$ rpki-client -vvf repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft File: DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft (raw, json) Hash identifier: v8UH9Qe3Xit616HQBkVb06R9Dz3nyKr5fXJ6+EJHbkg= Subject key identifier: F5:D9:5F:6E:2E:78:5A:3F:9E:52:46:8A:74:56:FF:12:43:83:E5:F9 Authority key identifier: DC:34:C8:B5:F4:38:B8:D4:CB:13:F2:45:1A:D1:F0:95:5E:5F:7F:BB Certificate issuer: /CN=DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB Certificate serial: 69773E08A2989384AC1DB06EAE932E419B634433 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft Manifest number: 0489 Signing time: Sat 06 Sep 2025 15:11:35 +0000 Manifest this update: Sat 06 Sep 2025 15:06:35 +0000 Manifest next update: Tue 09 Sep 2025 17:10:35 +0000 Files and hashes: 1: DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.crl (hash: 1L13gOLsFF990qACgYJTDfHfXO+bpRmFnrJ8FVgGaY8=) 2: 323030313a6466363a313830303a3a2f34382d3438203d3e20313331373535.roa (hash: ngwq27xsuytU4jFUyyS/sbzfhiUNRTARsL/0hbNcALM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.crl rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 17:10:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:77:3e:08:a2:98:93:84:ac:1d:b0:6e:ae:93:2e:41:9b:63:44:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB Validity Not Before: Sep 6 15:06:35 2025 GMT Not After : Sep 9 17:10:35 2025 GMT Subject: CN=F5D95F6E2E785A3F9E52468A7456FF124383E5F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c0:cf:dd:06:35:f9:42:e3:0e:08:32:77:f8: 23:f9:1a:0f:b9:07:07:ac:71:2f:98:69:c0:c2:df: ee:11:e7:a3:36:5c:df:61:b9:db:76:91:5e:f2:d2: 91:8a:e1:53:a3:2b:34:ec:60:20:48:7c:14:4e:31: 84:c6:34:2b:66:db:35:82:eb:28:1e:d3:37:1f:b5: 4d:e4:9a:fa:14:45:2d:7f:c6:75:9e:b2:f2:4b:6b: f6:aa:2f:86:76:ea:06:72:b2:b3:56:b8:89:38:82: 22:df:f8:f0:b4:7b:88:98:77:2c:e6:f6:14:c5:8c: 04:63:70:42:83:d5:69:85:81:22:75:a7:74:03:1d: 48:c5:29:a7:27:f2:d4:52:58:cc:01:f5:55:b5:ef: 32:fb:65:e2:11:a5:b5:12:f3:c7:9a:6f:a7:13:27: 26:1b:3b:77:cd:f0:a6:7e:65:e5:2a:40:aa:e2:4c: 9f:38:23:b8:16:8e:12:55:cc:2f:a6:1d:da:a4:86: f8:d7:29:8c:5a:48:a3:9e:9d:ac:51:b8:8a:d1:49: 07:8c:29:fb:47:0d:33:d7:58:7f:9f:14:f8:95:80: 12:be:d4:42:1a:ec:0d:af:8c:30:1f:6c:b7:ce:2b: 9e:c7:d6:bd:8f:04:62:fc:1e:ab:bb:8d:db:8e:85: 11:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:D9:5F:6E:2E:78:5A:3F:9E:52:46:8A:74:56:FF:12:43:83:E5:F9 X509v3 Authority Key Identifier: keyid:DC:34:C8:B5:F4:38:B8:D4:CB:13:F2:45:1A:D1:F0:95:5E:5F:7F:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:71:4d:94:52:fc:3a:68:e7:79:16:6e:f2:0e:70:3c:2e:63: 