$ rpki-client -vvf repo-rpki.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DFAE11418F2175A57D01D8F80A61497CC1F5306C.mft File: DFAE11418F2175A57D01D8F80A61497CC1F5306C.mft (raw, json) Hash identifier: 7mdCI6ARW9L7syxpEvQV79ftOlrul4h9GnyOV5lpsq4= Subject key identifier: 2B:17:27:88:DE:7D:32:05:E8:8C:29:12:CA:28:7A:48:6D:9B:56:B9 Authority key identifier: DF:AE:11:41:8F:21:75:A5:7D:01:D8:F8:0A:61:49:7C:C1:F5:30:6C Certificate issuer: /CN=DFAE11418F2175A57D01D8F80A61497CC1F5306C Certificate serial: 6E550A01B482D92E52B9BD60A4FE4F80E485A6E5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFAE11418F2175A57D01D8F80A61497CC1F5306C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DFAE11418F2175A57D01D8F80A61497CC1F5306C.mft Manifest number: 034C Signing time: Fri 22 Aug 2025 13:11:28 +0000 Manifest this update: Fri 22 Aug 2025 13:06:28 +0000 Manifest next update: Mon 25 Aug 2025 23:31:28 +0000 Files and hashes: 1: DFAE11418F2175A57D01D8F80A61497CC1F5306C.crl (hash: 7uZDbEf416vLxJvdFtuVXi5r/Xscd72YzXMJa5XgJFU=) 2: 3130332e3137312e3138342e302f32342d3234203d3e20313432333734.roa (hash: 6aMZ4xs6I3z2wIHDjzXkkCFtdMcUice/aLHdynSzMx8=) 3: 3130332e3137312e3138352e302f32342d3234203d3e20313432333734.roa (hash: Un4jBswELs85PKZIKBQlwX0Wi2V6PoeRbOj08OHDeeg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DFAE11418F2175A57D01D8F80A61497CC1F5306C.crl rsync://repo-rpki.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DFAE11418F2175A57D01D8F80A61497CC1F5306C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFAE11418F2175A57D01D8F80A61497CC1F5306C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 23:31:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6e:55:0a:01:b4:82:d9:2e:52:b9:bd:60:a4:fe:4f:80:e4:85:a6:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFAE11418F2175A57D01D8F80A61497CC1F5306C Validity Not Before: Aug 22 13:06:28 2025 GMT Not After : Aug 25 23:31:28 2025 GMT Subject: CN=2B172788DE7D3205E88C2912CA287A486D9B56B9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:60:ca:d9:d7:3f:20:7f:44:76:8f:04:e5:1b: bd:31:6a:ca:13:fd:da:3b:99:82:6b:4d:7d:ee:be: 55:90:85:bf:58:31:24:ab:72:00:a8:9f:82:c9:b6: 51:b8:c8:c4:b0:d7:49:93:92:1f:c3:8c:e8:a1:f0: c5:59:b2:fc:e1:af:b6:91:98:f9:94:23:56:b5:1f: 06:52:af:21:58:10:ab:cd:a9:3a:b8:0c:b3:fc:53: 64:93:85:46:9d:af:dc:fa:a5:6d:92:5e:23:c4:71: ff:38:79:7d:6e:a1:f3:1c:f5:b0:d0:f9:03:ea:52: 92:e2:dd:75:e1:71:39:04:79:f9:9b:4c:b9:4e:04: a6:d0:f8:3c:c8:98:04:5e:11:bb:7c:29:ae:18:b2: 35:36:d7:b0:ee:93:65:37:c2:ea:e0:75:d8:c9:bd: 58:3f:01:25:74:6b:49:97:07:35:49:c9:74:13:8b: 6c:9f:c7:b3:f5:35:eb:8c:8d:84:e4:52:ea:8c:9a: 8e:4f:14:a9:29:67:7b:04:cf:2a:8d:73:a9:05:fb: c7:26:9d:6d:ce:9c:47:a0:40:dc:63:ac:86:f5:25: 3e:9b:c2:a9:b6:2d:f0:99:cb:30:c1:48:28:bd:3d: d9:df:9a:44:a2:4d:b0:65:35:a8:64:97:e2:34:d2: b9:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:17:27:88:DE:7D:32:05:E8:8C:29:12:CA:28:7A:48:6D:9B:56:B9 X509v3 