$ rpki-client -vvf repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft File: DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft (raw, json) Hash identifier: ASIe1fzXScB3g++hdru5g8C6pXwPirek9+A1JJOTOuQ= Subject key identifier: 66:9B:6A:91:27:92:C4:FE:BF:26:73:64:C4:B8:DC:55:42:38:84:E9 Authority key identifier: DA:6C:3D:41:56:C0:5B:74:E3:B5:C0:49:F7:98:B0:0D:C6:34:2B:70 Certificate issuer: /CN=DA6C3D4156C05B74E3B5C049F798B00DC6342B70 Certificate serial: 76BB2CB99F6DBC25B5C61005729405004CC435D2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft Manifest number: 012F Signing time: Sat 18 Oct 2025 14:41:43 +0000 Manifest this update: Sat 18 Oct 2025 14:36:43 +0000 Manifest next update: Tue 21 Oct 2025 20:56:43 +0000 Files and hashes: 1: DA6C3D4156C05B74E3B5C049F798B00DC6342B70.crl (hash: sP/fv9RBtw1a5zrBw8wOVXoFThMmfJqBjMhn+GA60FU=) 2: 3130332e3234392e3232362e302f32342d3234203d3e20313531353236.roa (hash: 0NLsga2/g7s+EizQykHVB3FIXfa2PQbybGIhJhV4p2k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.crl rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 20:56:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:bb:2c:b9:9f:6d:bc:25:b5:c6:10:05:72:94:05:00:4c:c4:35:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA6C3D4156C05B74E3B5C049F798B00DC6342B70 Validity Not Before: Oct 18 14:36:43 2025 GMT Not After : Oct 21 20:56:43 2025 GMT Subject: CN=669B6A912792C4FEBF267364C4B8DC55423884E9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:bc:c7:7a:24:82:a3:09:69:78:71:28:e6:cd: 68:73:dd:52:cc:4a:98:ae:5e:36:b6:a5:24:2c:04: ec:11:08:19:66:17:11:ce:c6:12:4a:b1:67:40:ad: 0f:57:36:e1:8b:10:59:71:2a:9c:58:f3:15:22:2a: 2a:ea:dc:a3:c3:a8:ae:2f:b7:91:1f:6f:2a:5a:9a: 68:d8:97:46:76:52:95:6d:05:8c:ad:cd:2c:09:9e: e4:8b:79:90:f8:79:a5:bc:5d:91:58:a4:1b:f6:25: da:27:b7:77:85:c7:00:a1:8e:43:ea:85:67:7e:1d: 42:76:85:71:26:9c:e4:c3:f4:2a:68:8c:b4:ea:dc: ce:10:ed:09:4b:1e:05:42:b3:eb:b1:b6:06:fb:96: 81:13:78:4d:32:4f:cc:07:f5:63:d0:d9:8d:ac:ba: 7e:aa:e8:33:6a:a0:11:81:2f:14:18:b1:ab:e1:5a: eb:93:f2:67:5e:ce:cf:ec:66:41:7e:1a:13:bf:9f: e8:75:70:1e:d4:07:bd:6b:58:f6:3d:6c:32:a2:18: 00:da:7c:32:dd:4c:d0:1e:a7:a0:f4:9b:e4:0f:64: e1:20:dc:78:18:2f:3d:a7:25:93:35:35:83:48:bd: 92:31:99:5e:78:54:e5:3a:47:d3:00:c2:b8:5a:f4: b9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 66:9B:6A:91:27:92:C4:FE:BF:26:73:64:C4:B8:DC:55:42:38:84:E9 X509v3 Authority Key Identifier: keyid:DA:6C:3D:41:56:C0:5B:74:E3:B5:C0:49:F7:98:B0:0D:C6:34:2B:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:66:71:56:ab:a1:47:e6:6e:b8:83:29:8a:ae:40:62:ec:49: 