$ rpki-client -vvf repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.mft File: DC80860022A4D5D14DB78082BAC705E0C1B0F915.mft (raw, json) Hash identifier: 8YcZXXYI+GoTNOINZ2wce3kFSP+NeUcteGHTzlqRWAI= Subject key identifier: 90:32:A5:78:F4:57:7F:1D:56:B7:BA:14:C9:9B:AE:6D:84:C9:A4:66 Authority key identifier: DC:80:86:00:22:A4:D5:D1:4D:B7:80:82:BA:C7:05:E0:C1:B0:F9:15 Certificate issuer: /CN=DC80860022A4D5D14DB78082BAC705E0C1B0F915 Certificate serial: 2C788E5C6EBB6E706ABF3BECCA3B5DAB6B481B8A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC80860022A4D5D14DB78082BAC705E0C1B0F915.cer Subject info access: rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.mft Manifest number: 0502 Signing time: Wed 03 Sep 2025 08:01:42 +0000 Manifest this update: Wed 03 Sep 2025 07:56:42 +0000 Manifest next update: Sat 06 Sep 2025 19:42:42 +0000 Files and hashes: 1: 323430323a343234303a3a2f33322d3332203d3e20313336383830.roa (hash: LeIArO2ugyFzqhOfzyY49jG0OfnapAFQ/XpIZTbnEek=) 2: DC80860022A4D5D14DB78082BAC705E0C1B0F915.crl (hash: RnH8ON8b78vgJFW6DbuOpvpk2hUqvcyZsbEhQKJD5Yw=) 3: 3130332e3130362e3131322e302f32322d3234203d3e20313336383830.roa (hash: 7oh7gLosxpigXZ1B5YXMaPZ1h+t8yrojfWYMj50/Mhg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.crl rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC80860022A4D5D14DB78082BAC705E0C1B0F915.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 06 Sep 2025 19:42:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:78:8e:5c:6e:bb:6e:70:6a:bf:3b:ec:ca:3b:5d:ab:6b:48:1b:8a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC80860022A4D5D14DB78082BAC705E0C1B0F915 Validity Not Before: Sep 3 07:56:42 2025 GMT Not After : Sep 6 19:42:42 2025 GMT Subject: CN=9032A578F4577F1D56B7BA14C99BAE6D84C9A466 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:6d:c4:21:aa:cf:95:97:cb:4f:72:63:0c:ee: 0d:9c:98:0a:a0:e5:c5:9e:9e:47:85:c8:5e:a5:32: a7:b1:d8:78:43:a6:46:5b:11:5f:30:9b:fb:50:bb: 9c:93:fd:5b:72:38:b5:e5:a5:3b:2d:64:34:59:18: b4:f9:36:c7:33:51:f9:e3:5b:f2:f0:70:c1:5b:ac: d3:c0:cb:4c:1a:22:b4:cb:a1:16:2e:22:0e:c1:0e: bb:bf:87:b5:5e:10:ba:a2:8c:9c:28:55:4a:d6:1f: 15:82:6f:64:c0:27:9b:00:8b:76:7b:71:da:e1:ba: 08:99:f0:07:99:ba:17:ac:3c:65:a8:44:8e:ed:5b: 04:0c:03:b1:37:3b:e1:44:33:45:99:b3:06:1d:1a: 3a:9e:7b:12:b1:17:9d:75:7d:21:79:c3:78:81:d5: af:04:09:e6:3f:29:b2:ce:7a:5b:3c:f0:bd:31:d7: 5a:e9:94:62:d4:08:4c:27:36:87:ba:63:35:53:be: eb:ab:fe:93:97:77:88:f1:3e:20:0e:80:78:77:04: 0a:8e:16:e9:e2:63:b5:1f:02:1d:61:c5:31:5c:99: 3b:38:bb:f5:d1:af:4b:18:86:17:35:1a:6c:ac:19: b5:43:b5:ef:34:c9:d3:11:fe:a4:23:7f:b1:26:b6: 5f:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:32:A5:78:F4:57:7F:1D:56:B7:BA:14:C9:9B:AE:6D:84:C9:A4:66 X509v3 Authority Key Identifier: keyid:DC:80:86:00:22:A4:D5:D1:4D:B7:80:82:BA:C7:05:E0:C1:B0:F9:15 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC80860022A4D5D14DB78082BAC705E0C1B0F915.