$ rpki-client -vvf repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.mft File: DA680D591E9E6B4622614F94CF255933B6749212.mft (raw, json) Hash identifier: RK293Ee5lWZoCbSDEotZ2YnLB58oPogODcsPOKbEEG0= Subject key identifier: C9:75:E6:78:A8:EB:04:59:21:43:65:23:71:3A:2A:57:C6:FC:54:4F Authority key identifier: DA:68:0D:59:1E:9E:6B:46:22:61:4F:94:CF:25:59:33:B6:74:92:12 Certificate issuer: /CN=DA680D591E9E6B4622614F94CF255933B6749212 Certificate serial: 59A10F603946EFD4951EFF4E263E15F7EFD5C671 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DA680D591E9E6B4622614F94CF255933B6749212.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.mft Manifest number: EF Signing time: Thu 24 Jul 2025 02:11:46 +0000 Manifest this update: Thu 24 Jul 2025 02:06:46 +0000 Manifest next update: Sun 27 Jul 2025 09:24:46 +0000 Files and hashes: 1: 3135372e31302e3138322e302f32332d3234203d3e20313532333434.roa (hash: i0rS2o3mTh9+/ZMOMUuCXL7VcRhfm2ZL+vmQMK6r/AQ=) 2: 3135372e31302e3138332e302f32342d3234203d3e20313532333434.roa (hash: bW5GhG+n2gDC7aNS0QQfawXhWxcHV8PEi1pP/7l6eDw=) 3: DA680D591E9E6B4622614F94CF255933B6749212.crl (hash: JbOPxWzhEoGiUafacrvPzB37QKPdQtAILvXVIAI5lN4=) 4: 3135372e31302e3138322e302f32342d3234203d3e20313532333434.roa (hash: zo0q/Qyr9+OM0Fi4S3qemAqF/9QAiZg3ou4qqrAMiyU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.crl rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DA680D591E9E6B4622614F94CF255933B6749212.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 27 Jul 2025 09:24:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:a1:0f:60:39:46:ef:d4:95:1e:ff:4e:26:3e:15:f7:ef:d5:c6:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA680D591E9E6B4622614F94CF255933B6749212 Validity Not Before: Jul 24 02:06:46 2025 GMT Not After : Jul 27 09:24:46 2025 GMT Subject: CN=C975E678A8EB045921436523713A2A57C6FC544F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:fe:77:ea:77:f4:51:ef:8e:15:65:72:97:1b: ac:09:da:b8:d0:5b:6b:be:26:1b:81:3b:e8:8c:1c: 2d:05:39:45:e8:3c:c7:4c:42:7d:f3:c0:11:07:d6: 17:d6:67:87:2f:2d:e3:86:ef:df:d6:9d:0d:c4:71: 97:76:e2:0b:44:12:a6:18:2a:62:c7:a2:93:10:93: da:ce:52:ad:00:6d:ec:e9:14:0c:d2:c0:8a:2e:cf: aa:48:9a:2c:73:e5:9c:31:5b:70:f2:46:8f:d5:31: 28:ec:50:c5:ff:9b:a1:7b:ba:d3:8d:47:4d:0a:6b: 9d:5e:65:26:d0:cf:e3:8c:ef:6e:44:bc:77:c5:2b: c4:bb:a4:7c:f3:50:03:79:71:b5:42:a9:3d:53:83: e3:93:58:25:81:bc:ae:25:1d:a2:3e:f2:0c:6d:1d: 30:c4:72:a9:24:16:aa:23:cc:29:67:42:2b:63:3f: 41:09:a8:16:4c:af:4a:8c:80:0b:19:d2:28:78:56: 2c:28:00:3b:1b:c1:ba:be:b1:57:f8:4f:cd:a4:af: d3:bf:d6:0a:fc:a3:d8:f0:d8:83:15:96:20:c7:f9: 76:4f:00:d0:a2:19:b2:d0:80:c9:a2:03:0f:ac:b5: cb:0f:07:43:5e:ac:25:9b:23:f6:6f:8a:87:ae:22: 13:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:75:E6:78:A8:EB:04:59:21:43:65:23:71:3A:2A:57:C6:FC:54:4F X509v3 Authority Key Identifier: keyid:DA:68:0D:59:1E:9E:6B:46:22:61:4F:94:CF:25:59:33:B6:74:92:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DA680D591E9E6B4622614F94CF255933B6749212.