4c:51:79:51:f8:5d:bc:b2:39:f9:68:22:f6:de:41:9f:82:7b: e9:7b:c8:3f:a4:59:7c:7d:66:57:b4:2f:0e:fd:14:df:c6:3d: 66:02:ef:83:8d:df:c7:10:b0:c2:d2:c6:e0:26:7a:8c:68:ca: 87:54:97:d1:6e:82:fc:a4:7c:fd:94:ff:be:53:25:13:a3:38: 1b:e3:5c:f3:7e:15:ba:d8:92:c6:e3:41:57:55:f2:c3:93:40: d2:ca:08:c6:2a:5b:85:83:93:08:8e:71:09:21:e8:cf:e0:b6: ff:62:cf:f2:d5:a3:e9:07:a1:04:c4:34:0e:ec:d5:95:0b:a4: aa:57:99:96:d5:a1:22:49:97:c8:f6:6a:fd:6b:d7:39:c2:45: 99:79:48:55:b2:35:32:d2:8b:71:1d:cc:cb:eb:f4:22:57:65: cd:46:7c:8d:7c:0d:ef:09:fd:ea:b2:08:df:f9:5c:a2:0b:aa: 94:5a:61:6c:d2:98:5f:ce:cb:01:d3:43:68:c9:28:65:31:ad: d8:7c:83:1d:ac:10:32:a8:17:c8:b1:f9:f9:cf:89:d6:9e:15: f8:db:90:22:ac:b8:4a:1c:61:6f:66:69:e5:cd:0e:5b:67:d5: 28:c2:6f:50 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdrssuZ9tvCW1xhAFcpQFAEzENdIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE2QzNENDE1NkMwNUI3NEUzQjVDMDQ5Rjc5OEIwMERD NjM0MkI3MDAeFw0yNTEwMTgxNDM2NDNaFw0yNTEwMjEyMDU2NDNaMDMxMTAvBgNV BAMTKDY2OUI2QTkxMjc5MkM0RkVCRjI2NzM2NEM0QjhEQzU1NDIzODg0RTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDvMd6JIKjCWl4cSjmzWhz3VLM SpiuXja2pSQsBOwRCBlmFxHOxhJKsWdArQ9XNuGLEFlxKpxY8xUiKirq3KPDqK4v t5EfbypammjYl0Z2UpVtBYytzSwJnuSLeZD4eaW8XZFYpBv2Jdont3eFxwChjkPq hWd+HUJ2hXEmnOTD9CpojLTq3M4Q7QlLHgVCs+uxtgb7loETeE0yT8wH9WPQ2Y2s un6q6DNqoBGBLxQYsavhWuuT8mdezs/sZkF+GhO/n+h1cB7UB71rWPY9bDKiGADa fDLdTNAep6D0m+QPZOEg3HgYLz2nJZM1NYNIvZIxmV54VOU6R9MAwrha9LnzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZptqkSeSxP6/JnNkxLjcVUI4hOkwHwYDVR0j BBgwFoAU2mw9QVbAW3TjtcBJ95iwDcY0K3AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NzhhOGIzOS0zYWUzLTRkZTctOTM2Ni0yMWY5ZWEwNDMyNWEvMC9EQTZDM0Q0MTU2 QzA1Qjc0RTNCNUMwNDlGNzk4QjAwREM2MzQyQjcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREE2QzNENDE1NkMwNUI3NEUzQjVDMDQ5Rjc5OEIwMERDNjM0 MkI3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTc4YThiMzktM2FlMy00ZGU3LTkz NjYtMjFmOWVhMDQzMjVhLzAvREE2QzNENDE1NkMwNUI3NEUzQjVDMDQ5Rjc5OEIw MERDNjM0MkI3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABpmcVaroUfmbriDKYquQGLsSUxReVH4Xbyy OfloIvbeQZ+Ce+l7yD+kWXx9Zle0Lw79FN/GPWYC74ON38cQsMLSxuAmeoxoyodU l9FugvykfP2U/75TJROjOBvjXPN+FbrYksbjQVdV8sOTQNLKCMYqW4WDkwiOcQkh 6M/gtv9iz/LVo+kHoQTENA7s1ZULpKpXmZbVoSJJl8j2av1r1znCRZl5SFWyNTLS i3EdzMvr9CJXZc1GfI18De8J/eqyCN/5XKILqpRaYWzSmF/OywHTQ2jJKGUxrdh8 gx2sEDKoF8ix+fnPidaeFfjbkCKsuEocYW9maeXNDltn1SjCb1A= -----END CERTIFICATE-----Generated at Mon Oct 20 14:38:41 2025 by rpki-client