$ rpki-client -vvf repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft File: DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft (raw, json) Hash identifier: x9+I8PzGK0jc+GhC10utsyfAxWqI8uujyrBYVN6hOrU= Subject key identifier: 10:08:B6:CF:B2:79:3F:76:5C:F1:8B:42:83:D5:E8:17:7E:F8:1D:46 Authority key identifier: DA:6C:3D:41:56:C0:5B:74:E3:B5:C0:49:F7:98:B0:0D:C6:34:2B:70 Certificate issuer: /CN=DA6C3D4156C05B74E3B5C049F798B00DC6342B70 Certificate serial: 7B33E388F1B546AB2AE54690C080262D0CDF7661 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.cer Subject info access: rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft Manifest number: 010D Signing time: Tue 05 Aug 2025 07:11:45 +0000 Manifest this update: Tue 05 Aug 2025 07:06:45 +0000 Manifest next update: Fri 08 Aug 2025 10:53:45 +0000 Files and hashes: 1: DA6C3D4156C05B74E3B5C049F798B00DC6342B70.crl (hash: DbXXWvrtTyCJtzugPSZm/kIeeS+7UdstO0m1JbLKYOU=) 2: 3130332e3234392e3232362e302f32342d3234203d3e20313531353236.roa (hash: d/FCKrPQVsgurMvNGz2oQ2iPyKXsXoRnlEaxs4nJ5ko=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.crl rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 10:53:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:33:e3:88:f1:b5:46:ab:2a:e5:46:90:c0:80:26:2d:0c:df:76:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DA6C3D4156C05B74E3B5C049F798B00DC6342B70 Validity Not Before: Aug 5 07:06:45 2025 GMT Not After : Aug 8 10:53:45 2025 GMT Subject: CN=1008B6CFB2793F765CF18B4283D5E8177EF81D46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:83:96:61:70:98:a0:e8:b5:9e:0f:e3:b1:8c: 16:c0:a4:f1:8d:7b:7d:25:9a:07:a9:64:d4:4a:f6: 3a:79:ec:28:fa:f9:e8:99:32:e0:b2:e8:94:86:3c: 64:9f:48:db:0f:b6:b7:ac:f0:7e:f9:02:00:1f:e7: 5f:cf:b2:fd:c5:c3:e9:a0:71:91:4f:31:39:9b:e1: db:91:79:16:8c:48:b5:39:9c:54:e8:05:a1:1a:4c: a8:45:7f:7d:35:e4:22:e2:a2:5b:97:f9:cd:a1:14: 43:3e:8d:7e:78:2e:09:7a:04:99:5f:75:ff:36:db: 8a:30:13:ba:e5:01:bb:6a:65:f4:6d:4c:9d:43:b7: 82:1b:46:88:91:52:46:e1:40:45:4b:af:bc:b0:3a: 0f:54:61:1f:f0:15:69:ee:e3:f3:68:c7:df:97:e8: 26:74:a6:a1:ea:48:fa:8f:2e:39:45:e9:ae:07:30: 3e:15:a4:6c:8b:d0:91:64:85:92:5f:e4:f3:f9:7f: 98:4f:10:57:c6:88:26:88:e6:8a:52:d0:91:62:85: 0d:88:b7:45:79:78:a0:a8:f1:ad:4a:38:7f:3a:90: 4b:39:05:5f:01:6e:f8:04:9b:72:48:57:b6:2b:33: f9:90:3c:c4:29:3b:7f:1d:d3:cb:0e:c3:85:dd:e7: 61:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:08:B6:CF:B2:79:3F:76:5C:F1:8B:42:83:D5:E8:17:7E:F8:1D:46 X509v3 Authority Key Identifier: keyid:DA:6C:3D:41:56:C0:5B:74:E3:B5:C0:49:F7:98:B0:0D:C6:34:2B:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e78a8b39-3ae3-4de7-9366-21f9ea04325a/0/DA6C3D4156C05B74E3B5C049F798B00DC6342B70.