$ rpki-client -vvf repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.mft File: DB03D7B542C60D3D72565734C86589420DF070A0.mft (raw, json) Hash identifier: gQgwU++Anc0OOURwlSL3WnGNBUmVfD+SHvhN90h8l6U= Subject key identifier: BF:22:BD:35:64:6F:AF:B3:E1:62:71:A6:27:1A:C2:89:A1:0E:ED:9C Authority key identifier: DB:03:D7:B5:42:C6:0D:3D:72:56:57:34:C8:65:89:42:0D:F0:70:A0 Certificate issuer: /CN=DB03D7B542C60D3D72565734C86589420DF070A0 Certificate serial: 53F46586A8759FFAF626C7098C1351B0E27B9CCB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB03D7B542C60D3D72565734C86589420DF070A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.mft Manifest number: 021D Signing time: Fri 05 Sep 2025 23:02:12 +0000 Manifest this update: Fri 05 Sep 2025 22:57:12 +0000 Manifest next update: Tue 09 Sep 2025 00:36:12 +0000 Files and hashes: 1: DB03D7B542C60D3D72565734C86589420DF070A0.crl (hash: u+4A3mAhynCjEYT3xoGTAKf1XT2ga76urEtxnqTRcjs=) 2: 3130332e3138362e3231322e302f32332d3234203d3e20313439373134.roa (hash: qTxbUW36PI+ML7M9h6pieAAtdA4D+wz75UuUpAqL/GM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.crl rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB03D7B542C60D3D72565734C86589420DF070A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 00:36:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 53:f4:65:86:a8:75:9f:fa:f6:26:c7:09:8c:13:51:b0:e2:7b:9c:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB03D7B542C60D3D72565734C86589420DF070A0 Validity Not Before: Sep 5 22:57:12 2025 GMT Not After : Sep 9 00:36:12 2025 GMT Subject: CN=BF22BD35646FAFB3E16271A6271AC289A10EED9C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:7b:d3:d1:10:36:32:8a:a7:fa:d1:63:a2:02: 6b:1c:ed:51:d3:ad:f5:d4:bb:1f:49:6b:db:67:04: 23:d7:1f:f4:8b:e4:c6:3d:b7:2c:dd:67:a5:94:76: 3f:9d:e4:4d:f6:f2:b9:3e:9f:a2:a5:15:72:f4:60: 1d:66:c1:0d:98:cc:11:b9:0d:fc:89:e8:c1:a7:ad: f8:b3:45:b0:43:7e:47:9c:d7:ab:6c:59:47:e5:96: 8d:0b:a8:1a:13:4c:a1:50:7a:7e:98:98:ad:2d:d8: 6b:18:27:2f:17:0b:7f:7d:5d:1b:a4:6f:e6:c8:1d: dc:65:54:e8:c8:27:01:a9:d2:88:11:85:eb:e9:04: f3:c3:7d:d4:2e:c8:21:91:41:8e:00:eb:f0:2b:3f: 11:34:07:4f:00:1e:7d:ff:8e:2b:08:e8:b9:d9:8a: 42:03:f5:ff:a2:43:d2:e3:fe:5d:be:68:4a:8c:f5: 87:2e:38:2f:43:62:b5:85:a5:c6:05:e3:45:14:c6: f4:7a:16:86:cc:30:44:f7:7f:b3:2d:45:06:92:c0: ad:f1:04:d5:47:b3:45:f2:af:b6:19:66:ea:2a:90: d4:83:08:c9:19:a0:ca:87:b4:35:8d:a4:66:d7:c7: d5:96:b4:90:f1:aa:40:c8:31:e2:e0:be:eb:9a:54: 1b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BF:22:BD:35:64:6F:AF:B3:E1:62:71:A6:27:1A:C2:89:A1:0E:ED:9C X509v3 Authority Key Identifier: keyid:DB:03:D7:B5:42:C6:0D:3D:72:56:57:34:C8:65:89:42:0D:F0:70:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB03D7B542C60D3D72565734C86589420DF070A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:fb:cc:2c:37:2d:17:8a:ab:11:16:3b:76:90:2a:41:4e:9c: 0f:e1:b6:07:5e:5f:29:9e:f1:bf:97:ea:9c:5d:92:2e:ea:8a: 1b:7d:48:37:a8:ab:4a:8d:dc:ae:98:ba:3a:68:12:77:50:c1: 9c:db:47:94:5b:31:1a:ba:57:4f:57:20:14:00:46:41:2e:05: 88:ca:c8:0c:0e:fe:fc:ce:d2:b7:e8:bf:b4:2d:d4:3d:57:e1: 11:ba:f7:fe:a9:9f:d9:1a:40:62:14:ae:7f:cd:b1:c6:4e:2b: 3d:f0:3c:cc:a4:12:f2:5b:e6:1b:d2:d4:3d:17:8e:a3:6e:25: dc:31:a2:0d:1b:bc:3b:48:95:c8:a5:59:d6:a9:18:8a:53:3b: d5:1e:6f:5a:01:17:39:eb:fc:68:dc:ed:b7:97:b5:a5:ca:3a: b2:83:bf:27:b1:9d:0d:55:62:ab:71:d3:ee:b6:9f:b1:3c:81: 8d:ac:d1:50:9b:2f:13:51:54:d3:4a:f9:2c:e6:fa:e0:90:ca: 78:26:e4:6f:f6:60:26:f1:a1:36:a0:8b:03:ce:b2:45:49:c5: 3c:9e:5a:1f:b7:a7:6a:2e:6d:17:ca:88:19:9b:9a:13:6d:4e: f8:67:84:21:be:c3:27:a2:ff:09:a1:8d:c0:bd:23:63:f2:c0: 99:52:cf:dc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUU/Rlhqh1n/r2JscJjBNRsOJ7nMswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIwM0Q3QjU0MkM2MEQzRDcyNTY1NzM0Qzg2NTg5NDIw REYwNzBBMDAeFw0yNTA5MDUyMjU3MTJaFw0yNTA5MDkwMDM2MTJaMDMxMTAvBgNV BAMTKEJGMjJCRDM1NjQ2RkFGQjNFMTYyNzFBNjI3MUFDMjg5QTEwRUVEOUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCue9PREDYyiqf60WOiAmsc7VHT rfXUux9Ja9tnBCPXH/SL5MY9tyzdZ6WUdj+d5E328rk+n6KlFXL0YB1mwQ2YzBG5 DfyJ6MGnrfizRbBDfkec16tsWUfllo0LqBoTTKFQen6YmK0t2GsYJy8XC399XRuk b+bIHdxlVOjIJwGp0ogRhevpBPPDfdQuyCGRQY4A6/ArPxE0B08AHn3/jisI6LnZ ikID9f+iQ9Lj/l2+aEqM9YcuOC9DYrWFpcYF40UUxvR6FobMMET3f7MtRQaSwK3x BNVHs0Xyr7YZZuoqkNSDCMkZoMqHtDWNpGbXx9WWtJDxqkDIMeLgvuuaVBtZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvyK9NWRvr7PhYnGmJxrCiaEO7ZwwHwYDVR0j BBgwFoAU2wPXtULGDT1yVlc0yGWJQg3wcKAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NGYyODIzNS0wYmE4LTRlMTQtOGI4NS0yOWMzYTRhNzZlYWIvMC9EQjAzRDdCNTQy QzYwRDNENzI1NjU3MzRDODY1ODk0MjBERjA3MEEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREIwM0Q3QjU0MkM2MEQzRDcyNTY1NzM0Qzg2NTg5NDIwREYw NzBBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDRmMjgyMzUtMGJhOC00ZTE0LThi ODUtMjljM2E0YTc2ZWFiLzAvREIwM0Q3QjU0MkM2MEQzRDcyNTY1NzM0Qzg2NTg5 NDIwREYwNzBBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGL7zCw3LReKqxEWO3aQKkFOnA/htgdeXyme 8b+X6pxdki7qiht9SDeoq0qN3K6YujpoEndQwZzbR5RbMRq6V09XIBQARkEuBYjK yAwO/vzO0rfov7Qt1D1X4RG69/6pn9kaQGIUrn/NscZOKz3wPMykEvJb5hvS1D0X jqNuJdwxog0bvDtIlcilWdapGIpTO9Ueb1oBFznr/Gjc7beXtaXKOrKDvyexnQ1V Yqtx0+62n7E8gY2s0VCbLxNRVNNK+Szm+uCQyngm5G/2YCbxoTagiwPOskVJxTye Wh+3p2oubRfKiBmbmhNtTvhnhCG+wyei/wmhjcC9I2PywJlSz9w= -----END CERTIFICATE-----Generated at Sun Sep 7 15:34:16 2025 by rpki-client