$ rpki-client -vvf repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft File: DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft (raw, json) Hash identifier: Ta85cOWMD78UhtW32g3THu5ViLqQxHuPXF8aQLaPhZQ= Subject key identifier: 49:D9:69:B0:64:7E:66:09:B5:63:82:5F:41:FC:EC:24:7F:02:96:CF Authority key identifier: DB:1E:31:B6:A9:85:67:91:C3:1B:99:A7:3C:0F:39:01:18:E5:4E:B8 Certificate issuer: /CN=DB1E31B6A9856791C31B99A73C0F390118E54EB8 Certificate serial: 6B9789BD87FB0104EB516777DC4524F06479B412 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1E31B6A9856791C31B99A73C0F390118E54EB8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft Manifest number: 013F Signing time: Sun 01 Jun 2025 16:40:34 +0000 Manifest this update: Sun 01 Jun 2025 16:35:34 +0000 Manifest next update: Thu 05 Jun 2025 03:53:34 +0000 Files and hashes: 1: 3130332e3136342e38332e302f32342d3234203d3e20313431393036.roa (hash: hqJzUmkGfm1tL5Cu+d0Y0jzRfSAbuU8h9B0SylrnKNo=) 2: DB1E31B6A9856791C31B99A73C0F390118E54EB8.crl (hash: 98MI7PqpXNHEtWU1DGnjalCO2yDixb6/EUJzzrUSG6I=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.crl rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1E31B6A9856791C31B99A73C0F390118E54EB8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 03:53:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:97:89:bd:87:fb:01:04:eb:51:67:77:dc:45:24:f0:64:79:b4:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB1E31B6A9856791C31B99A73C0F390118E54EB8 Validity Not Before: Jun 1 16:35:34 2025 GMT Not After : Jun 5 03:53:34 2025 GMT Subject: CN=49D969B0647E6609B563825F41FCEC247F0296CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:bb:ad:e1:0b:84:85:ca:ca:96:75:b2:c3:0e: 3c:61:89:47:5e:ec:d3:c2:58:ed:e0:4e:70:b4:07: 6e:91:53:ca:66:47:63:fc:11:eb:e4:d7:1b:25:72: 6a:3d:bc:f6:fc:01:5d:7b:c3:33:1c:55:cd:a7:a3: 67:46:f6:81:8e:17:b3:a5:e3:7f:cd:a5:e8:5b:0c: 2e:27:81:97:3f:f8:44:73:5f:60:8b:06:0a:bb:fc: 23:32:38:97:93:6e:59:f6:eb:5e:d7:2a:cb:88:4a: d0:64:b1:e5:18:30:2c:86:92:03:d2:97:e1:6b:45: 3a:69:33:06:db:1a:d0:bb:5e:23:3d:68:ca:c5:07: 73:8c:ac:49:19:95:87:26:5b:55:a1:43:af:93:bd: f6:92:b7:92:2f:a1:9e:58:2e:c2:d1:e1:46:f7:d4: 81:b6:e2:5e:ab:d7:dc:38:3b:52:d8:20:78:a5:ed: 84:f7:3e:54:de:90:3f:46:1d:f9:8a:f3:9d:fe:6f: 23:f7:d8:8c:84:96:7a:c1:7e:b2:84:7a:36:7b:61: 9f:8e:b3:6c:83:99:7c:52:da:83:47:e8:ab:cb:8a: 42:33:28:1f:bc:ec:9b:7d:1c:6d:63:74:b4:a8:68: 4c:cf:c6:1f:a0:f4:ba:c6:7d:0f:ef:ae:ba:01:8f: a3:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 49:D9:69:B0:64:7E:66:09:B5:63:82:5F:41:FC:EC:24:7F:02:96:CF X509v3 Authority Key Identifier: keyid:DB:1E:31:B6:A9:85:67:91:C3:1B:99:A7:3C:0F:39:01:18:E5:4E:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1E31B6A9856791C31B99A73C0F390118E54EB8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:13:78:e7:88:48:2c:33:91:36:4a:9f:27:64:bb:37:28:3d: 5f:83:be:60:42:e6:c2:1f:11:f2:84:b7:2c:35:22:c7:28:37: 25:64:00:8d:6b:f3:5d:a0:74:d9:79:6b:62:9c:6e:7e:d4:07: 25:be:f9:d4:e3:70:4f:55:28:02:7a:e4:09:ac:e0:b2:91:7c: f6:69:3f:84:ea:5f:e1:72:17:bf:6f:17:3d:af:c2:6b:6b:0f: 6a:ec:07:ce:c5:16:50:a6:de:d8:ce:6c:e1:07:56:a3:13:f9: 5b:9b:ed:73:4d:fe:ff:42:0c:f9:9a:7b:01:e9:13:c0:d9:f9: 34:23:8b:d1:ec:d9:99:ec:fa:5d:8a:bc:71:78:d0:34:8b:d2: f3:4b:9b:6e:71:21:14:3b:5b:5d:5f:3f:58:7f:2d:7d:28:fa: 63:ff:c1:80:bb:af:8d:4b:13:f2:02:76:f1:b2:93:e9:f2:57: dd:11:4b:97:fa:90:38:76:bd:48:94:02:1f:85:20:f1:22:7e: 9f:70:96:79:a7:41:27:5d:5e:51:1b:6a:a6:77:c6:32:42:9e: 20:1a:c0:77:3a:a8:f9:9b:2f:6e:39:cf:4b:8f:15:50:86:21: 33:d3:2b:1b:14:2a:5b:02:5a:bb:12:59:1d:4b:79:52:65:6c: cb:1d:b1:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUa5eJvYf7AQTrUWd33EUk8GR5tBIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIxRTMxQjZBOTg1Njc5MUMzMUI5OUE3M0MwRjM5MDEx OEU1NEVCODAeFw0yNTA2MDExNjM1MzRaFw0yNTA2MDUwMzUzMzRaMDMxMTAvBgNV BAMTKDQ5RDk2OUIwNjQ3RTY2MDlCNTYzODI1RjQxRkNFQzI0N0YwMjk2Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+u63hC4SFysqWdbLDDjxhiUde 7NPCWO3gTnC0B26RU8pmR2P8Eevk1xslcmo9vPb8AV17wzMcVc2no2dG9oGOF7Ol 43/NpehbDC4ngZc/+ERzX2CLBgq7/CMyOJeTbln2617XKsuIStBkseUYMCyGkgPS l+FrRTppMwbbGtC7XiM9aMrFB3OMrEkZlYcmW1WhQ6+TvfaSt5IvoZ5YLsLR4Ub3 1IG24l6r19w4O1LYIHil7YT3PlTekD9GHfmK853+byP32IyElnrBfrKEejZ7YZ+O s2yDmXxS2oNH6KvLikIzKB+87Jt9HG1jdLSoaEzPxh+g9LrGfQ/vrroBj6PNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUSdlpsGR+Zgm1Y4JfQfzsJH8Cls8wHwYDVR0j BBgwFoAU2x4xtqmFZ5HDG5mnPA85ARjlTrgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTE4ZjhhMC05M2FlLTQzNTktOGE1ZC0xY2E2NzhiZTU2NjgvMC9EQjFFMzFCNkE5 ODU2NzkxQzMxQjk5QTczQzBGMzkwMTE4RTU0RUI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREIxRTMxQjZBOTg1Njc5MUMzMUI5OUE3M0MwRjM5MDExOEU1 NEVCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmExOGY4YTAtOTNhZS00MzU5LThh NWQtMWNhNjc4YmU1NjY4LzAvREIxRTMxQjZBOTg1Njc5MUMzMUI5OUE3M0MwRjM5 MDExOEU1NEVCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADATeOeISCwzkTZKnydkuzcoPV+DvmBC5sIf EfKEtyw1IscoNyVkAI1r812gdNl5a2Kcbn7UByW++dTjcE9VKAJ65Ams4LKRfPZp P4TqX+FyF79vFz2vwmtrD2rsB87FFlCm3tjObOEHVqMT+Vub7XNN/v9CDPmaewHp E8DZ+TQji9Hs2Zns+l2KvHF40DSL0vNLm25xIRQ7W11fP1h/LX0o+mP/wYC7r41L E/ICdvGyk+nyV90RS5f6kDh2vUiUAh+FIPEifp9wlnmnQSddXlEbaqZ3xjJCniAa wHc6qPmbL245z0uPFVCGITPTKxsUKlsCWrsSWR1LeVJlbMsdsdI= -----END CERTIFICATE-----Generated at Tue Jun 3 23:42:10 2025 by rpki-client