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:87:dc:85:0d:f5:44:82:a4:49:d0:93:2f:32:14:83:ab:e5: c0:fd:ac:75:92:31:a3:da:4a:17:81:7e:56:3c:b0:0a:ca:b0: 5f:61:c1:fa:d6:6b:06:2d:03:5e:fe:e1:a4:6c:42:18:a8:a6: 1c:70:5a:e5:3b:bc:45:ac:96:c7:f8:5b:b7:2b:95:a7:57:21: cf:bd:4d:0e:b1:e1:c1:50:89:a4:ac:3e:e2:20:c6:a1:68:96: bb:06:ea:c1:6a:7f:9c:03:30:b2:28:22:b1:31:6c:6d:09:1d: 9c:f5:a9:91:5e:a8:fd:e8:6f:b4:ad:56:11:6a:8a:ca:e4:49: 96:7e:5a:eb:b1:11:92:94:b4:3a:00:02:07:34:62:90:62:04: c7:95:a1:c2:46:5f:04:c1:ac:0a:fe:f0:55:fe:00:34:45:83: 25:ca:e3:f2:ab:15:28:20:86:23:48:a6:9a:e0:ac:40:4f:25: 1b:1c:1e:b8:3c:9c:6f:5d:91:91:ed:c7:5d:25:2c:f6:99:af: 91:e9:b5:19:47:91:43:3c:b3:48:0c:77:bb:5e:3a:15:e2:c6: 63:f8:c5:33:1b:d0:c8:d8:5c:8c:a7:d7:60:49:81:83:0e:66: e5:08:d1:e5:1e:33:2e:61:6e:f5:45:cc:b3:1c:c9:7f:80:55: 2f:25:a1:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUWaEPYDlG79SVHv9OJj4V9+/VxnEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE2ODBENTkxRTlFNkI0NjIyNjE0Rjk0Q0YyNTU5MzNC Njc0OTIxMjAeFw0yNTA3MjQwMjA2NDZaFw0yNTA3MjcwOTI0NDZaMDMxMTAvBgNV BAMTKEM5NzVFNjc4QThFQjA0NTkyMTQzNjUyMzcxM0EyQTU3QzZGQzU0NEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDA/nfqd/RR744VZXKXG6wJ2rjQ W2u+JhuBO+iMHC0FOUXoPMdMQn3zwBEH1hfWZ4cvLeOG79/WnQ3EcZd24gtEEqYY KmLHopMQk9rOUq0AbezpFAzSwIouz6pImixz5ZwxW3DyRo/VMSjsUMX/m6F7utON R00Ka51eZSbQz+OM725EvHfFK8S7pHzzUAN5cbVCqT1Tg+OTWCWBvK4lHaI+8gxt HTDEcqkkFqojzClnQitjP0EJqBZMr0qMgAsZ0ih4ViwoADsbwbq+sVf4T82kr9O/ 1gr8o9jw2IMVliDH+XZPANCiGbLQgMmiAw+stcsPB0NerCWbI/ZvioeuIhM9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyXXmeKjrBFkhQ2UjcToqV8b8VE8wHwYDVR0j BBgwFoAU2mgNWR6ea0YiYU+UzyVZM7Z0khIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWRhMjNlOS04NGJlLTRhNTQtYmNhMC1lOWEwY2FmZDE2ZmUvMC9EQTY4MEQ1OTFF OUU2QjQ2MjI2MTRGOTRDRjI1NTkzM0I2NzQ5MjEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvREE2ODBENTkxRTlFNkI0NjIyNjE0Rjk0Q0YyNTU5MzNCNjc0 OTIxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFkYTIzZTktODRiZS00YTU0LWJj YTAtZTlhMGNhZmQxNmZlLzAvREE2ODBENTkxRTlFNkI0NjIyNjE0Rjk0Q0YyNTU5 MzNCNjc0OTIxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHKH3IUN9USCpEnQky8yFIOr5cD9rHWSMaPa SheBflY8sArKsF9hwfrWawYtA17+4aRsQhiophxwWuU7vEWslsf4W7crladXIc+9 TQ6x4cFQiaSsPuIgxqFolrsG6sFqf5wDMLIoIrExbG0JHZz1qZFeqP3ob7StVhFq isrkSZZ+WuuxEZKUtDoAAgc0YpBiBMeVocJGXwTBrAr+8FX+ADRFgyXK4/KrFSgg hiNIpprgrEBPJRscHrg8nG9dkZHtx10lLPaZr5HptRlHkUM8s0gMd7teOhXixmP4 xTMb0MjYXIyn12BJgYMOZuUI0eUeMy5hbvVFzLMcyX+AVS8loUA= -----END CERTIFICATE-----Generated at Thu Jul 24 23:14:26 2025 by rpki-client