$ rpki-client -vvf repo-rpki.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/DA737E8BB9E3519F19E608DC3E839F360D2C4623.mft File: DA737E8BB9E3519F19E608DC3E839F360D2C4623.mft (raw, json) Hash identifier: bfq98dyXBgGg410MXBzO1X4PZsU4Z3wRUSDGFz/GOIo= Subject key identifier: 03:DC:E6:F6:7C:7B:B0:05:3E:89:0A:79:AA:24:97:68:E2:0B:E5:01 Authority key identifier: DA:73:7E:8B:B9:E3:51:9F:19:E6:08:DC:3E:83:9F:36:0D:2C:46:23 Certificate issuer: /CN=DA737E8BB9E3519F19E608DC3E839F360D2C4623 Certificate serial: 021AAF8D877C28175A62816E0B5E7C077E19E1D1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA737E8BB9E3519F19E608DC3E839F360D2C4623.cer Subject info access: rsync://repo-rpki.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/DA737E8BB9E3519F19E608DC3E839F360D2C4623.mft Manifest number: BB Signing time: Thu 04 Sep 2025 23:41:49 +0000 Manifest this update: Thu 04 Sep 2025 23:36:49 +0000 Manifest next update: Mon 08 Sep 2025 01:10:49 +0000 Files and hashes: 1: DA737E8BB9E3519F19E608DC3E839F360D2C4623.crl (hash: yNQ4P+ojiFSW3QaV0hjji8Gf1LDEmr7wxKPwrmKkn1s=) 2: 323030313a6466323a623263303a3a2f34382d3438203d3e20313530393538.roa (hash: pkgFynGQ9jkHeIrXOyJUjg6uu6vSpzsXT9qLBW8x194=) 3: 3130332e38312e3131302e302f32332d3234203d3e20313530393538.roa (hash: 2/cotGNcJ8/pTH7ezN1hAoiTKcYjyf0D6A4DNtUiVcI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/DA737E8BB9E3519F19E608DC3E839F360D2C4623.crl rsync://repo-rpki.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/DA737E8BB9E3519F19E608DC3E839F360D2C4623.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA737E8BB9E3519F19E608DC3E839F360D2C4623.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 01:10:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:1a:af:8d:87:7c:28:17:5a:62:81:6e:0b:5e:7c:07:7e:19:e1:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA737E8BB9E3519F19E608DC3E839F360D2C4623 Validity Not Before: Sep 4 23:36:49 2025 GMT Not After : Sep 8 01:10:49 2025 GMT Subject: CN=03DCE6F67C7BB0053E890A79AA249768E20BE501 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:46:b5:40:e6:66:4c:a8:80:94:69:00:c3:de: 94:85:de:a8:3b:b7:86:27:4f:45:b7:e6:59:df:46: 14:8a:d1:2f:73:03:12:ed:82:15:d8:9e:f7:da:bd: c9:ab:c2:96:2a:de:da:0a:da:b6:14:dc:c8:32:e2: 10:49:b2:37:56:38:07:fc:49:10:a7:3a:41:a4:fa: 39:a4:80:2a:16:17:80:86:76:a6:a3:b4:c8:65:2c: 50:c1:25:78:fd:9b:4f:36:7c:84:62:e2:5a:66:b7: 83:64:ba:f2:04:32:ab:cc:d8:83:23:9a:6e:bd:0e: c7:4a:7e:94:bc:53:bb:24:1f:84:a5:0f:7c:84:4c: 03:97:bb:5a:65:21:df:73:b8:e4:82:38:11:58:0c: f0:c6:92:19:c8:96:b9:7e:c7:d1:c4:8e:0c:eb:4c: 7c:41:2b:58:a3:5c:49:d5:af:80:df:a8:a1:88:22: e2:73:6b:3a:65:d9:48:8d:c9:69:f6:0c:a4:47:26: 52:39:01:77:40:0e:8e:9c:64:9e:26:38:6a:22:c3: fe:f7:82:2c:91:ff:85:ea:25:47:24:7b:0c:db:bc: 01:5f:db:c9:ae:4a:67:19:30:99:23:da:a2:16:7c: d6:c9:46:da:97:0d:f0:25:f4:f3:fd:ef:ee:56:18: 46:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:DC:E6:F6:7C:7B:B0:05:3E:89:0A:79:AA:24:97:68:E2:0B:E5:01 X509v3 Authority Key Identifier: keyid:DA:73:7E:8B:B9:E3:51:9F:19:E6:08:DC:3E:83:9F:36:0D:2C:46:23 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/DA737E8BB9E3519F19E608DC3E839F360D2C4623.