$ rpki-client -vvf repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft File: DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft (raw, json) Hash identifier: kcjZoxjlkEAltfyaR1UC2UwxxzCG9pBh5sVlML6ph/E= Subject key identifier: 8F:23:88:F7:C1:68:4B:02:59:25:50:F1:C5:42:53:C0:5C:18:A3:34 Authority key identifier: DF:77:06:1C:AE:F3:0A:8D:AF:6B:52:D8:A3:D9:FD:80:F3:72:0F:11 Certificate issuer: /CN=DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11 Certificate serial: 6F58DD2FBE04823824ACE870ADF6797149184DFD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft Manifest number: C3 Signing time: Fri 05 Sep 2025 10:10:35 +0000 Manifest this update: Fri 05 Sep 2025 10:05:35 +0000 Manifest next update: Mon 08 Sep 2025 14:10:35 +0000 Files and hashes: 1: 323030313a6466333a663834303a3a2f34382d3438203d3e20313532383330.roa (hash: 3aMUQeSx+u1/318Y8ScOuCTO+xUE/7Y4RTX6xf+E9CE=) 2: DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.crl (hash: e2s7+Ze0KUl3g4wsgCL1Fr6aA+DNZFB3TX8+QcXd4bk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.crl rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 14:10:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:58:dd:2f:be:04:82:38:24:ac:e8:70:ad:f6:79:71:49:18:4d:fd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11 Validity Not Before: Sep 5 10:05:35 2025 GMT Not After : Sep 8 14:10:35 2025 GMT Subject: CN=8F2388F7C1684B02592550F1C54253C05C18A334 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:0c:02:7f:e5:07:4c:4f:14:d9:b7:10:0e:42: 4c:3a:af:c1:3d:1f:db:fb:80:67:e7:ac:3a:6a:f4: b0:1c:fb:7a:cd:3f:aa:d2:17:f3:a2:48:65:de:a8: 12:37:17:7a:4c:dd:62:85:d0:9a:a5:44:93:27:08: 9b:d3:92:41:51:ff:b7:4c:c5:98:02:24:8f:e3:49: 9b:46:2e:6c:b7:cc:37:88:c2:ce:d5:7f:ee:3b:c1: 3f:0d:04:33:83:1e:36:94:2e:15:dd:3c:b4:65:34: 2f:69:a3:8a:e9:75:0c:46:38:8a:b8:a1:36:0d:35: 44:5f:cc:f8:b9:e1:8a:59:1b:ef:8f:01:91:33:ac: 52:79:6b:64:df:0c:5d:3f:20:cb:d7:f1:f3:3e:90: a9:ad:93:67:4b:37:8e:33:ec:7e:e9:86:89:3f:f4: 8c:2b:d9:4d:48:c0:94:5f:d3:77:32:49:7f:fc:de: 46:27:4e:b9:9b:e6:74:64:d1:39:2d:36:51:07:b9: 5d:fe:de:40:68:6e:63:0d:b9:33:03:94:84:62:ef: 56:b3:6d:3e:59:65:01:a6:04:e2:3b:5a:1d:62:81: 06:d2:8b:06:e4:1f:f3:2e:3b:56:83:18:f4:47:df: 40:bc:bb:f2:ae:da:94:17:68:6f:b4:e6:87:62:65: 6f:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8F:23:88:F7:C1:68:4B:02:59:25:50:F1:C5:42:53:C0:5C:18:A3:34 X509v3 Authority Key Identifier: keyid:DF:77:06:1C:AE:F3:0A:8D:AF:6B:52:D8:A3:D9:FD:80:F3:72:0F:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:89:05:98:39:f1:15:60:eb:50:10:5d:bf:0a:00:38:d1:90: 