$ rpki-client -vvf repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft File: DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft (raw, json) Hash identifier: va1MswRQpc6mYzlXBLimtlmA5XmE7wUpLBHOvCfjXFk= Subject key identifier: 20:D7:B9:D4:37:0C:04:E9:8B:4D:42:44:BA:25:99:18:CA:04:0D:69 Authority key identifier: DA:6C:3D:41:56:C0:5B:74:E3:B5:C0:49:F7:98:B0:0D:C6:34:2B:70 Certificate issuer: /CN=DA6C3D4156C05B74E3B5C049F798B00DC6342B70 Certificate serial: 15020DF809AF1908FB428D10B0FB72151E2FF2C7 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft Manifest number: 011B Signing time: Fri 05 Sep 2025 23:41:43 +0000 Manifest this update: Fri 05 Sep 2025 23:36:43 +0000 Manifest next update: Tue 09 Sep 2025 09:23:43 +0000 Files and hashes: 1: 3130332e3234392e3232362e302f32342d3234203d3e20313531353236.roa (hash: d/FCKrPQVsgurMvNGz2oQ2iPyKXsXoRnlEaxs4nJ5ko=) 2: DA6C3D4156C05B74E3B5C049F798B00DC6342B70.crl (hash: 8UeoI2B2VTlNgkB7za0mSg1NKmhQh8eGDet6+L8Z5no=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.crl rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 09:23:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:02:0d:f8:09:af:19:08:fb:42:8d:10:b0:fb:72:15:1e:2f:f2:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA6C3D4156C05B74E3B5C049F798B00DC6342B70 Validity Not Before: Sep 5 23:36:43 2025 GMT Not After : Sep 9 09:23:43 2025 GMT Subject: CN=20D7B9D4370C04E98B4D4244BA259918CA040D69 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:15:47:fa:a6:5f:ef:98:48:b1:40:f3:3f:3b: 4e:ae:df:f7:31:46:75:87:24:17:e9:90:75:65:69: 86:b6:65:2f:dc:bb:55:67:6f:f4:31:ca:48:01:5e: f9:f5:2a:20:23:8c:e3:c1:fa:47:f0:0a:5e:e1:b7: 42:d2:24:da:84:9a:2e:87:db:cb:4b:c1:c3:80:53: a0:ad:6f:92:4b:75:a8:06:c6:c4:8f:a3:d9:79:a6: ef:bc:c7:ce:e2:a8:f2:25:29:4d:45:6b:b8:5a:f8: a4:b0:93:ba:bd:51:bf:3f:92:3d:1a:84:bb:13:94: 15:b8:52:ad:d3:4c:eb:e6:47:f9:97:8a:73:7f:4e: 47:4e:50:0f:b4:9c:dc:25:29:1a:04:2c:99:ab:7e: 47:b7:49:4a:d6:02:50:b0:bf:c5:73:17:69:56:fe: 8e:42:2c:0c:2d:11:6e:ae:6c:0a:fb:94:84:2f:be: f8:34:1a:f8:d5:f4:e6:76:03:84:05:86:ae:e0:3d: fc:2e:9a:a5:0f:a7:05:68:ff:df:39:ec:19:2e:69: 19:d2:a4:30:62:5e:28:70:4f:8c:b8:eb:94:97:bf: 43:68:70:44:86:b4:78:4a:eb:2a:31:79:21:99:33: 85:82:47:9d:a0:53:39:56:f2:34:fc:77:23:15:90: 98:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 20:D7:B9:D4:37:0C:04:E9:8B:4D:42:44:BA:25:99:18:CA:04:0D:69 X509v3 Authority Key Identifier: keyid:DA:6C:3D:41:56:C0:5B:74:E3:B5:C0:49:F7:98:B0:0D:C6:34:2B:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:50:5d:cb:ee:b1:68:60:3b:b9:aa:0c:37:a2:26:42:c9:1e: