$ rpki-client -vvf repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.mft File: DCD5207AC33E109E31052BBB7F811DBF6DA180BB.mft (raw, json) Hash identifier: utStMPaH4kaj41bDvC9RcVy/jxLT14NQI6Kc/gEdigc= Subject key identifier: 9C:C7:37:1C:52:8C:87:ED:1D:5A:0B:47:DF:EB:08:11:BF:01:D5:85 Authority key identifier: DC:D5:20:7A:C3:3E:10:9E:31:05:2B:BB:7F:81:1D:BF:6D:A1:80:BB Certificate issuer: /CN=DCD5207AC33E109E31052BBB7F811DBF6DA180BB Certificate serial: 13ADC7DB97056619CF13C39B6F16521F324383B1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.mft Manifest number: 6C Signing time: Sun 07 Sep 2025 21:31:57 +0000 Manifest this update: Sun 07 Sep 2025 21:26:57 +0000 Manifest next update: Thu 11 Sep 2025 04:55:57 +0000 Files and hashes: 1: DCD5207AC33E109E31052BBB7F811DBF6DA180BB.crl (hash: EgLKzah3H6HkY+yimQW4O9E+m9YoxJdzpH0seUG7JIg=) 2: 3136302e32322e3130312e302f32342d3234203d3e20313532383039.roa (hash: mizXQiZMhSS2dg4DmWjoCSbZiybtKsfGNPxNOZ0yF9I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.crl rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 04:55:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:ad:c7:db:97:05:66:19:cf:13:c3:9b:6f:16:52:1f:32:43:83:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DCD5207AC33E109E31052BBB7F811DBF6DA180BB Validity Not Before: Sep 7 21:26:57 2025 GMT Not After : Sep 11 04:55:57 2025 GMT Subject: CN=9CC7371C528C87ED1D5A0B47DFEB0811BF01D585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:b1:62:30:d3:ee:ff:47:e4:5a:fb:1c:ea:e8: 07:b9:07:b8:c0:0f:43:53:39:21:9a:80:dd:7c:46: 4e:45:bb:17:ea:b7:33:bb:2b:13:50:cf:d0:60:7a: 82:8c:47:d5:69:bb:36:59:e9:30:d5:e5:2b:cc:8b: 20:ca:81:58:ab:5d:5f:27:34:f9:81:02:4e:4f:30: 63:3f:a2:aa:54:26:f2:44:d9:1d:17:33:4e:45:d8: f8:63:89:cf:db:11:ee:6e:49:d0:73:e6:da:87:01: b3:47:f5:d9:8c:1d:15:dd:bb:24:11:b4:22:6d:01: b2:20:a8:dd:4d:05:24:41:19:6c:0d:09:12:4b:37: b5:df:c8:dd:86:9b:b4:f1:37:54:d7:9a:02:8f:ae: 62:e9:48:f3:48:8e:d7:4c:52:74:2c:97:8c:f8:e0: 60:4e:5c:d4:e1:5e:e4:d7:30:8e:c2:9f:86:a5:1c: 54:52:58:45:f5:30:30:44:d1:69:e4:28:82:fb:a1: 7b:6d:9b:88:29:8a:cb:08:df:2e:5a:82:13:75:48: 98:47:e8:bd:7f:ec:84:21:0e:78:8f:15:66:45:51: 85:a4:19:bc:e2:66:66:1a:5f:7a:af:c6:e5:be:c7: f4:e6:ac:f1:99:ed:c9:10:54:b0:e1:c7:65:80:46: 5a:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9C:C7:37:1C:52:8C:87:ED:1D:5A:0B:47:DF:EB:08:11:BF:01:D5:85 X509v3 Authority Key Identifier: keyid:DC:D5:20:7A:C3:3E:10:9E:31:05:2B:BB:7F:81:1D:BF:6D:A1:80:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5d8ef119-7ddf-45e5-8634-38b77258cbcc/0/DCD5207AC33E109E31052BBB7F811DBF6DA180BB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:06:7c:db:f5:6e:3a:d4:91:b3:ca:f3:9b:da:e2:d4:30:13: 