$ rpki-client -vvf repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft File: DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft (raw, json) Hash identifier: duvc8XaLrsKBzTIAF9ErechlP51EeTNMR/wMjwGQyC0= Subject key identifier: 44:2D:C4:86:96:73:9E:AC:CB:30:07:0F:38:FB:95:94:F0:8A:A1:1B Authority key identifier: DA:6C:3D:41:56:C0:5B:74:E3:B5:C0:49:F7:98:B0:0D:C6:34:2B:70 Certificate issuer: /CN=DA6C3D4156C05B74E3B5C049F798B00DC6342B70 Certificate serial: 4091603ECBD260E5B2152BF6E521D8BB7EDE0A5E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft Manifest number: 0105 Signing time: Fri 18 Jul 2025 23:11:40 +0000 Manifest this update: Fri 18 Jul 2025 23:06:40 +0000 Manifest next update: Tue 22 Jul 2025 01:03:40 +0000 Files and hashes: 1: DA6C3D4156C05B74E3B5C049F798B00DC6342B70.crl (hash: Ijxf5SQBonQmb8Di1y/KilUyrHzgYZ9cs4w5olzYqDQ=) 2: 3130332e3234392e3232362e302f32342d3234203d3e20313531353236.roa (hash: d/FCKrPQVsgurMvNGz2oQ2iPyKXsXoRnlEaxs4nJ5ko=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.crl rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 22 Jul 2025 01:03:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 40:91:60:3e:cb:d2:60:e5:b2:15:2b:f6:e5:21:d8:bb:7e:de:0a:5e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA6C3D4156C05B74E3B5C049F798B00DC6342B70 Validity Not Before: Jul 18 23:06:40 2025 GMT Not After : Jul 22 01:03:40 2025 GMT Subject: CN=442DC48696739EACCB30070F38FB9594F08AA11B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:ca:c4:8f:e8:f7:71:3c:a2:05:31:d4:1e:e9: e0:36:b4:ea:b5:79:38:70:00:82:73:7e:52:f0:f7: 24:80:8a:e2:f8:79:82:cf:60:7f:9d:54:5a:c4:39: 67:32:da:b7:c6:13:6d:35:8a:86:66:f2:fc:45:6d: 34:5f:77:ad:bf:b5:ca:64:03:fc:f6:99:7c:13:35: 4b:da:53:6a:1e:de:64:f8:93:5d:2e:5e:51:8e:46: bb:a3:ab:de:76:c2:e2:8a:90:67:e7:b2:b3:61:fe: c0:d4:be:06:06:16:e1:ae:3e:90:5b:ae:59:bb:be: 40:e6:70:6c:0e:90:8c:4c:a9:53:af:c7:d3:fa:1f: a8:a3:09:5b:13:01:f0:10:84:30:70:8b:21:f2:cf: bd:ed:fa:e9:f7:59:5d:f7:51:3f:c0:cf:e9:8b:d9: 1d:0d:c9:cc:b1:ae:a1:01:a7:dc:21:f2:55:ed:c1: 39:0c:f9:5d:4b:e2:c4:57:28:81:c6:fe:4f:64:0b: 8a:d6:77:7e:6c:80:72:d9:05:ea:77:3f:b5:49:2e: 59:6a:0d:97:5c:2f:dd:be:72:33:76:d9:41:c8:09: 89:1a:24:d4:31:ee:19:c8:bf:26:5b:bb:44:66:d4: df:ab:a2:40:fa:27:98:04:8c:06:4a:4d:8d:88:be: 97:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:2D:C4:86:96:73:9E:AC:CB:30:07:0F:38:FB:95:94:F0:8A:A1:1B X509v3 Authority Key Identifier: keyid:DA:6C:3D:41:56:C0:5B:74:E3:B5:C0:49:F7:98:B0:0D:C6:34:2B:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:b8:4c:11:1f:65:e2:e1:a0:d8:e0:1c:47:9e:d7:97:63:db: 