$ rpki-client -vvf repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.mft File: D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.mft (raw, json) Hash identifier: qnvB+a74hEH3iIT/I91JAEq5if9UabirpNMQMvkZLko= Subject key identifier: 9A:18:5E:A5:D1:A9:31:55:AF:43:E6:E3:36:82:B6:13:C6:F8:16:BE Authority key identifier: D6:9B:38:7E:6B:9C:AF:1B:D2:6B:28:6A:94:8D:5A:77:FB:85:F8:0A Certificate issuer: /CN=D69B387E6B9CAF1BD26B286A948D5A77FB85F80A Certificate serial: 214AB9EACB1A67518361AD91DA5525AAF86287D3 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.mft Manifest number: 86 Signing time: Thu 07 Aug 2025 15:32:12 +0000 Manifest this update: Thu 07 Aug 2025 15:27:12 +0000 Manifest next update: Sun 10 Aug 2025 21:49:12 +0000 Files and hashes: 1: D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.crl (hash: Apx69SnSMTcgCCBIRlcjPsgZ7gDdls2BE235Te2R6M0=) 2: 3130332e36352e3134322e302f32332d3234203d3e20313432333333.roa (hash: ebv5717pdfrOCM6UKJpRU8pwWSSBsU7X9vMbWD9pgi8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.crl rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 21:49:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:4a:b9:ea:cb:1a:67:51:83:61:ad:91:da:55:25:aa:f8:62:87:d3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D69B387E6B9CAF1BD26B286A948D5A77FB85F80A Validity Not Before: Aug 7 15:27:12 2025 GMT Not After : Aug 10 21:49:12 2025 GMT Subject: CN=9A185EA5D1A93155AF43E6E33682B613C6F816BE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:1c:69:28:e2:44:cb:53:32:89:26:ad:a1:2e: 73:b9:ae:9d:b5:2a:1d:26:e4:04:46:e3:22:9c:ae: ae:49:27:52:9e:e8:77:8d:e7:f7:63:70:70:12:a6: be:31:0e:3e:c0:01:68:3a:b7:29:b2:7b:1e:eb:a4: ce:bb:f6:31:28:fb:35:36:d7:58:90:51:0f:5f:33: 6e:27:bb:c1:60:fb:b7:5a:a1:78:f0:83:16:f8:06: 88:42:1b:83:94:0f:f7:01:57:ec:24:01:47:dd:75: 27:8c:8c:86:eb:0b:af:17:ed:d0:1e:cf:02:bd:05: d9:7e:1f:f0:d4:ea:d6:6a:aa:d6:6b:36:53:58:b2: ac:a8:8a:ff:79:d5:ef:5b:87:26:cf:c2:9a:e3:63: f9:a0:12:09:7b:81:9d:4d:6c:19:5c:d6:d9:64:46: ca:f0:bd:84:85:10:0e:d5:43:a4:13:a2:ec:43:d8: f5:36:db:f0:e9:3d:bc:8d:86:3e:d4:59:94:4b:73: 79:7b:c9:92:6e:06:4f:6d:47:60:23:60:e6:98:fe: 07:68:9f:d9:9a:0f:41:c6:a5:d1:6b:56:8e:d9:22: 60:5a:8c:3f:bc:55:73:e9:94:49:f6:cf:3d:24:16: c3:19:62:30:fb:55:81:2f:c9:74:36:51:e2:42:ed: 44:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9A:18:5E:A5:D1:A9:31:55:AF:43:E6:E3:36:82:B6:13:C6:F8:16:BE X509v3 Authority Key Identifier: keyid:D6:9B:38:7E:6B:9C:AF:1B:D2:6B:28:6A:94:8D:5A:77:FB:85:F8:0A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2038f3a1-ac0f-4f7c-9c6c-6b27566fe70c/0/D69B387E6B9CAF1BD26B286A948D5A77FB85F80A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:8a:ba:7f:fc:e2:08:ab:bd:fe:fb:66:c9:42:cf:95:50:e8: ed:47:65:ff:e0:da:e4:40:73:ca:78:3e:6c:74:a1:0d:60:96: 2b:bd:87:5b:40:db:75:1f:40:e3:93:d9:73:fe:53:9e:e0:e0: c8:18:72:b3:b6:e7:89:0c:9e:b4:5a:4a:bc:fd:86:cd:ba:3e: aa:55:4b:2e:99:ec:3b:5e:9b:2e:58:17:86:4c:2f:f5:b4:c6: 86:de:68:cb:4b:e6:be:2f:7c:8d:7c:d9:9f:b4:37:6e:37:ef: 3d:4d:48:29:d1:ef:68:04:18:fa:78:09:e2:1f:9d:01:11:b2: 8d:d9:ad:4a:f1:c9:fd:2c:cd:1e:f5:16:5c:f7:45:5c:a7:d5: b0:45:e5:ba:db:e4:47:63:eb:3a:74:23:ee:a4:9b:d1:9e:70: 17:92:ba:be:f5:e1:a2:3c:c4:f2:95:0f:a2:ce:da:1b:d4:ac: 73:5f:b6:c9:7e:c4:8b:d7:8f:41:e4:3c:f6:b3:71:38:ec:a0: 21:e1:74:77:45:47:74:18:37:c2:42:10:e4:f4:dd:ec:5f:ca: a0:49:44:3e:86:6e:e6:5e:7d:8b:27:a0:a2:8b:26:62:2a:bd: 80:64:3a:f4:f6:75:1b:a1:51:60:eb:26:84:a2:c8:6f:bb:a0: 94:e2:43:0b -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIUq56ssaZ1GDYa2R2lUlqvhih9MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDY5QjM4N0U2QjlDQUYxQkQyNkIyODZBOTQ4RDVBNzdG Qjg1RjgwQTAeFw0yNTA4MDcxNTI3MTJaFw0yNTA4MTAyMTQ5MTJaMDMxMTAvBgNV BAMTKDlBMTg1RUE1RDFBOTMxNTVBRjQzRTZFMzM2ODJCNjEzQzZGODE2QkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAHGko4kTLUzKJJq2hLnO5rp21 Kh0m5ARG4yKcrq5JJ1Ke6HeN5/djcHASpr4xDj7AAWg6tymyex7rpM679jEo+zU2 11iQUQ9fM24nu8Fg+7daoXjwgxb4BohCG4OUD/cBV+wkAUfddSeMjIbrC68X7dAe zwK9Bdl+H/DU6tZqqtZrNlNYsqyoiv951e9bhybPwprjY/mgEgl7gZ1NbBlc1tlk RsrwvYSFEA7VQ6QTouxD2PU22/DpPbyNhj7UWZRLc3l7yZJuBk9tR2AjYOaY/gdo n9maD0HGpdFrVo7ZImBajD+8VXPplEn2zz0kFsMZYjD7VYEvyXQ2UeJC7UQTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUmhhepdGpMVWvQ+bjNoK2E8b4Fr4wHwYDVR0j BBgwFoAU1ps4fmucrxvSayhqlI1ad/uF+AowDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y MDM4ZjNhMS1hYzBmLTRmN2MtOWM2Yy02YjI3NTY2ZmU3MGMvMC9ENjlCMzg3RTZC OUNBRjFCRDI2QjI4NkE5NDhENUE3N0ZCODVGODBBLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvRDY5QjM4N0U2QjlDQUYxQkQyNkIyODZBOTQ4RDVBNzdGQjg1 RjgwQS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjAzOGYzYTEtYWMwZi00ZjdjLTlj NmMtNmIyNzU2NmZlNzBjLzAvRDY5QjM4N0U2QjlDQUYxQkQyNkIyODZBOTQ4RDVB NzdGQjg1RjgwQS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADKKun/84girvf77ZslCz5VQ6O1HZf/g2uRA c8p4Pmx0oQ1gliu9h1tA23UfQOOT2XP+U57g4MgYcrO254kMnrRaSrz9hs26PqpV Sy6Z7Dtemy5YF4ZML/W0xobeaMtL5r4vfI182Z+0N2437z1NSCnR72gEGPp4CeIf nQERso3ZrUrxyf0szR71Flz3RVyn1bBF5brb5Edj6zp0I+6km9GecBeSur714aI8 xPKVD6LO2hvUrHNftsl+xIvXj0HkPPazcTjsoCHhdHdFR3QYN8JCEOT03exfyqBJ RD6GbuZefYsnoKKLJmIqvYBkOvT2dRuhUWDrJoSiyG+7oJTiQws= -----END CERTIFICATE-----Generated at Sat Aug 9 05:35:23 2025 by rpki-client