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bb07b37c-0507-4913-8329-3f161b6aff56/0/DC80860022A4D5D14DB78082BAC705E0C1B0F915.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:53:02:26:94:76:38:57:c1:ff:11:70:6a:43:e2:9a:41:da: 27:72:be:6f:ba:ff:4c:ac:86:a9:54:f6:20:84:44:4e:ac:d9: 34:4e:3f:71:ab:db:d1:12:6a:c4:3a:d6:ab:f8:4e:34:00:c2: 80:c5:72:75:eb:fb:5b:c8:5f:87:6d:f9:24:54:c0:07:d1:4f: 78:52:e1:80:34:73:d4:61:7d:3b:6b:e5:ec:02:64:5d:a7:b9: 34:34:f3:3c:37:d3:b1:07:eb:6f:75:aa:40:86:97:73:f2:3e: 75:a8:50:d4:26:d9:49:d5:a3:9d:d1:fd:63:93:15:4c:45:e3: 98:41:21:b9:00:a0:6f:06:75:50:a3:a2:5a:3a:c8:0b:19:71: b5:9f:49:b5:0d:71:f5:bc:2d:a9:e8:ef:db:43:f1:ee:5a:77: 18:eb:eb:d5:12:5f:02:39:73:e5:cc:e3:b6:24:00:7d:1b:c6: 3d:30:10:3f:f5:2e:a9:64:e0:7f:a3:02:9f:75:eb:7e:af:02: 43:8f:6d:74:92:11:5b:49:a4:22:b3:e3:49:20:07:92:66:e9: 57:19:2d:67:e2:49:bd:f9:66:b9:c2:93:68:5d:aa:d5:6e:9a: 8b:4c:13:de:3b:1f:f0:7f:d1:16:38:79:3d:ca:9d:f6:99:1d: c6:53:6d:bd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIULHiOXG67bnBqvzvsyjtdq2tIG4owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREM4MDg2MDAyMkE0RDVEMTREQjc4MDgyQkFDNzA1RTBD MUIwRjkxNTAeFw0yNTA5MDMwNzU2NDJaFw0yNTA5MDYxOTQyNDJaMDMxMTAvBgNV BAMTKDkwMzJBNTc4RjQ1NzdGMUQ1NkI3QkExNEM5OUJBRTZEODRDOUE0NjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFbcQhqs+Vl8tPcmMM7g2cmAqg 5cWenkeFyF6lMqex2HhDpkZbEV8wm/tQu5yT/VtyOLXlpTstZDRZGLT5NsczUfnj W/LwcMFbrNPAy0waIrTLoRYuIg7BDru/h7VeELqijJwoVUrWHxWCb2TAJ5sAi3Z7 cdrhugiZ8AeZuhesPGWoRI7tWwQMA7E3O+FEM0WZswYdGjqeexKxF511fSF5w3iB 1a8ECeY/KbLOels88L0x11rplGLUCEwnNoe6YzVTvuur/pOXd4jxPiAOgHh3BAqO FuniY7UfAh1hxTFcmTs4u/XRr0sYhhc1GmysGbVDte80ydMR/qQjf7Emtl9NAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkDKlePRXfx1Wt7oUyZuubYTJpGYwHwYDVR0j BBgwFoAU3ICGACKk1dFNt4CCuscF4MGw+RUwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i YjA3YjM3Yy0wNTA3LTQ5MTMtODMyOS0zZjE2MWI2YWZmNTYvMC9EQzgwODYwMDIy QTRENUQxNERCNzgwODJCQUM3MDVFMEMxQjBGOTE1LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREM4MDg2MDAyMkE0RDVEMTREQjc4MDgyQkFDNzA1RTBDMUIw RjkxNS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYmIwN2IzN2MtMDUwNy00OTEzLTgz MjktM2YxNjFiNmFmZjU2LzAvREM4MDg2MDAyMkE0RDVEMTREQjc4MDgyQkFDNzA1 RTBDMUIwRjkxNS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADRTAiaUdjhXwf8RcGpD4ppB2idyvm+6/0ys hqlU9iCERE6s2TROP3Gr29ESasQ61qv4TjQAwoDFcnXr+1vIX4dt+SRUwAfRT3hS 4YA0c9RhfTtr5ewCZF2nuTQ08zw307EH6291qkCGl3PyPnWoUNQm2UnVo53R/WOT FUxF45hBIbkAoG8GdVCjolo6yAsZcbWfSbUNcfW8Lano79tD8e5adxjr69USXwI5 c+XM47YkAH0bxj0wED/1Lqlk4H+jAp91636vAkOPbXSSEVtJpCKz40kgB5Jm6VcZ LWfiSb35ZrnCk2hdqtVumotME947H/B/0RY4eT3KnfaZHcZTbb0= -----END CERTIFICATE-----Generated at Fri Sep 5 10:36:16 2025 by rpki-client