnrdx2GiM1mugFJTQh34OWU0= Subject key identifier: D8:14:99:43:64:EA:AC:26:36:8D:F6:9B:A0:AA:3D:EE:BA:62:70:56 Authority key identifier: DF:68:55:96:DA:F9:D3:65:4A:2E:2F:21:CE:11:AA:0B:B8:0E:45:D1 Certificate issuer: /CN=DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1 Certificate serial: 244B1EEC25AAFC60F53F0B1E68A36CA3B0FC776A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft Manifest number: 0348 Signing time: Sat 23 Aug 2025 02:10:37 +0000 Manifest this update: Sat 23 Aug 2025 02:05:37 +0000 Manifest next update: Tue 26 Aug 2025 13:41:37 +0000 Files and hashes: 1: 3130332e3136392e3235352e302f32342d3234203d3e20313432333730.roa (hash: zXQVHsRu+F6s1MVNzrtFO+eU8maZ8ipfm8/30hkR/TA=) 2: 3130332e3136392e3235342e302f32332d3233203d3e20313432333730.roa (hash: DLJmEfbL3ZCZVVlEJnye8kD0RQcM/dIeZcFOFRkwePE=) 3: 3130332e3136392e3235342e302f32342d3234203d3e20313432333730.roa (hash: TptDi2yJ3flSSMDSqc9f0+quKLm9aeSrjexrkn5vS9o=) 4: DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.crl (hash: lQcHUfANgU4h9qRXfSoqrDiT7hxVUsoenw6tsTh7+ec=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.crl rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:19:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:4b:1e:ec:25:aa:fc:60:f5:3f:0b:1e:68:a3:6c:a3:b0:fc:77:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1 Validity Not Before: Aug 23 02:05:37 2025 GMT Not After : Aug 26 13:41:37 2025 GMT Subject: CN=D814994364EAAC26368DF69BA0AA3DEEBA627056 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:8a:10:c9:ec:08:6f:3b:14:7e:a5:07:55:2e: 2b:53:05:13:b1:54:34:6d:51:42:55:d5:c8:f5:d2: 2f:c0:61:41:5c:e1:a4:05:72:f2:86:39:92:0e:1c: 73:5d:97:67:d4:e3:f6:80:fd:18:dd:b3:4b:a8:fc: 62:f6:08:19:9e:bd:1d:9a:6f:23:00:90:a0:fb:52: 2b:54:b9:c8:99:0b:7f:e9:b1:9e:fc:6e:6e:c6:8a: 8d:40:13:4b:42:9f:0d:af:d7:bd:37:f0:39:7c:78: bd:9d:d9:ed:49:f4:34:59:25:0e:74:f7:d4:bc:31: 85:09:c1:49:8a:ef:8f:b1:95:87:34:81:35:82:d2: 47:56:65:25:b6:5b:e0:9e:81:9a:87:af:6b:e2:86: 2c:c9:a2:16:8f:a1:f7:37:2a:c9:7a:bd:ee:5d:a0: ea:cc:a2:f8:b9:8a:ae:64:bc:95:43:92:c0:32:10: bc:d5:ae:d7:4c:98:ee:a6:10:0a:a5:e0:9d:14:05: 73:19:4a:82:2e:f7:8b:8a:49:54:dd:57:30:bd:0f: b9:62:25:ac:ec:ed:3d:9e:71:e3:82:a4:e3:a2:ee: fc:8a:74:f0:5e:08:28:e5:3f:28:d1:3e:34:1d:03: a3:ec:db:dd:87:e1:5d:f0:38:cb:f2:e3:54:f8:b4: d4:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:14:99:43:64:EA:AC:26:36:8D:F6:9B:A0:AA:3D:EE:BA:62:70:56 X509v3 Authority Key Identifier: keyid:DF:68:55:96:DA:F9:D3:65:4A:2E:2F:21:CE:11:AA:0B:B8:0E:45:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:22:2d:4e:72:6e:ed:4d:15:69:0a:5b:52:3f:f5:b6:79:be: 