$ rpki-client -vvf repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft File: DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft (raw, json) Hash identifier: sTBzS9zzkawTdoE/UEDpZ2TkrSg69OeqzjIqGPo+2xM= Subject key identifier: C6:27:1E:83:E8:12:F1:0B:3F:71:80:82:98:A8:CD:F4:37:30:93:0D Authority key identifier: DF:8E:F2:99:4C:B5:42:09:F2:C2:A3:9A:7B:CE:7D:A0:D9:C3:4E:4A Certificate issuer: /CN=DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A Certificate serial: 280CBEBC8AA7F77CA612EFD37031A4887AFFE59B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft Manifest number: 0343 Signing time: Sat 23 Aug 2025 04:41:15 +0000 Manifest this update: Sat 23 Aug 2025 04:36:15 +0000 Manifest next update: Tue 26 Aug 2025 09:46:15 +0000 Files and hashes: 1: 3130332e3133322e31342e302f32342d3234203d3e20313331373336.roa (hash: XPqP92iiEQWlwXCwRpR2WN8Lt9Zye6dCVSvcRgh/30k=) 2: 323430343a326363303a32633a3a2f34362d3436203d3e20313331373336.roa (hash: t4c93T36jMt5VZmXd/bp2z8IhiNgox8OFSWiaBbxAhQ=) 3: 3130332e3133322e31332e302f32342d3234203d3e20313331373336.roa (hash: 2cxxZUWkJsO3oT8bqHDC+csSkm6PFb2gUAHDSh62gR8=) 4: 323430343a326363303a32343a3a2f34362d3436203d3e20313331373336.roa (hash: pNNOikD6VzRUPv7yZG6Cg3KiGof++IQqkIf9l+Tqx7M=) 5: 323430343a326363303a32383a3a2f34362d3436203d3e20313331373336.roa (hash: dl0z7TuYwDUuSU57FfKOeKvhobp1vKvNdUgb56XLczs=) 6: 323430343a326363303a3a2f34332d3433203d3e20313331373336.roa (hash: FOu7z+lFtPq+cQCxDqirVfbm+xQEfu1NcMOm+058Mco=) 7: 323430343a326363303a32303a3a2f34362d3436203d3e20313331373336.roa (hash: AL79go4QRK47TgrAmtQGB5fYfJRAvCqPrZVQAqwDWT4=) 8: DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.crl (hash: OBJlSfUIp0KKj+0fa1xXhWuroRYaIlCgycVDDbO6TzA=) 9: 3130332e3133322e31352e302f32342d3234203d3e20313331373336.roa (hash: YsQ/6eOY7UY889dueTFqI5fZ9jzbm6RP7AZHDvdYNjo=) 10: 3130332e3133322e31322e302f32342d3234203d3e20313331373336.roa (hash: yYY5Xasn+MhbZ/7PqdrXZuQAXqu+qcVQtvVv3ePHTro=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.crl rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 09:46:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:0c:be:bc:8a:a7:f7:7c:a6:12:ef:d3:70:31:a4:88:7a:ff:e5:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A Validity Not Before: Aug 23 04:36:15 2025 GMT Not After : Aug 26 09:46:15 2025 GMT Subject: CN=C6271E83E812F10B3F71808298A8CDF43730930D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:8f:55:87:c7:9c:2b:f2:c7:45:97:78:1d:4c: 2d:ee:43:dd:8d:a5:c8:85:a5:b3:e1:81:b1:2f:f3: 93:86:51:0b:e0:7f:c4:ca:1f:c7:5c:bc:33:d8:d4: 2a:8a:3e:ce:65:e3:05:62:0d:76:81:12:3a:85:f8: 88:cf:fc:4a:b7:78:14:d9:6d:e4:b5:32:09:5f:2c: e7:02:a0:a8:81:31:8e:80:f2:00:5a:4b:72:d9:59: 9f:97:90:5e:95:d0:3a:a5:c1:aa:a3:a8:b7:25:00: 18:8a:b5:ab:90:b8:fd:0e:0f:6c:85:c5:bf:e3:e3: 35:12:d4:7d:90:09:c5:65:ba:42:ed:10:74:fc:fb: 34:0f:26:4a:5f:12:eb:23:4c:8b:0f:17:18:0b:90: 6f:00:8f:cb:4a:a5:37:51:ca:4b:27:be:21:32:37: 5f:d6:7f:e5:16:ee:a7:b4:27:4c:ea:f0:9b:40:35: