$ rpki-client -vvf repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft File: DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft (raw, json) Hash identifier: HWpmmSEbWahMPlmCB2wukDkBAUiaobNapQs9NLuop7U= Subject key identifier: 1B:F8:82:97:A7:D0:78:27:66:7E:F6:9E:7A:5F:F0:9A:72:98:38:22 Authority key identifier: DF:77:06:1C:AE:F3:0A:8D:AF:6B:52:D8:A3:D9:FD:80:F3:72:0F:11 Certificate issuer: /CN=DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11 Certificate serial: 68C2846E815F4AEA7018C53E6FB61F57EB8AC011 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft Manifest number: D6 Signing time: Sun 19 Oct 2025 11:10:36 +0000 Manifest this update: Sun 19 Oct 2025 11:05:36 +0000 Manifest next update: Wed 22 Oct 2025 22:53:36 +0000 Files and hashes: 1: DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.crl (hash: 6jeYsWT/J2a38oW710VogTchVj8GRmRT8cdxQ4005+8=) 2: 323030313a6466333a663834303a3a2f34382d3438203d3e20313532383330.roa (hash: 3aMUQeSx+u1/318Y8ScOuCTO+xUE/7Y4RTX6xf+E9CE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.crl rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 22:53:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:c2:84:6e:81:5f:4a:ea:70:18:c5:3e:6f:b6:1f:57:eb:8a:c0:11 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11 Validity Not Before: Oct 19 11:05:36 2025 GMT Not After : Oct 22 22:53:36 2025 GMT Subject: CN=1BF88297A7D07827667EF69E7A5FF09A72983822 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:4b:8b:fc:d0:72:48:c1:f2:25:f5:bf:ef:be: 33:83:d6:3e:d7:b2:84:5f:6d:37:d2:47:1f:60:3b: 84:89:83:96:b9:60:65:2b:c2:a1:5f:66:66:3a:d0: f8:67:3a:39:65:0b:9b:c3:a0:87:9f:55:7b:29:d6: d6:ba:bb:99:e3:c2:d4:52:17:69:11:35:87:e6:97: 7e:04:c1:f6:2b:d1:57:d0:b8:8d:2e:28:94:f6:77: 4a:5e:6c:c7:91:d1:7e:44:22:92:c0:99:0c:49:e0: a0:83:74:f5:1b:d4:70:29:bc:0e:78:dc:02:c8:be: 4d:88:d2:6d:ec:4a:eb:88:5d:ec:2e:99:6e:3f:5d: 45:8e:be:81:e6:3f:a1:96:e1:77:5e:4a:1c:82:73: 6d:14:8a:9c:c1:c1:f3:89:ca:82:3a:e6:33:76:ce: 38:81:a8:74:59:db:22:dd:e9:8b:ef:14:e9:47:57: 88:63:14:86:63:b9:38:38:fe:82:13:90:18:8a:55: 64:fc:7c:32:a4:79:71:64:1e:02:80:b0:06:90:e6: cd:53:59:07:30:4a:d9:dc:ba:39:55:0c:8b:9f:06: a3:b5:91:b4:0a:34:c1:dd:2e:6c:88:70:f7:a4:09: a1:97:e3:49:66:c8:71:51:55:0c:a0:69:03:78:0c: 62:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:F8:82:97:A7:D0:78:27:66:7E:F6:9E:7A:5F:F0:9A:72:98:38:22 X509v3 Authority Key Identifier: keyid:DF:77:06:1C:AE:F3:0A:8D:AF:6B:52:D8:A3:D9:FD:80:F3:72:0F:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:62:5f:fb:1b:e7:db:60:cc:fa:67:a4:b5:d9:45:0b:ab:a0: 