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA737E8BB9E3519F19E608DC3E839F360D2C4623.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0f0bcdc3-0fea-4747-9907-656486bae8da/0/DA737E8BB9E3519F19E608DC3E839F360D2C4623.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:a6:a7:f1:8a:7d:d7:e6:be:9b:0a:a2:71:e2:db:ef:52:e0: ae:b0:ab:c9:8e:e0:aa:f9:ac:21:5c:1e:4f:5c:01:ab:24:74: 51:d8:4f:e8:0b:22:24:db:67:3d:7b:12:86:c0:44:1c:f6:7b: 6d:71:52:2a:56:7b:ef:3b:8d:e6:1d:82:67:6e:26:a9:ed:7c: 08:ee:5e:de:42:20:1a:ee:94:92:fb:83:9d:c7:2e:f7:1f:a9: a6:f4:2a:fa:a9:51:a7:1f:3d:d6:ba:09:40:4a:fa:42:18:ba: 16:48:4c:56:b0:85:17:f5:17:d0:a7:8c:fd:cf:4d:8c:2b:1b: 7a:39:4e:7a:01:46:df:54:a3:a7:fe:4d:5b:9b:4a:87:c8:47: 66:ab:1f:5b:c6:fb:43:b9:56:7a:4d:74:35:31:df:de:ca:37: c1:87:c6:d1:b0:ad:3d:64:38:34:2f:d1:c2:b3:13:b3:12:4d: 9e:48:ea:dd:f1:8a:14:e9:3e:a8:da:27:bd:70:23:b8:8a:29: 0f:3e:31:f3:68:97:e2:87:79:1b:8e:6e:6c:d7:c9:e9:cc:a3: 51:d2:35:1a:de:94:b9:25:c8:ad:16:6e:cc:e3:cc:9d:3a:fa: 21:56:27:ba:a9:33:13:01:13:45:ce:98:79:31:ae:93:01:bf: e5:e6:b4:49 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUAhqvjYd8KBdaYoFuC158B34Z4dEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE3MzdFOEJCOUUzNTE5RjE5RTYwOERDM0U4MzlGMzYw RDJDNDYyMzAeFw0yNTA5MDQyMzM2NDlaFw0yNTA5MDgwMTEwNDlaMDMxMTAvBgNV BAMTKDAzRENFNkY2N0M3QkIwMDUzRTg5MEE3OUFBMjQ5NzY4RTIwQkU1MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzRrVA5mZMqICUaQDD3pSF3qg7 t4YnT0W35lnfRhSK0S9zAxLtghXYnvfavcmrwpYq3toK2rYU3Mgy4hBJsjdWOAf8 SRCnOkGk+jmkgCoWF4CGdqajtMhlLFDBJXj9m082fIRi4lpmt4NkuvIEMqvM2IMj mm69DsdKfpS8U7skH4SlD3yETAOXu1plId9zuOSCOBFYDPDGkhnIlrl+x9HEjgzr THxBK1ijXEnVr4DfqKGIIuJzazpl2UiNyWn2DKRHJlI5AXdADo6cZJ4mOGoiw/73 giyR/4XqJUckewzbvAFf28muSmcZMJkj2qIWfNbJRtqXDfAl9PP97+5WGEYPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUA9zm9nx7sAU+iQp5qiSXaOIL5QEwHwYDVR0j BBgwFoAU2nN+i7njUZ8Z5gjcPoOfNg0sRiMwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w ZjBiY2RjMy0wZmVhLTQ3NDctOTkwNy02NTY0ODZiYWU4ZGEvMC9EQTczN0U4QkI5 RTM1MTlGMTlFNjA4REMzRTgzOUYzNjBEMkM0NjIzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREE3MzdFOEJCOUUzNTE5RjE5RTYwOERDM0U4MzlGMzYwRDJD NDYyMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMGYwYmNkYzMtMGZlYS00NzQ3LTk5 MDctNjU2NDg2YmFlOGRhLzAvREE3MzdFOEJCOUUzNTE5RjE5RTYwOERDM0U4MzlG MzYwRDJDNDYyMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHCmp/GKfdfmvpsKonHi2+9S4K6wq8mO4Kr5 rCFcHk9cAaskdFHYT+gLIiTbZz17EobARBz2e21xUipWe+87jeYdgmduJqntfAju Xt5CIBrulJL7g53HLvcfqab0KvqpUacfPda6CUBK+kIYuhZITFawhRf1F9CnjP3P TYwrG3o5TnoBRt9Uo6f+TVubSofIR2arH1vG+0O5VnpNdDUx397KN8GHxtGwrT1k ODQv0cKzE7MSTZ5I6t3xihTpPqjaJ71wI7iKKQ8+MfNol+KHeRuObmzXyenMo1HS NRrelLklyK0WbszjzJ06+iFWJ7qpMxMBE0XOmHkxrpMBv+XmtEk= -----END CERTIFICATE-----Generated at Fri Sep 5 10:13:41 2025 by rpki-client