$ rpki-client -vvf repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft File: DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft (raw, json) Hash identifier: 8LbtVvvinSNC20SsHfSGYFhsp8g/R5CAceS14K099qM= Subject key identifier: 3D:2B:C3:7F:B0:41:96:87:41:32:6D:B9:C4:82:B4:0C:47:8C:D1:E3 Authority key identifier: DF:68:55:96:DA:F9:D3:65:4A:2E:2F:21:CE:11:AA:0B:B8:0E:45:D1 Certificate issuer: /CN=DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1 Certificate serial: 51DC6CCE120C8A404805AA2F54062F544DC2FB06 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft Manifest number: 034E Signing time: Fri 05 Sep 2025 12:10:36 +0000 Manifest this update: Fri 05 Sep 2025 12:05:36 +0000 Manifest next update: Mon 08 Sep 2025 17:04:36 +0000 Files and hashes: 1: 3130332e3136392e3235342e302f32332d3233203d3e20313432333730.roa (hash: DLJmEfbL3ZCZVVlEJnye8kD0RQcM/dIeZcFOFRkwePE=) 2: DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.crl (hash: KBaio2svdj+Ixh3mgZINJl0/Qd9D/NsJMNvwS3dwH00=) 3: 3130332e3136392e3235342e302f32342d3234203d3e20313432333730.roa (hash: TptDi2yJ3flSSMDSqc9f0+quKLm9aeSrjexrkn5vS9o=) 4: 3130332e3136392e3235352e302f32342d3234203d3e20313432333730.roa (hash: zXQVHsRu+F6s1MVNzrtFO+eU8maZ8ipfm8/30hkR/TA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.crl rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 17:04:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:dc:6c:ce:12:0c:8a:40:48:05:aa:2f:54:06:2f:54:4d:c2:fb:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1 Validity Not Before: Sep 5 12:05:36 2025 GMT Not After : Sep 8 17:04:36 2025 GMT Subject: CN=3D2BC37FB041968741326DB9C482B40C478CD1E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:ac:f1:ad:0c:59:62:5b:8a:1a:ba:1d:57:57: 17:64:dd:98:64:09:20:14:55:ce:f5:76:aa:c9:5f: ff:3b:d6:51:d3:10:af:b2:16:00:7b:c5:2b:ed:25: 70:d2:d1:e6:86:ab:c9:0f:36:c1:ee:ec:df:06:90: c6:39:12:f7:d0:85:a1:63:b5:5d:a1:c0:b1:dd:62: 33:af:50:ba:4e:dd:63:35:2b:cf:a6:49:d7:cc:9f: ec:87:12:71:d8:a9:b8:82:81:f5:1d:77:22:51:7e: 01:b8:88:22:13:9f:06:3c:6c:f2:89:28:a0:2b:49: e4:45:6d:b5:a7:14:bb:62:da:1a:ec:91:45:5e:c4: 8f:4d:af:37:63:4a:2c:5d:ce:df:2b:6e:08:4c:ba: ea:ab:b6:85:1b:94:09:12:8e:d1:a5:26:b6:f0:f3: 42:9d:12:8b:ac:c5:01:42:8f:94:a6:a2:dd:05:52: 87:8c:d0:d2:32:b9:7f:35:64:ff:b7:96:57:ea:dd: 87:f9:ba:b5:f7:cf:c8:d8:4a:27:42:d8:17:e0:a4: 35:9c:07:06:93:d1:4a:30:eb:93:63:08:b5:e3:5c: 79:be:7a:f8:3e:f0:22:da:e2:32:ef:ea:68:3f:35: 05:25:fb:00:48:df:44:01:11:97:32:b7:3d:25:3a: 83:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3D:2B:C3:7F:B0:41:96:87:41:32:6D:B9:C4:82:B4:0C:47:8C:D1:E3 X509v3 Authority Key