43:33:98:9f:69:fe:d8:1b:39:88:7e:ce:15:8d:e5:a2:97:11: 76:c2:65:d5:4f:94:94:c2:ff:89:d0:86:76:0e:cf:b3:8c:9f: 73:16:6e:13:bb:2e:81:c5:db:a6:e0:5d:48:6b:56:60:ca:48: 54:53:6e:3c:cd:14:b5:2b:4a:f5:22:84:97:25:f5:3a:60:d8: 67:94:76:88:96:f2:44:0f:97:a8:e1:9b:f1:11:bd:8a:8c:98: cf:cf:76:9a:0d:a1:df:32:d6:2e:63:67:ea:13:47:cb:be:f8: ef:ee:aa:39:87:a8:86:e3:e5:2b:a9:e6:43:c1:f5:b6:62:e1: 89:c4:47:b6:33:82:17:11:e7:58:8a:57:99:bd:60:ac:95:e9: 48:98:35:f5:30:74:ab:0c:4b:6b:30:38:09:91:1a:06:1e:38: 72:36:61:b8:dc:88:95:2f:97:af:3e:77:a7:6b:e8:9a:b3:4f: 0c:e0:0c:21:2f:78:7c:6f:f2:b4:e9:8a:e3:e0:e4:cd:29:46: 2f:b0:01:3a:4d:e9:18:1d:46:49:b2:b1:49:5d:fa:83:5c:74: 82:6b:5c:46:04:14:ba:2b:04:c6:38:18:86:f3:b4:be:8e:0d: 17:54:d2:87 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaXc+CKKYk4SsHbBurpMuQZtjRDMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMzNEM4QjVGNDM4QjhENENCMTNGMjQ1MUFEMUYwOTU1 RTVGN0ZCQjAeFw0yNTA5MDYxNTA2MzVaFw0yNTA5MDkxNzEwMzVaMDMxMTAvBgNV BAMTKEY1RDk1RjZFMkU3ODVBM0Y5RTUyNDY4QTc0NTZGRjEyNDM4M0U1RjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVwM/dBjX5QuMOCDJ3+CP5Gg+5 BwescS+YacDC3+4R56M2XN9hudt2kV7y0pGK4VOjKzTsYCBIfBROMYTGNCtm2zWC 6yge0zcftU3kmvoURS1/xnWesvJLa/aqL4Z26gZysrNWuIk4giLf+PC0e4iYdyzm 9hTFjARjcEKD1WmFgSJ1p3QDHUjFKacn8tRSWMwB9VW17zL7ZeIRpbUS88eab6cT JyYbO3fN8KZ+ZeUqQKriTJ84I7gWjhJVzC+mHdqkhvjXKYxaSKOenaxRuIrRSQeM KftHDTPXWH+fFPiVgBK+1EIa7A2vjDAfbLfOK57H1r2PBGL8Hqu7jduOhRE/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9dlfbi54Wj+eUkaKdFb/EkOD5fkwHwYDVR0j BBgwFoAU3DTItfQ4uNTLE/JFGtHwlV5ff7swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YThmMDQzNS00ZDM4LTQ3ZWYtODUwZi01MWJhNDYxN2ZiM2QvMC9EQzM0QzhCNUY0 MzhCOEQ0Q0IxM0YyNDUxQUQxRjA5NTVFNUY3RkJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREMzNEM4QjVGNDM4QjhENENCMTNGMjQ1MUFEMUYwOTU1RTVG N0ZCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE4ZjA0MzUtNGQzOC00N2VmLTg1 MGYtNTFiYTQ2MTdmYjNkLzAvREMzNEM4QjVGNDM4QjhENENCMTNGMjQ1MUFEMUYw OTU1RTVGN0ZCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEpxTZRS/Dpo53kWbvIOcDwuY0MzmJ9p/tgb OYh+zhWN5aKXEXbCZdVPlJTC/4nQhnYOz7OMn3MWbhO7LoHF26bgXUhrVmDKSFRT bjzNFLUrSvUihJcl9Tpg2GeUdoiW8kQPl6jhm/ERvYqMmM/PdpoNod8y1i5jZ+oT R8u++O/uqjmHqIbj5Sup5kPB9bZi4YnER7YzghcR51iKV5m9YKyV6UiYNfUwdKsM S2swOAmRGgYeOHI2YbjciJUvl68+d6dr6JqzTwzgDCEveHxv8rTpiuPg5M0pRi+w ATpN6RgdRkmysUld+oNcdIJrXEYEFLorBMY4GIbztL6ODRdU0oc= -----END CERTIFICATE-----Generated at Sun Sep 7 15:27:14 2025 by rpki-client