21:a8:a8:93:3f:de:bc:4f:28:46:65:c0:57:9b:4c:e6:eb:12: 07:93:1d:3e:76:c8:2d:82:d0:db:9d:e0:cc:1e:85:73:cb:48: 6a:72:c5:21:b1:3a:8f:2d:36:e2:ae:28:b1:47:19:66:d0:f5: 3a:8d:26:f0:00:cb:a7:55:90:11:52:aa:cd:15:07:66:80:ff: 0b:8b:d4:ff:93:23:be:16:bb:63:b1:d6:4b:42:7a:a1:b9:5d: 67:72:16:8d:b6:52:90:1b:91:cd:57:a7:0f:d0:51:ae:9f:6b: 1a:30:b9:bc:b0:17:62:2b:38:17:e6:ff:7a:06:4b:cc:d4:2e: a7:98:72:d7:22:06:4d:36:36:f3:76:7e:ec:23:98:ee:17:7d: b1:fb:69:4c:70:bc:c6:37:ad:e6:3c:3e:00:19:ab:fd:2c:ad: 87:fc:ee:29:db:50:65:f7:ab:d0:6d:d8:fc:65:5a:30:05:19: 24:9f:25:35:11:b1:c0:a1:66:3b:84:40:69:79:bc:1a:2c:81: 2a:19:d9:9e:1c:79:3c:8b:a3:08:39:c3:7f:85:47:8b:1c:a9: 4b:c7:15:77:c1:f9:ef:2d:92:b4:a9:4f:7e:27:60:d5:ce:50: 12:f3:08:1e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE63H25cFZhnPE8ObbxZSHzJDg7EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRENENTIwN0FDMzNFMTA5RTMxMDUyQkJCN0Y4MTFEQkY2 REExODBCQjAeFw0yNTA5MDcyMTI2NTdaFw0yNTA5MTEwNDU1NTdaMDMxMTAvBgNV BAMTKDlDQzczNzFDNTI4Qzg3RUQxRDVBMEI0N0RGRUIwODExQkYwMUQ1ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCmsWIw0+7/R+Ra+xzq6Ae5B7jA D0NTOSGagN18Rk5FuxfqtzO7KxNQz9BgeoKMR9VpuzZZ6TDV5SvMiyDKgVirXV8n NPmBAk5PMGM/oqpUJvJE2R0XM05F2Phjic/bEe5uSdBz5tqHAbNH9dmMHRXduyQR tCJtAbIgqN1NBSRBGWwNCRJLN7XfyN2Gm7TxN1TXmgKPrmLpSPNIjtdMUnQsl4z4 4GBOXNThXuTXMI7Cn4alHFRSWEX1MDBE0WnkKIL7oXttm4gpissI3y5aghN1SJhH 6L1/7IQhDniPFWZFUYWkGbziZmYaX3qvxuW+x/TmrPGZ7ckQVLDhx2WARlqFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUnMc3HFKMh+0dWgtH3+sIEb8B1YUwHwYDVR0j BBgwFoAU3NUgesM+EJ4xBSu7f4Edv22hgLswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81 ZDhlZjExOS03ZGRmLTQ1ZTUtODYzNC0zOGI3NzI1OGNiY2MvMC9EQ0Q1MjA3QUMz M0UxMDlFMzEwNTJCQkI3RjgxMURCRjZEQTE4MEJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvRENENTIwN0FDMzNFMTA5RTMxMDUyQkJCN0Y4MTFEQkY2REEx ODBCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNWQ4ZWYxMTktN2RkZi00NWU1LTg2 MzQtMzhiNzcyNThjYmNjLzAvRENENTIwN0FDMzNFMTA5RTMxMDUyQkJCN0Y4MTFE QkY2REExODBCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAsGfNv1bjrUkbPK85va4tQwEyGoqJM/3rxP KEZlwFebTObrEgeTHT52yC2C0Nud4MwehXPLSGpyxSGxOo8tNuKuKLFHGWbQ9TqN JvAAy6dVkBFSqs0VB2aA/wuL1P+TI74Wu2Ox1ktCeqG5XWdyFo22UpAbkc1Xpw/Q Ua6faxowubywF2IrOBfm/3oGS8zULqeYctciBk02NvN2fuwjmO4XfbH7aUxwvMY3 reY8PgAZq/0srYf87inbUGX3q9Bt2PxlWjAFGSSfJTURscChZjuEQGl5vBosgSoZ 2Z4ceTyLowg5w3+FR4scqUvHFXfB+e8tkrSpT34nYNXOUBLzCB4= -----END CERTIFICATE-----Generated at Mon Sep 8 05:14:22 2025 by rpki-client