$ rpki-client -vvf repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft File: DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft (raw, json) Hash identifier: b37z22pF8s5DixyHcbi79JP2jPUKfMFOf8XlWE3GfDk= Subject key identifier: 3B:64:7E:DF:1C:E0:00:27:C7:78:11:9C:5B:8A:69:1E:BD:37:91:A6 Authority key identifier: DF:0A:C6:ED:AE:FC:E4:FE:D1:EE:8A:4C:0A:7B:C4:EF:D6:22:FB:2E Certificate issuer: /CN=DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E Certificate serial: 79AA64319905C3125ACD1CD8E4E95CDACB15E912 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft Manifest number: 0179 Signing time: Sat 06 Sep 2025 18:21:37 +0000 Manifest this update: Sat 06 Sep 2025 18:16:37 +0000 Manifest next update: Wed 10 Sep 2025 00:15:37 +0000 Files and hashes: 1: DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.crl (hash: GrN/3zxiTrOR0N/ypziyVMiCHGG7dKiw0HOhkQww8o8=) 2: 3130332e3132372e3130362e302f32332d3234203d3e20313530393731.roa (hash: lW1DAyCSTgRvB6XQz9p6ZQqRRWcAHTlnodsMGbhnNcU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.crl rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 00:15:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:aa:64:31:99:05:c3:12:5a:cd:1c:d8:e4:e9:5c:da:cb:15:e9:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E Validity Not Before: Sep 6 18:16:37 2025 GMT Not After : Sep 10 00:15:37 2025 GMT Subject: CN=3B647EDF1CE00027C778119C5B8A691EBD3791A6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e6:6e:7e:57:07:84:ea:5d:bf:14:3d:df:9d:82: af:1b:fc:05:cc:25:ea:26:0e:74:9a:9f:57:a7:51: 24:55:82:3a:52:0d:89:51:e8:7c:36:95:0e:ac:fc: cb:5c:b7:8d:7e:d3:55:30:e5:e9:97:ba:29:46:66: 92:d5:84:d7:98:cb:c5:b2:04:08:f1:f0:47:21:13: ae:a5:fe:fd:da:ad:b7:3d:a1:c4:17:de:9c:e3:f5: 63:7a:ac:8a:a5:13:30:68:d6:9d:1e:e8:ab:43:87: 9c:c9:5c:f7:59:3a:4c:23:99:3c:30:59:26:70:95: db:93:ee:7a:78:51:d7:a1:ee:87:03:48:5a:3f:0c: 77:b3:6d:fd:ee:d1:82:5c:84:48:9f:28:d1:d5:c2: ed:56:52:4e:d5:b7:42:f2:4c:ab:9d:58:12:f4:3b: 84:5b:43:cf:6c:ee:2f:cb:c5:2b:1e:5f:00:8f:75: 6d:76:ba:4a:84:1d:d5:ad:1c:5d:30:a8:0f:39:68: 89:2f:04:b5:58:64:3d:6d:6b:a4:f0:2d:a4:d8:8f: f4:f5:7b:1b:b3:35:90:52:7c:57:dd:49:a6:b6:30: ed:42:3d:f6:bc:bd:b3:0f:4a:49:f7:1f:49:12:b3: eb:31:d2:c2:66:77:51:d9:6a:be:32:00:ca:e3:fd: 4e:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:64:7E:DF:1C:E0:00:27:C7:78:11:9C:5B:8A:69:1E:BD:37:91:A6 X509v3 Authority Key Identifier: keyid:DF:0A:C6:ED:AE:FC:E4:FE:D1:EE:8A:4C:0A:7B:C4:EF:D6:22:FB:2E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/38d7a038-f8a1-4ed0-a1af-54952e543c43/0/DF0AC6EDAEFCE4FED1EE8A4C0A7BC4EFD622FB2E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9a:3b:55:3a:38:56:02:4a:b0:09:5e:2e:fa:aa:37:cc:97:3e: 