$ rpki-client -vvf repo-rpki.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DFAE11418F2175A57D01D8F80A61497CC1F5306C.mft File: DFAE11418F2175A57D01D8F80A61497CC1F5306C.mft (raw, json) Hash identifier: MRet1i7g8sN6S+4nYux7IJIz4aCGTcGA1J5JFtgPj60= Subject key identifier: 3C:8F:19:BC:E8:CD:DF:85:37:50:9F:55:74:D9:D3:B5:5C:F7:28:EB Authority key identifier: DF:AE:11:41:8F:21:75:A5:7D:01:D8:F8:0A:61:49:7C:C1:F5:30:6C Certificate issuer: /CN=DFAE11418F2175A57D01D8F80A61497CC1F5306C Certificate serial: 4AE37600ECCEB462C0476EECBB0127BAD3E6CD59 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFAE11418F2175A57D01D8F80A61497CC1F5306C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DFAE11418F2175A57D01D8F80A61497CC1F5306C.mft Manifest number: 0351 Signing time: Wed 03 Sep 2025 05:41:26 +0000 Manifest this update: Wed 03 Sep 2025 05:36:26 +0000 Manifest next update: Sat 06 Sep 2025 13:16:26 +0000 Files and hashes: 1: 3130332e3137312e3138352e302f32342d3234203d3e20313432333734.roa (hash: Un4jBswELs85PKZIKBQlwX0Wi2V6PoeRbOj08OHDeeg=) 2: DFAE11418F2175A57D01D8F80A61497CC1F5306C.crl (hash: x0AzB9vOzDd9+hK1io4ZIgKQJ3yvLtrxDZ5DGPfy1jA=) 3: 3130332e3137312e3138342e302f32342d3234203d3e20313432333734.roa (hash: 6aMZ4xs6I3z2wIHDjzXkkCFtdMcUice/aLHdynSzMx8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DFAE11418F2175A57D01D8F80A61497CC1F5306C.crl rsync://repo-rpki.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DFAE11418F2175A57D01D8F80A61497CC1F5306C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFAE11418F2175A57D01D8F80A61497CC1F5306C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 13:16:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4a:e3:76:00:ec:ce:b4:62:c0:47:6e:ec:bb:01:27:ba:d3:e6:cd:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFAE11418F2175A57D01D8F80A61497CC1F5306C Validity Not Before: Sep 3 05:36:26 2025 GMT Not After : Sep 6 13:16:26 2025 GMT Subject: CN=3C8F19BCE8CDDF8537509F5574D9D3B55CF728EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:ce:cd:a9:ac:93:ad:5f:d5:48:04:68:19:8e: 88:06:d7:32:43:3c:0d:b3:b2:70:20:99:ec:98:12: c7:a4:81:bb:b0:c6:e7:62:2e:0c:86:4d:ab:9a:65: 05:e4:38:e6:82:9c:de:e3:d9:d4:e3:df:8c:cc:20: 20:8a:3d:63:3c:2e:35:52:3a:b6:66:41:64:48:96: af:a2:d8:b1:ef:04:5b:ba:27:4c:88:a8:2c:0c:45: f1:33:64:43:e8:96:d5:81:a9:cf:ea:03:c0:ee:17: 80:79:0c:b4:56:7a:fa:92:6d:ed:a6:d9:62:b7:59: 97:94:0b:ca:e4:2d:1e:85:2b:11:22:23:1b:20:6e: 08:c5:bd:38:97:08:6d:1f:73:19:ac:93:f0:ed:f1: b6:e9:47:97:1c:c1:a4:7f:e4:66:d7:c8:53:9a:b3: 74:9d:9f:d4:dd:5b:01:94:80:0d:68:7c:48:8e:9f: d1:19:74:42:70:d9:c6:95:cf:ff:90:26:ca:d1:b2: 9f:3d:ca:86:8a:bd:0f:5a:4d:e2:e9:ff:43:a3:81: 08:29:5f:f1:39:fd:68:2b:50:de:96:f3:ce:f4:36: 21:45:37:59:5e:a9:6c:74:c5:d1:19:f6:06:de:ab: 53:bd:d5:b2:c4:ce:de:75:02:77:67:30:3d:4a:c0: 23:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:8F:19:BC:E8:CD:DF:85:37:50:9F:55:74:D9:D3:B5:5C:F7:28:EB X509v3 Authority