Authority Key Identifier: keyid:DF:AE:11:41:8F:21:75:A5:7D:01:D8:F8:0A:61:49:7C:C1:F5:30:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DFAE11418F2175A57D01D8F80A61497CC1F5306C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFAE11418F2175A57D01D8F80A61497CC1F5306C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DFAE11418F2175A57D01D8F80A61497CC1F5306C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:28:40:f7:28:43:de:94:88:72:f1:bb:e2:46:ca:44:ac:d9: 3d:89:39:f7:52:3b:9b:46:49:c1:a1:15:9e:36:0e:c0:9a:44: c0:56:40:a6:b6:c2:c4:8a:78:56:40:d0:52:e3:5d:18:4a:cd: 82:36:66:c2:ba:58:2a:bc:e6:f1:c9:91:5b:f7:f5:ca:88:8d: 43:66:69:76:4c:81:5c:18:5c:48:4e:35:12:a2:ae:21:30:1c: a5:a2:01:04:b9:0a:0c:78:dc:24:05:b8:97:74:5b:eb:ad:21: 9c:e1:d1:1a:e4:cf:6a:a0:4e:0d:33:2c:6a:d4:13:cf:c4:4e: d4:cd:7b:d2:b1:fc:d8:80:f8:c2:df:9f:c2:66:99:99:65:09: bd:c0:d7:08:82:63:e7:b7:d0:d1:88:7a:2a:c8:4c:cd:d7:8d: 23:de:98:4c:1f:11:a0:a9:9b:e8:65:17:2b:73:6a:da:19:f9: 7b:b5:a4:62:91:13:48:3b:ce:bf:d7:67:9e:ca:5b:5b:c1:8e: 04:63:c6:9d:17:52:b8:bc:38:2f:2f:fd:37:7f:80:fd:b2:16: 2d:95:5d:ba:73:62:64:66:a2:06:34:90:75:44:fb:ac:90:6a: 45:b7:88:dd:6d:0c:20:9c:ff:24:12:71:cb:4a:52:44:5d:e1: 2f:c6:bf:e8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUblUKAbSC2S5Sub1gpP5PgOSFpuUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZBRTExNDE4RjIxNzVBNTdEMDFEOEY4MEE2MTQ5N0ND MUY1MzA2QzAeFw0yNTA4MjIxMzA2MjhaFw0yNTA4MjUyMzMxMjhaMDMxMTAvBgNV BAMTKDJCMTcyNzg4REU3RDMyMDVFODhDMjkxMkNBMjg3QTQ4NkQ5QjU2QjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXYMrZ1z8gf0R2jwTlG70xasoT /do7mYJrTX3uvlWQhb9YMSSrcgCon4LJtlG4yMSw10mTkh/DjOih8MVZsvzhr7aR mPmUI1a1HwZSryFYEKvNqTq4DLP8U2SThUadr9z6pW2SXiPEcf84eX1uofMc9bDQ +QPqUpLi3XXhcTkEefmbTLlOBKbQ+DzImAReEbt8Ka4YsjU217Duk2U3wurgddjJ vVg/ASV0a0mXBzVJyXQTi2yfx7P1NeuMjYTkUuqMmo5PFKkpZ3sEzyqNc6kF+8cm nW3OnEegQNxjrIb1JT6bwqm2LfCZyzDBSCi9PdnfmkSiTbBlNahkl+I00rnPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKxcniN59MgXojCkSyih6SG2bVrkwHwYDVR0j BBgwFoAU364RQY8hdaV9Adj4CmFJfMH1MGwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODU1ZjQ1MC1lYjdmLTRhMjYtYTZjNC1mOTgyN2VlMGE1YjgvMC9ERkFFMTE0MThG MjE3NUE1N0QwMUQ4RjgwQTYxNDk3Q0MxRjUzMDZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREZBRTExNDE4RjIxNzVBNTdEMDFEOEY4MEE2MTQ5N0NDMUY1 MzA2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjg1NWY0NTAtZWI3Zi00YTI2LWE2 YzQtZjk4MjdlZTBhNWI4LzAvREZBRTExNDE4RjIxNzVBNTdEMDFEOEY4MEE2MTQ5 N0NDMUY1MzA2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHgoQPcoQ96UiHLxu+JGykSs2T2JOfdSO5tG ScGhFZ42DsCaRMBWQKa2wsSKeFZA0FLjXRhKzYI2ZsK6WCq85vHJkVv39cqIjUNm aXZMgVwYXEhONRKiriEwHKWiAQS5Cgx43CQFuJd0W+utIZzh0Rrkz2qgTg0zLGrU E8/ETtTNe9Kx/NiA+MLfn8JmmZllCb3A1wiCY+e30NGIeirITM3XjSPemEwfEaCp m+hlFytzatoZ+Xu1pGKRE0g7zr/XZ57KW1vBjgRjxp0XUri8OC8v/Td/gP2yFi2V XbpzYmRmogY0kHVE+6yQakW3iN1tDCCc/yQScctKUkRd4S/Gv+g= -----END CERTIFICATE-----Generated at Sat Aug 23 12:21:27 2025 by rpki-client