Identifier: keyid:DF:68:55:96:DA:F9:D3:65:4A:2E:2F:21:CE:11:AA:0B:B8:0E:45:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 59:7c:42:3a:f7:91:51:f9:52:30:6c:ca:ba:92:19:6b:77:d8: ee:eb:7b:d4:81:01:44:15:5b:ff:c0:69:d6:a9:52:22:6a:95: 42:f9:cc:f4:25:84:f1:04:12:2f:21:bb:0e:18:3a:9e:fe:8d: 74:3d:20:1d:52:c2:ba:2e:75:8a:a9:b3:44:3e:45:39:95:31: 16:5d:08:9d:4f:b7:39:7e:cc:c8:7e:1f:7e:f4:66:39:03:bc: a7:19:fd:8e:62:f4:01:b7:fb:45:8f:2b:7b:06:86:a1:31:e5: f1:f8:a7:08:aa:9e:d0:50:f8:15:a5:6a:49:f1:da:b6:dc:9b: ab:7c:bb:d7:44:af:de:20:58:96:2c:a7:10:d7:d1:f7:67:ea: 0d:ab:d8:48:30:5a:3a:4f:3f:f0:23:60:b4:ee:27:b6:fd:08: 0e:d8:b7:30:b7:0e:60:fb:56:10:57:71:66:38:84:28:d1:cb: f8:43:f8:e2:ec:27:4f:fb:6e:9a:ca:fb:e5:27:0f:d6:95:11: 0c:d0:ee:67:18:21:a8:1a:c5:1a:8c:da:34:01:81:b8:0e:42: 10:61:fc:d2:13:b7:36:c8:9b:bd:ce:c0:20:19:35:69:5a:1c: 9e:89:b2:3b:86:08:ab:f5:57:6c:6d:4a:7c:11:a1:4b:f1:63: 06:a3:fe:d6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUdxszhIMikBIBaovVAYvVE3C+wYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY2ODU1OTZEQUY5RDM2NTRBMkUyRjIxQ0UxMUFBMEJC ODBFNDVEMTAeFw0yNTA5MDUxMjA1MzZaFw0yNTA5MDgxNzA0MzZaMDMxMTAvBgNV BAMTKDNEMkJDMzdGQjA0MTk2ODc0MTMyNkRCOUM0ODJCNDBDNDc4Q0QxRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjrPGtDFliW4oauh1XVxdk3Zhk CSAUVc71dqrJX/871lHTEK+yFgB7xSvtJXDS0eaGq8kPNsHu7N8GkMY5EvfQhaFj tV2hwLHdYjOvULpO3WM1K8+mSdfMn+yHEnHYqbiCgfUddyJRfgG4iCITnwY8bPKJ KKArSeRFbbWnFLti2hrskUVexI9NrzdjSixdzt8rbghMuuqrtoUblAkSjtGlJrbw 80KdEousxQFCj5Smot0FUoeM0NIyuX81ZP+3llfq3Yf5urX3z8jYSidC2BfgpDWc BwaT0Uow65NjCLXjXHm+evg+8CLa4jLv6mg/NQUl+wBI30QBEZcytz0lOoMdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPSvDf7BBlodBMm25xIK0DEeM0eMwHwYDVR0j BBgwFoAU32hVltr502VKLi8hzhGqC7gORdEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NzUyYjNjMi0zZjMwLTQwNDAtOGIwNS04MzgyMTc3NzA0OGYvMC9ERjY4NTU5NkRB RjlEMzY1NEEyRTJGMjFDRTExQUEwQkI4MEU0NUQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREY2ODU1OTZEQUY5RDM2NTRBMkUyRjIxQ0UxMUFBMEJCODBF NDVEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjc1MmIzYzItM2YzMC00MDQwLThi MDUtODM4MjE3NzcwNDhmLzAvREY2ODU1OTZEQUY5RDM2NTRBMkUyRjIxQ0UxMUFB MEJCODBFNDVEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFl8Qjr3kVH5UjBsyrqSGWt32O7re9SBAUQV W//AadapUiJqlUL5zPQlhPEEEi8huw4YOp7+jXQ9IB1SwroudYqps0Q+RTmVMRZd CJ1Ptzl+zMh+H370ZjkDvKcZ/Y5i9AG3+0WPK3sGhqEx5fH4pwiqntBQ+BWlaknx 2rbcm6t8u9dEr94gWJYspxDX0fdn6g2r2EgwWjpPP/AjYLTuJ7b9CA7YtzC3DmD7 VhBXcWY4hCjRy/hD+OLsJ0/7bprK++UnD9aVEQzQ7mcYIagaxRqM2jQBgbgOQhBh /NITtzbIm73OwCAZNWlaHJ6JsjuGCKv1V2xtSnwRoUvxYwaj/tY= -----END CERTIFICATE-----Generated at Sun Sep 7 15:28:28 2025 by rpki-client