$ rpki-client -vvf repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft File: DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft (raw, json) Hash identifier: pU7wkC2jHg2d3rgcHIoveL0LixkHE1BvYqW3IEufqeI= Subject key identifier: 2A:CB:3F:DF:20:28:95:E4:22:6E:3F:AC:65:6A:E1:8A:65:6E:B3:64 Authority key identifier: DA:39:6A:1D:C6:29:9D:C3:BB:9E:8D:D7:65:0D:36:FA:BA:94:49:67 Certificate issuer: /CN=DA396A1DC6299DC3BB9E8DD7650D36FABA944967 Certificate serial: 2BB48C913D6EF5DAAADDBCA14ECE02B494852E31 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft Manifest number: 01FE Signing time: Fri 22 Aug 2025 02:50:54 +0000 Manifest this update: Fri 22 Aug 2025 02:45:54 +0000 Manifest next update: Mon 25 Aug 2025 06:00:54 +0000 Files and hashes: 1: DA396A1DC6299DC3BB9E8DD7650D36FABA944967.crl (hash: 406WAfb8UJzG6SB6FbMOOGF5qYJcfQYYlb5ulrzMZDs=) 2: 3130332e3136362e34382e302f32332d3234203d3e20313339343630.roa (hash: 0a2CK00YtHnEd2JmEamQH3BHgmE0sjYsMU62NZCZSoM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.crl rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 06:00:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:b4:8c:91:3d:6e:f5:da:aa:dd:bc:a1:4e:ce:02:b4:94:85:2e:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA396A1DC6299DC3BB9E8DD7650D36FABA944967 Validity Not Before: Aug 22 02:45:54 2025 GMT Not After : Aug 25 06:00:54 2025 GMT Subject: CN=2ACB3FDF202895E4226E3FAC656AE18A656EB364 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:a7:2a:70:60:ca:0f:74:c9:57:f1:56:6b:ac: 47:b1:3c:a9:60:48:12:f4:53:9f:f3:1b:fe:bc:34: 73:67:da:c1:48:b6:e9:f2:55:7c:83:17:e3:37:79: ea:c6:5f:54:ba:12:d1:1d:22:b5:5e:eb:90:38:e9: ae:2f:b7:6f:fb:78:62:6f:ce:70:f3:df:b7:c7:c8: 7c:ce:a5:07:17:fb:f9:44:bd:b6:4b:1a:d2:85:6f: 4c:cf:bc:8d:2d:d8:7b:46:e4:e5:7a:7c:f7:5f:2d: 11:50:11:9f:00:9d:cf:d0:cd:b9:55:7a:95:63:c3: c1:73:ac:9f:8f:87:68:d8:34:e7:99:bc:04:49:05: 08:f6:4a:d8:5c:8e:d3:a1:e9:55:f7:2a:6c:47:b2: 4d:4d:c4:31:86:46:28:f9:e6:0f:f3:9a:f8:36:13: 49:4b:fe:dd:62:47:ae:fc:d9:ef:15:f4:a8:97:5a: 0e:b5:90:37:15:af:85:04:09:9b:08:6f:d3:ee:46: 58:7e:7a:09:f5:35:0f:a5:fc:29:a3:24:1a:15:6b: 1a:65:de:84:63:b0:c4:aa:29:72:d5:90:44:c7:de: bf:05:4c:fc:81:ce:cf:10:a1:9a:b3:3c:1d:7f:cc: ad:c9:8f:29:8a:5a:68:fa:86:e3:2a:4e:ab:ee:7b: df:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:CB:3F:DF:20:28:95:E4:22:6E:3F:AC:65:6A:E1:8A:65:6E:B3:64 X509v3 Authority Key Identifier: keyid:DA:39:6A:1D:C6:29:9D:C3:BB:9E:8D:D7:65:0D:36:FA:BA:94:49:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:6c:6b:4c:ed:b9:f4:07:14:05:19:c4:73:a0:de:4f:fd:6a: 