$ rpki-client -vvf repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft File: DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft (raw, json) Hash identifier: 9N2H5aIC6Nh/Tvr9XUATAzqsjFJMCPPjjaTcNxtfoeU= Subject key identifier: 43:29:D0:D4:8B:1E:63:E2:1F:24:17:C5:F8:57:F6:53:86:FB:1F:A7 Authority key identifier: DB:F7:1D:6F:8C:24:BD:B8:0D:69:2B:E8:6D:6F:7A:D3:95:1B:6C:EE Certificate issuer: /CN=DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE Certificate serial: 5CB0B770A01FB0542D9035C01A7B75E9CBDB591D Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft Manifest number: 59 Signing time: Sat 19 Jul 2025 18:51:42 +0000 Manifest this update: Sat 19 Jul 2025 18:46:42 +0000 Manifest next update: Wed 23 Jul 2025 04:04:42 +0000 Files and hashes: 1: DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.crl (hash: WBEtCoDYpPBfkFjHSdOgFUdfTunLQXmTzaV4UwTzOGU=) 2: 3130332e3131352e3130342e302f32342d3234203d3e20313337333631.roa (hash: 6mL7Avaab4glDlpMGnON/Jhq6VFk/42559+PiNPAoXE=) 3: 323030313a6466353a323730303a3a2f34382d3438203d3e20313337333631.roa (hash: lAwEnKyw5OHxCplSawk5HVEotvU+5HwJxxtoSxrjtdo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.crl rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 04:04:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:b0:b7:70:a0:1f:b0:54:2d:90:35:c0:1a:7b:75:e9:cb:db:59:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE Validity Not Before: Jul 19 18:46:42 2025 GMT Not After : Jul 23 04:04:42 2025 GMT Subject: CN=4329D0D48B1E63E21F2417C5F857F65386FB1FA7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f2:bd:66:a5:11:ef:b3:a7:53:21:6e:c0:9f:68: 83:b6:bd:6c:e5:b6:11:a0:23:ba:27:1a:15:dd:a0: 5d:8c:ae:4c:f4:06:17:de:a4:1f:ac:3b:16:ae:18: c5:88:44:4d:a9:be:53:bc:96:cc:80:db:a6:94:f1: 62:f5:e1:0b:b7:4f:ec:7c:24:96:70:ec:5e:a4:2a: 2d:71:d4:28:bd:a1:48:7a:a5:7f:9e:c4:39:3d:e1: 99:b1:a5:3a:39:a6:69:7f:82:a6:d5:4f:a8:26:c6: 79:f2:c1:3c:12:6b:13:18:49:0e:8e:56:f9:8d:fa: 2f:44:7c:21:96:b6:81:5e:89:f4:dd:c9:0c:82:d0: ab:cf:bc:d5:2c:07:bf:2b:74:35:d5:77:47:18:2b: e0:8f:aa:6c:38:21:84:ca:31:21:da:59:43:c2:2f: 51:63:4d:f3:30:36:a4:1c:2b:e4:5e:81:c5:65:ec: 0f:9d:8f:31:5f:4f:2e:a5:d6:01:8c:57:91:69:54: 28:4c:1d:03:4a:69:d1:1f:a6:26:bb:bf:af:c1:32: d5:2d:cc:01:1d:cc:6d:2c:0f:6d:6e:c5:d4:13:7f: 30:26:be:65:9d:52:60:56:4a:23:62:26:b8:42:bc: 42:8f:4f:af:87:1e:99:fa:57:7d:ac:fa:78:5d:97: ce:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:29:D0:D4:8B:1E:63:E2:1F:24:17:C5:F8:57:F6:53:86:FB:1F:A7 X509v3 Authority Key Identifier: