$ rpki-client -vvf repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft File: DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft (raw, json) Hash identifier: gvnMsWUrwfI1sS7aKVX0UujyyLqG0jxF3S/sEValY0c= Subject key identifier: A2:5C:4E:F7:3A:A4:91:35:70:54:AD:66:2C:52:A0:C2:8C:95:6E:F0 Authority key identifier: DF:77:06:1C:AE:F3:0A:8D:AF:6B:52:D8:A3:D9:FD:80:F3:72:0F:11 Certificate issuer: /CN=DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11 Certificate serial: 1B23E7935C968A78ACC6378033BD91811315EC2C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.cer Subject info access: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft Manifest number: B6 Signing time: Wed 06 Aug 2025 05:20:37 +0000 Manifest this update: Wed 06 Aug 2025 05:15:37 +0000 Manifest next update: Sat 09 Aug 2025 08:03:37 +0000 Files and hashes: 1: 323030313a6466333a663834303a3a2f34382d3438203d3e20313532383330.roa (hash: 3aMUQeSx+u1/318Y8ScOuCTO+xUE/7Y4RTX6xf+E9CE=) 2: DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.crl (hash: Yw+pmNtqfd4G41wEeundyhdM+lqsVs1kCs418CtHXUw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.crl rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 08:03:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:23:e7:93:5c:96:8a:78:ac:c6:37:80:33:bd:91:81:13:15:ec:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11 Validity Not Before: Aug 6 05:15:37 2025 GMT Not After : Aug 9 08:03:37 2025 GMT Subject: CN=A25C4EF73AA491357054AD662C52A0C28C956EF0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:9a:0c:e9:8e:74:64:dd:6f:d7:27:a5:58:c3: 8c:d0:63:6c:8c:0e:99:26:a2:8f:3f:f3:05:39:2a: 34:f1:ab:79:5d:0a:02:e6:10:22:e1:71:6d:43:3c: ca:b1:89:dd:64:4f:c3:81:f5:05:e5:1f:11:e1:58: 2b:6e:11:01:e6:ed:8e:76:e4:d1:80:c7:f2:f7:b2: d8:9a:a0:71:28:cc:03:7e:1b:dd:7a:55:d6:17:b9: 17:10:a5:71:40:49:b3:79:2b:90:80:81:19:fc:c2: 95:69:ea:16:fc:f2:c3:cd:3d:3f:df:20:33:18:a7: 79:96:95:52:de:c3:5c:ee:cf:f3:f6:56:fa:73:33: 32:bf:c4:e0:ea:22:2a:a4:da:e4:ca:dd:73:fd:42: 43:3a:9e:d6:50:68:9d:2e:e0:9d:a6:f4:51:22:39: 0c:ab:89:8c:36:d4:b9:8a:10:c8:2c:39:f3:2b:32: 61:55:b2:d6:ba:f6:28:bd:ce:ad:1e:76:ba:47:86: 86:74:c8:a5:1b:de:07:ff:60:3c:e2:a5:ae:7c:46: be:bf:a1:73:a8:ac:c5:a8:97:38:cb:0e:fb:a9:13: 6f:cf:81:f3:c5:45:a3:f3:54:a2:1e:08:4e:db:47: 8a:66:1e:90:c4:ba:a6:5f:c7:20:41:98:f7:1e:db: 54:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A2:5C:4E:F7:3A:A4:91:35:70:54:AD:66:2C:52:A0:C2:8C:95:6E:F0 X509v3 Authority Key Identifier: keyid:DF:77:06:1C:AE:F3:0A:8D:AF:6B:52:D8:A3:D9:FD:80:F3:72:0F:11 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7a0210b3-cca2-43c5-89f9-5a9086a60703/1/DF77061CAEF30A8DAF6B52D8A3D9FD80F3720F11.