$ rpki-client -vvf repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.mft File: DC80860022A4D5D14DB78082BAC705E0C1B0F915.mft (raw, json) Hash identifier: VRV7MQGVbBckq6ing6MePNM7socvirBJE9O3wq9mxjE= Subject key identifier: CA:A8:85:97:94:61:49:84:01:93:70:5A:1A:F3:53:FA:CF:1D:A4:FD Authority key identifier: DC:80:86:00:22:A4:D5:D1:4D:B7:80:82:BA:C7:05:E0:C1:B0:F9:15 Certificate issuer: /CN=DC80860022A4D5D14DB78082BAC705E0C1B0F915 Certificate serial: 333349A5D21675E2938DBDD7A8A35107E8FB1432 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC80860022A4D5D14DB78082BAC705E0C1B0F915.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.mft Manifest number: 04FC Signing time: Thu 21 Aug 2025 05:01:41 +0000 Manifest this update: Thu 21 Aug 2025 04:56:41 +0000 Manifest next update: Sun 24 Aug 2025 16:51:41 +0000 Files and hashes: 1: DC80860022A4D5D14DB78082BAC705E0C1B0F915.crl (hash: Ce5FKqXgEONXC1qh+P8tknyDFb3vyZCvlFXv25xtw88=) 2: 323430323a343234303a3a2f33322d3332203d3e20313336383830.roa (hash: LeIArO2ugyFzqhOfzyY49jG0OfnapAFQ/XpIZTbnEek=) 3: 3130332e3130362e3131322e302f32322d3234203d3e20313336383830.roa (hash: 7oh7gLosxpigXZ1B5YXMaPZ1h+t8yrojfWYMj50/Mhg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.crl rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC80860022A4D5D14DB78082BAC705E0C1B0F915.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 16:51:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:33:49:a5:d2:16:75:e2:93:8d:bd:d7:a8:a3:51:07:e8:fb:14:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC80860022A4D5D14DB78082BAC705E0C1B0F915 Validity Not Before: Aug 21 04:56:41 2025 GMT Not After : Aug 24 16:51:41 2025 GMT Subject: CN=CAA88597946149840193705A1AF353FACF1DA4FD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:89:54:27:54:11:2e:5d:79:c6:25:65:93:cb: 80:a8:82:57:42:4b:65:7e:a7:c9:0e:c1:d4:7c:f3: 59:49:eb:71:73:78:dc:03:be:64:9c:a5:a2:ce:6d: ac:d1:b5:07:0d:b6:45:a9:3b:69:ba:4f:aa:26:33: dc:b7:1c:33:f7:e9:e4:46:34:54:19:2c:ce:4d:07: 58:09:eb:31:0f:fa:7e:48:2c:5b:b8:c1:c1:66:03: 68:1a:8f:9b:66:b1:2a:08:1a:87:65:c0:f7:a0:25: f4:ab:d0:f4:7e:ed:20:74:d4:1a:a6:72:5b:fb:d2: c2:d2:61:dd:0f:9e:e7:df:18:88:a5:cb:cc:1b:a8: 8a:b7:77:d9:28:c3:8d:06:1b:6c:92:08:06:ef:b0: d7:8c:5b:8b:c8:a2:a3:11:f1:dd:04:7f:33:80:6c: 8c:f3:33:a1:44:14:44:6b:9d:6d:92:71:34:23:83: 59:83:8b:a8:0c:54:61:71:ef:7a:45:8e:80:b7:e1: 52:99:cf:62:4f:c8:3e:3a:dd:4c:54:04:5a:45:58: 17:f2:7a:f5:9f:32:7b:4b:2b:32:5a:17:1d:83:7f: a1:3d:ff:2a:0e:60:aa:20:68:85:cb:51:6f:77:ef: 30:ef:24:9e:c0:43:3a:ce:34:28:15:43:29:f9:be: bf:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CA:A8:85:97:94:61:49:84:01:93:70:5A:1A:F3:53:FA:CF:1D:A4:FD X509v3 Authority Key Identifier: keyid:DC:80:86:00:22:A4:D5:D1:4D:B7:80:82:BA:C7:05:E0:C1:B0:F9:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC80860022A4D5D14DB78082BAC705E0C1B0F915.