keyid:DB:F7:1D:6F:8C:24:BD:B8:0D:69:2B:E8:6D:6F:7A:D3:95:1B:6C:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:b9:ff:7d:20:db:7e:1b:41:c1:2c:a1:48:6c:75:2f:f8:7e: 61:a7:3e:0c:04:c2:46:b1:b4:66:3a:f8:2b:91:e5:88:b0:d1: 6d:36:6d:fd:f3:90:7b:aa:04:5b:0e:f9:5c:80:76:d1:6d:f8: 0c:26:81:ee:0e:a4:1f:43:74:a5:54:64:ce:7c:ae:30:03:e7: 93:3e:25:2e:3b:00:11:1a:d6:0a:a9:3a:43:2a:89:0b:f8:ab: f2:99:fc:82:28:7c:12:c1:c3:81:19:9a:07:13:7b:6b:e1:56: eb:2e:6a:11:30:43:29:4c:4d:f6:94:11:87:28:10:e8:eb:7c: ec:09:c1:f5:76:43:bb:15:52:d1:63:74:8c:8c:90:03:9d:ac: fe:fe:02:bd:e6:b2:e2:0b:e6:ab:27:4e:68:92:ba:28:96:ca: 58:96:1e:bf:25:3a:08:77:b4:91:1c:df:36:46:ce:ec:17:7b: 07:f8:b9:06:6d:2c:99:1e:e7:7c:e4:2a:7e:d7:a6:fd:da:8c: 6d:70:6f:49:1d:c6:64:3f:8d:5e:59:55:bb:e0:27:6f:96:f3: 9d:83:a9:43:bf:d7:81:20:dc:bf:06:be:8b:8f:9c:dd:7e:34: ae:07:0b:7c:11:87:2d:86:e9:52:70:73:6a:64:b9:d2:b3:f5: d0:8f:a5:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXLC3cKAfsFQtkDXAGnt16cvbWR0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJGNzFENkY4QzI0QkRCODBENjkyQkU4NkQ2RjdBRDM5 NTFCNkNFRTAeFw0yNTA3MTkxODQ2NDJaFw0yNTA3MjMwNDA0NDJaMDMxMTAvBgNV BAMTKDQzMjlEMEQ0OEIxRTYzRTIxRjI0MTdDNUY4NTdGNjUzODZGQjFGQTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDyvWalEe+zp1MhbsCfaIO2vWzl thGgI7onGhXdoF2Mrkz0BhfepB+sOxauGMWIRE2pvlO8lsyA26aU8WL14Qu3T+x8 JJZw7F6kKi1x1Ci9oUh6pX+exDk94ZmxpTo5pml/gqbVT6gmxnnywTwSaxMYSQ6O VvmN+i9EfCGWtoFeifTdyQyC0KvPvNUsB78rdDXVd0cYK+CPqmw4IYTKMSHaWUPC L1FjTfMwNqQcK+RegcVl7A+djzFfTy6l1gGMV5FpVChMHQNKadEfpia7v6/BMtUt zAEdzG0sD21uxdQTfzAmvmWdUmBWSiNiJrhCvEKPT6+HHpn6V32s+nhdl86fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUQynQ1IseY+IfJBfF+Ff2U4b7H6cwHwYDVR0j BBgwFoAU2/cdb4wkvbgNaSvobW9605UbbO4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MzJjYWUzZi1iMzI5LTQ0MWItOTdmYy01YmI5ZmNjMDUxZDIvMC9EQkY3MUQ2RjhD MjRCREI4MEQ2OTJCRTg2RDZGN0FEMzk1MUI2Q0VFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREJGNzFENkY4QzI0QkRCODBENjkyQkU4NkQ2RjdBRDM5NTFC NkNFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDMyY2FlM2YtYjMyOS00NDFiLTk3 ZmMtNWJiOWZjYzA1MWQyLzAvREJGNzFENkY4QzI0QkRCODBENjkyQkU4NkQ2RjdB RDM5NTFCNkNFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAH65/30g234bQcEsoUhsdS/4fmGnPgwEwkax tGY6+CuR5Yiw0W02bf3zkHuqBFsO+VyAdtFt+Awmge4OpB9DdKVUZM58rjAD55M+ JS47ABEa1gqpOkMqiQv4q/KZ/IIofBLBw4EZmgcTe2vhVusuahEwQylMTfaUEYco EOjrfOwJwfV2Q7sVUtFjdIyMkAOdrP7+Ar3msuIL5qsnTmiSuiiWyliWHr8lOgh3 tJEc3zZGzuwXewf4uQZtLJke53zkKn7Xpv3ajG1wb0kdxmQ/jV5ZVbvgJ2+W852D qUO/14Eg3L8GvouPnN1+NK4HC3wRhy2G6VJwc2pkudKz9dCPpY4= -----END CERTIFICATE-----Generated at Mon Jul 21 07:25:03 2025 by rpki-client