$ rpki-client -vvf repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft File: DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft (raw, json) Hash identifier: 4+xE+YOVmNWtlx0QEIhrOPOn2XVPPz8JvU7Cqf7TYz8= Subject key identifier: 84:A3:41:CC:81:96:38:50:4F:E1:D3:91:9C:BC:53:0D:81:87:93:88 Authority key identifier: DB:1E:31:B6:A9:85:67:91:C3:1B:99:A7:3C:0F:39:01:18:E5:4E:B8 Certificate issuer: /CN=DB1E31B6A9856791C31B99A73C0F390118E54EB8 Certificate serial: 6F584C8821AE8B674D8593F05B3A9EFCC4C1DDFB Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1E31B6A9856791C31B99A73C0F390118E54EB8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft Manifest number: 0169 Signing time: Fri 05 Sep 2025 00:50:35 +0000 Manifest this update: Fri 05 Sep 2025 00:45:35 +0000 Manifest next update: Mon 08 Sep 2025 12:44:35 +0000 Files and hashes: 1: DB1E31B6A9856791C31B99A73C0F390118E54EB8.crl (hash: qj6JssFV5gwnvfHAdvBa1hNjIaQuzqv7Y5L6aLoPF+w=) 2: 3130332e3136342e38332e302f32342d3234203d3e20313431393036.roa (hash: hqJzUmkGfm1tL5Cu+d0Y0jzRfSAbuU8h9B0SylrnKNo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.crl rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1E31B6A9856791C31B99A73C0F390118E54EB8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 12:44:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:58:4c:88:21:ae:8b:67:4d:85:93:f0:5b:3a:9e:fc:c4:c1:dd:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB1E31B6A9856791C31B99A73C0F390118E54EB8 Validity Not Before: Sep 5 00:45:35 2025 GMT Not After : Sep 8 12:44:35 2025 GMT Subject: CN=84A341CC819638504FE1D3919CBC530D81879388 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:2c:dd:a7:36:1c:5e:7b:06:fb:9c:9b:d9:e7: ae:80:0e:1c:bf:9c:1c:0a:78:ee:f4:3f:4d:01:c6: af:ff:6e:0f:76:22:64:b4:72:2a:e3:7b:ea:43:ff: a7:61:e6:c6:b0:6a:25:22:42:21:4d:9b:04:cf:e0: 01:98:91:9e:9d:64:36:59:7f:b0:e9:80:f2:2e:c9: 69:cd:fc:f9:44:1d:bf:4e:94:16:19:b2:fe:fe:c4: 58:52:4b:b6:ad:98:f4:32:0f:6b:13:1a:98:e6:cd: 2d:1f:2a:2c:78:de:35:a4:80:62:8d:5f:b6:5d:a7: 3a:c1:a2:d2:94:b4:b3:60:ea:7a:20:2d:03:ec:55: cc:e7:d3:f6:5d:65:a3:53:ca:43:b9:d4:ea:52:c9: ce:20:4f:53:6e:d9:6b:1b:5a:84:cf:60:8a:38:8f: f3:14:38:0a:48:6e:bf:41:02:30:80:6c:1e:84:e6: e1:cb:06:a9:ee:6b:57:e5:76:51:df:00:0a:9f:89: 39:05:a5:69:bc:78:45:b3:55:d5:a5:65:67:0d:b8: f3:a6:6c:f4:d1:83:54:76:b2:d5:04:e4:fe:c5:33: 75:ae:7f:f7:23:5d:0b:7f:77:98:22:6e:85:3d:f7: 23:48:55:90:a1:da:ac:d3:ab:b0:1a:a1:cd:62:c0: 9c:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:A3:41:CC:81:96:38:50:4F:E1:D3:91:9C:BC:53:0D:81:87:93:88 X509v3 Authority Key Identifier: keyid:DB:1E:31:B6:A9:85:67:91:C3:1B:99:A7:3C:0F:39:01:18:E5:4E:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1E31B6A9856791C31B99A73C0F390118E54EB8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3e:13:f2:b0:d1:d1:75:e3:35:7e:cb:07:da:57:7c:d5:ef:4d: 3b:2c:c1:db:6c:64:01:5e:69:0b:ee:da:d7:7d:0c:2a:e1:bb: b4:1f:84:60:9b:2d:81:ed:b7:2b:ee:f1:ca:2d:36:84:24:95: 63:19:2e:6f:c3:87:73:d5:80:b2:8c:27:eb:d1:4d:b7:1c:c2: 68:0d:78:d0:57:b8:c0:61:d6:aa:ba:63:66:ac:77:7d:9a:61: 6c:26:03:23:8c:a1:fd:06:24:22:c4:38:66:e2:b2:d5:f1:bf: ae:58:01:c9:86:5f:6c:c4:02:c1:c1:4a:1a:e6:68:68:49:e5: bd:93:87:38:b3:0c:a8:ee:0f:49:1c:2d:71:aa:cd:40:98:5c: 38:1b:11:03:ba:28:68:1b:0f:fa:47:35:41:50:e2:b8:ca:33: eb:b8:b1:84:09:72:a8:26:18:14:ad:b8:1d:8b:0a:0c:8e:78: 1e:95:92:c7:bd:c2:ea:42:a7:0d:db:13:d8:65:b2:a9:97:46: af:67:8c:54:b9:f0:cb:79:81:0d:bf:d2:1a:0d:a2:33:65:8d: 2a:6c:17:76:ec:c1:bd:3f:e3:51:93:3e:a3:05:82:65:1a:be: e5:c0:1c:a5:e9:64:c8:f1:fe:1e:18:00:c9:bf:76:47:9e:8b: 44:fc:d7:d2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUb1hMiCGui2dNhZPwWzqe/MTB3fswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIxRTMxQjZBOTg1Njc5MUMzMUI5OUE3M0MwRjM5MDEx OEU1NEVCODAeFw0yNTA5MDUwMDQ1MzVaFw0yNTA5MDgxMjQ0MzVaMDMxMTAvBgNV BAMTKDg0QTM0MUNDODE5NjM4NTA0RkUxRDM5MTlDQkM1MzBEODE4NzkzODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD1LN2nNhxeewb7nJvZ566ADhy/ nBwKeO70P00Bxq//bg92ImS0cirje+pD/6dh5sawaiUiQiFNmwTP4AGYkZ6dZDZZ f7DpgPIuyWnN/PlEHb9OlBYZsv7+xFhSS7atmPQyD2sTGpjmzS0fKix43jWkgGKN X7ZdpzrBotKUtLNg6nogLQPsVczn0/ZdZaNTykO51OpSyc4gT1Nu2WsbWoTPYIo4 j/MUOApIbr9BAjCAbB6E5uHLBqnua1fldlHfAAqfiTkFpWm8eEWzVdWlZWcNuPOm bPTRg1R2stUE5P7FM3Wuf/cjXQt/d5giboU99yNIVZCh2qzTq7Aaoc1iwJxdAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUhKNBzIGWOFBP4dORnLxTDYGHk4gwHwYDVR0j BBgwFoAU2x4xtqmFZ5HDG5mnPA85ARjlTrgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTE4ZjhhMC05M2FlLTQzNTktOGE1ZC0xY2E2NzhiZTU2NjgvMC9EQjFFMzFCNkE5 ODU2NzkxQzMxQjk5QTczQzBGMzkwMTE4RTU0RUI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREIxRTMxQjZBOTg1Njc5MUMzMUI5OUE3M0MwRjM5MDExOEU1 NEVCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmExOGY4YTAtOTNhZS00MzU5LThh NWQtMWNhNjc4YmU1NjY4LzAvREIxRTMxQjZBOTg1Njc5MUMzMUI5OUE3M0MwRjM5 MDExOEU1NEVCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD4T8rDR0XXjNX7LB9pXfNXvTTsswdtsZAFe aQvu2td9DCrhu7QfhGCbLYHttyvu8cotNoQklWMZLm/Dh3PVgLKMJ+vRTbccwmgN eNBXuMBh1qq6Y2asd32aYWwmAyOMof0GJCLEOGbistXxv65YAcmGX2zEAsHBShrm aGhJ5b2ThzizDKjuD0kcLXGqzUCYXDgbEQO6KGgbD/pHNUFQ4rjKM+u4sYQJcqgm GBStuB2LCgyOeB6Vkse9wupCpw3bE9hlsqmXRq9njFS58Mt5gQ2/0hoNojNljSps F3bswb0/41GTPqMFgmUavuXAHKXpZMjx/h4YAMm/dkeei0T819I= -----END CERTIFICATE-----Generated at Sun Sep 7 14:02:16 2025 by rpki-client