c2:65:10:0e:8a:c0:24:94:0e:8e:30:21:8c:e3:5f:8a:8e:d1: fe:28:9d:ab:de:1c:c2:49:41:34:1c:3c:30:5f:b2:c1:b0:2f: b5:90:50:72:3e:3a:0f:73:df:3d:c0:3a:b3:6f:9f:dd:8e:b7: 49:ae:74:63:ef:ec:0f:8a:f5:d2:bb:66:58:ce:d5:e9:56:a3: 37:37:bf:5a:05:cc:1f:c1:3b:50:1f:70:11:66:d0:f4:37:c9: 34:ae:dc:d6:39:5e:c4:e7:06:ec:08:28:e7:16:73:41:79:27: 01:71:90:13:9d:a3:11:03:f3:77:04:72:86:55:28:25:b8:21: 46:4a:5b:df:b9:0c:5f:f1:d4:e9:0d:df:de:a4:d2:46:f8:bb: b7:b2:fc:1a:7a:0e:7e:a1:1d:2a:1a:0b:12:57:64:6d:fd:1a: 54:95:12:45:ca:e1:33:d0:fc:9f:66:eb:2e:b9:2d:08:67:d6: 70:14:d4:09:ef:21:ad:83:1c:16:63:ae:c8:d6:b7:62:85:8e: f6:9a:5f:aa:7e:1f:69:7f:7c:44:f4:ce:b9:7c:ac:c5:6b:36: b4:52:90:c9:33:b0:03:24:4a:69:4f:56:a7:a0:42:2b:91:be: c3:41:e2:df -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFQIN+AmvGQj7Qo0QsPtyFR4v8scwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE2QzNENDE1NkMwNUI3NEUzQjVDMDQ5Rjc5OEIwMERD NjM0MkI3MDAeFw0yNTA5MDUyMzM2NDNaFw0yNTA5MDkwOTIzNDNaMDMxMTAvBgNV BAMTKDIwRDdCOUQ0MzcwQzA0RTk4QjRENDI0NEJBMjU5OTE4Q0EwNDBENjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJFUf6pl/vmEixQPM/O06u3/cx RnWHJBfpkHVlaYa2ZS/cu1Vnb/QxykgBXvn1KiAjjOPB+kfwCl7ht0LSJNqEmi6H 28tLwcOAU6Ctb5JLdagGxsSPo9l5pu+8x87iqPIlKU1Fa7ha+KSwk7q9Ub8/kj0a hLsTlBW4Uq3TTOvmR/mXinN/TkdOUA+0nNwlKRoELJmrfke3SUrWAlCwv8VzF2lW /o5CLAwtEW6ubAr7lIQvvvg0GvjV9OZ2A4QFhq7gPfwumqUPpwVo/9857BkuaRnS pDBiXihwT4y465SXv0NocESGtHhK6yoxeSGZM4WCR52gUzlW8jT8dyMVkJjFAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUINe51DcMBOmLTUJEuiWZGMoEDWkwHwYDVR0j BBgwFoAU2mw9QVbAW3TjtcBJ95iwDcY0K3AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NzhhOGIzOS0zYWUzLTRkZTctOTM2Ni0yMWY5ZWEwNDMyNWEvMC9EQTZDM0Q0MTU2 QzA1Qjc0RTNCNUMwNDlGNzk4QjAwREM2MzQyQjcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREE2QzNENDE1NkMwNUI3NEUzQjVDMDQ5Rjc5OEIwMERDNjM0 MkI3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTc4YThiMzktM2FlMy00ZGU3LTkz NjYtMjFmOWVhMDQzMjVhLzAvREE2QzNENDE1NkMwNUI3NEUzQjVDMDQ5Rjc5OEIw MERDNjM0MkI3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJdQXcvusWhgO7mqDDeiJkLJHsJlEA6KwCSU Do4wIYzjX4qO0f4onaveHMJJQTQcPDBfssGwL7WQUHI+Og9z3z3AOrNvn92Ot0mu dGPv7A+K9dK7ZljO1elWozc3v1oFzB/BO1AfcBFm0PQ3yTSu3NY5XsTnBuwIKOcW c0F5JwFxkBOdoxED83cEcoZVKCW4IUZKW9+5DF/x1OkN396k0kb4u7ey/Bp6Dn6h HSoaCxJXZG39GlSVEkXK4TPQ/J9m6y65LQhn1nAU1AnvIa2DHBZjrsjWt2KFjvaa X6p+H2l/fET0zrl8rMVrNrRSkMkzsAMkSmlPVqegQiuRvsNB4t8= -----END CERTIFICATE-----Generated at Sun Sep 7 15:27:05 2025 by rpki-client