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:72:b5:ec:8a:68:31:40:9a:3b:67:bd:43:eb:8a:ee:98:8e: 24:59:0b:8f:1e:09:30:3e:b5:c7:24:7d:b5:2b:63:a9:bd:fa: 7b:c4:4d:36:d5:c2:de:97:99:1a:11:f8:34:e5:ea:60:d6:08: 8a:d1:97:c8:7f:4a:10:d4:9a:a2:8e:cb:8d:99:71:87:c9:82: 93:28:6a:4e:24:87:a9:68:62:ba:c3:34:60:f8:88:00:6b:a3: 73:72:96:77:1f:cd:d4:2f:fd:e3:ed:26:fc:f0:b3:d6:ed:ae: 3e:41:15:d0:8f:16:3d:2c:3b:3c:e8:44:87:1a:1c:82:90:82: af:ec:80:bb:5f:9c:9a:b9:39:7f:9f:7e:b7:9c:dd:e3:5e:8a: 3a:8c:46:8e:9b:da:2d:f2:93:27:f2:eb:f8:35:c8:11:8f:9d: a8:99:19:cb:cc:aa:ac:95:c9:71:97:c0:af:58:fe:1b:4f:8f: 53:6f:d4:80:ad:bd:6b:00:01:f3:74:48:71:74:48:6d:7e:2c: 54:06:e9:ab:d1:af:3b:3b:5c:b8:26:c5:11:9b:47:cd:68:a2: 93:97:b7:b5:8d:fd:48:c8:de:b2:fe:13:e8:5e:64:48:0f:76: 8f:72:74:bb:b5:2d:7d:72:e7:e7:37:c1:e9:0c:18:af:c2:07: 66:f6:c6:16 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGyPnk1yWinisxjeAM72RgRMV7CwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREY3NzA2MUNBRUYzMEE4REFGNkI1MkQ4QTNEOUZEODBG MzcyMEYxMTAeFw0yNTA4MDYwNTE1MzdaFw0yNTA4MDkwODAzMzdaMDMxMTAvBgNV BAMTKEEyNUM0RUY3M0FBNDkxMzU3MDU0QUQ2NjJDNTJBMEMyOEM5NTZFRjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEmgzpjnRk3W/XJ6VYw4zQY2yM Dpkmoo8/8wU5KjTxq3ldCgLmECLhcW1DPMqxid1kT8OB9QXlHxHhWCtuEQHm7Y52 5NGAx/L3stiaoHEozAN+G916VdYXuRcQpXFASbN5K5CAgRn8wpVp6hb88sPNPT/f IDMYp3mWlVLew1zuz/P2VvpzMzK/xODqIiqk2uTK3XP9QkM6ntZQaJ0u4J2m9FEi OQyriYw21LmKEMgsOfMrMmFVsta69ii9zq0edrpHhoZ0yKUb3gf/YDzipa58Rr6/ oXOorMWolzjLDvupE2/PgfPFRaPzVKIeCE7bR4pmHpDEuqZfxyBBmPce21RrAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUolxO9zqkkTVwVK1mLFKgwoyVbvAwHwYDVR0j BBgwFoAU33cGHK7zCo2va1LYo9n9gPNyDxEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83 YTAyMTBiMy1jY2EyLTQzYzUtODlmOS01YTkwODZhNjA3MDMvMS9ERjc3MDYxQ0FF RjMwQThEQUY2QjUyRDhBM0Q5RkQ4MEYzNzIwRjExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREY3NzA2MUNBRUYzMEE4REFGNkI1MkQ4QTNEOUZEODBGMzcy MEYxMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2EwMjEwYjMtY2NhMi00M2M1LTg5 ZjktNWE5MDg2YTYwNzAzLzEvREY3NzA2MUNBRUYzMEE4REFGNkI1MkQ4QTNEOUZE ODBGMzcyMEYxMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA1yteyKaDFAmjtnvUPriu6YjiRZC48eCTA+ tcckfbUrY6m9+nvETTbVwt6XmRoR+DTl6mDWCIrRl8h/ShDUmqKOy42ZcYfJgpMo ak4kh6loYrrDNGD4iABro3NylncfzdQv/ePtJvzws9btrj5BFdCPFj0sOzzoRIca HIKQgq/sgLtfnJq5OX+ffrec3eNeijqMRo6b2i3ykyfy6/g1yBGPnaiZGcvMqqyV yXGXwK9Y/htPj1Nv1ICtvWsAAfN0SHF0SG1+LFQG6avRrzs7XLgmxRGbR81oopOX t7WN/UjI3rL+E+heZEgPdo9ydLu1LX1y5+c3wekMGK/CB2b2xhY= -----END CERTIFICATE-----Generated at Thu Aug 7 03:30:06 2025 by rpki-client