$ rpki-client -vvf repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft File: DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft (raw, json) Hash identifier: 9RnIthJr3hrEjIs8F+I6LtsYFcYIfaQ6PbE7w94K6hA= Subject key identifier: 11:AA:4A:BC:9A:03:34:D8:D5:ED:11:D4:30:6C:BF:DB:B7:4C:9D:6E Authority key identifier: DF:68:55:96:DA:F9:D3:65:4A:2E:2F:21:CE:11:AA:0B:B8:0E:45:D1 Certificate issuer: /CN=DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1 Certificate serial: 2465D0CD48D9F77EA53A288AC25D9326C378360B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft Manifest number: 0341 Signing time: Thu 07 Aug 2025 03:40:35 +0000 Manifest this update: Thu 07 Aug 2025 03:35:35 +0000 Manifest next update: Sun 10 Aug 2025 04:55:35 +0000 Files and hashes: 1: 3130332e3136392e3235352e302f32342d3234203d3e20313432333730.roa (hash: zXQVHsRu+F6s1MVNzrtFO+eU8maZ8ipfm8/30hkR/TA=) 2: DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.crl (hash: xa/gzaxp+BLuPaDYXtv/q7r9SiNOkq3MmOsnkvWY3XU=) 3: 3130332e3136392e3235342e302f32342d3234203d3e20313432333730.roa (hash: TptDi2yJ3flSSMDSqc9f0+quKLm9aeSrjexrkn5vS9o=) 4: 3130332e3136392e3235342e302f32332d3233203d3e20313432333730.roa (hash: DLJmEfbL3ZCZVVlEJnye8kD0RQcM/dIeZcFOFRkwePE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.crl rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 04:55:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:65:d0:cd:48:d9:f7:7e:a5:3a:28:8a:c2:5d:93:26:c3:78:36:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1 Validity Not Before: Aug 7 03:35:35 2025 GMT Not After : Aug 10 04:55:35 2025 GMT Subject: CN=11AA4ABC9A0334D8D5ED11D4306CBFDBB74C9D6E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:51:c1:02:1f:8a:3e:dc:11:ef:a0:ae:6b:ec: 34:c2:f0:f4:63:dd:e8:b9:d3:3e:4d:b9:ed:98:b6: 0e:3a:ad:51:c2:bc:18:fa:0c:7f:ff:5e:37:2e:eb: 5f:69:69:67:c1:df:c4:fc:1c:4f:e0:7f:ab:7c:a2: 9b:6d:da:75:28:88:01:f5:38:5e:fd:5a:fc:10:e7: 5f:e6:41:9d:0c:3e:6a:ef:29:d8:f3:bb:81:b0:0f: da:e5:8d:26:32:cf:15:e4:dc:ec:7f:f6:75:ed:32: 16:15:b4:8b:27:12:8e:28:90:56:04:ba:f0:dd:a0: 89:b4:8a:13:ad:c2:70:81:75:f4:fb:03:3b:97:0f: 45:f1:6b:15:19:7c:32:35:c3:c5:be:62:9a:88:4a: 16:a2:63:4e:13:05:37:ff:f1:cf:f4:09:0f:0d:0f: 2d:1c:ea:f2:32:1a:f7:0b:18:bd:a7:ec:04:fb:85: 04:7c:0c:5d:9a:39:5e:4a:dd:99:e9:62:2a:aa:ec: b8:f8:66:e4:64:40:89:a0:9b:4e:e4:dc:46:2a:dc: f1:67:5b:81:9f:ca:db:ef:42:d0:cd:20:6d:0f:1d: f9:a6:5c:a2:e0:40:f3:87:0a:d5:09:7d:86:4c:eb: 0b:47:c5:90:c2:6b:ca:fd:15:bd:ce:e6:33:3b:33: 5b:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:AA:4A:BC:9A:03:34:D8:D5:ED:11:D4:30:6C:BF:DB:B7:4C:9D:6E X509v3 Authority Key Identifier: