$ rpki-client -vvf repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft File: DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft (raw, json) Hash identifier: sSk+z4txEfmnye+TpHEpbsgjk6yzXyea9j4M8s3ty0A= Subject key identifier: EC:7F:CB:EE:E9:4D:72:4B:64:92:3F:37:E8:A7:BB:73:46:B1:10:69 Authority key identifier: DA:39:6A:1D:C6:29:9D:C3:BB:9E:8D:D7:65:0D:36:FA:BA:94:49:67 Certificate issuer: /CN=DA396A1DC6299DC3BB9E8DD7650D36FABA944967 Certificate serial: 6AB17EB6769F9273405C3B9F22C2266585FB372C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft Manifest number: 01F0 Signing time: Mon 21 Jul 2025 11:20:53 +0000 Manifest this update: Mon 21 Jul 2025 11:15:53 +0000 Manifest next update: Thu 24 Jul 2025 12:07:53 +0000 Files and hashes: 1: 3130332e3136362e34382e302f32332d3234203d3e20313339343630.roa (hash: 0a2CK00YtHnEd2JmEamQH3BHgmE0sjYsMU62NZCZSoM=) 2: DA396A1DC6299DC3BB9E8DD7650D36FABA944967.crl (hash: vteWNgxU3VadxmCj8+crsyIzhg9TuCPVpTOHuRdbnCM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.crl rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 24 Jul 2025 12:07:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:b1:7e:b6:76:9f:92:73:40:5c:3b:9f:22:c2:26:65:85:fb:37:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA396A1DC6299DC3BB9E8DD7650D36FABA944967 Validity Not Before: Jul 21 11:15:53 2025 GMT Not After : Jul 24 12:07:53 2025 GMT Subject: CN=EC7FCBEEE94D724B64923F37E8A7BB7346B11069 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:f5:52:7a:1a:2a:b0:4b:30:ff:ca:94:36:d1: 12:c7:54:62:a2:4a:1e:3f:68:3c:e0:c7:51:0c:33: 9c:fb:34:49:20:5a:f8:94:3b:3e:cb:6e:1a:c6:78: 58:30:41:77:c0:5e:28:dc:90:2d:60:6b:8f:2e:36: 1e:8b:de:09:6b:7b:ba:0d:9a:7f:56:e3:ab:50:36: 4f:36:d3:e8:54:90:79:da:28:b6:25:cb:d9:33:0f: 79:80:af:aa:fa:0c:81:f8:6a:14:da:36:d1:0b:88: 7f:87:ba:1e:9a:cb:01:ef:56:3e:63:dc:f0:99:d2: c1:82:45:34:03:07:a2:2f:2a:5d:60:31:86:30:61: 1a:f7:3f:b5:15:f4:61:61:44:f2:fb:6a:61:98:38: 7f:ec:b5:e7:c6:4a:ae:33:69:0d:85:80:ba:6d:b8: 19:b3:5c:1a:97:37:f4:24:97:0f:11:4a:96:b9:2f: 88:92:8d:19:40:9f:34:c8:d2:46:d6:09:22:54:03: f2:cc:ba:1c:e5:b2:b0:30:6d:b3:95:f1:27:b0:24: 72:41:48:d7:28:3a:16:be:3e:25:a8:28:13:38:71: 0e:54:ab:f8:c9:54:f4:db:88:86:cd:d6:9e:4a:de: e6:40:87:30:00:96:bf:66:f8:37:85:bc:36:77:b0: c5:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EC:7F:CB:EE:E9:4D:72:4B:64:92:3F:37:E8:A7:BB:73:46:B1:10:69 X509v3 Authority Key Identifier: keyid:DA:39:6A:1D:C6:29:9D:C3:BB:9E:8D:D7:65:0D:36:FA:BA:94:49:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:27:81:b5:d4:4c:d3:2e:56:4e:9e:6f:af:c2:6c:0b:c2:6d: 