$ rpki-client -vvf repo-rpki.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/DA737E8BB9E3519F19E608DC3E839F360D2C4623.mft File: DA737E8BB9E3519F19E608DC3E839F360D2C4623.mft (raw, json) Hash identifier: SDxa4M3PO3TJVjkDmLFwGJwunH6yaU2AVRWcO0+DlgM= Subject key identifier: 1D:87:AB:E1:44:D7:FF:7A:B7:DC:7F:A5:90:BC:C4:64:55:63:C4:97 Authority key identifier: DA:73:7E:8B:B9:E3:51:9F:19:E6:08:DC:3E:83:9F:36:0D:2C:46:23 Certificate issuer: /CN=DA737E8BB9E3519F19E608DC3E839F360D2C4623 Certificate serial: 229ADD2C650015F2A12980BD0486BD395FE50FC1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA737E8BB9E3519F19E608DC3E839F360D2C4623.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/DA737E8BB9E3519F19E608DC3E839F360D2C4623.mft Manifest number: A6 Signing time: Sun 20 Jul 2025 04:41:48 +0000 Manifest this update: Sun 20 Jul 2025 04:36:48 +0000 Manifest next update: Wed 23 Jul 2025 16:05:48 +0000 Files and hashes: 1: 323030313a6466323a623263303a3a2f34382d3438203d3e20313530393538.roa (hash: pkgFynGQ9jkHeIrXOyJUjg6uu6vSpzsXT9qLBW8x194=) 2: 3130332e38312e3131302e302f32332d3234203d3e20313530393538.roa (hash: 2/cotGNcJ8/pTH7ezN1hAoiTKcYjyf0D6A4DNtUiVcI=) 3: DA737E8BB9E3519F19E608DC3E839F360D2C4623.crl (hash: n1dBXJ1zTe3cdT9kszDHhrZnSV+NsuVDK/i15V0lq3A=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/DA737E8BB9E3519F19E608DC3E839F360D2C4623.crl rsync://repo-rpki.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/DA737E8BB9E3519F19E608DC3E839F360D2C4623.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA737E8BB9E3519F19E608DC3E839F360D2C4623.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 16:05:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:9a:dd:2c:65:00:15:f2:a1:29:80:bd:04:86:bd:39:5f:e5:0f:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA737E8BB9E3519F19E608DC3E839F360D2C4623 Validity Not Before: Jul 20 04:36:48 2025 GMT Not After : Jul 23 16:05:48 2025 GMT Subject: CN=1D87ABE144D7FF7AB7DC7FA590BCC4645563C497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:29:63:2c:13:11:43:76:42:87:2b:a0:f1:b4: 75:63:82:2f:ea:b1:84:85:de:50:87:e2:e7:aa:7a: 72:1e:19:16:da:ba:fe:28:88:a2:df:36:74:be:ce: eb:02:71:99:02:04:2b:5b:3a:dd:a6:28:84:93:86: f2:da:8c:18:32:b9:db:6f:1d:fb:47:c1:e5:2c:5e: 38:02:55:13:f6:50:1e:41:87:ea:4f:9d:1a:15:de: 2b:3a:11:e5:40:30:fc:32:bd:df:bf:79:8d:e9:18: 7d:f7:65:a0:fc:bd:52:3a:1f:08:3d:d9:9d:bb:3e: 74:de:20:f3:7b:5b:2d:be:d1:d2:0e:f8:92:b2:2a: bc:20:0e:17:1b:db:8c:a8:1d:e1:01:18:e0:fd:2c: 99:66:60:8b:09:c9:2c:43:68:78:63:a3:1b:7b:77: 56:57:9a:48:3a:5a:45:af:44:ef:05:ca:a2:e5:d7: dc:60:46:ac:d6:23:fd:1b:79:1f:d1:1b:08:96:67: d0:a1:53:03:61:49:85:71:9f:2c:1a:22:78:00:46: 05:23:e7:8d:8c:96:ce:35:f6:05:af:db:f8:f7:5d: 1b:ef:ec:6b:6c:38:57:3e:d9:43:ee:c8:41:ed:6e: 81:30:14:ca:c9:f4:fd:eb:a6:eb:46:33:b1:78:79: 7b:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:87:AB:E1:44:D7:FF:7A:B7:DC:7F:A5:90:BC:C4:64:55:63:C4:97 X509v3 Authority Key Identifier: keyid:DA:73:7E:8B:B9:E3:51:9F:19:E6:08:DC:3E:83:9F:36:0D:2C:46:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/DA737E8BB9E3519F19E608DC3E839F360D2C4623.