$ rpki-client -vvvf rpki-rsync.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.mft File: DB6DBA346A8F823EA623FD51604DD1AD04ADF179.mft (raw, json) Hash identifier: 7YZ7R0duo1gGRDnc4xmaxuNk18pLR2q6QWGhVFUd1KU= Subject key identifier: 12:46:1B:41:95:11:F4:0B:75:E7:B0:29:45:D3:49:4A:3B:9D:E3:FE Authority key identifier: DB:6D:BA:34:6A:8F:82:3E:A6:23:FD:51:60:4D:D1:AD:04:AD:F1:79 Certificate issuer: /CN=DB6DBA346A8F823EA623FD51604DD1AD04ADF179 Certificate serial: 0A1B2CF374F8EB7D6B1384130A47C1E09878EAA8 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.mft Manifest number: A5 Signing time: Wed 02 Sep 2026 14:26:01 +0000 Manifest this update: Wed 02 Sep 2026 14:21:01 +0000 Manifest next update: Thu 03 Sep 2026 17:11:01 +0000 Files and hashes: 1: 3130332e3232362e34382e302f32322d3232203d3e203539323733.roa (hash: R4V9RaoU91VHm23qIyKQMVBSwsvtvml51U62CtUuF+k=) 2: 3130332e3232362e34382e302f32342d3234203d3e203539323733.roa (hash: 2bDh3pCy+uB3wKVcO30FUZoEqtx5NRujKUHG722pPa4=) 3: 3130332e3232362e34392e302f32342d3234203d3e203539323733.roa (hash: A/eIZCdjAjL3nC9fTPZulgiI4xnKPeqKVVCm1GsNoq0=) 4: 3130332e3232362e35312e302f32342d3234203d3e203539323733.roa (hash: FuQQoozIuhBoAt0eg75ZtwH9o1RmIcILodt9zflrFGE=) 5: DB6DBA346A8F823EA623FD51604DD1AD04ADF179.crl (hash: aI4E7jXubtKTFKRT3N4rmem9ZWePR3ocCN00SwQJ1fA=) 6: 3130332e3232362e35302e302f32342d3234203d3e203539323733.roa (hash: nAblDLxmaukKprEhKvtDu9i3L7fU/W5iCD+tV6LRDRA=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.crl rsync://rpki-rsync.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Sep 2026 17:11:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:1b:2c:f3:74:f8:eb:7d:6b:13:84:13:0a:47:c1:e0:98:78:ea:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB6DBA346A8F823EA623FD51604DD1AD04ADF179 Validity Not Before: Sep 2 14:21:01 2026 GMT Not After : Sep 3 17:11:01 2026 GMT Subject: CN=12461B419511F40B75E7B02945D3494A3B9DE3FE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:2d:42:eb:01:3a:b7:dc:7a:31:9e:95:eb:d6: da:b0:5c:b7:5f:b3:1a:5e:7f:05:2d:a6:26:f7:3a: cd:9b:ba:5f:1d:f3:22:44:49:cc:78:77:7c:b3:a3: 23:5f:73:dc:19:45:87:65:4a:6e:70:51:82:6d:d4: 94:0d:d8:ca:6b:ba:da:df:69:5e:2c:6c:e7:70:35: 01:fb:62:bc:c7:db:38:4d:36:5f:ae:2a:fc:3e:a1: 9b:f5:3c:84:91:1a:3f:e4:bc:a3:52:35:ab:f8:35: a3:4d:ef:ee:2e:ad:31:d5:dd:7d:2d:f4:fb:2e:15: 02:8f:c8:82:54:06:0c:5f:f3:48:43:7a:b3:cf:16: 0c:57:e0:6a:a3:3c:67:b6:dd:fb:67:49:37:69:76: a2:88:d7:4b:5b:21:75:3b:98:79:a2:a2:80:b0:92: 91:c3:c0:8d:6c:99:d2:44:40:ec:66:82:f2:d6:8f: 8c:4f:b9:a1:2a:2a:32:20:5f:b0:3f:2c:af:27:f8: 47:88:ba:ed:b3:a0:14:8b:c7:e9:28:46:d1:dd:d0: 98:ed:a1:6d:5d:46:43:29:73:b8:71:12:a3:c8:66: 94:ed:29:49:a6:36:15:6b:8f:c9:cd:ce:b9:13:9a: 33:2a:88:83:de:05:bc:fd:c3:fb:0b:48:80:99:75: 96:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 12:46:1B:41:95:11:F4:0B:75:E7:B0:29:45:D3:49:4A:3B:9D:E3:FE X509v3 Authority Key Identifier: keyid:DB:6D:BA:34:6A:8F:82:3E:A6:23:FD:51:60:4D:D1:AD:04:AD:F1:79 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/060ce733-77f4-4e1d-b5ec-61ede4da074d/0/DB6DBA346A8F823EA623FD51604DD1AD04ADF179.