$ rpki-client -vvf repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.mft File: DF1CEA0313DA7500D70AE089169B4BBEE54CA859.mft (raw, json) Hash identifier: b4aRytGzI4e/KUWn5mDtk6DWaZPMaKKdWqdLmkHJoYA= Subject key identifier: F7:40:CF:01:E2:B0:C5:7A:08:7B:02:22:2F:FD:E9:23:9F:CC:EA:00 Authority key identifier: DF:1C:EA:03:13:DA:75:00:D7:0A:E0:89:16:9B:4B:BE:E5:4C:A8:59 Certificate issuer: /CN=DF1CEA0313DA7500D70AE089169B4BBEE54CA859 Certificate serial: 14B982B98B79BEEB7C5FF394904A59AA97D7E0FE Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.mft Manifest number: 04FE Signing time: Wed 03 Sep 2025 16:41:15 +0000 Manifest this update: Wed 03 Sep 2025 16:36:15 +0000 Manifest next update: Sat 06 Sep 2025 22:59:15 +0000 Files and hashes: 1: 3132302e38392e39342e302f32332d3234203d3e203536323333.roa (hash: dkwLIgjutNqyS1fEiwY5jB8EjSSH9/0tY66Lo4b2moY=) 2: 3139322e3134302e3232342e302f32332d3234203d3e203536323333.roa (hash: BlXsQ1QjfVoT6J0SDJFst3KLhMp6LiWyqHWFZlBXj2o=) 3: DF1CEA0313DA7500D70AE089169B4BBEE54CA859.crl (hash: vIzJYzAvR+n4jzMyGR3zn/aZvlMqeCb+6oubUiCztgw=) 4: 3130332e31342e3131302e302f32332d3234203d3e203536323333.roa (hash: tDRK/Vdz8u2hhC9LdyJ4AT+BwDcg/REr12fUhDIA9Bo=) 5: 34332e3235322e3134342e302f32332d3234203d3e203536323333.roa (hash: u7MPei7+iN4f1OLKumfeRBmfOe2wgHqRvP7yaGUByuA=) 6: 3130332e3233332e38382e302f32332d3234203d3e203536323333.roa (hash: 7Q0dwA0Rc1pnpyLnXxos7sM1Wj4t+yMR55gSNZ0dsoU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.crl rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 22:59:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:b9:82:b9:8b:79:be:eb:7c:5f:f3:94:90:4a:59:aa:97:d7:e0:fe Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF1CEA0313DA7500D70AE089169B4BBEE54CA859 Validity Not Before: Sep 3 16:36:15 2025 GMT Not After : Sep 6 22:59:15 2025 GMT Subject: CN=F740CF01E2B0C57A087B02222FFDE9239FCCEA00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:b8:d8:a4:63:54:c4:31:43:26:bc:82:f5:f4: 1b:7b:3b:c4:b2:90:aa:19:50:88:13:11:7a:63:c4: 9a:80:b7:30:08:65:fb:f7:17:be:81:7a:15:9a:dd: 29:07:29:8a:37:3d:b6:83:0b:44:4a:e3:13:4e:bd: 32:a5:89:ec:4d:26:3c:19:c8:d2:2e:8c:1e:c1:6b: d5:db:72:6f:0d:40:e6:40:17:4d:31:5c:00:e4:26: b3:ae:74:c5:f7:80:ca:31:37:49:00:e7:ab:61:65: af:12:23:d7:80:98:c8:4a:dc:d5:cb:b8:00:dd:68: c5:e6:2c:41:47:1a:fc:4c:9e:74:86:c7:ba:fa:96: d6:8f:4c:c9:33:00:71:88:f1:af:61:6b:9f:b0:b5: a5:1d:f7:08:26:c1:05:1c:63:20:7e:fe:76:38:81: 82:58:89:98:15:b4:68:09:81:4a:32:03:a8:8a:74: 7a:d5:72:27:00:25:69:df:c4:63:e3:bb:cf:a5:81: 1b:61:f6:fc:b2:c1:e9:80:e5:c7:32:a9:15:26:4b: 43:05:ef:08:9b:d9:38:9f:dd:1a:a1:b4:4b:69:8d: 3d:1e:97:b0:8b:79:8b:e7:0c:d5:4b:58:44:7e:93: 4b:cc:61:f7:56:cd:53:37:d8:c5:96:30:45:b4:4e: 38:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F7:40:CF:01:E2:B0:C5:7A:08:7B:02:22:2F:FD:E9:23:9F:CC:EA:00 X509v3 Authority Key Identifier: keyid:DF:1C:EA:03:13:DA:75:00:D7:0A:E0:89:16:9B:4B:BE:E5:4C:A8:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04fd4bc2-41d4-42e6-a7ff-59493885126a/0/DF1CEA0313DA7500D70AE089169B4BBEE54CA859.