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA737E8BB9E3519F19E608DC3E839F360D2C4623.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/DA737E8BB9E3519F19E608DC3E839F360D2C4623.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:12:aa:33:c4:fc:a7:71:f6:b3:35:d3:66:d1:aa:7d:2f:81: 6d:89:eb:d2:03:7b:f5:c4:ed:a8:b3:c2:d7:29:97:e0:dd:dc: 46:be:be:63:4d:68:5d:ad:ab:02:ad:6e:5d:01:f4:ab:9e:87: fd:a9:dc:71:d4:07:8a:66:fa:07:b4:17:70:3a:b8:24:d5:fa: 6d:54:4c:a5:a1:d1:85:5e:50:f9:05:8c:42:b8:59:c8:7b:56: 6a:bc:b5:12:da:37:ee:5f:0d:cb:f7:fb:95:ef:54:4a:1e:85: 24:bd:0c:e2:29:7b:0f:7e:12:60:04:8c:b2:ca:05:22:13:70: b2:79:31:77:9e:3d:2a:e9:c0:26:6b:6b:1e:d2:d7:3f:29:ae: 32:33:10:6e:65:54:2f:54:e4:20:f8:13:68:a7:09:c7:59:4a: 4c:c2:42:ff:97:21:d2:17:c0:1c:7d:a9:98:ed:b2:10:cc:c9: bd:19:45:a3:35:c7:b4:b6:8d:86:a3:de:0c:00:aa:72:9b:d8: 87:44:13:bc:f2:fd:57:0e:55:c3:39:12:c3:a9:42:df:15:22: 96:64:a7:40:91:1b:5b:8b:9e:91:35:e3:ff:f8:87:ae:37:dc: 6d:87:0e:77:a9:a3:b3:40:43:8c:46:8a:4d:bc:e6:53:99:ca: 4b:27:29:37 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIprdLGUAFfKhKYC9BIa9OV/lD8EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE3MzdFOEJCOUUzNTE5RjE5RTYwOERDM0U4MzlGMzYw RDJDNDYyMzAeFw0yNTA3MjAwNDM2NDhaFw0yNTA3MjMxNjA1NDhaMDMxMTAvBgNV BAMTKDFEODdBQkUxNDREN0ZGN0FCN0RDN0ZBNTkwQkNDNDY0NTU2M0M0OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzKWMsExFDdkKHK6DxtHVjgi/q sYSF3lCH4ueqenIeGRbauv4oiKLfNnS+zusCcZkCBCtbOt2mKISThvLajBgyudtv HftHweUsXjgCVRP2UB5Bh+pPnRoV3is6EeVAMPwyvd+/eY3pGH33ZaD8vVI6Hwg9 2Z27PnTeIPN7Wy2+0dIO+JKyKrwgDhcb24yoHeEBGOD9LJlmYIsJySxDaHhjoxt7 d1ZXmkg6WkWvRO8FyqLl19xgRqzWI/0beR/RGwiWZ9ChUwNhSYVxnywaIngARgUj 542Mls419gWv2/j3XRvv7GtsOFc+2UPuyEHtboEwFMrJ9P3rputGM7F4eXtNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHYer4UTX/3q33H+lkLzEZFVjxJcwHwYDVR0j BBgwFoAU2nN+i7njUZ8Z5gjcPoOfNg0sRiMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjBiY2RjMy0wZmVhLTQ3NDctOTkwNy02NTY0ODZiYWU4ZGEvMC9EQTczN0U4QkI5 RTM1MTlGMTlFNjA4REMzRTgzOUYzNjBEMkM0NjIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREE3MzdFOEJCOUUzNTE5RjE5RTYwOERDM0U4MzlGMzYwRDJD NDYyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGYwYmNkYzMtMGZlYS00NzQ3LTk5 MDctNjU2NDg2YmFlOGRhLzAvREE3MzdFOEJCOUUzNTE5RjE5RTYwOERDM0U4MzlG MzYwRDJDNDYyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGoSqjPE/Kdx9rM102bRqn0vgW2J69IDe/XE 7aizwtcpl+Dd3Ea+vmNNaF2tqwKtbl0B9Kueh/2p3HHUB4pm+ge0F3A6uCTV+m1U TKWh0YVeUPkFjEK4Wch7Vmq8tRLaN+5fDcv3+5XvVEoehSS9DOIpew9+EmAEjLLK BSITcLJ5MXeePSrpwCZrax7S1z8prjIzEG5lVC9U5CD4E2inCcdZSkzCQv+XIdIX wBx9qZjtshDMyb0ZRaM1x7S2jYaj3gwAqnKb2IdEE7zy/VcOVcM5EsOpQt8VIpZk p0CRG1uLnpE14//4h6433G2HDnepo7NAQ4xGik285lOZyksnKTc= -----END CERTIFICATE-----Generated at Mon Jul 21 02:09:40 2025 by rpki-client