keyid:DF:68:55:96:DA:F9:D3:65:4A:2E:2F:21:CE:11:AA:0B:B8:0E:45:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6752b3c2-3f30-4040-8b05-83821777048f/0/DF685596DAF9D3654A2E2F21CE11AA0BB80E45D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b5:80:1f:0c:ca:82:b6:2e:7f:41:67:f1:e3:10:c4:e1:eb:f4: fc:20:6b:06:b2:5d:0f:04:fc:75:ad:ec:86:4b:95:9e:d8:69: ce:a6:6f:51:73:20:29:1e:d2:d4:6a:63:1e:70:bd:1f:b7:aa: fb:a2:46:77:ce:97:1d:0e:c8:a4:e6:f0:e0:40:db:12:4c:5b: 32:7f:cf:f8:13:37:42:b1:bf:76:15:a1:9b:aa:d6:21:d5:af: 11:a6:60:07:45:a3:c6:cf:63:23:39:08:9f:18:ba:35:62:9a: ef:d0:7c:40:8d:33:9f:67:40:7f:5c:1e:f2:99:9f:ee:0e:37: 59:9d:e0:8b:5b:55:f5:1c:65:79:d5:a6:6e:09:94:c1:dc:3f: e6:86:65:45:64:b8:ba:61:68:a8:33:30:e8:65:2c:9f:9a:b8: 6a:0d:fb:48:3e:db:3d:6f:33:56:14:54:5a:ea:11:ad:8f:47: 49:9b:b5:c8:83:67:44:71:e4:a7:16:1e:96:3c:5f:f9:0d:0c: 3b:4a:68:11:85:bb:73:2e:2d:73:d4:fe:1e:55:4a:1b:e5:a9: e5:79:4e:9f:7c:5f:e0:82:40:ee:e0:8d:12:90:77:29:ad:c7: 7e:7f:9a:db:b9:0d:49:2f:8b:a8:c4:d0:f4:d1:a8:2f:c1:15: 32:3f:58:48 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJGXQzUjZ936lOiiKwl2TJsN4NgswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY2ODU1OTZEQUY5RDM2NTRBMkUyRjIxQ0UxMUFBMEJC ODBFNDVEMTAeFw0yNTA4MDcwMzM1MzVaFw0yNTA4MTAwNDU1MzVaMDMxMTAvBgNV BAMTKDExQUE0QUJDOUEwMzM0RDhENUVEMTFENDMwNkNCRkRCQjc0QzlENkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzUcECH4o+3BHvoK5r7DTC8PRj 3ei50z5Nue2Ytg46rVHCvBj6DH//Xjcu619paWfB38T8HE/gf6t8optt2nUoiAH1 OF79WvwQ51/mQZ0MPmrvKdjzu4GwD9rljSYyzxXk3Ox/9nXtMhYVtIsnEo4okFYE uvDdoIm0ihOtwnCBdfT7AzuXD0XxaxUZfDI1w8W+YpqIShaiY04TBTf/8c/0CQ8N Dy0c6vIyGvcLGL2n7AT7hQR8DF2aOV5K3ZnpYiqq7Lj4ZuRkQImgm07k3EYq3PFn W4GfytvvQtDNIG0PHfmmXKLgQPOHCtUJfYZM6wtHxZDCa8r9Fb3O5jM7M1vlAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEapKvJoDNNjV7RHUMGy/27dMnW4wHwYDVR0j BBgwFoAU32hVltr502VKLi8hzhGqC7gORdEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NzUyYjNjMi0zZjMwLTQwNDAtOGIwNS04MzgyMTc3NzA0OGYvMC9ERjY4NTU5NkRB RjlEMzY1NEEyRTJGMjFDRTExQUEwQkI4MEU0NUQxLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREY2ODU1OTZEQUY5RDM2NTRBMkUyRjIxQ0UxMUFBMEJCODBF NDVEMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjc1MmIzYzItM2YzMC00MDQwLThi MDUtODM4MjE3NzcwNDhmLzAvREY2ODU1OTZEQUY5RDM2NTRBMkUyRjIxQ0UxMUFB MEJCODBFNDVEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALWAHwzKgrYuf0Fn8eMQxOHr9PwgawayXQ8E /HWt7IZLlZ7Yac6mb1FzICke0tRqYx5wvR+3qvuiRnfOlx0OyKTm8OBA2xJMWzJ/ z/gTN0Kxv3YVoZuq1iHVrxGmYAdFo8bPYyM5CJ8YujVimu/QfECNM59nQH9cHvKZ n+4ON1md4ItbVfUcZXnVpm4JlMHcP+aGZUVkuLphaKgzMOhlLJ+auGoN+0g+2z1v M1YUVFrqEa2PR0mbtciDZ0Rx5KcWHpY8X/kNDDtKaBGFu3MuLXPU/h5VShvlqeV5 Tp98X+CCQO7gjRKQdymtx35/mtu5DUkvi6jE0PTRqC/BFTI/WEg= -----END CERTIFICATE-----Generated at Thu Aug 7 07:27:38 2025 by rpki-client