$ rpki-client -vvf repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft File: DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft (raw, json) Hash identifier: bVl21Oxf0qrZIYiLuubq1CJ3JuLa3N/ZUhiZXN/UJSc= Subject key identifier: 44:0D:A1:17:19:A9:58:2F:F4:45:70:B7:53:47:0D:62:24:C9:5C:34 Authority key identifier: DB:F7:1D:6F:8C:24:BD:B8:0D:69:2B:E8:6D:6F:7A:D3:95:1B:6C:EE Certificate issuer: /CN=DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE Certificate serial: 1397CAC16F0020FC1A886B7B5A964F8ADB30344B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft Manifest number: 6E Signing time: Fri 05 Sep 2025 14:41:45 +0000 Manifest this update: Fri 05 Sep 2025 14:36:45 +0000 Manifest next update: Mon 08 Sep 2025 18:42:45 +0000 Files and hashes: 1: 323030313a6466353a323730303a3a2f34382d3438203d3e20313337333631.roa (hash: lAwEnKyw5OHxCplSawk5HVEotvU+5HwJxxtoSxrjtdo=) 2: 3130332e3131352e3130342e302f32342d3234203d3e20313337333631.roa (hash: 6mL7Avaab4glDlpMGnON/Jhq6VFk/42559+PiNPAoXE=) 3: DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.crl (hash: NkHoQAHCqBTAhgam28Xx+Ar1PPUoQbRC4ABWzP0/oXY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.crl rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 18:42:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:97:ca:c1:6f:00:20:fc:1a:88:6b:7b:5a:96:4f:8a:db:30:34:4b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE Validity Not Before: Sep 5 14:36:45 2025 GMT Not After : Sep 8 18:42:45 2025 GMT Subject: CN=440DA11719A9582FF44570B753470D6224C95C34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:7f:fe:fd:70:9b:4d:05:05:a1:7a:d4:d5:be: fe:84:46:f3:1c:d9:55:96:33:34:ea:cd:1c:48:89: 5a:9f:0a:da:f9:46:ea:29:00:08:5e:cd:4f:ca:cd: 87:f2:50:ff:29:c6:af:33:3e:fa:1f:3a:e3:c1:6a: f1:da:e2:4c:52:5c:ce:0a:ed:c6:75:24:de:2d:60: 2f:f4:0e:ca:81:90:6b:c4:b2:73:fa:30:99:7b:1e: 52:fc:00:1e:46:b1:0b:83:cd:4f:f1:be:08:59:fd: 6f:b3:8f:57:b4:0e:5c:63:8a:f9:48:e2:a8:06:7e: 30:c0:9a:02:2d:92:75:91:d5:ca:84:1d:0f:78:f1: 31:9c:ab:ec:dd:a5:4e:3f:86:a7:5f:b9:cf:be:1e: 11:c7:b8:e5:bc:91:c9:61:c5:bc:ad:e1:0c:ca:3d: 3d:ee:2d:1b:c1:41:9a:f3:55:18:fa:ce:b0:9b:1d: ca:ed:80:4e:1c:8c:04:bf:12:13:cf:3f:59:c3:23: 6e:7c:ef:5c:bc:66:bf:d8:a1:c9:61:da:fd:5f:ac: 48:cf:bc:7b:a4:d7:2d:94:b8:c6:5f:b2:7d:af:38: 1d:cf:7a:30:49:5b:e5:34:d6:cf:0f:f8:38:98:f9: 4a:1c:58:01:e4:09:56:63:e7:9c:a5:c0:8e:d2:46: 26:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 44:0D:A1:17:19:A9:58:2F:F4:45:70:B7:53:47:0D:62:24:C9:5C:34 X509v3 Authority Key Identifier: keyid:DB:F7:1D:6F:8C:24:BD:B8:0D:69:2B:E8:6D:6F:7A:D3:95:1B:6C:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1e:a7:ec:65:78:dc:b8:a9:84:9f:ee:5b:57:26:3c:44:20:4d: 80:a0:4f:a9:36:ba:dc:4e:5c:cd:d9:44:49:82:3f:61:ff:a8: 56:fb:88:61:63:c3:8b:5f:e3:97:e6:82:36:5b:6b:3e:f4:30: fc:e4:1c:5a:58:76:ae:c9:94:d4:b2:42:e3:11:25:cf:40:49: 57:76:27:76:c4:8d:c4:22:27:1c:a1:e4:7d:ad:54:78:4c:98: c3:77:9a:1d:c1:17:5c:32:3d:4d:e1:a2:ff:bf:83:d2:cf:65: 74:3d:c2:6a:be:c8:47:ea:8f:45:81:d4:44:05:7e:37:3a:db: a1:d8:2a:0a:5b:89:57:e4:b1:80:14:fe:65:22:28:8f:42:b3: a7:91:0e:db:f7:e3:fd:4a:fb:d7:15:5f:0c:33:ec:43:47:eb: 67:70:71:47:44:1b:37:e2:33:d2:99:99:9f:9d:a7:92:90:4b: ee:37:a6:40:b4:04:2c:f1:e7:84:1e:af:f5:89:9c:d4:f0:9d: a7:b3:05:bb:7e:02:9e:6a:0a:3e:02:1a:d0:6e:bd:c9:ce:5b: 18:47:cb:69:8b:d5:2a:02:0b:68:7a:3a:58:70:f7:81:c8:a8: b2:17:2d:27:06:a2:b4:54:c7:e1:b8:51:43:68:95:5c:ce:34: ce:c3:02:ab -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUE5fKwW8AIPwaiGt7WpZPitswNEswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJGNzFENkY4QzI0QkRCODBENjkyQkU4NkQ2RjdBRDM5 NTFCNkNFRTAeFw0yNTA5MDUxNDM2NDVaFw0yNTA5MDgxODQyNDVaMDMxMTAvBgNV BAMTKDQ0MERBMTE3MTlBOTU4MkZGNDQ1NzBCNzUzNDcwRDYyMjRDOTVDMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCXf/79cJtNBQWhetTVvv6ERvMc 2VWWMzTqzRxIiVqfCtr5RuopAAhezU/KzYfyUP8pxq8zPvofOuPBavHa4kxSXM4K 7cZ1JN4tYC/0DsqBkGvEsnP6MJl7HlL8AB5GsQuDzU/xvghZ/W+zj1e0DlxjivlI 4qgGfjDAmgItknWR1cqEHQ948TGcq+zdpU4/hqdfuc++HhHHuOW8kclhxbyt4QzK PT3uLRvBQZrzVRj6zrCbHcrtgE4cjAS/EhPPP1nDI25871y8Zr/Yoclh2v1frEjP vHuk1y2UuMZfsn2vOB3PejBJW+U01s8P+DiY+UocWAHkCVZj55ylwI7SRiZRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQURA2hFxmpWC/0RXC3U0cNYiTJXDQwHwYDVR0j BBgwFoAU2/cdb4wkvbgNaSvobW9605UbbO4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MzJjYWUzZi1iMzI5LTQ0MWItOTdmYy01YmI5ZmNjMDUxZDIvMC9EQkY3MUQ2RjhD MjRCREI4MEQ2OTJCRTg2RDZGN0FEMzk1MUI2Q0VFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREJGNzFENkY4QzI0QkRCODBENjkyQkU4NkQ2RjdBRDM5NTFC NkNFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDMyY2FlM2YtYjMyOS00NDFiLTk3 ZmMtNWJiOWZjYzA1MWQyLzAvREJGNzFENkY4QzI0QkRCODBENjkyQkU4NkQ2RjdB RDM5NTFCNkNFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAB6n7GV43LiphJ/uW1cmPEQgTYCgT6k2utxO XM3ZREmCP2H/qFb7iGFjw4tf45fmgjZbaz70MPzkHFpYdq7JlNSyQuMRJc9ASVd2 J3bEjcQiJxyh5H2tVHhMmMN3mh3BF1wyPU3hov+/g9LPZXQ9wmq+yEfqj0WB1EQF fjc626HYKgpbiVfksYAU/mUiKI9Cs6eRDtv34/1K+9cVXwwz7ENH62dwcUdEGzfi M9KZmZ+dp5KQS+43pkC0BCzx54Qer/WJnNTwnaezBbt+Ap5qCj4CGtBuvcnOWxhH y2mL1SoCC2h6Olhw94HIqLIXLScGorRUx+G4UUNolVzONM7DAqs= -----END CERTIFICATE-----Generated at Sun Sep 7 15:34:23 2025 by rpki-client