$ rpki-client -vvf repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft File: DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft (raw, json) Hash identifier: C5jAK/kHAPpC4nrP5KN80Xa0fSb1kpTSmiE+WFvj8Uo= Subject key identifier: D0:F1:B3:26:76:D2:2D:82:6F:F1:44:A4:E5:9A:15:D8:5D:A7:F1:04 Authority key identifier: DC:1F:CA:69:CA:5B:7A:3A:3E:48:25:B3:CA:FC:C3:BD:1B:C0:6E:B7 Certificate issuer: /CN=DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7 Certificate serial: 2F27F528048035D67D20AFB87717F2D795982E6C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft Manifest number: 04F2 Signing time: Tue 22 Jul 2025 04:00:39 +0000 Manifest this update: Tue 22 Jul 2025 03:55:39 +0000 Manifest next update: Fri 25 Jul 2025 12:26:39 +0000 Files and hashes: 1: 3131312e36382e3131322e302f32302d3234203d3e203435323837.roa (hash: EmRosqOLA0o9un75dpB41tldUQb9JEqee08S4oNpAgc=) 2: 3130332e33312e3131302e302f32332d3234203d3e203435323837.roa (hash: 4PaQM0H/onjaHT/Kh1zZPEAnjrQ5QUcaM+Ku8Nb2uPM=) 3: 3135302e3132392e35362e302f32322d3234203d3e203435323837.roa (hash: IRZUoX6giIzocnieegh+jhCGcm3NJfUDoJas/fn7lAQ=) 4: 3230332e39392e3133302e302f32332d3234203d3e203435323837.roa (hash: k7ibyopUV9/XrMW2a9JFbhidu+OXQwQx2OObsR3bxGk=) 5: 3137352e3137362e3136302e302f32312d3234203d3e203435323837.roa (hash: 1Oab07RIZCU6Wr6N0vZAT3UZeBpPId8GfzsxV9iRdK8=) 6: DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl (hash: A0Hny6frbxtd8O9gEJNbIT+43tmWVOmquMrRnoWnkPk=) 7: 3230322e35362e3136302e302f32322d3234203d3e203435323837.roa (hash: rZ6xFcdvrZepULyMbdGd+kxrh/vJFiCfrx4GSYa9yts=) 8: 3130332e32332e3230302e302f32322d3234203d3e203435323837.roa (hash: LF6fkR6wHHLHaK6n5THO1FAaW1/pu2et9XJ8qxbKTqY=) 9: 323430363a323430303a3a2f33322d3438203d3e203435323837.roa (hash: VW/9nDJQjFvUWNt8EqbaeORZUsYDdJ6mH99j9xi/Rqk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 25 Jul 2025 12:26:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:27:f5:28:04:80:35:d6:7d:20:af:b8:77:17:f2:d7:95:98:2e:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7 Validity Not Before: Jul 22 03:55:39 2025 GMT Not After : Jul 25 12:26:39 2025 GMT Subject: CN=D0F1B32676D22D826FF144A4E59A15D85DA7F104 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:bc:56:ae:18:e7:17:bf:11:41:64:01:d7:df: 4e:47:c6:27:1b:ff:18:f4:6f:6d:90:dc:83:ea:dc: a9:95:bb:d4:bd:6a:32:9e:56:cc:5d:b8:9e:2b:70: 66:3b:5b:94:dc:f1:7a:02:bb:fc:94:0b:33:d5:3a: 0e:4e:a5:59:99:0b:a3:71:4a:a1:81:a0:d9:44:d1: 0f:07:6f:1a:26:aa:e6:31:a4:0b:e1:15:4e:ea:aa: af:24:3a:11:a8:cf:d4:77:fa:11:4f:df:ad:0c:6c: 68:7a:f2:64:5a:85:72:0a:65:e3:51:e9:86:1c:f4: 42:3d:05:6f:73:63:ae:17:af:9a:eb:5d:60:13:68: 36:c9:56:c2:d5:34:b1:7b:9a:03:66:96:ce:ee:2d: c5:a9:14:24:f9:e2:fd:5d:c2:33:e3:88:c0:fd:1d: ef:88:9d:db:f1:57:01:02:e3:08:12:8b:05:46:3e: ab:ab:13:4f:ee:f5:b6:d7:a4:ed:8e:3d:b9:6c:fd: df:18:0d:19:18:7e:39:e3:9f:d9:40:9b:69:1c:50: 