$ rpki-client -vvf repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.mft File: DA8C840CB41D2668581983C2C4E964E67EF2D6A1.mft (raw, json) Hash identifier: lYLHwkwrsS6YDVJv3Oxwbo7bG5mGZrZsouLtJzSkHhY= Subject key identifier: 67:35:40:07:B1:8C:E8:D5:C1:24:40:B9:9C:D9:9E:E5:2D:D9:07:8E Authority key identifier: DA:8C:84:0C:B4:1D:26:68:58:19:83:C2:C4:E9:64:E6:7E:F2:D6:A1 Certificate issuer: /CN=DA8C840CB41D2668581983C2C4E964E67EF2D6A1 Certificate serial: 5B856C02E026140CC896054E32944EDA10481238 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.cer Subject info access: rsync://repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.mft Manifest number: 024B Signing time: Wed 06 Aug 2025 02:11:48 +0000 Manifest this update: Wed 06 Aug 2025 02:06:48 +0000 Manifest next update: Sat 09 Aug 2025 05:22:48 +0000 Files and hashes: 1: DA8C840CB41D2668581983C2C4E964E67EF2D6A1.crl (hash: lqBojbeCprjtBxnRZVe1wr8XofIxWAq5VCMIXCenZoA=) 2: 3130332e3137392e3231342e302f32332d3234203d3e20313439333735.roa (hash: ufTh3NuQ02tKvK6+AzJYb6zEYLra1UIfIsPq97spTJM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.crl rsync://repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 05:22:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5b:85:6c:02:e0:26:14:0c:c8:96:05:4e:32:94:4e:da:10:48:12:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA8C840CB41D2668581983C2C4E964E67EF2D6A1 Validity Not Before: Aug 6 02:06:48 2025 GMT Not After : Aug 9 05:22:48 2025 GMT Subject: CN=67354007B18CE8D5C12440B99CD99EE52DD9078E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:54:17:47:6d:9a:21:8a:37:90:3b:1e:b6:62: 74:86:df:f6:9e:6a:d3:70:94:4c:10:5f:cd:6e:6c: 20:4a:9f:25:4a:bb:6d:4b:c7:65:19:58:d7:b1:9f: 8e:c2:3d:ad:fc:65:f9:0e:be:6d:a8:b1:26:be:85: 50:3a:de:be:46:1d:1b:8d:a8:69:fc:25:b9:32:44: ba:49:ca:38:88:37:78:54:e8:44:a5:0b:70:b5:12: be:6d:0c:f8:f2:dd:af:3f:db:99:b6:5f:96:26:5a: d8:17:3a:e4:27:55:17:72:04:38:01:1a:14:85:37: cd:da:02:38:7b:14:21:e1:36:42:a0:eb:31:d6:37: e9:85:d6:6c:2b:a4:c3:99:f7:f4:91:a4:3a:1a:c4: 9b:b3:95:f8:19:fd:7f:de:05:90:00:58:78:88:8a: 1f:9c:11:91:61:36:94:1e:c0:c2:7b:98:62:ee:f8: d5:37:94:7c:c6:43:c2:77:51:e5:6c:0f:51:43:1e: f9:68:d8:5a:d2:ba:4b:14:65:ea:a8:0f:16:51:1c: f5:0f:2b:6a:4c:c5:ed:46:b0:c2:ac:63:f1:1d:48: ac:24:13:3a:da:3a:a0:86:fc:98:df:e6:1d:ee:3a: 4b:58:13:7a:1d:32:0d:21:e2:fa:bb:8a:5f:e1:8a: b2:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 67:35:40:07:B1:8C:E8:D5:C1:24:40:B9:9C:D9:9E:E5:2D:D9:07:8E X509v3 Authority Key Identifier: keyid:DA:8C:84:0C:B4:1D:26:68:58:19:83:C2:C4:E9:64:E6:7E:F2:D6:A1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/80827cb8-1b2c-44b1-8190-985d8205a464/0/DA8C840CB41D2668581983C2C4E964E67EF2D6A1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c7:1f:3c:47:42:d1:cd:92:fe:6a:b2:7d:12:5a:db:d8:88:a1: c9:4a:01:6a:dc:d5:7a:9c:79:33:e5:1f:ac:5b:59:af:b2:29: 99:86:30:a6:28:a7:40:07:31:f7:0d:da:73:e1:c2:c3:75:68: 47:b4:d6:11:ad:29:b1:61:11:dc:5e:c0:f0:07:18:d0:23:7e: 8b:53:a5:67:1d:45:74:24:19:c7:c9:0c:95:97:78:5f:0d:57: ff:1c:8d:05:74:a8:19:aa:c8:62:89:65:23:de:a0:8a:a4:bd: 54:54:b9:a5:56:91:6e:7d:28:80:1d:87:b5:e1:4c:43:60:44: 30:0a:9f:1d:dc:02:e5:ef:fb:e6:95:75:02:9b:67:ff:b9:d5: ce:5b:31:d1:9a:9c:51:a4:db:14:8b:8d:65:e5:45:bb:ee:12: 86:eb:45:8c:3c:70:00:83:d8:2c:f0:99:a1:98:49:6e:3b:3b: 1b:69:78:41:41:da:c2:7c:73:f0:37:00:d4:8c:f4:cf:61:9d: 18:75:0f:b4:71:41:f5:ce:7f:27:d7:05:98:d3:98:cb:29:f9: 55:77:e9:65:8f:59:6e:2a:d5:fd:47:23:8a:54:24:26:37:b7: 54:79:50:cf:78:8b:8d:d2:e9:3c:2e:25:dc:80:92:88:74:83: 43:32:ab:2d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUW4VsAuAmFAzIlgVOMpRO2hBIEjgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE4Qzg0MENCNDFEMjY2ODU4MTk4M0MyQzRFOTY0RTY3 RUYyRDZBMTAeFw0yNTA4MDYwMjA2NDhaFw0yNTA4MDkwNTIyNDhaMDMxMTAvBgNV BAMTKDY3MzU0MDA3QjE4Q0U4RDVDMTI0NDBCOTlDRDk5RUU1MkREOTA3OEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9VBdHbZohijeQOx62YnSG3/ae atNwlEwQX81ubCBKnyVKu21Lx2UZWNexn47CPa38ZfkOvm2osSa+hVA63r5GHRuN qGn8JbkyRLpJyjiIN3hU6ESlC3C1Er5tDPjy3a8/25m2X5YmWtgXOuQnVRdyBDgB GhSFN83aAjh7FCHhNkKg6zHWN+mF1mwrpMOZ9/SRpDoaxJuzlfgZ/X/eBZAAWHiI ih+cEZFhNpQewMJ7mGLu+NU3lHzGQ8J3UeVsD1FDHvlo2FrSuksUZeqoDxZRHPUP K2pMxe1GsMKsY/EdSKwkEzraOqCG/Jjf5h3uOktYE3odMg0h4vq7il/hirJfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZzVAB7GM6NXBJEC5nNme5S3ZB44wHwYDVR0j BBgwFoAU2oyEDLQdJmhYGYPCxOlk5n7y1qEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDgyN2NiOC0xYjJjLTQ0YjEtODE5MC05ODVkODIwNWE0NjQvMC9EQThDODQwQ0I0 MUQyNjY4NTgxOTgzQzJDNEU5NjRFNjdFRjJENkExLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREE4Qzg0MENCNDFEMjY2ODU4MTk4M0MyQzRFOTY0RTY3RUYy RDZBMS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODA4MjdjYjgtMWIyYy00NGIxLTgx OTAtOTg1ZDgyMDVhNDY0LzAvREE4Qzg0MENCNDFEMjY2ODU4MTk4M0MyQzRFOTY0 RTY3RUYyRDZBMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMcfPEdC0c2S/mqyfRJa29iIoclKAWrc1Xqc eTPlH6xbWa+yKZmGMKYop0AHMfcN2nPhwsN1aEe01hGtKbFhEdxewPAHGNAjfotT pWcdRXQkGcfJDJWXeF8NV/8cjQV0qBmqyGKJZSPeoIqkvVRUuaVWkW59KIAdh7Xh TENgRDAKnx3cAuXv++aVdQKbZ/+51c5bMdGanFGk2xSLjWXlRbvuEobrRYw8cACD 2CzwmaGYSW47OxtpeEFB2sJ8c/A3ANSM9M9hnRh1D7RxQfXOfyfXBZjTmMsp+VV3 6WWPWW4q1f1HI4pUJCY3t1R5UM94i43S6TwuJdyAkoh0g0Myqy0= -----END CERTIFICATE-----Generated at Thu Aug 7 20:13:26 2025 by rpki-client