$ rpki-client -vvf repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft File: DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft (raw, json) Hash identifier: YjlDiUYr93VxKqia74xQIslordDvk6zruGxEGtvc1bU= Subject key identifier: 0C:F7:80:33:7E:E2:B2:1E:6F:E8:85:5C:80:EF:0A:F7:27:D2:F8:5F Authority key identifier: DA:6C:3D:41:56:C0:5B:74:E3:B5:C0:49:F7:98:B0:0D:C6:34:2B:70 Certificate issuer: /CN=DA6C3D4156C05B74E3B5C049F798B00DC6342B70 Certificate serial: 7D71358D6D442595C7470B46FF17166F41924FFD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft Manifest number: 0115 Signing time: Sat 23 Aug 2025 07:51:45 +0000 Manifest this update: Sat 23 Aug 2025 07:46:45 +0000 Manifest next update: Tue 26 Aug 2025 16:34:45 +0000 Files and hashes: 1: DA6C3D4156C05B74E3B5C049F798B00DC6342B70.crl (hash: gRWMxdgtUmuLWSM8+aRmK0sB6Oa+FtMvfUehdybI5bQ=) 2: 3130332e3234392e3232362e302f32342d3234203d3e20313531353236.roa (hash: d/FCKrPQVsgurMvNGz2oQ2iPyKXsXoRnlEaxs4nJ5ko=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.crl rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 13:57:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7d:71:35:8d:6d:44:25:95:c7:47:0b:46:ff:17:16:6f:41:92:4f:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA6C3D4156C05B74E3B5C049F798B00DC6342B70 Validity Not Before: Aug 23 07:46:45 2025 GMT Not After : Aug 26 16:34:45 2025 GMT Subject: CN=0CF780337EE2B21E6FE8855C80EF0AF727D2F85F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:17:07:e5:06:16:bc:af:df:db:de:50:02:89: 31:64:4a:0d:d2:bb:dd:35:ea:c9:58:b9:07:9f:83: 5f:06:35:68:1b:96:dd:8e:30:63:16:67:1c:c9:8e: dd:8f:78:1d:9f:b8:36:c0:8e:a4:57:70:27:7c:a4: 55:46:71:bb:77:e7:e4:30:98:d6:6a:8d:0a:15:b4: e0:7d:44:5c:01:48:f3:9b:93:af:5f:f9:16:88:4d: 07:d1:6b:dc:6b:99:90:73:94:2b:2a:67:96:24:5f: aa:33:cf:36:b5:fb:34:66:23:56:5b:01:84:45:4d: a8:3e:0e:33:8c:bc:43:a7:c1:99:47:ef:20:ef:b5: 27:7d:d3:af:dc:fa:4e:0c:3a:f1:d5:04:3d:c0:38: bf:13:98:ec:b3:60:2a:49:4a:76:21:e8:cf:8a:19: 79:88:b9:da:9b:40:d3:7c:db:e9:3a:59:10:54:ec: 71:dd:25:e9:7e:a6:b7:42:37:8f:5b:9a:c4:c3:af: ce:57:79:36:4b:27:98:ac:23:3e:26:ed:28:f5:b7: de:9a:f3:19:ec:db:ce:46:6a:2f:0a:a8:c6:f3:1a: df:7e:c8:46:79:99:e4:9d:c0:59:3b:db:ff:23:30: 3b:5d:9f:ca:f4:13:d4:fc:a7:cb:8a:61:73:88:ff: 86:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0C:F7:80:33:7E:E2:B2:1E:6F:E8:85:5C:80:EF:0A:F7:27:D2:F8:5F X509v3 Authority Key Identifier: keyid:DA:6C:3D:41:56:C0:5B:74:E3:B5:C0:49:F7:98:B0:0D:C6:34:2B:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:2b:a0:32:b5:1e:8f:41:66:2b:35:69:37:4d:55:dd:6d:fd: 