64:dc:5f:ed:ca:05:62:ce:53:b2:71:d2:68:a1:25:c4:bb:da: c0:43:31:2d:0a:95:33:a6:d7:24:bf:54:e3:8f:fb:e4:82:b6: 89:71:4c:bb:0d:f2:63:bd:31:f0:dc:5d:b7:e1:ab:38:71:4b: a6:bd:fa:4b:b3:56:22:09:71:79:10:bf:2e:09:cf:79:8c:a2: 4e:1b:c2:33:26:1d:d0:88:8f:76:74:80:21:a1:6e:c5:aa:93: b4:9e:b0:77:04:97:da:b9:ec:19:a0:70:c7:79:a1:33:d5:9d: 5a:7c:4b:ad:04:d7:b5:d2:7e:e4:af:8a:cf:06:1b:6a:52:56: 74:9f:8b:de:7a:5c:85:f5:93:44:59:17:53:9c:44:5f:d3:90: 63:82:30:3d:67:08:60:9c:5e:18:35:3b:98:9f:47:1b:c8:dc: 8a:c7:07:3d:64:c0:e0:cb:4d:7b:ec:93:ee:73:2f:c0:54:eb: 4a:ca:ba:6b:72:e7:10:c3:f7:97:5b:d1:e8:9d:4b:0e:4e:6a: 22:26:1b:4f:ca:50:88:7a:a0:8e:13:e3:ed:1d:2e:a9:0b:5b: fd:fb:d3:40:ee:c4:fc:fb:c2:a1:84:b4:47:8c:0c:69:0c:95: 9e:f7:64:2f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUQJFgPsvSYOWyFSv25SHYu37eCl4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE2QzNENDE1NkMwNUI3NEUzQjVDMDQ5Rjc5OEIwMERD NjM0MkI3MDAeFw0yNTA3MTgyMzA2NDBaFw0yNTA3MjIwMTAzNDBaMDMxMTAvBgNV BAMTKDQ0MkRDNDg2OTY3MzlFQUNDQjMwMDcwRjM4RkI5NTk0RjA4QUExMUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsysSP6PdxPKIFMdQe6eA2tOq1 eThwAIJzflLw9ySAiuL4eYLPYH+dVFrEOWcy2rfGE201ioZm8vxFbTRfd62/tcpk A/z2mXwTNUvaU2oe3mT4k10uXlGORrujq952wuKKkGfnsrNh/sDUvgYGFuGuPpBb rlm7vkDmcGwOkIxMqVOvx9P6H6ijCVsTAfAQhDBwiyHyz73t+un3WV33UT/Az+mL 2R0NycyxrqEBp9wh8lXtwTkM+V1L4sRXKIHG/k9kC4rWd35sgHLZBep3P7VJLllq DZdcL92+cjN22UHICYkaJNQx7hnIvyZbu0Rm1N+rokD6J5gEjAZKTY2IvperAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURC3EhpZznqzLMAcPOPuVlPCKoRswHwYDVR0j BBgwFoAU2mw9QVbAW3TjtcBJ95iwDcY0K3AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NzhhOGIzOS0zYWUzLTRkZTctOTM2Ni0yMWY5ZWEwNDMyNWEvMC9EQTZDM0Q0MTU2 QzA1Qjc0RTNCNUMwNDlGNzk4QjAwREM2MzQyQjcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREE2QzNENDE1NkMwNUI3NEUzQjVDMDQ5Rjc5OEIwMERDNjM0 MkI3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTc4YThiMzktM2FlMy00ZGU3LTkz NjYtMjFmOWVhMDQzMjVhLzAvREE2QzNENDE1NkMwNUI3NEUzQjVDMDQ5Rjc5OEIw MERDNjM0MkI3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAES4TBEfZeLhoNjgHEee15dj22TcX+3KBWLO U7Jx0mihJcS72sBDMS0KlTOm1yS/VOOP++SCtolxTLsN8mO9MfDcXbfhqzhxS6a9 +kuzViIJcXkQvy4Jz3mMok4bwjMmHdCIj3Z0gCGhbsWqk7SesHcEl9q57BmgcMd5 oTPVnVp8S60E17XSfuSvis8GG2pSVnSfi956XIX1k0RZF1OcRF/TkGOCMD1nCGCc Xhg1O5ifRxvI3IrHBz1kwODLTXvsk+5zL8BU60rKumty5xDD95db0eidSw5OaiIm G0/KUIh6oI4T4+0dLqkLW/3700DuxPz7wqGEtEeMDGkMlZ73ZC8= -----END CERTIFICATE-----Generated at Sun Jul 20 21:26:23 2025 by rpki-client