$ rpki-client -vvf repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.mft File: DA680D591E9E6B4622614F94CF255933B6749212.mft (raw, json) Hash identifier: IejuTz2MbE5m/h365p+9heFe8uYmQEzW0JZcNo7H5uU= Subject key identifier: 24:08:4D:D6:D3:DF:69:6A:5A:03:CF:D1:C9:24:45:8F:22:97:33:E6 Authority key identifier: DA:68:0D:59:1E:9E:6B:46:22:61:4F:94:CF:25:59:33:B6:74:92:12 Certificate issuer: /CN=DA680D591E9E6B4622614F94CF255933B6749212 Certificate serial: 0B426D9C850A33CE56B3DA6D35CE6C73DA4AB771 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DA680D591E9E6B4622614F94CF255933B6749212.cer Subject info access: rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.mft Manifest number: F4 Signing time: Mon 04 Aug 2025 18:01:48 +0000 Manifest this update: Mon 04 Aug 2025 17:56:48 +0000 Manifest next update: Fri 08 Aug 2025 03:17:48 +0000 Files and hashes: 1: DA680D591E9E6B4622614F94CF255933B6749212.crl (hash: LjbyGKr4cgA9byaadvtikDc30++Ar8xolkvf14CyZW8=) 2: 3135372e31302e3138322e302f32332d3234203d3e20313532333434.roa (hash: i0rS2o3mTh9+/ZMOMUuCXL7VcRhfm2ZL+vmQMK6r/AQ=) 3: 3135372e31302e3138332e302f32342d3234203d3e20313532333434.roa (hash: bW5GhG+n2gDC7aNS0QQfawXhWxcHV8PEi1pP/7l6eDw=) 4: 3135372e31302e3138322e302f32342d3234203d3e20313532333434.roa (hash: zo0q/Qyr9+OM0Fi4S3qemAqF/9QAiZg3ou4qqrAMiyU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.crl rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DA680D591E9E6B4622614F94CF255933B6749212.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 03:17:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0b:42:6d:9c:85:0a:33:ce:56:b3:da:6d:35:ce:6c:73:da:4a:b7:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA680D591E9E6B4622614F94CF255933B6749212 Validity Not Before: Aug 4 17:56:48 2025 GMT Not After : Aug 8 03:17:48 2025 GMT Subject: CN=24084DD6D3DF696A5A03CFD1C924458F229733E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:f5:c1:1b:04:52:4b:23:d9:72:16:77:81:e6: 1b:56:06:f4:1b:47:1c:df:f2:a6:9e:a4:7c:a9:2a: 58:de:46:7c:ef:81:03:84:2b:c3:ab:b1:c9:17:e5: 74:00:c7:af:76:d0:20:e1:42:34:04:0d:1e:3c:af: 2e:6c:09:b9:8f:e5:2e:89:b9:65:51:a2:d3:9b:1f: e7:40:68:e0:4e:af:dc:07:c6:24:b8:d6:8a:af:29: 6e:5d:9e:c9:b9:c2:80:9d:47:9c:ff:c8:c6:64:2e: 4e:2d:92:91:75:c8:85:d9:68:d4:ce:bc:62:02:9b: 47:d8:c5:bf:f2:64:bd:5e:95:70:76:ad:4a:45:29: f5:2f:c8:88:c4:40:60:ec:83:57:b3:14:9e:3d:07: f6:a4:e0:80:5c:d4:0f:84:80:ea:66:03:3c:12:6d: e3:7f:c0:c1:5d:aa:d7:76:33:af:58:5d:98:c6:4d: ea:a1:07:55:db:a9:88:ee:db:d0:a1:98:51:bd:a1: 67:4e:1e:41:0a:5d:5c:a6:97:00:ba:e2:fa:e0:f4: ad:9f:6c:5e:11:42:66:0a:1e:bd:ab:8f:2a:89:ec: e8:4d:0b:3e:0b:66:52:e2:54:03:95:c1:dc:1b:b4: 6d:ac:d1:a0:3e:c8:e9:a3:9f:d8:2e:eb:00:c5:c2: bf:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:08:4D:D6:D3:DF:69:6A:5A:03:CF:D1:C9:24:45:8F:22:97:33:E6 X509v3 Authority Key Identifier: keyid:DA:68:0D:59:1E:9E:6B:46:22:61:4F:94:CF:25:59:33:B6:74:92:12 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DA680D591E9E6B4622614F94CF255933B6749212.