$ rpki-client -vvf repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft File: DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft (raw, json) Hash identifier: b9TpKxjK6RMDHDVd9u09aREyBS+nHwl3eFOAOpKnKtA= Subject key identifier: C9:55:79:24:4C:3C:E6:70:92:F3:A1:92:67:6E:C5:B6:5C:22:EE:4A Authority key identifier: DA:39:6A:1D:C6:29:9D:C3:BB:9E:8D:D7:65:0D:36:FA:BA:94:49:67 Certificate issuer: /CN=DA396A1DC6299DC3BB9E8DD7650D36FABA944967 Certificate serial: 20D96815ED858C34A1F9CFA956AC0E8C095F29D5 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft Manifest number: 0204 Signing time: Wed 03 Sep 2025 20:40:53 +0000 Manifest this update: Wed 03 Sep 2025 20:35:53 +0000 Manifest next update: Sun 07 Sep 2025 06:43:53 +0000 Files and hashes: 1: DA396A1DC6299DC3BB9E8DD7650D36FABA944967.crl (hash: CGwUB8KGfjwNSP63kCpucBQLn/GwOf9j3DpXkSXLerM=) 2: 3130332e3136362e34382e302f32332d3234203d3e20313339343630.roa (hash: 0a2CK00YtHnEd2JmEamQH3BHgmE0sjYsMU62NZCZSoM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.crl rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 07 Sep 2025 06:43:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:d9:68:15:ed:85:8c:34:a1:f9:cf:a9:56:ac:0e:8c:09:5f:29:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA396A1DC6299DC3BB9E8DD7650D36FABA944967 Validity Not Before: Sep 3 20:35:53 2025 GMT Not After : Sep 7 06:43:53 2025 GMT Subject: CN=C95579244C3CE67092F3A192676EC5B65C22EE4A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:5f:31:96:cc:1a:63:34:b7:af:69:60:82:5b: fb:ce:93:0b:df:c2:b1:05:6d:ca:e4:71:d2:56:3e: 6d:11:33:5c:2f:68:17:73:55:98:0c:95:67:8d:f2: df:65:5f:6a:44:6d:55:d8:8d:7a:e1:de:db:49:f2: c6:70:ca:61:17:43:61:1f:97:6a:ad:3b:7c:2b:7a: 05:47:7a:0a:e7:f0:5f:0a:65:4c:62:bf:26:fb:1b: 50:80:1e:d8:31:79:36:f9:97:d0:0a:4c:cb:4c:53: 7c:c5:4a:83:00:72:af:66:c9:39:76:88:62:3e:0a: 9d:5d:5b:cd:3c:de:31:46:14:33:f9:ae:42:e8:bc: 47:9a:16:c1:18:f4:76:87:91:3e:59:a9:42:66:e3: 4d:7a:04:2a:5e:74:96:f2:77:b5:70:75:96:bc:fa: 97:50:c1:a1:7b:e8:1c:18:75:68:f6:e4:11:de:a9: 72:b6:49:4a:20:82:98:f9:b6:f1:c0:cc:11:d1:71: 0e:4f:3e:e8:d0:5c:b4:9c:e4:d4:2c:60:70:a1:30: d8:42:23:24:ed:c0:32:3b:8e:84:5c:20:8e:c6:13: 23:fe:ce:c0:3a:f0:88:b9:6d:d1:87:9e:a8:41:b5: 3c:e0:a7:f1:29:4d:f2:af:75:e7:5e:a1:c0:87:f4: 4a:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:55:79:24:4C:3C:E6:70:92:F3:A1:92:67:6E:C5:B6:5C:22:EE:4A X509v3 Authority Key Identifier: keyid:DA:39:6A:1D:C6:29:9D:C3:BB:9E:8D:D7:65:0D:36:FA:BA:94:49:67 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e8b63e7d-a617-4e8c-a821-623956d4d4ae/0/DA396A1DC6299DC3BB9E8DD7650D36FABA944967.