$ rpki-client -vvf repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft File: DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft (raw, json) Hash identifier: 4fPTkhIfitmgCqEMeh3Hn7uqz95GPLkw8knHAYVgh9Y= Subject key identifier: 5A:3D:81:E7:09:0B:0E:94:BD:7E:26:00:B3:04:8C:80:ED:4C:38:10 Authority key identifier: DC:1F:CA:69:CA:5B:7A:3A:3E:48:25:B3:CA:FC:C3:BD:1B:C0:6E:B7 Certificate issuer: /CN=DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7 Certificate serial: 062A139257B71E732F5E78A06A5D51940DF10A14 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer Subject info access: rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft Manifest number: 04F9 Signing time: Wed 06 Aug 2025 19:00:40 +0000 Manifest this update: Wed 06 Aug 2025 18:55:40 +0000 Manifest next update: Sun 10 Aug 2025 04:07:40 +0000 Files and hashes: 1: DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl (hash: 4yc4cIw6foTRzEE/ejahgR5kOvGWbWewbiIp60QW5Ac=) 2: 3230332e39392e3133302e302f32332d3234203d3e203435323837.roa (hash: k7ibyopUV9/XrMW2a9JFbhidu+OXQwQx2OObsR3bxGk=) 3: 3130332e33312e3131302e302f32332d3234203d3e203435323837.roa (hash: 4PaQM0H/onjaHT/Kh1zZPEAnjrQ5QUcaM+Ku8Nb2uPM=) 4: 3130332e32332e3230302e302f32322d3234203d3e203435323837.roa (hash: LF6fkR6wHHLHaK6n5THO1FAaW1/pu2et9XJ8qxbKTqY=) 5: 3135302e3132392e35362e302f32322d3234203d3e203435323837.roa (hash: IRZUoX6giIzocnieegh+jhCGcm3NJfUDoJas/fn7lAQ=) 6: 3131312e36382e3131322e302f32302d3234203d3e203435323837.roa (hash: EmRosqOLA0o9un75dpB41tldUQb9JEqee08S4oNpAgc=) 7: 3230322e35362e3136302e302f32322d3234203d3e203435323837.roa (hash: rZ6xFcdvrZepULyMbdGd+kxrh/vJFiCfrx4GSYa9yts=) 8: 323430363a323430303a3a2f33322d3438203d3e203435323837.roa (hash: VW/9nDJQjFvUWNt8EqbaeORZUsYDdJ6mH99j9xi/Rqk=) 9: 3137352e3137362e3136302e302f32312d3234203d3e203435323837.roa (hash: 1Oab07RIZCU6Wr6N0vZAT3UZeBpPId8GfzsxV9iRdK8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 04:07:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:2a:13:92:57:b7:1e:73:2f:5e:78:a0:6a:5d:51:94:0d:f1:0a:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7 Validity Not Before: Aug 6 18:55:40 2025 GMT Not After : Aug 10 04:07:40 2025 GMT Subject: CN=5A3D81E7090B0E94BD7E2600B3048C80ED4C3810 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:87:bd:d0:f0:d1:39:80:4d:59:9d:3a:87:53: 2a:cd:04:3e:a4:d6:97:d1:23:37:0d:a7:d8:eb:7c: 7c:db:75:b7:04:16:de:fe:c2:78:eb:d8:0d:13:3f: 2a:e2:ca:89:1c:1e:18:b8:2b:a7:6a:db:51:08:83: 35:61:8b:11:a8:7e:e6:70:80:44:d9:6d:9b:11:10: b1:c7:18:e1:2d:6d:6a:11:c2:e8:8a:6c:17:5b:1e: d2:f7:76:90:07:34:8f:20:dc:e3:0a:73:46:82:99: 09:26:51:2a:8c:32:51:5a:b9:cd:ef:3a:19:45:6d: 87:db:f0:72:39:bf:e8:08:f3:a2:53:be:80:66:15: df:a6:d0:58:60:73:88:0c:15:80:43:38:6d:55:00: c2:77:7d:dd:5c:91:91:7b:55:02:ef:eb:dd:ac:4c: be:8d:81:b7:0c:5a:cd:fb:d6:7a:4b:d6:6a:4f:2b: a4:16:85:6a:55:3b:ee:b9:67:83:64:cf:e9:5b:03: 35:38:45:11:86:fb:c8:7b:49:06:54:37:4d:12:23: d6:66:a4:4b:2b:37:aa:ba:87:38:fd:de:ae:02:18: a1:63:28:2f:a6:d2:e0:1e:f9:a7:0e:fd:0a:29:d1: 79:4a:08:d3:26:72:1f:84:a0:4b:5c:49:cb:7d:c2: 58:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5A:3D:81:E7:09:0B:0E:94:BD:7E:26:00:B3:04:8C:80:ED:4C:38:10 X509v3 Authority Key Identifier: keyid:DC:1F:CA:69:CA:5B:7A:3A:3E:48:25:B3:CA:FC:C3:BD:1B:C0:6E:B7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/98249fc3-6c84-4e91-b067-a0c6a840a3a9/0/DC1FCA69CA5B7A3A3E4825B3CAFCC3BD1BC06EB7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 08:da:8c:17:b8:58:de:f8:2e:b8:4e:39:c0:cf:62:e5:1a:ba: 3e:e8:46:e1:bc:3f:e1:c1:45:d1:02:c8:59:ad:de:38:94:4b: a3:a0:47:c2:35:85:c7:de:bd:1a:96:b9:3f:d7:dd:58:11:c2: 4c:1a:7d:b6:8b:1c:c3:30:a6:14:94:a5:e2:79:85:0d:bc:fe: 13:88:dd:72:4c:c9:57:ac:3a:d4:8d:15:19:f6:a1:c9:e9:44: ef:c5:7d:a2:cc:ff:1f:57:a6:7e:86:f8:81:d4:fa:0c:be:5b: db:43:e8:51:cd:ac:00:13:5e:04:de:b7:6b:9a:d7:95:83:cc: f3:c8:e8:eb:cc:a4:ac:de:a5:5a:27:a6:d2:a5:c7:4f:a4:c6: e9:a2:40:78:65:49:71:2a:c7:45:6d:e4:92:2a:1e:72:39:bd: 4d:9c:ca:c9:12:a3:16:b4:5e:9c:a5:3f:e8:8e:6f:3d:91:c4: 4a:c5:b3:b6:48:db:b2:93:4a:2b:7a:80:d6:00:f7:08:41:98: 29:51:8a:ef:7f:98:53:ee:56:27:12:c2:b3:93:4a:99:a8:b7: 17:3e:0d:5f:87:b2:9b:ad:3e:c8:ce:b5:bf:a3:c8:73:15:93: f3:56:aa:46:ad:7e:7e:5c:3c:77:b1:14:42:be:4f:94:28:f0: 7c:ca:fe:34 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBioTkle3HnMvXnigal1RlA3xChQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMxRkNBNjlDQTVCN0EzQTNFNDgyNUIzQ0FGQ0MzQkQx QkMwNkVCNzAeFw0yNTA4MDYxODU1NDBaFw0yNTA4MTAwNDA3NDBaMDMxMTAvBgNV BAMTKDVBM0Q4MUU3MDkwQjBFOTRCRDdFMjYwMEIzMDQ4QzgwRUQ0QzM4MTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7h73Q8NE5gE1ZnTqHUyrNBD6k 1pfRIzcNp9jrfHzbdbcEFt7+wnjr2A0TPyriyokcHhi4K6dq21EIgzVhixGofuZw gETZbZsRELHHGOEtbWoRwuiKbBdbHtL3dpAHNI8g3OMKc0aCmQkmUSqMMlFauc3v OhlFbYfb8HI5v+gI86JTvoBmFd+m0Fhgc4gMFYBDOG1VAMJ3fd1ckZF7VQLv692s TL6NgbcMWs371npL1mpPK6QWhWpVO+65Z4Nkz+lbAzU4RRGG+8h7SQZUN00SI9Zm pEsrN6q6hzj93q4CGKFjKC+m0uAe+acO/Qop0XlKCNMmch+EoEtcSct9wljNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUWj2B5wkLDpS9fiYAswSMgO1MOBAwHwYDVR0j BBgwFoAU3B/Kacpbejo+SCWzyvzDvRvAbrcwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85 ODI0OWZjMy02Yzg0LTRlOTEtYjA2Ny1hMGM2YTg0MGEzYTkvMC9EQzFGQ0E2OUNB NUI3QTNBM0U0ODI1QjNDQUZDQzNCRDFCQzA2RUI3LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREMxRkNBNjlDQTVCN0EzQTNFNDgyNUIzQ0FGQ0MzQkQxQkMw NkVCNy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOTgyNDlmYzMtNmM4NC00ZTkxLWIw NjctYTBjNmE4NDBhM2E5LzAvREMxRkNBNjlDQTVCN0EzQTNFNDgyNUIzQ0FGQ0Mz QkQxQkMwNkVCNy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAjajBe4WN74LrhOOcDPYuUauj7oRuG8P+HB RdECyFmt3jiUS6OgR8I1hcfevRqWuT/X3VgRwkwafbaLHMMwphSUpeJ5hQ28/hOI 3XJMyVesOtSNFRn2ocnpRO/FfaLM/x9Xpn6G+IHU+gy+W9tD6FHNrAATXgTet2ua 15WDzPPI6OvMpKzepVonptKlx0+kxumiQHhlSXEqx0Vt5JIqHnI5vU2cyskSoxa0 XpylP+iObz2RxErFs7ZI27KTSit6gNYA9whBmClRiu9/mFPuVicSwrOTSpmotxc+ DV+HsputPsjOtb+jyHMVk/NWqkatfn5cPHexFEK+T5Qo8HzK/jQ= -----END CERTIFICATE-----Generated at Thu Aug 7 04:24:44 2025 by rpki-client