$ rpki-client -vvf repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.mft File: DA8C840CB41D2668581983C2C4E964E67EF2D6A1.mft (raw, json) Hash identifier: obpl//mbA78JsikGKWFEpV8PojVnqQhkP6aZku6CDXQ= Subject key identifier: BF:47:F7:4E:1B:76:8B:3B:CF:6A:78:22:86:BD:E8:FD:12:4A:0E:36 Authority key identifier: DA:8C:84:0C:B4:1D:26:68:58:19:83:C2:C4:E9:64:E6:7E:F2:D6:A1 Certificate issuer: /CN=DA8C840CB41D2668581983C2C4E964E67EF2D6A1 Certificate serial: 085B69C8DF6528E8E6AFE25DB88E0C0002571FB4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.mft Manifest number: 026C Signing time: Sat 18 Oct 2025 06:00:02 +0000 Manifest this update: Sat 18 Oct 2025 05:55:02 +0000 Manifest next update: Tue 21 Oct 2025 14:01:02 +0000 Files and hashes: 1: 3130332e3137392e3231342e302f32332d3234203d3e20313439333735.roa (hash: 7mSy93JyGfuZLtTA89nmtcGQjqdRbUslrbNWczBJpGo=) 2: DA8C840CB41D2668581983C2C4E964E67EF2D6A1.crl (hash: U1mD5PyOuImUvRYSNHvt5ddrLMMTQH2wGECxYDI8o24=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.crl rsync://repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 14:01:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:5b:69:c8:df:65:28:e8:e6:af:e2:5d:b8:8e:0c:00:02:57:1f:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA8C840CB41D2668581983C2C4E964E67EF2D6A1 Validity Not Before: Oct 18 05:55:02 2025 GMT Not After : Oct 21 14:01:02 2025 GMT Subject: CN=BF47F74E1B768B3BCF6A782286BDE8FD124A0E36 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:05:bd:fd:05:67:f5:1a:d3:d6:be:be:d9:94: a3:9d:7f:25:a3:5e:86:14:a7:9b:a9:0f:34:80:a9: 33:6c:29:89:a1:89:44:fd:33:08:b0:2c:e1:9a:02: 9f:7d:dd:14:5e:45:93:06:69:37:23:d2:c7:66:2d: 66:98:9f:6f:92:95:9d:6d:69:9b:f3:d9:b9:4e:f7: 76:f6:f2:8b:b2:5f:01:ad:ea:4a:ad:48:23:65:03: c2:0a:30:ae:aa:49:2d:b4:32:eb:04:63:0a:70:2a: f0:d1:cf:80:3b:d8:5f:62:43:00:61:c6:62:af:f2: e1:53:0c:1f:3b:15:1f:e4:28:2d:79:6f:9d:55:a6: de:64:b1:ea:20:06:3c:85:95:4c:1a:11:34:46:c4: 6c:ca:b6:0c:c8:4a:06:3c:e6:cb:a1:92:ea:46:76: 62:1a:7f:02:78:43:a5:16:21:03:ce:5b:a2:ff:37: 79:a2:1d:63:76:4b:31:05:37:93:f8:fa:34:aa:a4: 82:1c:d7:84:78:46:2c:7d:27:b8:9b:57:5b:80:dd: c2:74:cb:2d:a4:ca:11:52:51:97:9b:7d:13:b9:24: a5:60:3d:dc:48:83:4c:e2:0f:bf:0e:c5:c4:0e:1b: 2a:e6:d8:9c:84:61:08:c5:2b:7f:45:6a:90:45:45: 0a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:47:F7:4E:1B:76:8B:3B:CF:6A:78:22:86:BD:E8:FD:12:4A:0E:36 X509v3 Authority Key Identifier: keyid:DA:8C:84:0C:B4:1D:26:68:58:19:83:C2:C4:E9:64:E6:7E:F2:D6:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:1e:50:15:a6:48:0c:38:25:9d:19:d0:c7:aa:76:63:b5:41: fd:03:6c:06:b0:cc:9f:fb:ec:9f:2a:70:d8:24:3c:a7:40:72: 1c:15:fb:97:aa:15:6c:f8:8f:4f:6f:b1:f9:df:e3:ad:b9:8b: b0:b1:08:6c:1f:3c:33:fa:96:1d:59:2b:74:ae:3f:e1:1e:bb: b1:17:e3:51:62:5f:04:e8:fc:4a:9b:92:8b:58:ea:2d:69:6c: aa:39:3d:c2:49:66:54:4e:de:01:d3:ff:2d:0e:e4:b7:5f:80: 40:31:41:6a:75:d3:4e:b6:92:84:45:6a:01:52:3e:3a:ae:e0: bd:6b:3b:d1:ec:a8:e5:b4:66:ef:42:f6:8b:b8:e0:42:a2:00: de:32:e8:c4:c4:c4:a9:39:a0:a7:a0:ba:ef:aa:39:3b:dc:37: 2a:bb:20:79:1f:07:38:37:33:f4:89:1c:d3:44:5e:bb:d5:ca: 02:68:c6:6a:b2:04:39:c6:78:76:36:c7:23:20:ba:b9:8f:c5: 77:b6:d0:f9:d8:a6:c8:1c:ff:04:eb:d7:e6:1b:03:c2:66:0d: 52:ab:c2:1f:67:ea:c5:5c:fa:b7:e9:4c:f3:5f:21:7e:36:16: 13:a3:42:85:23:d6:09:3d:22:04:96:19:cd:cb:74:33:6f:65: d6:7a:16:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCFtpyN9lKOjmr+JduI4MAAJXH7QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE4Qzg0MENCNDFEMjY2ODU4MTk4M0MyQzRFOTY0RTY3 RUYyRDZBMTAeFw0yNTEwMTgwNTU1MDJaFw0yNTEwMjExNDAxMDJaMDMxMTAvBgNV BAMTKEJGNDdGNzRFMUI3NjhCM0JDRjZBNzgyMjg2QkRFOEZEMTI0QTBFMzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoBb39BWf1GtPWvr7ZlKOdfyWj XoYUp5upDzSAqTNsKYmhiUT9MwiwLOGaAp993RReRZMGaTcj0sdmLWaYn2+SlZ1t aZvz2blO93b28ouyXwGt6kqtSCNlA8IKMK6qSS20MusEYwpwKvDRz4A72F9iQwBh xmKv8uFTDB87FR/kKC15b51Vpt5kseogBjyFlUwaETRGxGzKtgzISgY85suhkupG dmIafwJ4Q6UWIQPOW6L/N3miHWN2SzEFN5P4+jSqpIIc14R4Rix9J7ibV1uA3cJ0 yy2kyhFSUZebfRO5JKVgPdxIg0ziD78OxcQOGyrm2JyEYQjFK39FapBFRQrTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUv0f3Tht2izvPangihr3o/RJKDjYwHwYDVR0j BBgwFoAU2oyEDLQdJmhYGYPCxOlk5n7y1qEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDgyN2NiOC0xYjJjLTQ0YjEtODE5MC05ODVkODIwNWE0NjQvMC9EQThDODQwQ0I0 MUQyNjY4NTgxOTgzQzJDNEU5NjRFNjdFRjJENkExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREE4Qzg0MENCNDFEMjY2ODU4MTk4M0MyQzRFOTY0RTY3RUYy RDZBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODA4MjdjYjgtMWIyYy00NGIxLTgx OTAtOTg1ZDgyMDVhNDY0LzAvREE4Qzg0MENCNDFEMjY2ODU4MTk4M0MyQzRFOTY0 RTY3RUYyRDZBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADceUBWmSAw4JZ0Z0MeqdmO1Qf0DbAawzJ/7 7J8qcNgkPKdAchwV+5eqFWz4j09vsfnf4625i7CxCGwfPDP6lh1ZK3SuP+Eeu7EX 41FiXwTo/EqbkotY6i1pbKo5PcJJZlRO3gHT/y0O5LdfgEAxQWp10062koRFagFS Pjqu4L1rO9HsqOW0Zu9C9ou44EKiAN4y6MTExKk5oKeguu+qOTvcNyq7IHkfBzg3 M/SJHNNEXrvVygJoxmqyBDnGeHY2xyMgurmPxXe20PnYpsgc/wTr1+YbA8JmDVKr wh9n6sVc+rfpTPNfIX42FhOjQoUj1gk9IgSWGc3LdDNvZdZ6FuM= -----END CERTIFICATE-----Generated at Mon Oct 20 13:22:17 2025 by rpki-client