2f:ee:6c:39:f9:67:53:88:c3:9e:42:04:d4:3a:82: 8c:6b:42:9b:58:c3:f7:6b:5a:43:de:84:2f:f9:93: 6b:4f:d2:c6:75:f7:21:81:5f:35:1f:5a:48:33:3a: 22:d7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D0:F1:B3:26:76:D2:2D:82:6F:F1:44:A4:E5:9A:15:D8:5D:A7:F1:04 X509v3 Authority Key Identifier: keyid:DC:1F:CA:69:CA:5B:7A:3A:3E:48:25:B3:CA:FC:C3:BD:1B:C0:6E:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:55:fc:83:61:05:ad:d6:82:fb:54:ad:dc:c4:8c:2e:8f:14: 41:ae:5e:51:67:4d:d2:00:24:a2:cb:8c:24:19:35:bc:f7:30: 3b:9a:e9:42:e9:9f:24:54:a9:7c:3c:20:72:47:9d:75:fc:37: de:1a:1f:90:3d:d6:dd:b3:c3:89:d7:70:9b:ba:6d:9a:be:a9: 18:5d:e3:be:fa:9b:c5:a3:c6:d7:fb:8f:15:39:c5:74:86:2a: da:5c:f4:f1:57:14:79:6e:44:c3:48:17:6f:ae:18:ea:33:53: 52:53:ee:18:52:7c:6d:a7:bf:5a:e9:31:a0:c2:1a:0f:61:5a: d1:e7:3f:87:1d:ce:aa:c9:8f:87:62:16:bd:f0:26:90:49:b9: 7b:e7:73:ae:95:60:b0:f0:b4:d7:98:74:16:a3:e5:72:4f:a2: 37:b3:9e:99:30:7a:4d:b2:c1:e5:1d:89:0b:c1:29:d5:a5:a2: 13:5d:05:56:19:4d:13:dc:0c:ee:a1:32:3f:1f:c2:6a:17:e5: e7:f9:6a:bd:f6:21:40:9a:c6:6c:e1:ee:c4:42:04:db:49:a0: 24:ef:f9:1e:a5:b6:13:57:04:7c:67:7b:49:40:ef:01:c1:21: 23:ac:aa:1d:4d:e3:48:cc:ec:88:a9:ba:00:fd:c6:69:fa:d8: e4:cf:ea:ff -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULyf1KASANdZ9IK+4dxfy15WYLmwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMxRkNBNjlDQTVCN0EzQTNFNDgyNUIzQ0FGQ0MzQkQx QkMwNkVCNzAeFw0yNTA3MjIwMzU1MzlaFw0yNTA3MjUxMjI2MzlaMDMxMTAvBgNV BAMTKEQwRjFCMzI2NzZEMjJEODI2RkYxNDRBNEU1OUExNUQ4NURBN0YxMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdvFauGOcXvxFBZAHX305Hxicb /xj0b22Q3IPq3KmVu9S9ajKeVsxduJ4rcGY7W5Tc8XoCu/yUCzPVOg5OpVmZC6Nx SqGBoNlE0Q8HbxomquYxpAvhFU7qqq8kOhGoz9R3+hFP360MbGh68mRahXIKZeNR 6YYc9EI9BW9zY64Xr5rrXWATaDbJVsLVNLF7mgNmls7uLcWpFCT54v1dwjPjiMD9 He+IndvxVwEC4wgSiwVGPqurE0/u9bbXpO2OPbls/d8YDRkYfjnjn9lAm2kcUC/u bDn5Z1OIw55CBNQ6goxrQptYw/drWkPehC/5k2tP0sZ19yGBXzUfWkgzOiLXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU0PGzJnbSLYJv8USk5ZoV2F2n8QQwHwYDVR0j BBgwFoAU3B/Kacpbejo+SCWzyvzDvRvAbrcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODI0OWZjMy02Yzg0LTRlOTEtYjA2Ny1hMGM2YTg0MGEzYTkvMC9EQzFGQ0E2OUNB NUI3QTNBM0U0ODI1QjNDQUZDQzNCRDFCQzA2RUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREMxRkNBNjlDQTVCN0EzQTNFNDgyNUIzQ0FGQ0MzQkQxQkMw NkVCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTgyNDlmYzMtNmM4NC00ZTkxLWIw NjctYTBjNmE4NDBhM2E5LzAvREMxRkNBNjlDQTVCN0EzQTNFNDgyNUIzQ0FGQ0Mz QkQxQkMwNkVCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHNV/INhBa3WgvtUrdzEjC6PFEGuXlFnTdIA JKLLjCQZNbz3MDua6ULpnyRUqXw8IHJHnXX8N94aH5A91t2zw4nXcJu6bZq+qRhd 4776m8Wjxtf7jxU5xXSGKtpc9PFXFHluRMNIF2+uGOozU1JT7hhSfG2nv1rpMaDC Gg9hWtHnP4cdzqrJj4diFr3wJpBJuXvnc66VYLDwtNeYdBaj5XJPojeznpkwek2y weUdiQvBKdWlohNdBVYZTRPcDO6hMj8fwmoX5ef5ar32IUCaxmzh7sRCBNtJoCTv +R6lthNXBHxne0lA7wHBISOsqh1N40jM7IipugD9xmn62OTP6v8= -----END CERTIFICATE-----Generated at Wed Jul 23 13:54:50 2025 by rpki-client