$ rpki-client -vvf repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft File: DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft (raw, json) Hash identifier: 5X0upLTBNWmzlmnsWyVcQMuW3tlVFv7OstSfvFXgKMQ= Subject key identifier: 0A:1C:3F:2F:E4:3A:9B:E0:95:72:AD:CE:46:B1:53:39:73:57:AC:A1 Authority key identifier: DC:1F:CA:69:CA:5B:7A:3A:3E:48:25:B3:CA:FC:C3:BD:1B:C0:6E:B7 Certificate issuer: /CN=DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7 Certificate serial: 3B87C27840474CDDBEC329ED032F136944F6A5E7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft Manifest number: 0500 Signing time: Fri 22 Aug 2025 12:00:40 +0000 Manifest this update: Fri 22 Aug 2025 11:55:40 +0000 Manifest next update: Mon 25 Aug 2025 19:49:40 +0000 Files and hashes: 1: 3131312e36382e3131322e302f32302d3234203d3e203435323837.roa (hash: EmRosqOLA0o9un75dpB41tldUQb9JEqee08S4oNpAgc=) 2: 3130332e32332e3230302e302f32322d3234203d3e203435323837.roa (hash: LF6fkR6wHHLHaK6n5THO1FAaW1/pu2et9XJ8qxbKTqY=) 3: 3230322e35362e3136302e302f32322d3234203d3e203435323837.roa (hash: rZ6xFcdvrZepULyMbdGd+kxrh/vJFiCfrx4GSYa9yts=) 4: 3135302e3132392e35362e302f32322d3234203d3e203435323837.roa (hash: IRZUoX6giIzocnieegh+jhCGcm3NJfUDoJas/fn7lAQ=) 5: 3230332e39392e3133302e302f32332d3234203d3e203435323837.roa (hash: k7ibyopUV9/XrMW2a9JFbhidu+OXQwQx2OObsR3bxGk=) 6: 3137352e3137362e3136302e302f32312d3234203d3e203435323837.roa (hash: 1Oab07RIZCU6Wr6N0vZAT3UZeBpPId8GfzsxV9iRdK8=) 7: DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl (hash: P96yXmbCtwS4oZJJnKBFeqtpHpd/AM0IRoy2D1fkFUc=) 8: 323430363a323430303a3a2f33322d3438203d3e203435323837.roa (hash: VW/9nDJQjFvUWNt8EqbaeORZUsYDdJ6mH99j9xi/Rqk=) 9: 3130332e33312e3131302e302f32332d3234203d3e203435323837.roa (hash: 4PaQM0H/onjaHT/Kh1zZPEAnjrQ5QUcaM+Ku8Nb2uPM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 19:49:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:87:c2:78:40:47:4c:dd:be:c3:29:ed:03:2f:13:69:44:f6:a5:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7 Validity Not Before: Aug 22 11:55:40 2025 GMT Not After : Aug 25 19:49:40 2025 GMT Subject: CN=0A1C3F2FE43A9BE09572ADCE46B153397357ACA1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:69:c8:b0:70:0f:c0:29:40:9f:c6:b5:c0:72: 7d:2b:c4:f7:8a:ec:e5:e3:df:07:d2:e2:3b:6e:25: 83:06:b1:1e:04:f9:f5:b5:b2:ac:ea:30:63:07:1a: d9:28:3e:df:57:8a:4a:ad:19:ef:c2:49:8a:f6:2d: ae:18:a7:73:07:33:d3:f3:83:24:23:8b:66:f5:6d: d6:b1:f8:ea:3f:04:da:f3:49:5e:94:07:38:bd:1e: 22:ea:d8:4c:1a:6f:31:68:8d:95:6a:77:be:99:e8: cc:77:18:97:a5:9e:9c:d8:0a:24:76:cc:01:ad:8b: bb:e0:71:c6:72:f1:40:a8:93:3a:3b:e6:61:f7:a3: f9:30:e7:a2:2d:a6:a8:fc:75:27:32:d2:74:11:70: ae:94:68:39:b4:49:c8:e3:71:e3:1e:d0:39:29:28: 83:f7:fb:d8:65:d4:1e:d6:d8:65:a1:78:67:25:ea: 34:f1:27:8a:94:f1:0c:0f:18:e2:84:a4:b5:9e:ff: d9:f3:5a:f9:cf:ca:af:12:63:3b:1d:a8:d8:53:43: d3:33:fd:08:b3:c3:24:01:07:15:33:eb:03:de:2a: 