5f:27:51:ef:af:94:5d:a1:d3:cb:51:01:57:0b:7d:4c:cf:dc: 31:48:d6:26:0d:af:b6:77:6b:2e:c4:87:6e:a9:7e:c4:04:7e: f5:71:4e:86:05:4a:43:a9:02:9a:f8:3a:56:9f:65:81:6d:83: bb:83:d6:5e:d1:62:bf:25:d3:52:2d:68:5f:cf:1e:84:1b:df: d7:ff:82:03:34:7e:3c:7c:12:62:5f:b4:66:03:e9:19:95:60: 74:81:d8:3c:90:65:ad:b9:af:cb:18:3f:8d:ae:90:cd:5e:5d: f3:40:7f:ee:da:e9:22:64:69:e8:94:e9:ed:5b:82:a3:e6:d7: 21:e9:bf:00:e8:c1:e7:cd:73:64:2b:06:e0:2b:d3:e7:06:5b: 3b:63:3b:34:03:47:7b:d9:ea:e8:bc:14:ff:da:dd:9e:22:4b: 4c:af:09:99:c1:50:f2:44:62:e3:37:96:1c:62:92:69:4f:c3: 21:dc:53:1b:28:ad:7e:b4:af:d1:8c:c5:14:76:f4:ed:8a:e1: 00:bf:37:a5:f2:f8:53:51:8e:f3:a0:3f:a3:f7:ba:56:5a:ef: b3:f9:8f:18:cc:44:8f:ba:52:4a:1e:5a:63:e6:ef:02:9b:9d: 42:bb:49:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJEse7CWq/GD1PwseaKNso7D8d2owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY2ODU1OTZEQUY5RDM2NTRBMkUyRjIxQ0UxMUFBMEJC ODBFNDVEMTAeFw0yNTA4MjMwMjA1MzdaFw0yNTA4MjYxMzQxMzdaMDMxMTAvBgNV BAMTKEQ4MTQ5OTQzNjRFQUFDMjYzNjhERjY5QkEwQUEzREVFQkE2MjcwNTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTihDJ7AhvOxR+pQdVLitTBROx VDRtUUJV1cj10i/AYUFc4aQFcvKGOZIOHHNdl2fU4/aA/Rjds0uo/GL2CBmevR2a byMAkKD7UitUuciZC3/psZ78bm7Gio1AE0tCnw2v17038Dl8eL2d2e1J9DRZJQ50 99S8MYUJwUmK74+xlYc0gTWC0kdWZSW2W+CegZqHr2vihizJohaPofc3Ksl6ve5d oOrMovi5iq5kvJVDksAyELzVrtdMmO6mEAql4J0UBXMZSoIu94uKSVTdVzC9D7li Jazs7T2eceOCpOOi7vyKdPBeCCjlPyjRPjQdA6Ps292H4V3wOMvy41T4tNRjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2BSZQ2TqrCY2jfaboKo97rpicFYwHwYDVR0j BBgwFoAU32hVltr502VKLi8hzhGqC7gORdEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NzUyYjNjMi0zZjMwLTQwNDAtOGIwNS04MzgyMTc3NzA0OGYvMC9ERjY4NTU5NkRB RjlEMzY1NEEyRTJGMjFDRTExQUEwQkI4MEU0NUQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREY2ODU1OTZEQUY5RDM2NTRBMkUyRjIxQ0UxMUFBMEJCODBF NDVEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjc1MmIzYzItM2YzMC00MDQwLThi MDUtODM4MjE3NzcwNDhmLzAvREY2ODU1OTZEQUY5RDM2NTRBMkUyRjIxQ0UxMUFB MEJCODBFNDVEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB4iLU5ybu1NFWkKW1I/9bZ5vl8nUe+vlF2h 08tRAVcLfUzP3DFI1iYNr7Z3ay7Eh26pfsQEfvVxToYFSkOpApr4OlafZYFtg7uD 1l7RYr8l01ItaF/PHoQb39f/ggM0fjx8EmJftGYD6RmVYHSB2DyQZa25r8sYP42u kM1eXfNAf+7a6SJkaeiU6e1bgqPm1yHpvwDowefNc2QrBuAr0+cGWztjOzQDR3vZ 6ui8FP/a3Z4iS0yvCZnBUPJEYuM3lhxikmlPwyHcUxsorX60r9GMxRR29O2K4QC/ N6Xy+FNRjvOgP6P3ulZa77P5jxjMRI+6UkoeWmPm7wKbnUK7SdY= -----END CERTIFICATE-----Generated at Sat Aug 23 14:00:36 2025 by rpki-client