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 57:94:da:1a:35:03:fb:74:d0:81:04:dd:0d:66:e3:a6:97:d9: c8:86:f5:d7:5e:e8:f1:70:f0:61:ad:e9:47:19:5f:8f:de:2e: 70:f0:f5:c9:fb:84:f3:b2:f9:89:a5:24:5d:c6:4c:79:93:dc: 05:ce:9d:37:24:b1:46:37:0c:01:0a:4a:cf:aa:e5:30:aa:7c: 27:0e:7a:13:a3:dc:5d:f0:33:f5:6f:04:28:de:c0:a4:5f:6e: 07:ed:c8:2a:44:a7:93:33:4d:50:75:fe:0c:a8:ce:7d:31:35: cc:3b:6c:6f:e7:03:da:f9:4f:af:d1:2e:0e:00:5f:bf:cc:02: 01:c1:ea:31:3d:46:61:dc:be:1f:c1:91:e3:2b:3c:f9:6a:ff: 3b:4c:e6:a1:19:2b:49:7f:bf:11:9b:d0:48:f7:5e:09:31:e5: dd:9a:24:01:f8:69:49:1b:e5:cd:66:5c:cc:ec:5a:2c:38:0d: 76:4f:5f:73:ea:97:eb:62:1d:10:97:59:34:a0:85:69:98:8d: ca:ed:df:db:20:0b:40:37:ef:e8:da:e0:00:c0:83:de:59:70: 67:a0:b8:92:c8:54:dd:55:b8:04:a9:45:8e:55:72:62:36:47: a0:af:8b:bc:e6:d5:a5:1b:41:e4:41:2d:7c:62:fe:22:5c:9f: c3:57:78:0f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUezPjiPG1Rqsq5UaQwIAmLQzfdmEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREE2QzNENDE1NkMwNUI3NEUzQjVDMDQ5Rjc5OEIwMERD NjM0MkI3MDAeFw0yNTA4MDUwNzA2NDVaFw0yNTA4MDgxMDUzNDVaMDMxMTAvBgNV BAMTKDEwMDhCNkNGQjI3OTNGNzY1Q0YxOEI0MjgzRDVFODE3N0VGODFENDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAg5ZhcJig6LWeD+OxjBbApPGN e30lmgepZNRK9jp57Cj6+eiZMuCy6JSGPGSfSNsPtres8H75AgAf51/Psv3Fw+mg cZFPMTmb4duReRaMSLU5nFToBaEaTKhFf3015CLioluX+c2hFEM+jX54Lgl6BJlf df8224owE7rlAbtqZfRtTJ1Dt4IbRoiRUkbhQEVLr7ywOg9UYR/wFWnu4/Nox9+X 6CZ0pqHqSPqPLjlF6a4HMD4VpGyL0JFkhZJf5PP5f5hPEFfGiCaI5opS0JFihQ2I t0V5eKCo8a1KOH86kEs5BV8BbvgEm3JIV7YrM/mQPMQpO38d08sOw4Xd52GdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEAi2z7J5P3Zc8YtCg9XoF374HUYwHwYDVR0j BBgwFoAU2mw9QVbAW3TjtcBJ95iwDcY0K3AwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l NzhhOGIzOS0zYWUzLTRkZTctOTM2Ni0yMWY5ZWEwNDMyNWEvMC9EQTZDM0Q0MTU2 QzA1Qjc0RTNCNUMwNDlGNzk4QjAwREM2MzQyQjcwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREE2QzNENDE1NkMwNUI3NEUzQjVDMDQ5Rjc5OEIwMERDNjM0 MkI3MC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZTc4YThiMzktM2FlMy00ZGU3LTkz NjYtMjFmOWVhMDQzMjVhLzAvREE2QzNENDE1NkMwNUI3NEUzQjVDMDQ5Rjc5OEIw MERDNjM0MkI3MC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFeU2ho1A/t00IEE3Q1m46aX2ciG9dde6PFw 8GGt6UcZX4/eLnDw9cn7hPOy+YmlJF3GTHmT3AXOnTcksUY3DAEKSs+q5TCqfCcO ehOj3F3wM/VvBCjewKRfbgftyCpEp5MzTVB1/gyozn0xNcw7bG/nA9r5T6/RLg4A X7/MAgHB6jE9RmHcvh/BkeMrPPlq/ztM5qEZK0l/vxGb0Ej3Xgkx5d2aJAH4aUkb 5c1mXMzsWiw4DXZPX3Pql+tiHRCXWTSghWmYjcrt39sgC0A37+ja4ADAg95ZcGeg uJLIVN1VuASpRY5VcmI2R6Cvi7zm1aUbQeRBLXxi/iJcn8NXeA8= -----END CERTIFICATE-----Generated at Thu Aug 7 01:04:27 2025 by rpki-client