$ rpki-client -vvf repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft File: DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft (raw, json) Hash identifier: de0L+YpUWcomzk9T8y+jOPKgJzqhikR4/OkOSMuOXF8= Subject key identifier: AB:FD:CC:D0:7C:85:33:6C:42:BC:F2:8B:AE:FC:EE:C4:8F:C7:78:ED Authority key identifier: DF:8E:F2:99:4C:B5:42:09:F2:C2:A3:9A:7B:CE:7D:A0:D9:C3:4E:4A Certificate issuer: /CN=DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A Certificate serial: 60432466F6326D2F49615A989A3D4966142100AB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft Manifest number: 032C Signing time: Sun 20 Jul 2025 05:01:12 +0000 Manifest this update: Sun 20 Jul 2025 04:56:12 +0000 Manifest next update: Wed 23 Jul 2025 16:42:12 +0000 Files and hashes: 1: 323430343a326363303a323a3a2f34382d3438203d3e20313331373336.roa (hash: zPirjw68goF9ylHxOtcUqyoIsGV38h/23WQgUJ1Ori8=) 2: 3130332e3133322e31332e302f32342d3234203d3e20313331373336.roa (hash: 2cxxZUWkJsO3oT8bqHDC+csSkm6PFb2gUAHDSh62gR8=) 3: 3130332e3133322e31322e302f32342d3234203d3e20313331373336.roa (hash: yYY5Xasn+MhbZ/7PqdrXZuQAXqu+qcVQtvVv3ePHTro=) 4: DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.crl (hash: VgXs/0PGy7dkVXuCYaCfPRNg23zX+z8Ulx6r+pZiYrw=) 5: 323430343a326363303a3a2f33322d3438203d3e20313331373336.roa (hash: h8DSOqlAB7DM5TJQosNDXf2STLaxOgc/wT91U1wd/Qs=) 6: 3130332e3133322e31352e302f32342d3234203d3e20313331373336.roa (hash: YsQ/6eOY7UY889dueTFqI5fZ9jzbm6RP7AZHDvdYNjo=) 7: 3130332e3133322e31342e302f32342d3234203d3e20313331373336.roa (hash: XPqP92iiEQWlwXCwRpR2WN8Lt9Zye6dCVSvcRgh/30k=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.crl rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 16:42:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:43:24:66:f6:32:6d:2f:49:61:5a:98:9a:3d:49:66:14:21:00:ab Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A Validity Not Before: Jul 20 04:56:12 2025 GMT Not After : Jul 23 16:42:12 2025 GMT Subject: CN=ABFDCCD07C85336C42BCF28BAEFCEEC48FC778ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:d8:56:78:1c:dd:43:38:e7:1a:db:44:79:b6: fb:f4:0b:cf:09:ed:a8:30:3d:3f:51:59:ed:a3:a3: d5:81:23:85:36:64:7a:bf:86:94:09:46:c8:13:6a: b0:d7:c4:d7:ec:4b:d5:d9:47:0b:44:b5:2a:9e:df: 22:e7:62:c6:7e:2b:4a:d6:61:70:b0:2e:5e:4a:b2: c4:5d:aa:0c:26:17:76:81:77:7c:b4:85:73:19:d1: 52:e5:e6:8d:37:f1:6e:40:32:34:46:78:94:53:78: f9:6d:0e:4b:e3:2a:1c:71:95:bf:04:ac:90:39:fe: 86:ee:ef:9a:b6:59:05:aa:1b:d7:05:04:d8:3c:3b: ce:e7:e8:e4:56:5a:74:a5:a3:79:f7:f2:e5:41:6c: 53:f1:f1:b4:13:0d:ff:a1:a7:f2:b8:f2:5a:2d:87: 1c:a7:04:09:13:6f:dc:a8:e6:f9:a3:c0:07:f1:9e: 7a:10:a2:15:08:0b:25:b3:b1:4d:7d:fc:b0:83:4a: 18:76:5b:14:a9:de:fc:1c:52:4b:92:e3:f1:aa:ac: c8:f2:dc:17:24:85:5b:c9:86:6a:a3:88:be:a2:85: fb:5d:9a:ea:43:df:dc:84:e4:25:fa:84:34:37:2f: a7:74:ed:22:fd:54:cb:8b:b0:b7:2b:5c:e2:d2:2c: c9:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:FD:CC:D0:7C:85:33:6C:42:BC:F2:8B:AE:FC:EE:C4:8F:C7:78:ED X509v3 Authority Key Identifier: keyid:DF:8E:F2:99:4C:B5:42:09:F2:C2:A3:9A:7B:CE:7D:A0:D9:C3:4E:4A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/925cda36-693a-4c1a-ba9e-e0e178112140/0/DF8EF2994CB54209F2C2A39A7BCE7DA0D9C34E4A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:ce:7d:2e:37:91:6e:e9:30:ae:85:8d:2e:ed:f6:8a:b6:cd: 62:e2:d1:72:a8:33:f6:2f:36:13:6b:ee:da:f3:4a:c6:1f:ad: aa:59:eb:06:b7:8d:cd:a5:47:79:ee:21:76:fa:ee:d6:dc:50: 80:43:f6:c9:9f:86:0b:1c:1b:99:9f:a2:14:42:d3:5b:78:a2: f4:55:74:79:3b:21:c9:8f:af:f4:92:d9:57:8a:a8:b1:14:d4: ac:35:89:72:38:45:8b:5a:f7:ff:5d:4c:c3:e5:7a:cb:e3:91: 88:0c:71:18:84:f0:bd:51:b5:22:70:7c:60:5f:3c:03:fd:38: bd:a3:cb:9b:0a:59:4a:55:45:33:e7:dc:76:1f:5f:9a:ba:d7: 48:d0:4a:0b:56:e4:b4:2d:15:d3:0d:34:59:bc:3a:e0:31:b8: d0:1e:bc:b1:cb:59:8c:99:ad:b5:11:71:48:99:32:a5:79:c8: f8:20:ba:a3:79:21:4a:ba:6b:19:35:05:e5:f8:36:6c:5a:fd: 1a:20:8d:f4:9c:dd:10:e2:92:0d:a5:33:d8:f1:db:91:5d:f3: 7c:21:bd:57:d2:6f:02:20:e6:cc:fc:6a:e0:25:6f:29:59:fc: e6:79:21:10:0f:0a:aa:39:32:ed:93:b0:87:10:ab:76:59:13: bc:c8:f0:91 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYEMkZvYybS9JYVqYmj1JZhQhAKswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY4RUYyOTk0Q0I1NDIwOUYyQzJBMzlBN0JDRTdEQTBE OUMzNEU0QTAeFw0yNTA3MjAwNDU2MTJaFw0yNTA3MjMxNjQyMTJaMDMxMTAvBgNV BAMTKEFCRkRDQ0QwN0M4NTMzNkM0MkJDRjI4QkFFRkNFRUM0OEZDNzc4RUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX2FZ4HN1DOOca20R5tvv0C88J 7agwPT9RWe2jo9WBI4U2ZHq/hpQJRsgTarDXxNfsS9XZRwtEtSqe3yLnYsZ+K0rW YXCwLl5KssRdqgwmF3aBd3y0hXMZ0VLl5o038W5AMjRGeJRTePltDkvjKhxxlb8E rJA5/obu75q2WQWqG9cFBNg8O87n6ORWWnSlo3n38uVBbFPx8bQTDf+hp/K48lot hxynBAkTb9yo5vmjwAfxnnoQohUICyWzsU19/LCDShh2WxSp3vwcUkuS4/GqrMjy 3BckhVvJhmqjiL6ihftdmupD39yE5CX6hDQ3L6d07SL9VMuLsLcrXOLSLMnzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUq/3M0HyFM2xCvPKLrvzuxI/HeO0wHwYDVR0j BBgwFoAU347ymUy1QgnywqOae859oNnDTkowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MjVjZGEzNi02OTNhLTRjMWEtYmE5ZS1lMGUxNzgxMTIxNDAvMC9ERjhFRjI5OTRD QjU0MjA5RjJDMkEzOUE3QkNFN0RBMEQ5QzM0RTRBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREY4RUYyOTk0Q0I1NDIwOUYyQzJBMzlBN0JDRTdEQTBEOUMz NEU0QS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTI1Y2RhMzYtNjkzYS00YzFhLWJh OWUtZTBlMTc4MTEyMTQwLzAvREY4RUYyOTk0Q0I1NDIwOUYyQzJBMzlBN0JDRTdE QTBEOUMzNEU0QS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGHOfS43kW7pMK6FjS7t9oq2zWLi0XKoM/Yv NhNr7trzSsYfrapZ6wa3jc2lR3nuIXb67tbcUIBD9smfhgscG5mfohRC01t4ovRV dHk7IcmPr/SS2VeKqLEU1Kw1iXI4RYta9/9dTMPlesvjkYgMcRiE8L1RtSJwfGBf PAP9OL2jy5sKWUpVRTPn3HYfX5q610jQSgtW5LQtFdMNNFm8OuAxuNAevLHLWYyZ rbURcUiZMqV5yPgguqN5IUq6axk1BeX4Nmxa/RogjfSc3RDikg2lM9jx25Fd83wh vVfSbwIg5sz8auAlbylZ/OZ5IRAPCqo5Mu2TsIcQq3ZZE7zI8JE= -----END CERTIFICATE-----Generated at Mon Jul 21 12:37:27 2025 by rpki-client