$ rpki-client -vvf repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.mft File: DA680D591E9E6B4622614F94CF255933B6749212.mft (raw, json) Hash identifier: 4ZLTsB/fu6AtJPdq+GzAHqagO4S6K9C7OVKo21of+pY= Subject key identifier: 26:6B:02:06:F8:FA:62:67:E3:7D:AB:72:65:EA:22:43:41:99:0A:0E Authority key identifier: DA:68:0D:59:1E:9E:6B:46:22:61:4F:94:CF:25:59:33:B6:74:92:12 Certificate issuer: /CN=DA680D591E9E6B4622614F94CF255933B6749212 Certificate serial: 523A3E0ABAE830B9344A6761A73E9E2D17050DFA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DA680D591E9E6B4622614F94CF255933B6749212.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.mft Manifest number: FC Signing time: Sat 23 Aug 2025 01:41:53 +0000 Manifest this update: Sat 23 Aug 2025 01:36:53 +0000 Manifest next update: Tue 26 Aug 2025 12:28:53 +0000 Files and hashes: 1: DA680D591E9E6B4622614F94CF255933B6749212.crl (hash: zVrBn6O+r3NlNBdxApjjoJLLR8KvSzCLb5ce7Y/6k1A=) 2: 3135372e31302e3138332e302f32342d3234203d3e20313532333434.roa (hash: bW5GhG+n2gDC7aNS0QQfawXhWxcHV8PEi1pP/7l6eDw=) 3: 3135372e31302e3138322e302f32332d3234203d3e20313532333434.roa (hash: i0rS2o3mTh9+/ZMOMUuCXL7VcRhfm2ZL+vmQMK6r/AQ=) 4: 3135372e31302e3138322e302f32342d3234203d3e20313532333434.roa (hash: zo0q/Qyr9+OM0Fi4S3qemAqF/9QAiZg3ou4qqrAMiyU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.crl rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DA680D591E9E6B4622614F94CF255933B6749212.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 10:24:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:3a:3e:0a:ba:e8:30:b9:34:4a:67:61:a7:3e:9e:2d:17:05:0d:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA680D591E9E6B4622614F94CF255933B6749212 Validity Not Before: Aug 23 01:36:53 2025 GMT Not After : Aug 26 12:28:53 2025 GMT Subject: CN=266B0206F8FA6267E37DAB7265EA224341990A0E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:c0:46:49:1f:68:32:f5:53:8b:68:a6:7e:63: ad:bc:3c:10:6d:02:61:9f:54:54:b3:a6:95:8a:e1: 0b:dd:04:9e:a2:b1:26:64:da:0b:e8:f4:cf:a3:7b: 89:43:5d:dc:37:81:33:75:64:cd:ed:51:c3:02:48: 51:5b:b0:e1:e9:d4:23:19:a5:4f:ef:1d:99:e4:62: fd:30:31:0a:c9:f0:d7:eb:00:2e:10:8b:5f:5e:03: c9:53:56:4e:26:1f:c1:1c:c0:44:c2:de:c8:12:ad: fe:6e:20:66:cc:80:c9:26:f0:39:00:b8:9f:c2:a6: f4:83:e9:3a:b7:18:3c:cd:02:05:f9:b1:3b:ad:59: 37:c0:a2:1d:51:7c:b3:7c:fd:30:32:60:78:a9:94: ab:94:25:e5:e2:e6:f0:7e:d6:6e:bc:f8:cf:03:b2: a4:6f:b1:e4:49:ab:5b:a5:f6:1f:aa:4a:06:74:83: ee:50:1c:83:1d:e7:4b:f6:18:25:de:7f:4a:de:7f: 39:21:b4:20:8c:e4:fd:02:ba:cc:37:e6:6d:9a:a9: ef:a0:04:08:01:5a:46:ec:78:da:50:ec:0e:9b:4d: e9:24:ef:f4:98:99:17:2c:6f:ac:56:9c:0b:a8:d9: f6:3a:c1:e2:f2:31:34:bb:5f:ef:1b:5b:0a:39:d3: 36:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 26:6B:02:06:F8:FA:62:67:E3:7D:AB:72:65:EA:22:43:41:99:0A:0E X509v3 Authority Key Identifier: keyid:DA:68:0D:59:1E:9E:6B:46:22:61:4F:94:CF:25:59:33:B6:74:92:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DA680D591E9E6B4622614F94CF255933B6749212.