23:2a:47:89:08:4e:e7:99:4e:f0:18:3d:4c:ca:1b:2d:ad:d0: 16:1e:53:6a:b1:78:9a:db:78:af:e9:1a:67:77:1b:fd:0f:3a: f5:87:a7:d1:32:db:90:75:98:d4:d6:09:97:09:e4:91:80:49: 66:0b:9a:59:a0:83:aa:0d:3b:b2:6c:fc:ca:3e:2c:27:c3:53: 9d:d7:f5:61:fb:1c:6c:55:54:a0:71:e5:da:f4:e6:8c:ac:d9: 75:bc:91:0d:0a:7d:73:58:75:db:d2:80:88:98:e8:b7:1a:db: 03:ab:a7:c6:7d:db:7b:80:3a:c9:29:e7:49:9f:5c:ce:eb:34: 4b:c5:f5:cc:71:1d:c8:ae:98:ee:01:43:72:2c:a0:3f:73:8d: c2:15:43:5f:87:95:7d:93:cd:46:56:b4:c6:20:18:ea:2e:45: 27:83:ce:5a:08:df:21:d6:e3:35:c2:ec:80:ba:65:c3:8b:a4: 01:52:86:8d:fa:0c:2c:75:03:fd:c7:71:cd:d5:56:6f:cd:3d: b9:f0:54:f0:3f:e7:d3:0a:df:52:c6:b4:db:f0:2e:4b:e2:76: 50:98:0c:cf:64:d2:4e:60:89:ee:a0:0d:d4:73:67:df:48:b0: 18:83:d2:13 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb1jdL74EgjgkrOhwrfZ5cUkYTf0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY3NzA2MUNBRUYzMEE4REFGNkI1MkQ4QTNEOUZEODBG MzcyMEYxMTAeFw0yNTA5MDUxMDA1MzVaFw0yNTA5MDgxNDEwMzVaMDMxMTAvBgNV BAMTKDhGMjM4OEY3QzE2ODRCMDI1OTI1NTBGMUM1NDI1M0MwNUMxOEEzMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrDAJ/5QdMTxTZtxAOQkw6r8E9 H9v7gGfnrDpq9LAc+3rNP6rSF/OiSGXeqBI3F3pM3WKF0JqlRJMnCJvTkkFR/7dM xZgCJI/jSZtGLmy3zDeIws7Vf+47wT8NBDODHjaULhXdPLRlNC9po4rpdQxGOIq4 oTYNNURfzPi54YpZG++PAZEzrFJ5a2TfDF0/IMvX8fM+kKmtk2dLN44z7H7phok/ 9Iwr2U1IwJRf03cySX/83kYnTrmb5nRk0TktNlEHuV3+3kBobmMNuTMDlIRi71az bT5ZZQGmBOI7Wh1igQbSiwbkH/MuO1aDGPRH30C8u/Ku2pQXaG+05odiZW8BAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjyOI98FoSwJZJVDxxUJTwFwYozQwHwYDVR0j BBgwFoAU33cGHK7zCo2va1LYo9n9gPNyDxEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTAyMTBiMy1jY2EyLTQzYzUtODlmOS01YTkwODZhNjA3MDMvMS9ERjc3MDYxQ0FF RjMwQThEQUY2QjUyRDhBM0Q5RkQ4MEYzNzIwRjExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREY3NzA2MUNBRUYzMEE4REFGNkI1MkQ4QTNEOUZEODBGMzcy MEYxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EwMjEwYjMtY2NhMi00M2M1LTg5 ZjktNWE5MDg2YTYwNzAzLzEvREY3NzA2MUNBRUYzMEE4REFGNkI1MkQ4QTNEOUZE ODBGMzcyMEYxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEyJBZg58RVg61AQXb8KADjRkCMqR4kITueZ TvAYPUzKGy2t0BYeU2qxeJrbeK/pGmd3G/0POvWHp9Ey25B1mNTWCZcJ5JGASWYL mlmgg6oNO7Js/Mo+LCfDU53X9WH7HGxVVKBx5dr05oys2XW8kQ0KfXNYddvSgIiY 6Lca2wOrp8Z923uAOskp50mfXM7rNEvF9cxxHciumO4BQ3IsoD9zjcIVQ1+HlX2T zUZWtMYgGOouRSeDzloI3yHW4zXC7IC6ZcOLpAFSho36DCx1A/3Hcc3VVm/NPbnw VPA/59MK31LGtNvwLkvidlCYDM9k0k5gie6gDdRzZ99IsBiD0hM= -----END CERTIFICATE-----Generated at Fri Sep 5 15:45:30 2025 by rpki-client