$ rpki-client -vvf repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft File: DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft (raw, json) Hash identifier: UpX/ulMq5cwZ+0oiVEZIzoXepUIX50mEdFkK/Nz5bWE= Subject key identifier: 0A:A9:04:E3:7C:05:DA:91:00:F7:09:CE:10:00:03:E5:85:90:FE:C6 Authority key identifier: DC:34:C8:B5:F4:38:B8:D4:CB:13:F2:45:1A:D1:F0:95:5E:5F:7F:BB Certificate issuer: /CN=DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB Certificate serial: 2AE498C2905BC574B98E280B3A6EB28037C2363A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft Manifest number: 04A2 Signing time: Sun 02 Nov 2025 22:41:36 +0000 Manifest this update: Sun 02 Nov 2025 22:36:36 +0000 Manifest next update: Thu 06 Nov 2025 10:28:36 +0000 Files and hashes: 1: 323030313a6466363a313830303a3a2f34382d3438203d3e20313331373535.roa (hash: ngwq27xsuytU4jFUyyS/sbzfhiUNRTARsL/0hbNcALM=) 2: DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.crl (hash: KMoX5trvVy2LBkP7rjeF0lW/mcvSdP/QfX7G8bPR0aQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.crl rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 10:28:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:e4:98:c2:90:5b:c5:74:b9:8e:28:0b:3a:6e:b2:80:37:c2:36:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB Validity Not Before: Nov 2 22:36:36 2025 GMT Not After : Nov 6 10:28:36 2025 GMT Subject: CN=0AA904E37C05DA9100F709CE100003E58590FEC6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:2f:cd:8c:c7:96:ea:24:40:e9:1a:89:dc:06: 83:13:a1:ca:aa:82:2a:85:fa:4c:5c:2d:2a:03:dd: dc:e8:0d:57:a8:d0:88:a9:bf:a3:cf:19:fe:8f:d3: cb:50:67:0c:b2:78:16:26:ae:b1:ae:ac:00:39:c4: 8b:3e:a4:3d:9e:ae:53:3a:3e:13:a7:ab:b4:ae:40: 3c:97:ac:f8:ea:c4:3e:97:65:d1:ab:2e:d2:3a:4b: 12:bb:10:95:51:6e:2d:ff:80:d0:78:a2:4b:c7:79: e5:a4:51:42:62:de:a7:50:e6:aa:66:33:3a:dd:e8: 98:57:41:a8:70:8a:a3:1c:14:d4:c6:4b:7c:2d:52: 13:6b:39:3e:25:f7:5f:86:92:13:2a:53:16:3e:00: 67:8e:e7:63:0b:40:9b:e8:22:44:7d:ab:31:4d:1a: a0:b6:a0:a9:86:44:c8:4f:75:72:bc:46:99:31:96: 58:0e:0d:8e:2c:3b:56:3f:15:24:43:6a:46:e3:c7: 05:ef:3c:21:97:46:b1:f6:4f:c0:8f:0a:d2:5a:22: 94:ef:64:3a:c0:4a:7c:96:c2:38:b9:20:f3:21:30: c6:aa:75:0a:a5:bb:6a:55:2d:d7:20:ea:ca:6c:cb: d5:6b:58:33:ab:94:1f:69:cc:dd:35:74:bf:16:7e: 03:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:A9:04:E3:7C:05:DA:91:00:F7:09:CE:10:00:03:E5:85:90:FE:C6 X509v3 Authority Key Identifier: keyid:DC:34:C8:B5:F4:38:B8:D4:CB:13:F2:45:1A:D1:F0:95:5E:5F:7F:BB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:dc:42:bc:0a:e4:0d:58:14:58:63:ff:0f:68:ce:2c:ea:84: 