Key Identifier: keyid:DF:AE:11:41:8F:21:75:A5:7D:01:D8:F8:0A:61:49:7C:C1:F5:30:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DFAE11418F2175A57D01D8F80A61497CC1F5306C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFAE11418F2175A57D01D8F80A61497CC1F5306C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DFAE11418F2175A57D01D8F80A61497CC1F5306C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:8d:46:60:84:55:8d:27:01:ca:11:95:7a:aa:e0:44:b2:41: 1f:ef:ca:89:b2:52:1d:8b:b6:46:0e:91:18:b2:69:d4:5d:19: a5:b7:f2:a9:97:78:ae:84:af:bf:9f:f1:0a:72:f3:e3:6b:69: 85:78:c7:1e:4b:43:c4:0d:eb:75:83:fa:c4:07:8f:e5:58:c1: 02:98:48:6f:62:2b:20:93:82:e4:e3:3f:a5:a9:b2:fe:22:df: 96:35:0f:11:ee:03:2a:00:6f:70:de:b8:fc:e2:7c:68:70:08: d7:e8:98:61:a9:f5:bc:6d:13:48:24:b1:69:78:ec:00:eb:a0: c8:2f:d4:4f:11:95:20:c2:81:01:68:40:87:51:37:47:3b:55: a0:7e:c1:f1:ff:59:69:e2:f2:d5:60:14:9c:b3:54:80:91:2f: 0a:05:1a:49:4c:96:fc:06:56:e9:aa:3b:05:61:77:a5:0e:84: 28:bb:b6:79:c5:22:c1:ec:19:32:4b:b6:a5:b9:1f:d6:9d:63: dc:42:a9:52:3a:20:23:3b:dc:16:d5:f7:df:49:da:22:6b:f9: a9:55:db:17:e6:cc:8d:d4:fe:62:1a:16:a0:cb:f8:67:17:bb: 80:4a:20:c5:62:b6:c6:8b:4a:dc:e1:a9:b5:db:07:d8:14:6d: e1:0d:be:88 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUSuN2AOzOtGLAR27suwEnutPmzVkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZBRTExNDE4RjIxNzVBNTdEMDFEOEY4MEE2MTQ5N0ND MUY1MzA2QzAeFw0yNTA5MDMwNTM2MjZaFw0yNTA5MDYxMzE2MjZaMDMxMTAvBgNV BAMTKDNDOEYxOUJDRThDRERGODUzNzUwOUY1NTc0RDlEM0I1NUNGNzI4RUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8zs2prJOtX9VIBGgZjogG1zJD PA2zsnAgmeyYEsekgbuwxudiLgyGTauaZQXkOOaCnN7j2dTj34zMICCKPWM8LjVS OrZmQWRIlq+i2LHvBFu6J0yIqCwMRfEzZEPoltWBqc/qA8DuF4B5DLRWevqSbe2m 2WK3WZeUC8rkLR6FKxEiIxsgbgjFvTiXCG0fcxmsk/Dt8bbpR5ccwaR/5GbXyFOa s3Sdn9TdWwGUgA1ofEiOn9EZdEJw2caVz/+QJsrRsp89yoaKvQ9aTeLp/0OjgQgp X/E5/WgrUN6W8870NiFFN1leqWx0xdEZ9gbeq1O91bLEzt51AndnMD1KwCNNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUPI8ZvOjN34U3UJ9VdNnTtVz3KOswHwYDVR0j BBgwFoAU364RQY8hdaV9Adj4CmFJfMH1MGwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODU1ZjQ1MC1lYjdmLTRhMjYtYTZjNC1mOTgyN2VlMGE1YjgvMC9ERkFFMTE0MThG MjE3NUE1N0QwMUQ4RjgwQTYxNDk3Q0MxRjUzMDZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREZBRTExNDE4RjIxNzVBNTdEMDFEOEY4MEE2MTQ5N0NDMUY1 MzA2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjg1NWY0NTAtZWI3Zi00YTI2LWE2 YzQtZjk4MjdlZTBhNWI4LzAvREZBRTExNDE4RjIxNzVBNTdEMDFEOEY4MEE2MTQ5 N0NDMUY1MzA2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACeNRmCEVY0nAcoRlXqq4ESyQR/vyomyUh2L tkYOkRiyadRdGaW38qmXeK6Er7+f8Qpy8+NraYV4xx5LQ8QN63WD+sQHj+VYwQKY SG9iKyCTguTjP6Wpsv4i35Y1DxHuAyoAb3DeuPzifGhwCNfomGGp9bxtE0gksWl4 7ADroMgv1E8RlSDCgQFoQIdRN0c7VaB+wfH/WWni8tVgFJyzVICRLwoFGklMlvwG VumqOwVhd6UOhCi7tnnFIsHsGTJLtqW5H9adY9xCqVI6ICM73BbV999J2iJr+alV 2xfmzI3U/mIaFqDL+GcXu4BKIMVitsaLStzhqbXbB9gUbeENvog= -----END CERTIFICATE-----Generated at Fri Sep 5 10:13:45 2025 by rpki-client