18:3b:01:3b:32:88:a8:69:67:9b:b3:41:80:68:a7:c3:d0:33: 02:d6:26:11:9e:7b:b2:aa:84:8e:a7:52:39:c5:54:df:d8:6c: f3:7b:ca:30:95:8c:db:7c:00:92:b0:5d:d9:17:ad:4a:7a:57: 2b:4c:e0:7b:bd:3e:54:ba:95:e3:67:ec:95:6d:c9:95:0d:f6: c7:48:35:c0:b2:5d:0f:a5:76:b6:73:7f:22:d8:56:1a:71:e0: d9:17:1d:b3:60:b3:ad:92:52:37:d0:3f:6b:e8:26:5b:b7:3b: 62:ef:db:e1:8f:2b:eb:91:8e:bc:c9:e2:cc:77:63:40:75:49: 03:0e:02:91:fd:e7:e7:a2:c0:2f:13:af:4f:bd:de:12:f0:15: ec:64:63:2b:06:5b:83:bf:f3:48:c9:37:d3:7a:25:14:16:3d: a5:76:2a:77:3c:90:af:3d:b8:2d:b9:e2:e5:93:6e:33:02:fa: f1:43:05:51:7f:81:a2:8d:1e:6e:e3:49:ed:ed:f0:3c:47:1c: 05:34:3e:7c:85:15:a4:98:07:fc:5c:14:08:cd:98:1c:13:5b: a1:8f:03:83:5d:61:46:79:04:3c:e6:13:72:19:1c:f7:f1:09: 72:0b:c1:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK7SMkT1u9dqq3byhTs4CtJSFLjEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREEzOTZBMURDNjI5OURDM0JCOUU4REQ3NjUwRDM2RkFC QTk0NDk2NzAeFw0yNTA4MjIwMjQ1NTRaFw0yNTA4MjUwNjAwNTRaMDMxMTAvBgNV BAMTKDJBQ0IzRkRGMjAyODk1RTQyMjZFM0ZBQzY1NkFFMThBNjU2RUIzNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDrpypwYMoPdMlX8VZrrEexPKlg SBL0U5/zG/68NHNn2sFItunyVXyDF+M3eerGX1S6EtEdIrVe65A46a4vt2/7eGJv znDz37fHyHzOpQcX+/lEvbZLGtKFb0zPvI0t2HtG5OV6fPdfLRFQEZ8Anc/QzblV epVjw8FzrJ+Ph2jYNOeZvARJBQj2SthcjtOh6VX3KmxHsk1NxDGGRij55g/zmvg2 E0lL/t1iR6782e8V9KiXWg61kDcVr4UECZsIb9PuRlh+egn1NQ+l/CmjJBoVaxpl 3oRjsMSqKXLVkETH3r8FTPyBzs8QoZqzPB1/zK3JjymKWmj6huMqTqvue99HAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKss/3yAoleQibj+sZWrhimVus2QwHwYDVR0j BBgwFoAU2jlqHcYpncO7no3XZQ02+rqUSWcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OGI2M2U3ZC1hNjE3LTRlOGMtYTgyMS02MjM5NTZkNGQ0YWUvMC9EQTM5NkExREM2 Mjk5REMzQkI5RThERDc2NTBEMzZGQUJBOTQ0OTY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREEzOTZBMURDNjI5OURDM0JCOUU4REQ3NjUwRDM2RkFCQTk0 NDk2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZThiNjNlN2QtYTYxNy00ZThjLWE4 MjEtNjIzOTU2ZDRkNGFlLzAvREEzOTZBMURDNjI5OURDM0JCOUU4REQ3NjUwRDM2 RkFCQTk0NDk2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAF5sa0ztufQHFAUZxHOg3k/9ahg7ATsyiKhp Z5uzQYBop8PQMwLWJhGee7KqhI6nUjnFVN/YbPN7yjCVjNt8AJKwXdkXrUp6VytM 4Hu9PlS6leNn7JVtyZUN9sdINcCyXQ+ldrZzfyLYVhpx4NkXHbNgs62SUjfQP2vo Jlu3O2Lv2+GPK+uRjrzJ4sx3Y0B1SQMOApH95+eiwC8Tr0+93hLwFexkYysGW4O/ 80jJN9N6JRQWPaV2Knc8kK89uC254uWTbjMC+vFDBVF/gaKNHm7jSe3t8DxHHAU0 PnyFFaSYB/xcFAjNmBwTW6GPA4NdYUZ5BDzmE3IZHPfxCXILwWA= -----END CERTIFICATE-----Generated at Sat Aug 23 12:07:51 2025 by rpki-client