$ rpki-client -vvf repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.mft File: DA8C840CB41D2668581983C2C4E964E67EF2D6A1.mft (raw, json) Hash identifier: 2igLxwaULMhmyJkfMFopXEV7ZNVeoWd/4mtePfWY9/M= Subject key identifier: E6:AB:4F:A8:52:88:22:6D:9F:AE:9D:88:A1:A9:9E:C6:9D:BA:65:0D Authority key identifier: DA:8C:84:0C:B4:1D:26:68:58:19:83:C2:C4:E9:64:E6:7E:F2:D6:A1 Certificate issuer: /CN=DA8C840CB41D2668581983C2C4E964E67EF2D6A1 Certificate serial: 134C002C243F7672B11CCA7CF921CC54CBC8FC39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.mft Manifest number: 025A Signing time: Mon 08 Sep 2025 20:51:44 +0000 Manifest this update: Mon 08 Sep 2025 20:46:44 +0000 Manifest next update: Fri 12 Sep 2025 00:07:44 +0000 Files and hashes: 1: DA8C840CB41D2668581983C2C4E964E67EF2D6A1.crl (hash: 2EsOWrmaD4DHCtaTbK4+4MB+p+Ngc0vpVKQwebDcysI=) 2: 3130332e3137392e3231342e302f32332d3234203d3e20313439333735.roa (hash: ufTh3NuQ02tKvK6+AzJYb6zEYLra1UIfIsPq97spTJM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.crl rsync://repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Sep 2025 00:07:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:4c:00:2c:24:3f:76:72:b1:1c:ca:7c:f9:21:cc:54:cb:c8:fc:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA8C840CB41D2668581983C2C4E964E67EF2D6A1 Validity Not Before: Sep 8 20:46:44 2025 GMT Not After : Sep 12 00:07:44 2025 GMT Subject: CN=E6AB4FA85288226D9FAE9D88A1A99EC69DBA650D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:cf:c2:02:17:df:39:ce:c2:70:c6:9e:00:e2: c2:05:3c:22:cc:0f:3e:f3:96:49:08:6b:39:ad:3f: 3c:f5:e1:fe:4d:21:36:55:99:d6:6c:f3:05:05:04: a4:87:89:80:d9:b6:fe:48:8f:0a:8d:52:c0:fc:41: 38:73:fe:86:dc:9a:d5:e1:e1:76:8d:c4:f7:64:89: 35:96:68:9d:0b:e9:75:0a:d7:08:98:cf:d9:70:56: 2e:f6:dc:82:10:ad:4b:a1:e7:9a:cb:cf:ff:23:40: 53:8b:52:7c:d1:70:df:cc:d5:f7:28:05:9c:dc:1b: 49:bb:78:09:45:c2:d9:f9:d8:2d:bf:71:17:a3:7a: 3e:64:7f:8a:5b:d3:56:2b:91:f7:24:95:0f:af:e1: 07:df:2a:18:9c:8d:99:e3:98:64:f7:a8:38:8f:b1: 86:37:f2:87:64:34:9c:ba:ed:dd:d7:98:94:3b:c5: 68:d5:03:38:75:8d:aa:e6:c8:92:52:72:b6:4b:fe: b0:ce:b1:aa:72:24:e9:ed:2c:47:f8:cd:f2:b7:16: 41:e8:29:7a:b8:e4:c6:e1:91:2c:42:28:9a:3d:06: a0:de:7a:6b:83:b8:75:60:11:fe:23:41:95:98:bd: 97:f2:0e:a2:9d:3e:9d:0c:03:47:a9:1f:2b:14:f7: 77:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E6:AB:4F:A8:52:88:22:6D:9F:AE:9D:88:A1:A9:9E:C6:9D:BA:65:0D X509v3 Authority Key Identifier: keyid:DA:8C:84:0C:B4:1D:26:68:58:19:83:C2:C4:E9:64:E6:7E:F2:D6:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 