89:97:aa:c8:a4:0f:24:c2:93:d6:8d:83:38:64:9d:9a:41:32: ce:05:f3:36:19:a9:df:71:f6:3b:1e:19:0a:fc:90:24:03:03: 69:37:84:2b:a9:64:f8:51:13:2f:63:2a:c2:5c:11:be:06:08: a6:fb:b9:75:7a:cc:03:f5:f2:31:94:76:d5:16:6c:a2:6b:2f: 1c:06:65:73:2a:a1:1c:0b:02:73:fe:09:a5:96:f4:b4:cd:16: 9a:1c:13:64:2c:1a:23:59:6c:fa:c8:d2:0d:3a:9c:bf:02:29: a4:28:07:88:f9:f0:ee:52:b2:07:5c:f9:17:65:c9:8b:2c:9b: a6:67:40:7a:28:43:56:89:da:30:7e:9e:7f:5d:94:0c:70:85: 33:7d:ba:2e:d5:0c:d8:7c:97:8c:9f:c4:92:07:ca:32:3e:43: 8d:13:1b:43:0b:02:fc:53:f4:89:c8:9f:80:b6:16:2d:a0:b5: 21:13:87:3e:82:f6:41:50:4b:9f:a5:9c:07:04:6c:9d:77:8a: a8:de:ff:ab:6d:85:30:77:ce:d9:f7:2d:d5:bc:4e:a3:83:d6: da:16:14:00:24:df:fe:74:61:b6:06:53:ea:36:41:c0:a2:ff: 90:3a:48:e2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUfXE1jW1EJZXHRwtG/xcWb0GST/0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE2QzNENDE1NkMwNUI3NEUzQjVDMDQ5Rjc5OEIwMERD NjM0MkI3MDAeFw0yNTA4MjMwNzQ2NDVaFw0yNTA4MjYxNjM0NDVaMDMxMTAvBgNV BAMTKDBDRjc4MDMzN0VFMkIyMUU2RkU4ODU1QzgwRUYwQUY3MjdEMkY4NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwFwflBha8r9/b3lACiTFkSg3S u9016slYuQefg18GNWgblt2OMGMWZxzJjt2PeB2fuDbAjqRXcCd8pFVGcbt35+Qw mNZqjQoVtOB9RFwBSPObk69f+RaITQfRa9xrmZBzlCsqZ5YkX6ozzza1+zRmI1Zb AYRFTag+DjOMvEOnwZlH7yDvtSd906/c+k4MOvHVBD3AOL8TmOyzYCpJSnYh6M+K GXmIudqbQNN82+k6WRBU7HHdJel+prdCN49bmsTDr85XeTZLJ5isIz4m7Sj1t96a 8xns285Gai8KqMbzGt9+yEZ5meSdwFk72/8jMDtdn8r0E9T8p8uKYXOI/4YtAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUDPeAM37ish5v6IVcgO8K9yfS+F8wHwYDVR0j BBgwFoAU2mw9QVbAW3TjtcBJ95iwDcY0K3AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NzhhOGIzOS0zYWUzLTRkZTctOTM2Ni0yMWY5ZWEwNDMyNWEvMC9EQTZDM0Q0MTU2 QzA1Qjc0RTNCNUMwNDlGNzk4QjAwREM2MzQyQjcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREE2QzNENDE1NkMwNUI3NEUzQjVDMDQ5Rjc5OEIwMERDNjM0 MkI3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTc4YThiMzktM2FlMy00ZGU3LTkz NjYtMjFmOWVhMDQzMjVhLzAvREE2QzNENDE1NkMwNUI3NEUzQjVDMDQ5Rjc5OEIw MERDNjM0MkI3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGgroDK1Ho9BZis1aTdNVd1t/YmXqsikDyTC k9aNgzhknZpBMs4F8zYZqd9x9jseGQr8kCQDA2k3hCupZPhREy9jKsJcEb4GCKb7 uXV6zAP18jGUdtUWbKJrLxwGZXMqoRwLAnP+CaWW9LTNFpocE2QsGiNZbPrI0g06 nL8CKaQoB4j58O5Ssgdc+RdlyYssm6ZnQHooQ1aJ2jB+nn9dlAxwhTN9ui7VDNh8 l4yfxJIHyjI+Q40TG0MLAvxT9InIn4C2Fi2gtSEThz6C9kFQS5+lnAcEbJ13iqje /6tthTB3ztn3LdW8TqOD1toWFAAk3/50YbYGU+o2QcCi/5A6SOI= -----END CERTIFICATE-----Generated at Sat Aug 23 15:41:37 2025 by rpki-client