94:43:0c:47:fc:b4:87:79:28:82:21:cf:1e:aa:85:b8:7c:23: 81:97:01:a1:d9:a1:71:8f:be:c9:43:08:4d:44:47:0b:8e:7e: 25:46:08:a5:b7:8c:b7:8f:87:4e:92:fd:64:0d:a6:21:db:fc: 21:0a:fc:16:0c:6b:6e:fd:87:05:14:39:74:90:4e:e4:ef:33: 70:2f:8e:36:dc:04:9d:88:eb:ba:2f:3a:da:bd:08:d3:62:22: 14:99:8b:a7:65:c1:28:31:84:3f:0f:60:1c:08:3a:1c:35:da: 52:9e:39:13:2c:92:39:1b:b7:e7:8b:51:e6:41:03:53:78:4e: 6e:37:4e:10:ca:36:78:f9:a8:7e:9f:9c:64:d1:bc:30:4d:b8: 7e:73:97:1b:d0:41:29:04:5a:d0:e2:78:bf:e9:25:8a:bc:ef: ad:56:6c:0d:f6:97:de:c3:95:65:5d:72:cf:16:19:6e:38:a8: 3e:ab:61:7f:7e:89:7a:eb:ec:49:87:ca:cf:5c:19:82:ad:74: a7:3b:c9:2a:79:30:a7:fc:de:1e:a0:f3:52:56:66:99:9c:23: 79:5f:4e:63:30:af:35:4e:a1:93:a2:06:71:80:38:90:56:5d: 5a:b3:a4:43 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKuSYwpBbxXS5jigLOm6ygDfCNjowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMzNEM4QjVGNDM4QjhENENCMTNGMjQ1MUFEMUYwOTU1 RTVGN0ZCQjAeFw0yNTExMDIyMjM2MzZaFw0yNTExMDYxMDI4MzZaMDMxMTAvBgNV BAMTKDBBQTkwNEUzN0MwNURBOTEwMEY3MDlDRTEwMDAwM0U1ODU5MEZFQzYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5L82Mx5bqJEDpGoncBoMTocqq giqF+kxcLSoD3dzoDVeo0Iipv6PPGf6P08tQZwyyeBYmrrGurAA5xIs+pD2erlM6 PhOnq7SuQDyXrPjqxD6XZdGrLtI6SxK7EJVRbi3/gNB4okvHeeWkUUJi3qdQ5qpm Mzrd6JhXQahwiqMcFNTGS3wtUhNrOT4l91+GkhMqUxY+AGeO52MLQJvoIkR9qzFN GqC2oKmGRMhPdXK8RpkxllgODY4sO1Y/FSRDakbjxwXvPCGXRrH2T8CPCtJaIpTv ZDrASnyWwji5IPMhMMaqdQqlu2pVLdcg6spsy9VrWDOrlB9pzN01dL8WfgNlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCqkE43wF2pEA9wnOEAAD5YWQ/sYwHwYDVR0j BBgwFoAU3DTItfQ4uNTLE/JFGtHwlV5ff7swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YThmMDQzNS00ZDM4LTQ3ZWYtODUwZi01MWJhNDYxN2ZiM2QvMC9EQzM0QzhCNUY0 MzhCOEQ0Q0IxM0YyNDUxQUQxRjA5NTVFNUY3RkJCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREMzNEM4QjVGNDM4QjhENENCMTNGMjQ1MUFEMUYwOTU1RTVG N0ZCQi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmE4ZjA0MzUtNGQzOC00N2VmLTg1 MGYtNTFiYTQ2MTdmYjNkLzAvREMzNEM4QjVGNDM4QjhENENCMTNGMjQ1MUFEMUYw OTU1RTVGN0ZCQi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABTcQrwK5A1YFFhj/w9ozizqhJRDDEf8tId5 KIIhzx6qhbh8I4GXAaHZoXGPvslDCE1ERwuOfiVGCKW3jLePh06S/WQNpiHb/CEK /BYMa279hwUUOXSQTuTvM3AvjjbcBJ2I67ovOtq9CNNiIhSZi6dlwSgxhD8PYBwI Ohw12lKeORMskjkbt+eLUeZBA1N4Tm43ThDKNnj5qH6fnGTRvDBNuH5zlxvQQSkE WtDieL/pJYq8761WbA32l97DlWVdcs8WGW44qD6rYX9+iXrr7EmHys9cGYKtdKc7 ySp5MKf83h6g81JWZpmcI3lfTmMwrzVOoZOiBnGAOJBWXVqzpEM= -----END CERTIFICATE-----Generated at Tue Nov 4 12:56:29 2025 by rpki-client