$ rpki-client -vvf repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft File: DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft (raw, json) Hash identifier: 7Y0raoAD6Ic4PvPY9e+rvw/XOi+D7XjaDWfhAqhwUA0= Subject key identifier: B3:86:D9:FA:0D:34:6D:75:50:89:85:A4:41:E6:79:CF:D8:41:6B:32 Authority key identifier: DF:77:06:1C:AE:F3:0A:8D:AF:6B:52:D8:A3:D9:FD:80:F3:72:0F:11 Certificate issuer: /CN=DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11 Certificate serial: 79AB9AEEE4BA805F4C818C4E953BABD8903F2BC3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft Manifest number: AE Signing time: Sun 20 Jul 2025 09:40:36 +0000 Manifest this update: Sun 20 Jul 2025 09:35:36 +0000 Manifest next update: Wed 23 Jul 2025 12:42:36 +0000 Files and hashes: 1: 323030313a6466333a663834303a3a2f34382d3438203d3e20313532383330.roa (hash: YS3oqm1Lbyd0/97yvUW9zyotUoDYQl3GyaLAxHR+Jqk=) 2: DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.crl (hash: WXUAkGDiTsraVaCeWiPA4QDFO+583Efk4gJlE5OCwL4=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.crl rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 12:42:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:ab:9a:ee:e4:ba:80:5f:4c:81:8c:4e:95:3b:ab:d8:90:3f:2b:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11 Validity Not Before: Jul 20 09:35:36 2025 GMT Not After : Jul 23 12:42:36 2025 GMT Subject: CN=B386D9FA0D346D75508985A441E679CFD8416B32 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:9e:f5:88:14:2d:bd:7a:e4:67:53:c5:b7:27: 25:38:d0:92:8a:79:02:1c:4b:fd:25:94:55:a4:ab: 68:9f:ba:b6:2d:cd:e6:bd:d4:8a:e1:59:9a:98:60: 4f:25:90:ad:d0:cd:ae:19:7c:79:90:4d:7b:df:8b: bf:b7:8b:db:fc:ec:32:22:c0:ac:94:af:08:a4:96: 71:ab:1a:cd:f4:c8:0b:3d:8e:34:1e:96:bb:75:4d: e2:25:53:48:d2:26:1c:1e:03:4f:e9:06:52:e8:f6: d5:40:18:7a:aa:ea:53:c5:7f:5e:a3:c9:47:76:0d: b4:3c:c1:60:4b:f4:c3:61:45:8e:96:70:84:a8:8c: b5:b0:86:35:02:bb:d9:85:2f:33:49:e7:06:ff:8f: 2c:8d:57:4f:25:aa:a5:88:32:b3:7e:c7:39:97:f2: 2d:c7:15:27:d5:e7:b3:18:60:a5:72:e2:cc:de:82: fc:5c:f8:d7:11:1a:56:7c:72:3f:09:54:67:30:29: 80:d6:44:51:d9:f2:01:4c:7e:a8:89:a9:24:33:40: 8f:33:25:93:32:71:13:78:09:fa:6d:46:28:3e:63: 0f:48:c6:5e:3c:8a:ec:b9:63:63:48:01:84:17:04: 44:2d:7b:e4:e7:01:f6:0c:7c:b5:58:c9:d0:72:a6: b5:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B3:86:D9:FA:0D:34:6D:75:50:89:85:A4:41:E6:79:CF:D8:41:6B:32 X509v3 Authority Key Identifier: keyid:DF:77:06:1C:AE:F3:0A:8D:AF:6B:52:D8:A3:D9:FD:80:F3:72:0F:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:e9:a6:7d:3d:7e:d2:ff:77:06:d2:b1:55:3c:75:74:1b:fb: 