dd:1e:1f:fb:25:48:1e:54:bf:0d:d2:0e:44:fc:e1: ad:18:d9:77:1c:bb:08:63:cb:ec:c8:93:66:74:52: 7c:77:53:6e:c5:38:fe:48:54:b5:d7:33:fb:a0:88: 53:e2:24:85:fc:b1:7e:65:c2:2b:e0:e4:cb:1a:2b: f0:ad:16:49:e5:5b:e4:ff:21:14:ef:86:a7:ce:9d: 60:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:27:1E:83:E8:12:F1:0B:3F:71:80:82:98:A8:CD:F4:37:30:93:0D X509v3 Authority Key Identifier: keyid:DF:8E:F2:99:4C:B5:42:09:F2:C2:A3:9A:7B:CE:7D:A0:D9:C3:4E:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:f9:94:cf:b0:15:c3:83:8c:12:1e:76:28:78:07:0b:b4:8f: fb:28:3e:03:1b:f2:37:14:70:0d:89:c3:ad:9b:e2:cb:f2:16: 9a:cd:00:34:f3:d1:87:d4:55:a4:02:d3:84:01:e9:26:57:d7: 07:dc:db:83:cd:86:2c:33:d0:75:8a:2a:62:84:1b:d2:e6:b0: 7e:69:ca:ad:91:15:98:72:ec:d0:ea:1c:3b:27:c5:8d:e0:af: ac:93:63:a2:3a:e2:a5:74:c6:01:cf:74:0b:43:fd:7f:f7:76: 73:5a:4c:32:9c:01:03:88:03:e6:94:48:59:06:ae:19:10:b3: 06:44:14:41:86:98:5b:d4:39:10:1c:1b:bf:34:26:c8:60:3a: da:87:6a:ce:84:60:0b:d5:70:22:8d:b1:e0:10:69:dc:ff:18: c3:c4:14:8c:c8:4c:2a:79:70:53:8b:3a:5f:cf:a3:3e:8c:f8: ac:07:3c:77:a4:ca:11:e1:93:b1:81:36:6c:07:0a:12:65:ba: d1:52:b9:97:66:ca:a0:f3:16:28:a2:19:17:9d:da:ea:38:6a: e0:e9:21:64:9f:81:71:27:1b:ce:16:51:66:ff:9d:38:71:1a: 05:07:61:d4:ac:6b:64:6d:23:d8:03:f6:5d:24:da:ba:0b:dc: 87:0f:82:b8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKAy+vIqn93ymEu/TcDGkiHr/5ZswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY4RUYyOTk0Q0I1NDIwOUYyQzJBMzlBN0JDRTdEQTBE OUMzNEU0QTAeFw0yNTA4MjMwNDM2MTVaFw0yNTA4MjYwOTQ2MTVaMDMxMTAvBgNV BAMTKEM2MjcxRTgzRTgxMkYxMEIzRjcxODA4Mjk4QThDREY0MzczMDkzMEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+j1WHx5wr8sdFl3gdTC3uQ92N pciFpbPhgbEv85OGUQvgf8TKH8dcvDPY1CqKPs5l4wViDXaBEjqF+IjP/Eq3eBTZ beS1MglfLOcCoKiBMY6A8gBaS3LZWZ+XkF6V0DqlwaqjqLclABiKtauQuP0OD2yF xb/j4zUS1H2QCcVlukLtEHT8+zQPJkpfEusjTIsPFxgLkG8Aj8tKpTdRyksnviEy N1/Wf+UW7qe0J0zq8JtANd0eH/slSB5Uvw3SDkT84a0Y2Xccuwhjy+zIk2Z0Unx3 U27FOP5IVLXXM/ugiFPiJIX8sX5lwivg5MsaK/CtFknlW+T/IRTvhqfOnWC1AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxiceg+gS8Qs/cYCCmKjN9Dcwkw0wHwYDVR0j BBgwFoAU347ymUy1QgnywqOae859oNnDTkowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjVjZGEzNi02OTNhLTRjMWEtYmE5ZS1lMGUxNzgxMTIxNDAvMC9ERjhFRjI5OTRD QjU0MjA5RjJDMkEzOUE3QkNFN0RBMEQ5QzM0RTRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREY4RUYyOTk0Q0I1NDIwOUYyQzJBMzlBN0JDRTdEQTBEOUMz NEU0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTI1Y2RhMzYtNjkzYS00YzFhLWJh OWUtZTBlMTc4MTEyMTQwLzAvREY4RUYyOTk0Q0I1NDIwOUYyQzJBMzlBN0JDRTdE QTBEOUMzNEU0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGf5lM+wFcODjBIedih4Bwu0j/soPgMb8jcU cA2Jw62b4svyFprNADTz0YfUVaQC04QB6SZX1wfc24PNhiwz0HWKKmKEG9LmsH5p yq2RFZhy7NDqHDsnxY3gr6yTY6I64qV0xgHPdAtD/X/3dnNaTDKcAQOIA+aUSFkG rhkQswZEFEGGmFvUORAcG780JshgOtqHas6EYAvVcCKNseAQadz/GMPEFIzITCp5 cFOLOl/Poz6M+KwHPHekyhHhk7GBNmwHChJlutFSuZdmyqDzFiiiGRed2uo4auDp IWSfgXEnG84WUWb/nThxGgUHYdSsa2RtI9gD9l0k2roL3IcPgrg= -----END CERTIFICATE-----Generated at Sat Aug 23 12:46:16 2025 by rpki-client