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:c6:ea:2c:3a:36:88:a6:f0:da:ec:b3:ba:60:3e:73:08:08: 7a:83:86:55:49:17:fd:b3:86:62:b7:08:6d:3c:d8:0b:f9:bc: c8:4b:e6:60:40:2a:0a:39:76:b6:4e:21:61:d8:fd:43:ca:8e: 50:c0:72:6c:78:a5:fb:3b:a1:6e:d8:1d:93:1d:b4:17:16:bf: 29:b5:22:ab:84:bb:9c:a3:a5:b4:9e:0f:b2:04:e8:f1:10:39: 24:6d:e6:f1:a0:15:55:06:95:15:a4:3f:df:37:82:21:6f:9e: 3b:dd:22:5a:5d:db:59:7d:74:49:f7:53:ff:43:fb:9d:72:87: 91:e9:50:23:52:9c:3d:65:b4:da:50:d4:09:46:22:07:59:ab: 6b:1c:6e:b4:cd:3c:5d:45:39:2c:f7:8f:0d:0d:60:13:cc:94: 4a:7e:a5:1e:0c:fd:29:fa:60:8f:48:70:82:fe:34:0e:e0:34: 2a:07:35:02:45:c5:44:75:c3:be:52:ec:c8:6c:5d:ac:8c:56: eb:7d:fc:42:c5:33:eb:28:34:3e:5e:70:4e:40:a6:b8:fa:0e: a6:c6:f2:83:80:22:72:3e:85:28:fc:7c:21:12:19:52:cb:9d: 92:d5:05:1c:a1:54:69:b3:8d:03:3a:a6:4e:2e:0c:13:41:9e: 85:92:bd:0e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUChss83T4631rE4QTCkfB4Jh46qgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI2REJBMzQ2QThGODIzRUE2MjNGRDUxNjA0REQxQUQw NEFERjE3OTAeFw0yNjA5MDIxNDIxMDFaFw0yNjA5MDMxNzExMDFaMDMxMTAvBgNV BAMTKDEyNDYxQjQxOTUxMUY0MEI3NUU3QjAyOTQ1RDM0OTRBM0I5REUzRkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvLULrATq33HoxnpXr1tqwXLdf sxpefwUtpib3Os2bul8d8yJEScx4d3yzoyNfc9wZRYdlSm5wUYJt1JQN2Mprutrf aV4sbOdwNQH7YrzH2zhNNl+uKvw+oZv1PISRGj/kvKNSNav4NaNN7+4urTHV3X0t 9PsuFQKPyIJUBgxf80hDerPPFgxX4GqjPGe23ftnSTdpdqKI10tbIXU7mHmiooCw kpHDwI1smdJEQOxmgvLWj4xPuaEqKjIgX7A/LK8n+EeIuu2zoBSLx+koRtHd0Jjt oW1dRkMpc7hxEqPIZpTtKUmmNhVrj8nNzrkTmjMqiIPeBbz9w/sLSICZdZZ3AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUEkYbQZUR9At157ApRdNJSjud4/4wHwYDVR0j BBgwFoAU2226NGqPgj6mI/1RYE3RrQSt8XkwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v MDYwY2U3MzMtNzdmNC00ZTFkLWI1ZWMtNjFlZGU0ZGEwNzRkLzAvREI2REJBMzQ2 QThGODIzRUE2MjNGRDUxNjA0REQxQUQwNEFERjE3OS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9EQjZEQkEzNDZBOEY4MjNFQTYyM0ZENTE2MDRERDFBRDA0QURG MTc5LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vMDYwY2U3MzMtNzdmNC00ZTFkLWI1 ZWMtNjFlZGU0ZGEwNzRkLzAvREI2REJBMzQ2QThGODIzRUE2MjNGRDUxNjA0REQx QUQwNEFERjE3OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAfG6iw6Noim8Nrss7pgPnMICHqDhlVJF/2z hmK3CG082Av5vMhL5mBAKgo5drZOIWHY/UPKjlDAcmx4pfs7oW7YHZMdtBcWvym1 IquEu5yjpbSeD7IE6PEQOSRt5vGgFVUGlRWkP983giFvnjvdIlpd21l9dEn3U/9D +51yh5HpUCNSnD1ltNpQ1AlGIgdZq2scbrTNPF1FOSz3jw0NYBPMlEp+pR4M/Sn6 YI9IcIL+NA7gNCoHNQJFxUR1w75S7MhsXayMVut9/ELFM+soND5ecE5Aprj6DqbG 8oOAInI+hSj8fCESGVLLnZLVBRyhVGmzjQM6pk4uDBNBnoWSvQ4= -----END CERTIFICATE-----Generated at Thu Sep 3 05:46:38 2026 by rpki-client