7e:37:e1:65:d9:e6:50:0a:30:ef:21:fe:1e:8f:c3:64:f9:43: 91:5d:ef:5f:2d:e8:bc:5f:03:52:68:45:e8:a1:9a:e0:59:8d: d4:98:97:cc:ad:de:ac:d1:e7:45:c3:68:39:72:34:34:b0:98: 0a:e6:ca:c2:de:b9:37:63:08:da:c0:0f:ae:3f:1e:0c:cd:24: 9e:cd:c0:bc:d6:bf:49:01:3a:f3:fc:48:f9:ab:94:85:a7:d3: 6f:bf:76:e9:78:a2:5c:ed:8e:8a:a8:f2:08:42:1b:ba:9a:0d: 18:dc:fd:07:c9:2c:ad:c1:15:65:0d:d3:85:77:ae:bb:9f:29: f3:3b:ec:8a:67:b1:9e:ab:13:1d:6d:7f:af:20:63:33:6a:45: e5:4b:19:f3:c1:ce:a6:b9:ec:5d:aa:26:4b:1c:9f:49:58:f7: 13:f5:f5:94:96:48:32:2a:c5:49:4c:b0:24:3d:93:98:d8:62: 77:9d:dc:f1:97:e9:e8:94:4a:27:fc:a8:b9:55:f8:ce:ce:37: dd:84:d7:f0:58:23:dd:ec:71:f5:e3:57:1b:a4:7e:6c:a3:56: b2:63:28:4b:41:aa:6a:3d:bc:36:07:3f:1a:e7:12:29:34:92: 68:ce:9e:1d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeaua7uS6gF9MgYxOlTur2JA/K8MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY3NzA2MUNBRUYzMEE4REFGNkI1MkQ4QTNEOUZEODBG MzcyMEYxMTAeFw0yNTA3MjAwOTM1MzZaFw0yNTA3MjMxMjQyMzZaMDMxMTAvBgNV BAMTKEIzODZEOUZBMEQzNDZENzU1MDg5ODVBNDQxRTY3OUNGRDg0MTZCMzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDinvWIFC29euRnU8W3JyU40JKK eQIcS/0llFWkq2ifurYtzea91IrhWZqYYE8lkK3Qza4ZfHmQTXvfi7+3i9v87DIi wKyUrwiklnGrGs30yAs9jjQelrt1TeIlU0jSJhweA0/pBlLo9tVAGHqq6lPFf16j yUd2DbQ8wWBL9MNhRY6WcISojLWwhjUCu9mFLzNJ5wb/jyyNV08lqqWIMrN+xzmX 8i3HFSfV57MYYKVy4szegvxc+NcRGlZ8cj8JVGcwKYDWRFHZ8gFMfqiJqSQzQI8z JZMycRN4CfptRig+Yw9Ixl48iuy5Y2NIAYQXBEQte+TnAfYMfLVYydByprXPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUs4bZ+g00bXVQiYWkQeZ5z9hBazIwHwYDVR0j BBgwFoAU33cGHK7zCo2va1LYo9n9gPNyDxEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTAyMTBiMy1jY2EyLTQzYzUtODlmOS01YTkwODZhNjA3MDMvMS9ERjc3MDYxQ0FF RjMwQThEQUY2QjUyRDhBM0Q5RkQ4MEYzNzIwRjExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREY3NzA2MUNBRUYzMEE4REFGNkI1MkQ4QTNEOUZEODBGMzcy MEYxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EwMjEwYjMtY2NhMi00M2M1LTg5 ZjktNWE5MDg2YTYwNzAzLzEvREY3NzA2MUNBRUYzMEE4REFGNkI1MkQ4QTNEOUZE ODBGMzcyMEYxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABbppn09ftL/dwbSsVU8dXQb+3434WXZ5lAK MO8h/h6Pw2T5Q5Fd718t6LxfA1JoReihmuBZjdSYl8yt3qzR50XDaDlyNDSwmArm ysLeuTdjCNrAD64/HgzNJJ7NwLzWv0kBOvP8SPmrlIWn02+/dul4olztjoqo8ghC G7qaDRjc/QfJLK3BFWUN04V3rrufKfM77IpnsZ6rEx1tf68gYzNqReVLGfPBzqa5 7F2qJkscn0lY9xP19ZSWSDIqxUlMsCQ9k5jYYned3PGX6eiUSif8qLlV+M7ON92E 1/BYI93scfXjVxukfmyjVrJjKEtBqmo9vDYHPxrnEik0kmjOnh0= -----END CERTIFICATE-----Generated at Sun Jul 20 21:26:20 2025 by rpki-client