$ rpki-client -vvf repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft File: DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft (raw, json) Hash identifier: Yy0IrjwJGCDrSCc/LW2fK8d5n7yHYj19bRMupXRRpg0= Subject key identifier: 3B:E9:60:A2:3A:88:59:05:5E:86:16:BC:2A:D1:14:E8:AF:12:15:2D Authority key identifier: DA:39:6A:1D:C6:29:9D:C3:BB:9E:8D:D7:65:0D:36:FA:BA:94:49:67 Certificate issuer: /CN=DA396A1DC6299DC3BB9E8DD7650D36FABA944967 Certificate serial: 324D6F1219BBBC0A3160CBF06B0C216EB2FE9DC0 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft Manifest number: 0218 Signing time: Sat 18 Oct 2025 15:40:55 +0000 Manifest this update: Sat 18 Oct 2025 15:35:55 +0000 Manifest next update: Wed 22 Oct 2025 01:55:55 +0000 Files and hashes: 1: DA396A1DC6299DC3BB9E8DD7650D36FABA944967.crl (hash: qqzzHC3lUpxNbADi2ynuMF1QfxnAZgk+Sp7kjKLOqJE=) 2: 3130332e3136362e34382e302f32332d3234203d3e20313339343630.roa (hash: 0a2CK00YtHnEd2JmEamQH3BHgmE0sjYsMU62NZCZSoM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.crl rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 01:55:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:4d:6f:12:19:bb:bc:0a:31:60:cb:f0:6b:0c:21:6e:b2:fe:9d:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA396A1DC6299DC3BB9E8DD7650D36FABA944967 Validity Not Before: Oct 18 15:35:55 2025 GMT Not After : Oct 22 01:55:55 2025 GMT Subject: CN=3BE960A23A8859055E8616BC2AD114E8AF12152D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:2a:1a:38:d1:22:dd:e0:76:84:ea:e6:ca:5e: a1:52:f0:ff:01:46:66:a8:cc:77:29:11:95:9f:68: e0:7f:9b:a4:92:75:85:2c:d2:af:57:08:9d:02:dc: 4f:bb:61:da:d2:9d:62:e5:18:37:6d:80:f5:ba:89: 30:d1:67:75:2e:71:76:fa:20:32:b7:00:6d:6a:38: 79:a1:c5:60:23:8b:f0:64:dd:14:67:6f:6b:dd:21: 99:07:4b:89:e2:e5:68:1c:c4:63:71:c6:7e:3d:18: ea:6c:ed:13:7e:f4:62:fe:1b:2c:f0:82:e8:6b:cd: 07:4d:8c:f7:86:48:87:86:a2:f2:ac:ad:16:99:89: 87:71:7c:ae:aa:df:b7:75:6b:3d:3d:b5:2e:44:4a: 6d:b1:47:04:8b:ee:85:ae:00:c6:8b:e8:da:70:19: 62:be:19:26:1f:34:bd:63:c0:96:6b:04:1b:53:07: 3d:3d:1c:e4:30:f9:36:48:15:43:16:c0:8d:00:de: 35:08:b5:b5:fe:75:d7:f5:e7:dc:87:1c:b3:d7:68: 7e:e3:9e:7c:cb:e6:2c:e0:84:42:46:86:93:c6:20: e1:54:52:ad:f4:c7:26:cd:a7:6e:2f:ba:76:8c:0f: a5:4c:43:0b:fe:2a:7b:ec:bd:f2:dd:a9:f4:11:d2: 1d:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:E9:60:A2:3A:88:59:05:5E:86:16:BC:2A:D1:14:E8:AF:12:15:2D X509v3 Authority Key Identifier: keyid:DA:39:6A:1D:C6:29:9D:C3:BB:9E:8D:D7:65:0D:36:FA:BA:94:49:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:f4:c4:c0:5d:9d:bf:b5:5c:c3:f6:2e:d9:d3:c5:41:3d:c2: 