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:60:81:6c:32:ca:6f:98:d3:b4:a0:ff:51:c2:42:a5:57:45: 13:cd:a0:87:91:d6:2d:79:bc:a4:97:8d:03:5e:f6:9a:a0:76: f1:c9:02:69:61:a4:92:eb:27:d3:a6:f2:70:56:f2:39:14:a7: 6d:84:4d:80:80:9c:84:a2:26:9b:3b:ef:c8:89:76:79:62:86: 45:f2:99:ac:41:21:57:4c:67:46:50:b3:37:a7:36:f0:6e:56: 85:44:73:81:a9:ae:3b:34:72:85:b8:93:1d:8f:83:f9:71:87: c1:b4:e0:5a:08:66:3b:1c:46:e7:8c:47:41:b9:7f:24:a9:a3: d1:a0:fc:10:fc:4c:4d:31:3c:97:7e:0b:68:80:fd:ce:bf:89: 29:b5:75:62:7b:b2:3e:85:08:04:19:4b:da:05:45:2e:eb:2d: 6a:4d:28:74:fe:b0:b2:66:ea:1b:5b:f1:a7:e1:ed:42:f6:99: 94:33:bf:4c:59:ec:26:9a:2e:f5:56:88:96:fc:ed:6d:fc:a6: 4b:6e:09:3c:35:1d:5f:16:c4:ee:7f:0f:d7:8b:13:a7:d2:fd: f9:cb:8c:27:42:25:2c:33:24:6f:12:2b:87:dd:1e:f5:8d:9b: 69:52:86:e3:f4:46:0d:d8:b4:22:e4:33:13:58:03:a2:9b:fd: ea:68:bb:45 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMzNJpdIWdeKTjb3XqKNRB+j7FDIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREM4MDg2MDAyMkE0RDVEMTREQjc4MDgyQkFDNzA1RTBD MUIwRjkxNTAeFw0yNTA4MjEwNDU2NDFaFw0yNTA4MjQxNjUxNDFaMDMxMTAvBgNV BAMTKENBQTg4NTk3OTQ2MTQ5ODQwMTkzNzA1QTFBRjM1M0ZBQ0YxREE0RkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNiVQnVBEuXXnGJWWTy4CogldC S2V+p8kOwdR881lJ63FzeNwDvmScpaLObazRtQcNtkWpO2m6T6omM9y3HDP36eRG NFQZLM5NB1gJ6zEP+n5ILFu4wcFmA2gaj5tmsSoIGodlwPegJfSr0PR+7SB01Bqm clv70sLSYd0PnuffGIily8wbqIq3d9kow40GG2ySCAbvsNeMW4vIoqMR8d0EfzOA bIzzM6FEFERrnW2ScTQjg1mDi6gMVGFx73pFjoC34VKZz2JPyD463UxUBFpFWBfy evWfMntLKzJaFx2Df6E9/yoOYKogaIXLUW937zDvJJ7AQzrONCgVQyn5vr95AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyqiFl5RhSYQBk3BaGvNT+s8dpP0wHwYDVR0j BBgwFoAU3ICGACKk1dFNt4CCuscF4MGw+RUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YjA3YjM3Yy0wNTA3LTQ5MTMtODMyOS0zZjE2MWI2YWZmNTYvMC9EQzgwODYwMDIy QTRENUQxNERCNzgwODJCQUM3MDVFMEMxQjBGOTE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREM4MDg2MDAyMkE0RDVEMTREQjc4MDgyQkFDNzA1RTBDMUIw RjkxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmIwN2IzN2MtMDUwNy00OTEzLTgz MjktM2YxNjFiNmFmZjU2LzAvREM4MDg2MDAyMkE0RDVEMTREQjc4MDgyQkFDNzA1 RTBDMUIwRjkxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEFggWwyym+Y07Sg/1HCQqVXRRPNoIeR1i15 vKSXjQNe9pqgdvHJAmlhpJLrJ9Om8nBW8jkUp22ETYCAnISiJps778iJdnlihkXy maxBIVdMZ0ZQszenNvBuVoVEc4Gprjs0coW4kx2Pg/lxh8G04FoIZjscRueMR0G5 fySpo9Gg/BD8TE0xPJd+C2iA/c6/iSm1dWJ7sj6FCAQZS9oFRS7rLWpNKHT+sLJm 6htb8afh7UL2mZQzv0xZ7CaaLvVWiJb87W38pktuCTw1HV8WxO5/D9eLE6fS/fnL jCdCJSwzJG8SK4fdHvWNm2lShuP0Rg3YtCLkMxNYA6Kb/epou0U= -----END CERTIFICATE-----Generated at Sat Aug 23 16:44:06 2025 by rpki-client