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 75:02:23:49:93:7e:ba:0b:25:94:5f:f7:a5:32:c0:07:f4:a3: ae:71:a5:1d:7e:8f:67:c0:ba:73:3f:13:f3:b9:96:d1:6e:bf: fc:45:cf:8f:da:b9:6b:47:cd:9d:7a:64:dc:bf:a5:b3:33:c7: 51:71:bd:34:ac:ca:6d:7a:e9:28:be:b5:5e:a8:f3:24:88:a4: de:3a:3f:d8:38:62:e0:33:05:03:59:ed:fa:fc:38:5b:fe:b2: 84:0e:33:55:a5:19:b0:4c:fd:55:6e:00:fa:f3:98:a8:60:21: 15:11:96:83:cc:45:a3:7e:b7:fa:16:6c:f0:8d:e3:17:47:99: 39:d0:12:ef:f8:73:4b:30:f9:f1:0a:2b:8e:1f:32:13:d9:47: 9a:0e:cd:a3:3b:30:3a:9a:56:7d:ff:91:5f:0a:88:09:37:91: d8:58:89:80:2f:8a:b2:0d:04:0b:59:13:0b:13:df:1c:89:dd: 2d:f9:61:1b:ce:5a:83:09:12:1a:7a:08:11:f7:ce:f2:87:b7: f6:e0:db:d3:26:71:91:5b:e3:67:2a:a5:95:d9:82:bc:18:8c: 8e:8f:97:ef:15:d0:35:29:24:a3:45:47:4c:ab:48:8f:46:6c: 22:88:78:c2:c4:9b:71:cc:43:d6:52:b1:af:a5:5d:47:02:f4: 39:05:93:bb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFLmCuYt5vut8X/OUkEpZqpfX4P4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYxQ0VBMDMxM0RBNzUwMEQ3MEFFMDg5MTY5QjRCQkVF NTRDQTg1OTAeFw0yNTA5MDMxNjM2MTVaFw0yNTA5MDYyMjU5MTVaMDMxMTAvBgNV BAMTKEY3NDBDRjAxRTJCMEM1N0EwODdCMDIyMjJGRkRFOTIzOUZDQ0VBMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzuNikY1TEMUMmvIL19Bt7O8Sy kKoZUIgTEXpjxJqAtzAIZfv3F76BehWa3SkHKYo3PbaDC0RK4xNOvTKliexNJjwZ yNIujB7Ba9Xbcm8NQOZAF00xXADkJrOudMX3gMoxN0kA56thZa8SI9eAmMhK3NXL uADdaMXmLEFHGvxMnnSGx7r6ltaPTMkzAHGI8a9ha5+wtaUd9wgmwQUcYyB+/nY4 gYJYiZgVtGgJgUoyA6iKdHrVcicAJWnfxGPju8+lgRth9vyywemA5ccyqRUmS0MF 7wib2Tif3RqhtEtpjT0el7CLeYvnDNVLWER+k0vMYfdWzVM32MWWMEW0TjgrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU90DPAeKwxXoIewIiL/3pI5/M6gAwHwYDVR0j BBgwFoAU3xzqAxPadQDXCuCJFptLvuVMqFkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NGZkNGJjMi00MWQ0LTQyZTYtYTdmZi01OTQ5Mzg4NTEyNmEvMC9ERjFDRUEwMzEz REE3NTAwRDcwQUUwODkxNjlCNEJCRUU1NENBODU5LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREYxQ0VBMDMxM0RBNzUwMEQ3MEFFMDg5MTY5QjRCQkVFNTRD QTg1OS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDRmZDRiYzItNDFkNC00MmU2LWE3 ZmYtNTk0OTM4ODUxMjZhLzAvREYxQ0VBMDMxM0RBNzUwMEQ3MEFFMDg5MTY5QjRC QkVFNTRDQTg1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHUCI0mTfroLJZRf96UywAf0o65xpR1+j2fA unM/E/O5ltFuv/xFz4/auWtHzZ16ZNy/pbMzx1FxvTSsym166Si+tV6o8ySIpN46 P9g4YuAzBQNZ7fr8OFv+soQOM1WlGbBM/VVuAPrzmKhgIRURloPMRaN+t/oWbPCN 4xdHmTnQEu/4c0sw+fEKK44fMhPZR5oOzaM7MDqaVn3/kV8KiAk3kdhYiYAvirIN BAtZEwsT3xyJ3S35YRvOWoMJEhp6CBH3zvKHt/bg29MmcZFb42cqpZXZgrwYjI6P l+8V0DUpJKNFR0yrSI9GbCKIeMLEm3HMQ9ZSsa+lXUcC9DkFk7s= -----END CERTIFICATE-----Generated at Fri Sep 5 10:13:43 2025 by rpki-client