$ rpki-client -vvf repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft File: DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft (raw, json) Hash identifier: /MSOOFqQqqtlv5UbkJ4ijVbsA9nCnQfr/A91BDKSLcA= Subject key identifier: 0A:BD:57:A7:0C:2B:51:63:00:17:0C:1B:D2:D6:64:86:2A:05:61:16 Authority key identifier: DB:6B:AB:95:61:4F:69:81:1F:2A:E9:B4:83:73:E7:9D:2D:C2:D7:F3 Certificate issuer: /CN=DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3 Certificate serial: 23B5E2C8782FBF138A60622ABA1A94922A682F67 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft Manifest number: 04F2 Signing time: Sun 20 Jul 2025 11:31:35 +0000 Manifest this update: Sun 20 Jul 2025 11:26:35 +0000 Manifest next update: Wed 23 Jul 2025 19:20:35 +0000 Files and hashes: 1: 3130332e3131362e3231362e302f32342d3234203d3e20313337333636.roa (hash: iDwSin9srOGKT5atOmt0iLuShHzndQDwuU2x/RU2cYM=) 2: 3130332e3131362e3231392e302f32342d3234203d3e20313337333637.roa (hash: 7MfETz0OOU0/EW0Af0KTT2gYnfzpkWj/UcRR+LXANfU=) 3: 3130332e3131362e3231372e302f32342d3234203d3e20313337333636.roa (hash: yangIWxRfp5g4q3g5tzxpJf4/ZTvbChL+OGjEKq0xNw=) 4: 3130332e3131362e3231382e302f32342d3234203d3e20313337333636.roa (hash: SgJaLekQ3Q9cVNBqu5Sas48wyzpxdaLZB6LIMnNqJ+c=) 5: DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl (hash: BFxXkQqvX0ThyoFYhf5e8Y22e4g18JfOLJLCak4qYUs=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Jul 2025 19:20:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:b5:e2:c8:78:2f:bf:13:8a:60:62:2a:ba:1a:94:92:2a:68:2f:67 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3 Validity Not Before: Jul 20 11:26:35 2025 GMT Not After : Jul 23 19:20:35 2025 GMT Subject: CN=0ABD57A70C2B516300170C1BD2D664862A056116 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:35:4d:18:cb:f1:eb:f7:c9:5b:f6:85:06:8b: 3f:9c:e4:ab:57:91:83:a7:c2:0c:1d:a5:9b:9a:fa: b4:ae:28:2e:0c:35:08:98:7f:ac:95:e8:05:7f:ac: ba:11:08:ee:ba:54:ef:4c:14:b2:73:34:d1:da:b1: ef:79:c6:c4:d0:9b:1c:df:e3:6e:3b:a1:43:bf:33: 66:ae:9a:07:33:93:6e:6a:f8:f4:82:7c:4a:0a:0e: 1d:c0:cd:aa:d3:b2:c6:8b:c3:c8:19:4a:81:cc:60: ed:cf:cb:77:2e:37:4a:12:9c:22:9a:4d:1a:21:89: 8c:05:ed:4f:71:9c:7b:1a:0c:f8:bf:f3:16:5d:82: 23:14:cb:88:ec:e3:78:1b:07:5e:05:17:51:e8:4d: 23:39:e6:c5:0c:9f:6e:49:78:84:de:83:2b:9e:ac: 31:f8:15:f9:d0:98:f3:9c:49:0d:1b:ab:1b:bf:3c: 88:04:87:e4:63:c3:5d:73:1e:76:39:41:ef:4a:8a: 4d:72:81:54:4e:97:2c:5b:99:f1:3b:73:57:a9:98: 14:c0:fb:72:82:9c:a1:c7:9e:60:df:01:14:8b:cd: 63:7e:63:a3:3f:9a:98:56:c1:56:d3:aa:32:30:0c: c9:10:3b:36:3b:7c:b7:3d:90:07:b1:56:88:5c:4f: d3:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:BD:57:A7:0C:2B:51:63:00:17:0C:1B:D2:D6:64:86:2A:05:61:16 