10:36:f0:31:a4:f0:71:3d:a3:42:43:ac:0d:a8:5b:8a:f5:c4: 51:c1:da:65:5c:57:4b:17:fc:0a:20:d8:fb:7f:9e:03:be:9a: b7:be:bc:8a:2f:99:d7:e2:7f:4a:98:1c:1f:33:9e:9d:87:71: fc:0a:df:92:f2:df:5e:36:96:84:0d:1a:16:4a:ac:eb:24:3e: 97:f8:45:16:d2:91:d1:9f:cb:08:69:e5:ba:52:82:0f:17:ff: 52:64:f0:3e:ef:0c:ad:33:8d:bf:0b:23:03:38:f0:dc:2d:96: 2e:02:24:3d:f8:0a:2f:a9:85:dd:c9:ec:5b:54:43:27:60:7f: ef:bf:91:64:4a:5f:06:f8:c6:0f:86:ca:7e:bb:ae:66:08:0c: 9a:4b:a9:3e:90:86:39:fe:41:e5:f9:d4:d6:3d:c7:de:7f:fa: c0:00:10:0c:d8:a3:5d:47:3b:49:da:49:9e:dd:6d:44:31:6f: 6d:48:14:c2:65:33:08:70:b1:a9:5c:bf:1e:a3:dc:c6:ff:e5: e6:c8:a4:12:91:4a:c3:93:4a:f9:d9:bd:3b:83:61:67:11:15: f9:d1:3e:e9:fe:05:a6:94:7f:64:df:bb:d2:9f:41:13:74:c2: ed:6e:38:f1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaMKEboFfSupwGMU+b7YfV+uKwBEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY3NzA2MUNBRUYzMEE4REFGNkI1MkQ4QTNEOUZEODBG MzcyMEYxMTAeFw0yNTEwMTkxMTA1MzZaFw0yNTEwMjIyMjUzMzZaMDMxMTAvBgNV BAMTKDFCRjg4Mjk3QTdEMDc4Mjc2NjdFRjY5RTdBNUZGMDlBNzI5ODM4MjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1S4v80HJIwfIl9b/vvjOD1j7X soRfbTfSRx9gO4SJg5a5YGUrwqFfZmY60PhnOjllC5vDoIefVXsp1ta6u5njwtRS F2kRNYfml34EwfYr0VfQuI0uKJT2d0pebMeR0X5EIpLAmQxJ4KCDdPUb1HApvA54 3ALIvk2I0m3sSuuIXewumW4/XUWOvoHmP6GW4XdeShyCc20UipzBwfOJyoI65jN2 zjiBqHRZ2yLd6YvvFOlHV4hjFIZjuTg4/oITkBiKVWT8fDKkeXFkHgKAsAaQ5s1T WQcwStncujlVDIufBqO1kbQKNMHdLmyIcPekCaGX40lmyHFRVQygaQN4DGL/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG/iCl6fQeCdmfvaeel/wmnKYOCIwHwYDVR0j BBgwFoAU33cGHK7zCo2va1LYo9n9gPNyDxEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTAyMTBiMy1jY2EyLTQzYzUtODlmOS01YTkwODZhNjA3MDMvMS9ERjc3MDYxQ0FF RjMwQThEQUY2QjUyRDhBM0Q5RkQ4MEYzNzIwRjExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREY3NzA2MUNBRUYzMEE4REFGNkI1MkQ4QTNEOUZEODBGMzcy MEYxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EwMjEwYjMtY2NhMi00M2M1LTg5 ZjktNWE5MDg2YTYwNzAzLzEvREY3NzA2MUNBRUYzMEE4REFGNkI1MkQ4QTNEOUZE ODBGMzcyMEYxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKJiX/sb59tgzPpnpLXZRQuroBA28DGk8HE9 o0JDrA2oW4r1xFHB2mVcV0sX/Aog2Pt/ngO+mre+vIovmdfif0qYHB8znp2HcfwK 35Ly3142loQNGhZKrOskPpf4RRbSkdGfywhp5bpSgg8X/1Jk8D7vDK0zjb8LIwM4 8Nwtli4CJD34Ci+phd3J7FtUQydgf++/kWRKXwb4xg+Gyn67rmYIDJpLqT6Qhjn+ QeX51NY9x95/+sAAEAzYo11HO0naSZ7dbUQxb21IFMJlMwhwsalcvx6j3Mb/5ebI pBKRSsOTSvnZvTuDYWcRFfnRPun+BaaUf2Tfu9KfQRN0wu1uOPE= -----END CERTIFICATE-----Generated at Mon Oct 20 09:44:19 2025 by rpki-client