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4f:d9:8c:66:5f:76:60:58:8b:13:ee:c0:e0:69:40:18:7e:1e: 7c:5d:f1:b6:00:59:74:b8:02:8b:f9:09:9f:34:d7:a6:e5:ce: 9a:e0:8b:66:31:16:57:0c:06:40:dd:fd:64:1a:ac:93:e4:ff: 78:52:94:d9:c8:f4:6d:af:86:36:f5:3a:1e:3f:8a:2d:ae:ec: ec:de:02:4b:46:c7:3d:ba:80:bf:fb:4d:2c:2e:24:05:c9:02: c6:5f:e5:66:62:f7:2a:48:31:ce:93:37:d0:3b:9d:fb:03:81: 57:18:80:e4:b2:6c:55:8f:73:97:65:e4:a4:55:57:93:16:40: 60:27:c6:85:ea:25:b4:cd:92:5c:39:dd:c5:13:3a:86:6e:7a: e9:0b:a0:b2:68:e5:b8:ba:e2:61:bd:ce:b7:61:7b:dc:18:7a: 10:dc:f3:63:21:9d:ce:95:78:81:7f:7e:86:9f:eb:26:b9:b5: 0d:da:c2:5f:5b:d1:74:86:c2:e5:d4:df:54:d6:f7:dd:d7:01: d8:b2:89:b0:cc:d1:07:a0:f8:70:5a:f6:70:54:fc:b8:da:a8: 09:ce:43:1b:8b:6e:32:a5:b9:06:32:aa:6f:8e:09:b1:4f:1b: d6:44:c8:88:7b:d4:bf:0d:fa:8c:f5:33:54:0f:23:46:ef:b9: a5:bc:95:96 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUjo+CrroMLk0Smdhpz6eLRcFDfowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE2ODBENTkxRTlFNkI0NjIyNjE0Rjk0Q0YyNTU5MzNC Njc0OTIxMjAeFw0yNTA4MjMwMTM2NTNaFw0yNTA4MjYxMjI4NTNaMDMxMTAvBgNV BAMTKDI2NkIwMjA2RjhGQTYyNjdFMzdEQUI3MjY1RUEyMjQzNDE5OTBBMEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1wEZJH2gy9VOLaKZ+Y628PBBt AmGfVFSzppWK4QvdBJ6isSZk2gvo9M+je4lDXdw3gTN1ZM3tUcMCSFFbsOHp1CMZ pU/vHZnkYv0wMQrJ8NfrAC4Qi19eA8lTVk4mH8EcwETC3sgSrf5uIGbMgMkm8DkA uJ/CpvSD6Tq3GDzNAgX5sTutWTfAoh1RfLN8/TAyYHiplKuUJeXi5vB+1m68+M8D sqRvseRJq1ul9h+qSgZ0g+5QHIMd50v2GCXef0refzkhtCCM5P0Cusw35m2aqe+g BAgBWkbseNpQ7A6bTekk7/SYmRcsb6xWnAuo2fY6weLyMTS7X+8bWwo50zZzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJmsCBvj6YmfjfatyZeoiQ0GZCg4wHwYDVR0j BBgwFoAU2mgNWR6ea0YiYU+UzyVZM7Z0khIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWRhMjNlOS04NGJlLTRhNTQtYmNhMC1lOWEwY2FmZDE2ZmUvMC9EQTY4MEQ1OTFF OUU2QjQ2MjI2MTRGOTRDRjI1NTkzM0I2NzQ5MjEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvREE2ODBENTkxRTlFNkI0NjIyNjE0Rjk0Q0YyNTU5MzNCNjc0 OTIxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFkYTIzZTktODRiZS00YTU0LWJj YTAtZTlhMGNhZmQxNmZlLzAvREE2ODBENTkxRTlFNkI0NjIyNjE0Rjk0Q0YyNTU5 MzNCNjc0OTIxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAE/ZjGZfdmBYixPuwOBpQBh+Hnxd8bYAWXS4 Aov5CZ8016blzprgi2YxFlcMBkDd/WQarJPk/3hSlNnI9G2vhjb1Oh4/ii2u7Oze AktGxz26gL/7TSwuJAXJAsZf5WZi9ypIMc6TN9A7nfsDgVcYgOSybFWPc5dl5KRV V5MWQGAnxoXqJbTNklw53cUTOoZueukLoLJo5bi64mG9zrdhe9wYehDc82Mhnc6V eIF/foaf6ya5tQ3awl9b0XSGwuXU31TW993XAdiyibDM0Qeg+HBa9nBU/LjaqAnO QxuLbjKluQYyqm+OCbFPG9ZEyIh71L8N+oz1M1QPI0bvuaW8lZY= -----END CERTIFICATE-----Generated at Sat Aug 23 20:01:55 2025 by rpki-client