31:4f:9f:4b:5e:2d:4c:36:d6:0e:da:4b:5b:64:ee:0c:fc:e0: 1a:4f:92:a1:27:2b:d9:b8:05:ca:b2:e5:91:85:69:16:56:66: 87:d0:d2:ff:ac:58:97:d0:f9:9c:37:07:6b:59:15:61:e4:4e: a7:73:38:a4:45:14:79:aa:dd:9d:b2:81:60:58:5a:93:e8:43: 9b:2e:e9:fc:82:1e:64:6b:d9:5a:44:1d:48:b3:21:7a:b7:d7: 4d:4f:d3:36:50:4d:f1:bd:5d:cc:f8:29:02:6e:5a:14:86:16: d9:b8:29:dd:77:2a:56:de:dc:54:11:7b:28:e6:8f:92:e8:2f: 1e:10:19:a4:04:6f:b7:25:23:0f:d9:2d:5c:43:1d:4d:c9:35: 15:c8:70:a4:55:2d:f7:76:f2:ab:b4:63:13:a6:5a:0f:ef:65: d1:db:01:16:b7:00:8f:55:9d:bc:81:b6:55:5e:ff:5d:02:bc: aa:dc:b8:20:a2:d2:b1:3a:3b:6b:c6:56:d9:e0:cc:18:47:1b: ed:e1:0d:88:7a:64:17:42:14:47:ca:13:e2:df:6c:f4:b1:2f: 37:29:1c:69:90:c3:84:a4:1f:9e:d8:3f:a6:5c:1d:ef:d8:48: cc:85:15:5a:30:da:14:d2:2d:ff:50:95:9f:24:0c:9f:f0:cd: 01:dd:3d:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE0wALCQ/dnKxHMp8+SHMVMvI/DkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE4Qzg0MENCNDFEMjY2ODU4MTk4M0MyQzRFOTY0RTY3 RUYyRDZBMTAeFw0yNTA5MDgyMDQ2NDRaFw0yNTA5MTIwMDA3NDRaMDMxMTAvBgNV BAMTKEU2QUI0RkE4NTI4ODIyNkQ5RkFFOUQ4OEExQTk5RUM2OURCQTY1MEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWz8ICF985zsJwxp4A4sIFPCLM Dz7zlkkIazmtPzz14f5NITZVmdZs8wUFBKSHiYDZtv5IjwqNUsD8QThz/obcmtXh 4XaNxPdkiTWWaJ0L6XUK1wiYz9lwVi723IIQrUuh55rLz/8jQFOLUnzRcN/M1fco BZzcG0m7eAlFwtn52C2/cRejej5kf4pb01YrkfcklQ+v4QffKhicjZnjmGT3qDiP sYY38odkNJy67d3XmJQ7xWjVAzh1jarmyJJScrZL/rDOsapyJOntLEf4zfK3FkHo KXq45MbhkSxCKJo9BqDeemuDuHVgEf4jQZWYvZfyDqKdPp0MA0epHysU93cFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5qtPqFKIIm2frp2Ioamexp26ZQ0wHwYDVR0j BBgwFoAU2oyEDLQdJmhYGYPCxOlk5n7y1qEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDgyN2NiOC0xYjJjLTQ0YjEtODE5MC05ODVkODIwNWE0NjQvMC9EQThDODQwQ0I0 MUQyNjY4NTgxOTgzQzJDNEU5NjRFNjdFRjJENkExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREE4Qzg0MENCNDFEMjY2ODU4MTk4M0MyQzRFOTY0RTY3RUYy RDZBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODA4MjdjYjgtMWIyYy00NGIxLTgx OTAtOTg1ZDgyMDVhNDY0LzAvREE4Qzg0MENCNDFEMjY2ODU4MTk4M0MyQzRFOTY0 RTY3RUYyRDZBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADFPn0teLUw21g7aS1tk7gz84BpPkqEnK9m4 Bcqy5ZGFaRZWZofQ0v+sWJfQ+Zw3B2tZFWHkTqdzOKRFFHmq3Z2ygWBYWpPoQ5su 6fyCHmRr2VpEHUizIXq3101P0zZQTfG9Xcz4KQJuWhSGFtm4Kd13Klbe3FQReyjm j5LoLx4QGaQEb7clIw/ZLVxDHU3JNRXIcKRVLfd28qu0YxOmWg/vZdHbARa3AI9V nbyBtlVe/10CvKrcuCCi0rE6O2vGVtngzBhHG+3hDYh6ZBdCFEfKE+LfbPSxLzcp HGmQw4SkH57YP6ZcHe/YSMyFFVow2hTSLf9QlZ8kDJ/wzQHdPV4= -----END CERTIFICATE-----Generated at Tue Sep 9 02:28:00 2025 by rpki-client