91:2b:b4:af:c8:30:21:6f:35:1f:82:ef:39:0e:3b:7b:9d:87: 2e:da:41:1c:20:68:a7:13:6c:b0:73:69:d5:d1:c3:70:bd:31: 2f:9e:4b:6f:b2:68:64:11:75:2d:d1:8f:ca:74:1d:8c:c4:9f: ca:36:19:4c:e6:88:bf:94:e6:14:04:8b:ac:50:50:d2:df:75: bc:62:f1:a4:67:33:18:22:d6:e4:95:92:ae:d9:71:49:61:d5: 6c:80:b4:2c:4f:08:a3:6a:0b:e1:d0:64:90:51:61:50:67:3a: e1:91:58:da:8c:fe:a4:c9:07:f7:f2:2b:ec:81:ab:55:b7:86: 31:98:df:3b:44:42:52:ef:67:39:8a:55:7e:48:f7:9e:e1:1b: be:02:e4:72:70:54:a4:09:44:e7:27:cd:39:a7:bd:f8:ce:94: 5c:9e:9d:8c:9e:db:91:1f:bc:b9:b9:14:e6:b6:f3:e9:36:dc: be:c7:b2:99:d6:f2:2f:21:56:c8:60:cb:83:51:6d:63:d4:8a: 09:37:7d:d4:fe:80:0d:7f:7a:62:a2:56:1f:cf:1b:53:a4:04: 84:95:ed:cf:d8:5b:04:57:48:ee:d5:c1:9c:3b:8c:d4:18:92: 35:5a:ed:74 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUarF+tnafknNAXDufIsImZYX7NywwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREEzOTZBMURDNjI5OURDM0JCOUU4REQ3NjUwRDM2RkFC QTk0NDk2NzAeFw0yNTA3MjExMTE1NTNaFw0yNTA3MjQxMjA3NTNaMDMxMTAvBgNV BAMTKEVDN0ZDQkVFRTk0RDcyNEI2NDkyM0YzN0U4QTdCQjczNDZCMTEwNjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDH9VJ6GiqwSzD/ypQ20RLHVGKi Sh4/aDzgx1EMM5z7NEkgWviUOz7LbhrGeFgwQXfAXijckC1ga48uNh6L3glre7oN mn9W46tQNk820+hUkHnaKLYly9kzD3mAr6r6DIH4ahTaNtELiH+Huh6aywHvVj5j 3PCZ0sGCRTQDB6IvKl1gMYYwYRr3P7UV9GFhRPL7amGYOH/stefGSq4zaQ2FgLpt uBmzXBqXN/Qklw8RSpa5L4iSjRlAnzTI0kbWCSJUA/LMuhzlsrAwbbOV8SewJHJB SNcoOha+PiWoKBM4cQ5Uq/jJVPTbiIbN1p5K3uZAhzAAlr9m+DeFvDZ3sMVzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7H/L7ulNcktkkj836Ke7c0axEGkwHwYDVR0j BBgwFoAU2jlqHcYpncO7no3XZQ02+rqUSWcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OGI2M2U3ZC1hNjE3LTRlOGMtYTgyMS02MjM5NTZkNGQ0YWUvMC9EQTM5NkExREM2 Mjk5REMzQkI5RThERDc2NTBEMzZGQUJBOTQ0OTY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREEzOTZBMURDNjI5OURDM0JCOUU4REQ3NjUwRDM2RkFCQTk0 NDk2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZThiNjNlN2QtYTYxNy00ZThjLWE4 MjEtNjIzOTU2ZDRkNGFlLzAvREEzOTZBMURDNjI5OURDM0JCOUU4REQ3NjUwRDM2 RkFCQTk0NDk2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHcngbXUTNMuVk6eb6/CbAvCbZErtK/IMCFv NR+C7zkOO3udhy7aQRwgaKcTbLBzadXRw3C9MS+eS2+yaGQRdS3Rj8p0HYzEn8o2 GUzmiL+U5hQEi6xQUNLfdbxi8aRnMxgi1uSVkq7ZcUlh1WyAtCxPCKNqC+HQZJBR YVBnOuGRWNqM/qTJB/fyK+yBq1W3hjGY3ztEQlLvZzmKVX5I957hG74C5HJwVKQJ ROcnzTmnvfjOlFyenYye25EfvLm5FOa28+k23L7HspnW8i8hVshgy4NRbWPUigk3 fdT+gA1/emKiVh/PG1OkBISV7c/YWwRXSO7VwZw7jNQYkjVa7XQ= -----END CERTIFICATE-----Generated at Mon Jul 21 18:04:54 2025 by rpki-client