6a:e5:4b:72:4e:fd:b2:10:a7:8b:75:98:e4:74:80:24:78:a7: 1a:b2:54:3c:dd:69:d0:1f:83:a2:2a:2c:aa:50:f0:31:57:9d: 17:5d:9a:76:2a:16:b0:0e:d7:48:5d:4f:48:05:c2:6c:d7:ad: 5d:78:d8:e2:bb:7b:b9:d9:17:56:d7:5c:0d:71:73:15:5f:fa: a4:5f:cf:32:c4:47:41:10:a5:42:35:f3:d1:59:fc:56:6b:b8: da:7f:f5:bf:9a:d1:8f:91:78:c2:6b:0b:22:4c:f6:d6:57:ae: 10:42:c0:b1:19:f0:6d:a8:e0:ab:a2:17:10:2b:67:2c:1a:59: 70:1b:00:e8:65:c4:a3:5f:e2:11:95:bc:e0:93:02:20:6a:11: 9e:76:85:9e:68:9c:70:79:89:41:0f:92:8c:e8:a2:2b:ab:3e: bf:41:50:b6:ca:3a:6a:c2:13:e8:fc:e2:6a:cf:c2:4c:ae:7f: 4b:33:5a:23:b7:af:16:a5:42:e0:7d:17:fb:fa:cf:0d:da:59: d3:cf:94:57:1a:bf:88:23:a5:24:fc:7c:d5:13:4a:f6:62:c0: ad:c3:f8:41:be:2f:3d:39:1f:4e:96:f9:bc:77:b5:89:8f:73: 8a:9b:99:c9 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMk1vEhm7vAoxYMvwawwhbrL+ncAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREEzOTZBMURDNjI5OURDM0JCOUU4REQ3NjUwRDM2RkFC QTk0NDk2NzAeFw0yNTEwMTgxNTM1NTVaFw0yNTEwMjIwMTU1NTVaMDMxMTAvBgNV BAMTKDNCRTk2MEEyM0E4ODU5MDU1RTg2MTZCQzJBRDExNEU4QUYxMjE1MkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Kho40SLd4HaE6ubKXqFS8P8B RmaozHcpEZWfaOB/m6SSdYUs0q9XCJ0C3E+7YdrSnWLlGDdtgPW6iTDRZ3UucXb6 IDK3AG1qOHmhxWAji/Bk3RRnb2vdIZkHS4ni5WgcxGNxxn49GOps7RN+9GL+Gyzw guhrzQdNjPeGSIeGovKsrRaZiYdxfK6q37d1az09tS5ESm2xRwSL7oWuAMaL6Npw GWK+GSYfNL1jwJZrBBtTBz09HOQw+TZIFUMWwI0A3jUItbX+ddf159yHHLPXaH7j nnzL5izghEJGhpPGIOFUUq30xybNp24vunaMD6VMQwv+KnvsvfLdqfQR0h2FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO+lgojqIWQVehha8KtEU6K8SFS0wHwYDVR0j BBgwFoAU2jlqHcYpncO7no3XZQ02+rqUSWcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OGI2M2U3ZC1hNjE3LTRlOGMtYTgyMS02MjM5NTZkNGQ0YWUvMC9EQTM5NkExREM2 Mjk5REMzQkI5RThERDc2NTBEMzZGQUJBOTQ0OTY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREEzOTZBMURDNjI5OURDM0JCOUU4REQ3NjUwRDM2RkFCQTk0 NDk2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZThiNjNlN2QtYTYxNy00ZThjLWE4 MjEtNjIzOTU2ZDRkNGFlLzAvREEzOTZBMURDNjI5OURDM0JCOUU4REQ3NjUwRDM2 RkFCQTk0NDk2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIT0xMBdnb+1XMP2LtnTxUE9wmrlS3JO/bIQ p4t1mOR0gCR4pxqyVDzdadAfg6IqLKpQ8DFXnRddmnYqFrAO10hdT0gFwmzXrV14 2OK7e7nZF1bXXA1xcxVf+qRfzzLER0EQpUI189FZ/FZruNp/9b+a0Y+ReMJrCyJM 9tZXrhBCwLEZ8G2o4KuiFxArZywaWXAbAOhlxKNf4hGVvOCTAiBqEZ52hZ5onHB5 iUEPkozooiurPr9BULbKOmrCE+j84mrPwkyuf0szWiO3rxalQuB9F/v6zw3aWdPP lFcav4gjpST8fNUTSvZiwK3D+EG+Lz05H06W+bx3tYmPc4qbmck= -----END CERTIFICATE-----Generated at Mon Oct 20 21:32:12 2025 by rpki-client