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 10:09:e9:32:12:5e:25:3d:e5:37:fd:86:6a:8c:d2:aa:73:c5: 3f:27:04:99:cb:f7:48:88:9e:d2:2b:39:fa:0e:f3:52:2e:29: e1:ae:77:3b:e5:ed:89:57:3e:92:83:16:e2:e5:fd:c4:8d:b5: 0b:a3:b2:55:16:80:6e:f1:67:29:fa:17:b4:5d:c1:ca:8e:20: 74:58:f6:31:f3:85:cd:c1:c1:db:ca:ae:46:65:8b:e0:1c:df: 7e:b9:18:d3:9d:38:2d:13:16:28:6a:ab:d2:6e:f5:a8:b2:0a: 47:fb:35:1a:9d:ff:eb:9e:b0:0e:45:3b:e3:6f:24:fb:3e:08: 62:ca:fc:52:e3:56:e3:63:54:8d:d3:c9:f9:93:94:af:f5:c9: 46:ee:75:85:de:e7:88:50:03:48:e9:bb:7c:d3:a7:fb:0f:95: e9:08:8f:5a:9a:84:1f:4f:59:7b:6a:15:ab:6d:f2:b5:10:76: d3:53:f1:42:e4:0a:36:71:7d:77:9c:c4:2e:a5:34:b0:d1:a0: 2c:6f:de:fc:a3:ef:d7:77:d4:d6:1f:20:0e:ca:c2:fb:db:1c: 9e:d1:19:27:44:1e:27:d0:c3:f9:a6:44:b4:ed:e1:82:b1:74: 62:bf:f6:c3:87:9a:2c:07:a2:b4:82:46:ba:19:6b:6c:f3:6c: 0f:50:28:de -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUINloFe2FjDSh+c+pVqwOjAlfKdUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREEzOTZBMURDNjI5OURDM0JCOUU4REQ3NjUwRDM2RkFC QTk0NDk2NzAeFw0yNTA5MDMyMDM1NTNaFw0yNTA5MDcwNjQzNTNaMDMxMTAvBgNV BAMTKEM5NTU3OTI0NEMzQ0U2NzA5MkYzQTE5MjY3NkVDNUI2NUMyMkVFNEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnXzGWzBpjNLevaWCCW/vOkwvf wrEFbcrkcdJWPm0RM1wvaBdzVZgMlWeN8t9lX2pEbVXYjXrh3ttJ8sZwymEXQ2Ef l2qtO3wregVHegrn8F8KZUxivyb7G1CAHtgxeTb5l9AKTMtMU3zFSoMAcq9myTl2 iGI+Cp1dW8083jFGFDP5rkLovEeaFsEY9HaHkT5ZqUJm4016BCpedJbyd7VwdZa8 +pdQwaF76BwYdWj25BHeqXK2SUoggpj5tvHAzBHRcQ5PPujQXLSc5NQsYHChMNhC IyTtwDI7joRcII7GEyP+zsA68Ii5bdGHnqhBtTzgp/EpTfKvdedeocCH9EpjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyVV5JEw85nCS86GSZ27Ftlwi7kowHwYDVR0j BBgwFoAU2jlqHcYpncO7no3XZQ02+rqUSWcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l OGI2M2U3ZC1hNjE3LTRlOGMtYTgyMS02MjM5NTZkNGQ0YWUvMC9EQTM5NkExREM2 Mjk5REMzQkI5RThERDc2NTBEMzZGQUJBOTQ0OTY3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREEzOTZBMURDNjI5OURDM0JCOUU4REQ3NjUwRDM2RkFCQTk0 NDk2Ny5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZThiNjNlN2QtYTYxNy00ZThjLWE4 MjEtNjIzOTU2ZDRkNGFlLzAvREEzOTZBMURDNjI5OURDM0JCOUU4REQ3NjUwRDM2 RkFCQTk0NDk2Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABAJ6TISXiU95Tf9hmqM0qpzxT8nBJnL90iI ntIrOfoO81IuKeGudzvl7YlXPpKDFuLl/cSNtQujslUWgG7xZyn6F7RdwcqOIHRY 9jHzhc3BwdvKrkZli+Ac3365GNOdOC0TFihqq9Ju9aiyCkf7NRqd/+uesA5FO+Nv JPs+CGLK/FLjVuNjVI3TyfmTlK/1yUbudYXe54hQA0jpu3zTp/sPlekIj1qahB9P WXtqFatt8rUQdtNT8ULkCjZxfXecxC6lNLDRoCxv3vyj79d31NYfIA7KwvvbHJ7R GSdEHifQw/mmRLTt4YKxdGK/9sOHmiwHorSCRroZa2zzbA9QKN4= -----END CERTIFICATE-----Generated at Fri Sep 5 12:39:21 2025 by rpki-client