6a:68:de:9e:0b:35:cd:98:61:17:22:0a:b1:10:57:2e:ba:d3: bf:ff:f5:2a:68:b2:88:86:9a:c3:7e:34:eb:a7:60:09:87:eb: dd:72:56:4c:0b:ec:4c:70:37:d5:38:79:ed:50:1a:c5:83:96: 16:44:78:9f:05:31:1e:a2:88:8c:0c:c2:99:e0:46:e9:da:80: 63:dc:4e:c8:97:35:ba:1a:85:60:d2:0d:82:bf:a7:97:ba:2b: 36:c6:32:3a:53:ab:33:1a:19:59:41:91:fe:0d:a1:0a:08:55: a7:ac:de:ad:03:58:d3:90:4f:df:16:d0:45:bb:12:5e:3a:30: 76:0a:79:8b:9c:92:98:69:59:96:44:7c:30:79:4d:31:62:58: 79:62:cf:1a:65:68:40:7d:fa:2e:7a:9d:b3:3a:f9:76:9e:49: 28:75:bc:74:94:d4:52:b2:fe:7e:43:ff:8d:57:a7:95:17:f9: dd:cd:20:19:c5:4f:09:1a:af:07:7c:62:52:17:4c:0f:d1:37: cf:2f:32:ae:ef:96:e9:47:9b:66:07:5e:ba:37:38:dd:05:d4: 4c:a8:a9:9c:58:6e:f5:db:4b:c6:bf:9c:98:a9:d6:63:82:a8: 82:3c:5d:4e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeapkMZkFwxJazRzY5Olc2ssV6RIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREYwQUM2RURBRUZDRTRGRUQxRUU4QTRDMEE3QkM0RUZE NjIyRkIyRTAeFw0yNTA5MDYxODE2MzdaFw0yNTA5MTAwMDE1MzdaMDMxMTAvBgNV BAMTKDNCNjQ3RURGMUNFMDAwMjdDNzc4MTE5QzVCOEE2OTFFQkQzNzkxQTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDmbn5XB4TqXb8UPd+dgq8b/AXM JeomDnSan1enUSRVgjpSDYlR6Hw2lQ6s/Mtct41+01Uw5emXuilGZpLVhNeYy8Wy BAjx8EchE66l/v3arbc9ocQX3pzj9WN6rIqlEzBo1p0e6KtDh5zJXPdZOkwjmTww WSZwlduT7np4Udeh7ocDSFo/DHezbf3u0YJchEifKNHVwu1WUk7Vt0LyTKudWBL0 O4RbQ89s7i/LxSseXwCPdW12ukqEHdWtHF0wqA85aIkvBLVYZD1ta6TwLaTYj/T1 exuzNZBSfFfdSaa2MO1CPfa8vbMPSkn3H0kSs+sx0sJmd1HZar4yAMrj/U7jAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUO2R+3xzgACfHeBGcW4ppHr03kaYwHwYDVR0j BBgwFoAU3wrG7a785P7R7opMCnvE79Yi+y4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z OGQ3YTAzOC1mOGExLTRlZDAtYTFhZi01NDk1MmU1NDNjNDMvMC9ERjBBQzZFREFF RkNFNEZFRDFFRThBNEMwQTdCQzRFRkQ2MjJGQjJFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREYwQUM2RURBRUZDRTRGRUQxRUU4QTRDMEE3QkM0RUZENjIy RkIyRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzhkN2EwMzgtZjhhMS00ZWQwLWEx YWYtNTQ5NTJlNTQzYzQzLzAvREYwQUM2RURBRUZDRTRGRUQxRUU4QTRDMEE3QkM0 RUZENjIyRkIyRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJo7VTo4VgJKsAleLvqqN8yXPmpo3p4LNc2Y YRciCrEQVy6607//9SposoiGmsN+NOunYAmH691yVkwL7ExwN9U4ee1QGsWDlhZE eJ8FMR6iiIwMwpngRunagGPcTsiXNboahWDSDYK/p5e6KzbGMjpTqzMaGVlBkf4N oQoIVaes3q0DWNOQT98W0EW7El46MHYKeYuckphpWZZEfDB5TTFiWHlizxplaEB9 +i56nbM6+XaeSSh1vHSU1FKy/n5D/41Xp5UX+d3NIBnFTwkarwd8YlIXTA/RN88v Mq7vlulHm2YHXro3ON0F1EyoqZxYbvXbS8a/nJip1mOCqII8XU4= -----END CERTIFICATE-----Generated at Sun Sep 7 13:46:45 2025 by rpki-client