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/91da23e9-84be-4a54-bca0-e9a0cafd16fe/0/DA680D591E9E6B4622614F94CF255933B6749212.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:ae:17:4a:86:76:d0:fe:46:ed:f3:47:e5:9a:c0:53:3d:db: c2:16:d8:56:7a:6d:5e:8c:8e:fc:d7:e6:a5:18:8d:be:3b:74: 04:a3:f1:05:15:be:7e:af:d2:2c:4a:7b:8c:db:c3:6b:47:f3: de:72:bf:4f:76:a2:b4:63:2b:46:fd:ec:87:58:05:93:a8:05: 70:57:69:48:12:74:f6:42:c8:e2:64:0f:da:75:02:a6:60:bb: bd:17:76:af:f7:4c:03:f7:bb:d3:ce:f9:20:ab:65:7b:a8:13: 97:21:ed:48:07:51:ee:3d:03:f6:03:c2:5b:60:3b:c7:da:44: 7d:6a:a1:c8:c9:40:17:1a:43:fc:8f:47:ae:76:3f:1c:76:83: da:da:45:1b:0c:69:4e:d5:6f:d1:50:43:f9:c1:34:b4:a5:ec: 6e:01:23:31:b3:7d:18:17:c5:73:2f:c4:26:35:47:0a:23:74: f3:2b:c1:16:b5:2c:ec:8a:f1:45:36:35:b2:f6:d9:e9:70:1e: ca:f6:30:be:70:9d:02:4d:00:8d:5e:a7:8d:e2:34:7b:c9:f8: df:71:80:5d:d2:0f:06:37:91:9f:03:11:ea:5a:2f:55:d9:c8: 9e:f2:af:81:bb:96:66:af:d1:87:15:ce:cd:44:cb:d4:3e:e1: 63:fb:77:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUC0JtnIUKM85Ws9ptNc5sc9pKt3EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE2ODBENTkxRTlFNkI0NjIyNjE0Rjk0Q0YyNTU5MzNC Njc0OTIxMjAeFw0yNTA4MDQxNzU2NDhaFw0yNTA4MDgwMzE3NDhaMDMxMTAvBgNV BAMTKDI0MDg0REQ2RDNERjY5NkE1QTAzQ0ZEMUM5MjQ0NThGMjI5NzMzRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDY9cEbBFJLI9lyFneB5htWBvQb Rxzf8qaepHypKljeRnzvgQOEK8OrsckX5XQAx6920CDhQjQEDR48ry5sCbmP5S6J uWVRotObH+dAaOBOr9wHxiS41oqvKW5dnsm5woCdR5z/yMZkLk4tkpF1yIXZaNTO vGICm0fYxb/yZL1elXB2rUpFKfUvyIjEQGDsg1ezFJ49B/ak4IBc1A+EgOpmAzwS beN/wMFdqtd2M69YXZjGTeqhB1XbqYju29ChmFG9oWdOHkEKXVymlwC64vrg9K2f bF4RQmYKHr2rjyqJ7OhNCz4LZlLiVAOVwdwbtG2s0aA+yOmjn9gu6wDFwr+FAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUJAhN1tPfaWpaA8/RySRFjyKXM+YwHwYDVR0j BBgwFoAU2mgNWR6ea0YiYU+UzyVZM7Z0khIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 MWRhMjNlOS04NGJlLTRhNTQtYmNhMC1lOWEwY2FmZDE2ZmUvMC9EQTY4MEQ1OTFF OUU2QjQ2MjI2MTRGOTRDRjI1NTkzM0I2NzQ5MjEyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvREE2ODBENTkxRTlFNkI0NjIyNjE0Rjk0Q0YyNTU5MzNCNjc0 OTIxMi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTFkYTIzZTktODRiZS00YTU0LWJj YTAtZTlhMGNhZmQxNmZlLzAvREE2ODBENTkxRTlFNkI0NjIyNjE0Rjk0Q0YyNTU5 MzNCNjc0OTIxMi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABmuF0qGdtD+Ru3zR+WawFM928IW2FZ6bV6M jvzX5qUYjb47dASj8QUVvn6v0ixKe4zbw2tH895yv092orRjK0b97IdYBZOoBXBX aUgSdPZCyOJkD9p1AqZgu70Xdq/3TAP3u9PO+SCrZXuoE5ch7UgHUe49A/YDwltg O8faRH1qocjJQBcaQ/yPR652Pxx2g9raRRsMaU7Vb9FQQ/nBNLSl7G4BIzGzfRgX xXMvxCY1RwojdPMrwRa1LOyK8UU2NbL22elwHsr2ML5wnQJNAI1ep43iNHvJ+N9x gF3SDwY3kZ8DEepaL1XZyJ7yr4G7lmav0YcVzs1Ey9Q+4WP7d9I= -----END CERTIFICATE-----Generated at Wed Aug 6 14:06:34 2025 by rpki-client