6d:36:06:31:e6:bf:70:b7:b3:51:7d:38:17:73:3d: c2:5d:f1:5b:6f:56:1c:f6:19:28:b2:90:9e:db:e1: b3:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:1C:3F:2F:E4:3A:9B:E0:95:72:AD:CE:46:B1:53:39:73:57:AC:A1 X509v3 Authority Key Identifier: keyid:DC:1F:CA:69:CA:5B:7A:3A:3E:48:25:B3:CA:FC:C3:BD:1B:C0:6E:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:1c:c5:72:ba:67:68:2d:cb:6a:62:08:f0:60:68:28:6c:51: 40:8f:6e:9d:0b:c5:2e:08:ca:c9:7a:62:e9:9c:e5:aa:ab:87: be:f7:59:77:c2:92:74:81:8d:81:fb:21:75:32:28:b5:df:b1: e1:cb:4d:5b:01:d1:33:5b:51:6a:a5:9d:43:a2:97:27:c1:00: 8f:ba:95:c7:35:f9:61:c8:ad:a4:28:e5:a1:1b:b4:a2:e0:e4: b0:70:29:17:15:ec:55:bb:31:3e:70:65:a8:21:a7:75:f3:0e: 8c:bc:69:ba:f0:40:a6:bf:7c:72:41:84:7c:82:dc:39:7d:19: 12:7d:f7:9a:41:1e:f8:45:ae:ac:e0:0c:c3:b6:db:00:3d:60: 15:4d:82:c9:0b:bb:27:a5:6e:8d:78:6c:ce:4b:c5:51:44:2e: 7a:a7:51:b3:bc:92:8c:84:60:43:db:06:34:7d:35:db:62:5f: d4:81:8b:7e:8e:81:de:68:b3:b6:72:e0:cd:45:82:e9:e9:f9: 85:50:67:c8:39:c5:d6:55:b8:28:1c:b3:24:d1:7a:01:1f:a1: 6e:0a:ae:1d:c2:86:7f:d8:17:8f:ea:35:9c:72:ef:09:d9:d5: 11:82:cc:a8:1e:8e:4d:bb:fb:8b:7c:02:e0:b9:4d:8f:55:a5: c0:c9:82:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUO4fCeEBHTN2+wyntAy8TaUT2pecwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMxRkNBNjlDQTVCN0EzQTNFNDgyNUIzQ0FGQ0MzQkQx QkMwNkVCNzAeFw0yNTA4MjIxMTU1NDBaFw0yNTA4MjUxOTQ5NDBaMDMxMTAvBgNV BAMTKDBBMUMzRjJGRTQzQTlCRTA5NTcyQURDRTQ2QjE1MzM5NzM1N0FDQTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsaciwcA/AKUCfxrXAcn0rxPeK 7OXj3wfS4jtuJYMGsR4E+fW1sqzqMGMHGtkoPt9XikqtGe/CSYr2La4Yp3MHM9Pz gyQji2b1bdax+Oo/BNrzSV6UBzi9HiLq2EwabzFojZVqd76Z6Mx3GJelnpzYCiR2 zAGti7vgccZy8UCokzo75mH3o/kw56Itpqj8dScy0nQRcK6UaDm0ScjjceMe0Dkp KIP3+9hl1B7W2GWheGcl6jTxJ4qU8QwPGOKEpLWe/9nzWvnPyq8SYzsdqNhTQ9Mz /QizwyQBBxUz6wPeKm02BjHmv3C3s1F9OBdzPcJd8VtvVhz2GSiykJ7b4bOrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUChw/L+Q6m+CVcq3ORrFTOXNXrKEwHwYDVR0j BBgwFoAU3B/Kacpbejo+SCWzyvzDvRvAbrcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODI0OWZjMy02Yzg0LTRlOTEtYjA2Ny1hMGM2YTg0MGEzYTkvMC9EQzFGQ0E2OUNB NUI3QTNBM0U0ODI1QjNDQUZDQzNCRDFCQzA2RUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREMxRkNBNjlDQTVCN0EzQTNFNDgyNUIzQ0FGQ0MzQkQxQkMw NkVCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTgyNDlmYzMtNmM4NC00ZTkxLWIw NjctYTBjNmE4NDBhM2E5LzAvREMxRkNBNjlDQTVCN0EzQTNFNDgyNUIzQ0FGQ0Mz QkQxQkMwNkVCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH0cxXK6Z2gty2piCPBgaChsUUCPbp0LxS4I ysl6Yumc5aqrh773WXfCknSBjYH7IXUyKLXfseHLTVsB0TNbUWqlnUOilyfBAI+6 lcc1+WHIraQo5aEbtKLg5LBwKRcV7FW7MT5wZaghp3XzDoy8abrwQKa/fHJBhHyC 3Dl9GRJ995pBHvhFrqzgDMO22wA9YBVNgskLuyelbo14bM5LxVFELnqnUbO8koyE YEPbBjR9NdtiX9SBi36Ogd5os7Zy4M1Fgunp+YVQZ8g5xdZVuCgcsyTRegEfoW4K rh3Chn/YF4/qNZxy7wnZ1RGCzKgejk27+4t8AuC5TY9VpcDJgk8= -----END CERTIFICATE-----Generated at Sat Aug 23 12:16:21 2025 by rpki-client