X509v3 Authority Key Identifier: keyid:DB:6B:AB:95:61:4F:69:81:1F:2A:E9:B4:83:73:E7:9D:2D:C2:D7:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:75:31:61:60:70:a0:e4:ef:21:74:c7:75:32:de:ac:d5:6a: 62:05:47:03:7c:ab:34:3a:c4:b5:5c:e7:e6:83:45:55:35:5b: 43:eb:4f:2a:7f:9d:2f:d9:34:d0:d0:c6:c0:81:41:d3:a3:45: 4b:5b:02:71:3c:78:c1:f4:23:23:ed:0a:9f:8c:05:32:ca:48: 6c:0c:fe:d7:b3:34:56:17:f8:11:5d:bc:ed:d7:b0:2f:f1:0c: 8f:5e:8b:20:75:b1:26:af:a6:b6:0f:58:e7:c2:9c:e1:8d:1d: 37:2b:a6:4f:af:0c:80:9c:07:bf:95:8a:40:6f:e9:8c:8a:8d: b5:5b:ce:77:c5:e1:4f:8b:9e:55:94:02:ff:1e:aa:0c:f0:78: f2:3f:ad:1c:58:f9:e1:2c:5c:cf:f3:da:a1:71:8b:10:99:b4: 96:f8:5d:9c:39:54:39:86:a7:a8:86:6c:8a:ca:bb:b1:36:c7: b7:3d:dc:f0:4a:df:14:c7:e4:86:ac:f0:1d:6f:6b:08:d1:8d: 2c:00:0b:4a:fa:69:b1:bd:f6:81:7f:18:d9:ee:aa:6b:69:af: 20:68:9c:ef:bb:fa:b6:da:ed:16:0f:12:aa:9a:80:d4:3d:a4: de:08:b2:fc:54:8f:b0:ac:34:aa:1c:81:0b:69:3b:97:96:38: 17:dc:92:51 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUI7XiyHgvvxOKYGIquhqUkipoL2cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI2QkFCOTU2MTRGNjk4MTFGMkFFOUI0ODM3M0U3OUQy REMyRDdGMzAeFw0yNTA3MjAxMTI2MzVaFw0yNTA3MjMxOTIwMzVaMDMxMTAvBgNV BAMTKDBBQkQ1N0E3MEMyQjUxNjMwMDE3MEMxQkQyRDY2NDg2MkEwNTYxMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/NU0Yy/Hr98lb9oUGiz+c5KtX kYOnwgwdpZua+rSuKC4MNQiYf6yV6AV/rLoRCO66VO9MFLJzNNHase95xsTQmxzf 4247oUO/M2aumgczk25q+PSCfEoKDh3AzarTssaLw8gZSoHMYO3Py3cuN0oSnCKa TRohiYwF7U9xnHsaDPi/8xZdgiMUy4js43gbB14FF1HoTSM55sUMn25JeITegyue rDH4FfnQmPOcSQ0bqxu/PIgEh+Rjw11zHnY5Qe9Kik1ygVROlyxbmfE7c1epmBTA +3KCnKHHnmDfARSLzWN+Y6M/mphWwVbTqjIwDMkQOzY7fLc9kAexVohcT9PPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUCr1XpwwrUWMAFwwb0tZkhioFYRYwHwYDVR0j BBgwFoAU22urlWFPaYEfKum0g3PnnS3C1/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NmQ3MjBkNS1iN2Q0LTQzOTUtYTA2Yi0xOTkwNGE2M2Y5NDgvMC9EQjZCQUI5NTYx NEY2OTgxMUYyQUU5QjQ4MzczRTc5RDJEQzJEN0YzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREI2QkFCOTU2MTRGNjk4MTFGMkFFOUI0ODM3M0U3OUQyREMy RDdGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODZkNzIwZDUtYjdkNC00Mzk1LWEw NmItMTk5MDRhNjNmOTQ4LzAvREI2QkFCOTU2MTRGNjk4MTFGMkFFOUI0ODM3M0U3 OUQyREMyRDdGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABl1MWFgcKDk7yF0x3Uy3qzVamIFRwN8qzQ6 xLVc5+aDRVU1W0PrTyp/nS/ZNNDQxsCBQdOjRUtbAnE8eMH0IyPtCp+MBTLKSGwM /tezNFYX+BFdvO3XsC/xDI9eiyB1sSavprYPWOfCnOGNHTcrpk+vDICcB7+VikBv 6YyKjbVbznfF4U+LnlWUAv8eqgzwePI/rRxY+eEsXM/z2qFxixCZtJb4XZw5VDmG p6iGbIrKu7E2x7c93PBK3xTH5Ias8B1vawjRjSwAC0r6abG99oF/GNnuqmtpryBo nO+7+rba7RYPEqqagNQ9pN4IsvxUj7CsNKocgQtpO5eWOBfcklE= -----END CERTIFICATE-----Generated at Sun Jul 20 21:56:32 2025 by rpki-client