$ rpki-client -vvf repo-rpki.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DFAE11418F2175A57D01D8F80A61497CC1F5306C.mft File: DFAE11418F2175A57D01D8F80A61497CC1F5306C.mft (raw, json) Hash identifier: psNKcOz0cCJ2McPKOTLL4tUamb2FI+GHqLk9pcKfc0Y= Subject key identifier: 8B:79:63:27:DF:08:98:20:3E:E0:C3:67:F9:28:49:8F:C9:73:B7:3D Authority key identifier: DF:AE:11:41:8F:21:75:A5:7D:01:D8:F8:0A:61:49:7C:C1:F5:30:6C Certificate issuer: /CN=DFAE11418F2175A57D01D8F80A61497CC1F5306C Certificate serial: 2B4A3050B48F2C2B37A42A27670C953944028E9D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFAE11418F2175A57D01D8F80A61497CC1F5306C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DFAE11418F2175A57D01D8F80A61497CC1F5306C.mft Manifest number: 0345 Signing time: Wed 06 Aug 2025 10:41:29 +0000 Manifest this update: Wed 06 Aug 2025 10:36:29 +0000 Manifest next update: Sat 09 Aug 2025 11:35:29 +0000 Files and hashes: 1: DFAE11418F2175A57D01D8F80A61497CC1F5306C.crl (hash: puMGF5EW3d5rCYR5nNNszXlsHaxoAwUZbPbfxBMnLyM=) 2: 3130332e3137312e3138352e302f32342d3234203d3e20313432333734.roa (hash: Un4jBswELs85PKZIKBQlwX0Wi2V6PoeRbOj08OHDeeg=) 3: 3130332e3137312e3138342e302f32342d3234203d3e20313432333734.roa (hash: 6aMZ4xs6I3z2wIHDjzXkkCFtdMcUice/aLHdynSzMx8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DFAE11418F2175A57D01D8F80A61497CC1F5306C.crl rsync://repo-rpki.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DFAE11418F2175A57D01D8F80A61497CC1F5306C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFAE11418F2175A57D01D8F80A61497CC1F5306C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 11:35:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:4a:30:50:b4:8f:2c:2b:37:a4:2a:27:67:0c:95:39:44:02:8e:9d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DFAE11418F2175A57D01D8F80A61497CC1F5306C Validity Not Before: Aug 6 10:36:29 2025 GMT Not After : Aug 9 11:35:29 2025 GMT Subject: CN=8B796327DF0898203EE0C367F928498FC973B73D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:3c:02:74:b9:b3:4f:44:39:ba:65:ff:15:56: 36:52:49:cd:d6:a9:26:0d:7a:03:a0:db:b8:d0:74: ba:c9:db:fb:c7:92:e5:f6:cb:87:10:93:8a:49:29: 1a:4d:9e:aa:26:e3:33:fa:43:7b:a1:ac:e6:1d:d4: f9:37:16:36:ba:bd:8b:c2:1d:4b:01:47:19:88:73: ba:ca:80:06:23:dd:24:cb:55:de:07:c1:8d:1e:8a: a3:2e:f5:5b:7e:a8:ed:8a:16:cd:8d:f3:54:ab:c4: 01:19:81:8a:67:4a:cd:55:8f:5f:5a:1f:97:c6:50: cc:d0:3a:a7:e3:32:b3:0c:8f:99:42:6b:ba:86:7a: c5:54:4a:b2:a5:52:96:de:57:f6:b3:89:4f:c5:86: 5d:56:47:f2:2e:d4:10:70:36:88:ef:f1:a7:7b:93: 39:9b:79:96:df:63:b2:4b:e4:8c:a3:de:7d:34:7b: 5c:cc:b5:f7:90:67:e4:d8:15:a3:cd:c6:ee:24:6b: 3c:f8:88:c3:15:5a:6e:54:95:23:90:24:eb:58:82: 1b:4c:ed:53:5b:c4:32:4f:ce:60:ab:73:01:25:4f: fa:bc:92:8f:4b:26:65:0f:d4:bd:e5:56:f1:4c:df: ab:e9:2a:a4:19:72:43:59:e2:2f:0a:1d:3f:d9:5a: 07:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:79:63:27:DF:08:98:20:3E:E0:C3:67:F9:28:49:8F:C9:73:B7:3D X509v3 Authority Key Identifier: keyid:DF:AE:11:41:8F:21:75:A5:7D:01:D8:F8:0A:61:49:7C:C1:F5:30:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DFAE11418F2175A57D01D8F80A61497CC1F5306C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DFAE11418F2175A57D01D8F80A61497CC1F5306C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b855f450-eb7f-4a26-a6c4-f9827ee0a5b8/0/DFAE11418F2175A57D01D8F80A61497CC1F5306C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 96:07:58:50:28:b3:33:bf:c5:d0:c4:68:ed:11:1c:ed:26:6f: f5:ca:8f:f4:3d:38:4a:5e:7b:55:49:92:5d:a7:96:25:21:b8: 5c:9f:01:bc:a4:1e:1b:c4:dc:a9:a9:0a:fb:95:c9:4a:5d:f3: 14:01:08:7c:bd:2a:32:c6:5a:1b:60:1c:b7:a7:24:da:5d:f3: 95:69:b2:91:b5:f8:46:09:75:ea:09:b2:84:0a:2a:b7:83:ea: 85:14:ed:22:12:8f:8a:9e:f0:81:6b:bb:2c:4b:9e:bb:36:32: 99:d4:e1:1f:f4:6d:57:d2:43:74:82:fe:3b:1b:b1:eb:d2:45: c2:a1:9d:22:5a:6d:db:3d:60:57:a7:9d:d8:6d:07:c6:35:f9: 15:78:83:46:0b:c6:93:02:1b:1e:20:e5:09:db:83:ab:43:53: 65:14:93:9c:35:35:62:cc:41:77:40:cc:0d:30:93:4c:b3:cb: c6:b9:30:3d:1c:6e:4a:e9:09:fe:70:f2:72:14:74:9c:b2:ff: 96:79:1b:8d:8d:d7:94:40:b6:06:51:fc:ec:2e:ea:05:d8:81: 94:ec:68:8a:7e:f5:f7:a3:96:4f:2c:5d:19:8e:ea:f0:53:ee: 05:3b:10:79:ed:70:0c:9e:6f:c9:a1:be:39:3f:c1:70:9c:b9: ee:fd:06:da -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK0owULSPLCs3pConZwyVOUQCjp0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREZBRTExNDE4RjIxNzVBNTdEMDFEOEY4MEE2MTQ5N0ND MUY1MzA2QzAeFw0yNTA4MDYxMDM2MjlaFw0yNTA4MDkxMTM1MjlaMDMxMTAvBgNV BAMTKDhCNzk2MzI3REYwODk4MjAzRUUwQzM2N0Y5Mjg0OThGQzk3M0I3M0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgPAJ0ubNPRDm6Zf8VVjZSSc3W qSYNegOg27jQdLrJ2/vHkuX2y4cQk4pJKRpNnqom4zP6Q3uhrOYd1Pk3Fja6vYvC HUsBRxmIc7rKgAYj3STLVd4HwY0eiqMu9Vt+qO2KFs2N81SrxAEZgYpnSs1Vj19a H5fGUMzQOqfjMrMMj5lCa7qGesVUSrKlUpbeV/aziU/Fhl1WR/Iu1BBwNojv8ad7 kzmbeZbfY7JL5Iyj3n00e1zMtfeQZ+TYFaPNxu4kazz4iMMVWm5UlSOQJOtYghtM 7VNbxDJPzmCrcwElT/q8ko9LJmUP1L3lVvFM36vpKqQZckNZ4i8KHT/ZWgfPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUi3ljJ98ImCA+4MNn+ShJj8lztz0wHwYDVR0j BBgwFoAU364RQY8hdaV9Adj4CmFJfMH1MGwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9i ODU1ZjQ1MC1lYjdmLTRhMjYtYTZjNC1mOTgyN2VlMGE1YjgvMC9ERkFFMTE0MThG MjE3NUE1N0QwMUQ4RjgwQTYxNDk3Q0MxRjUzMDZDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREZBRTExNDE4RjIxNzVBNTdEMDFEOEY4MEE2MTQ5N0NDMUY1 MzA2Qy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYjg1NWY0NTAtZWI3Zi00YTI2LWE2 YzQtZjk4MjdlZTBhNWI4LzAvREZBRTExNDE4RjIxNzVBNTdEMDFEOEY4MEE2MTQ5 N0NDMUY1MzA2Qy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJYHWFAoszO/xdDEaO0RHO0mb/XKj/Q9OEpe e1VJkl2nliUhuFyfAbykHhvE3KmpCvuVyUpd8xQBCHy9KjLGWhtgHLenJNpd85Vp spG1+EYJdeoJsoQKKreD6oUU7SISj4qe8IFruyxLnrs2MpnU4R/0bVfSQ3SC/jsb sevSRcKhnSJabds9YFenndhtB8Y1+RV4g0YLxpMCGx4g5Qnbg6tDU2UUk5w1NWLM QXdAzA0wk0yzy8a5MD0cbkrpCf5w8nIUdJyy/5Z5G42N15RAtgZR/Owu6gXYgZTs aIp+9fejlk8sXRmO6vBT7gU7EHntcAyeb8mhvjk/wXCcue79Bto= -----END CERTIFICATE-----Generated at Thu Aug 7 23:57:41 2025 by rpki-client