$ rpki-client -vvf repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.mft File: DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.mft (raw, json) Hash identifier: vMrkoFq3ihtds4m+Id3YKZDQOHJPJdojIFzpyN69b2s= Subject key identifier: DC:DC:CD:9F:F1:61:E6:4E:3F:48:79:58:5A:D7:71:11:1E:D8:2B:C2 Authority key identifier: DB:6A:89:80:C5:0F:21:0C:80:41:A2:10:10:E6:DB:F1:0F:C7:C0:DF Certificate issuer: /CN=DB6A8980C50F210C8041A21010E6DBF10FC7C0DF Certificate serial: 7F68C91510DE7992738B238BDFFDD158C7184ABC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.mft Manifest number: C0 Signing time: Mon 20 Oct 2025 22:21:55 +0000 Manifest this update: Mon 20 Oct 2025 22:16:55 +0000 Manifest next update: Thu 23 Oct 2025 22:53:55 +0000 Files and hashes: 1: 3136302e32352e35332e302f32342d3234203d3e20313533303738.roa (hash: idjxpfeAxHssuGIMoqlSNQnvrimnNEAu/Mw7vVOi7mA=) 2: DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.crl (hash: tpySnkdzefld9FcJ5KpySMFF57APOca/K7XCG+NKa8E=) 3: 3136302e32352e35322e302f32342d3234203d3e20313533303738.roa (hash: ZYpQlmxLS5aJFefjxbbBQvH2zXoYQl6ndeOBHWuaRz8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.crl rsync://repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 03:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:68:c9:15:10:de:79:92:73:8b:23:8b:df:fd:d1:58:c7:18:4a:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB6A8980C50F210C8041A21010E6DBF10FC7C0DF Validity Not Before: Oct 20 22:16:55 2025 GMT Not After : Oct 23 22:53:55 2025 GMT Subject: CN=DCDCCD9FF161E64E3F4879585AD771111ED82BC2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:81:2a:cd:e5:6f:78:a9:a1:5b:75:76:30:21: fd:3a:88:56:68:8e:90:1c:87:8f:b0:5c:8b:ec:02: 3d:2b:8c:99:f7:58:44:f1:56:82:fb:db:e7:d3:21: a6:42:7e:62:a8:6e:46:f4:0c:b7:78:1f:cf:97:73: e7:a0:99:7b:9b:b1:a5:4a:bc:51:c9:fa:96:cc:1a: ca:64:b6:68:47:48:de:de:1b:5c:11:d9:a2:79:86: c0:f3:a3:3d:2d:a8:07:6d:3a:1b:01:6c:ab:54:86: 14:82:d3:a0:ba:5d:3b:7c:e2:74:87:eb:af:f4:ec: e2:36:da:75:c5:12:7f:c1:1f:6f:1c:39:36:19:74: d5:c0:76:80:32:34:84:a5:64:f6:3b:08:cb:08:6f: 24:9c:4d:43:b7:90:e0:23:0e:7e:c7:83:a5:83:75: 99:52:a2:ea:1b:a6:5c:fb:d7:74:59:c5:fd:62:a2: fa:a3:9e:94:2b:aa:99:e4:23:3e:eb:ee:7d:be:e7: 5d:54:e1:8d:4b:05:f8:04:39:64:db:12:78:fd:62: f4:ce:98:43:68:d2:04:c4:b8:1d:15:54:a9:df:12: a8:15:f9:de:62:a1:6b:e2:55:d5:7a:fd:67:05:28: b2:ed:55:57:f8:d9:a3:e9:3d:3f:bd:59:7a:ab:02: c2:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:DC:CD:9F:F1:61:E6:4E:3F:48:79:58:5A:D7:71:11:1E:D8:2B:C2 X509v3 Authority Key Identifier: keyid:DB:6A:89:80:C5:0F:21:0C:80:41:A2:10:10:E6:DB:F1:0F:C7:C0:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:a0:0d:61:12:e8:21:27:b2:86:41:36:52:a6:44:75:48:6b: 37:38:3a:ce:1d:ab:35:d4:03:0f:26:88:72:fa:96:19:8c:33: 9e:68:da:f0:44:c7:0f:2b:bc:f6:81:2a:36:92:9b:28:be:d5: 9b:b7:ad:f3:bb:7c:ce:3c:bf:30:94:60:34:d4:ef:51:30:ce: 69:47:f4:ad:d5:6d:51:34:c2:bf:b9:4d:b8:99:c0:68:22:29: cc:e8:bf:64:87:bb:be:f0:cd:b7:1f:64:89:d2:64:19:32:ed: e8:3b:5c:78:16:2d:b5:15:86:c0:3f:76:25:4e:40:a0:21:39: a1:d9:ec:dc:21:0c:e2:74:16:77:84:63:b2:05:0f:5b:fc:ca: c2:d5:b4:e4:4d:1a:ee:5b:fc:9e:86:1e:31:51:2d:37:30:8a: 3d:55:0b:71:f1:3b:53:1e:ee:29:01:6c:8e:a4:31:29:a4:34: 3d:e4:d1:bb:88:26:ea:5d:c1:30:94:d3:00:7a:16:f8:f2:32: 49:7f:6b:e3:54:e8:dd:db:03:9e:57:ed:dd:00:13:fe:bf:14: 42:0e:dc:92:f2:91:4d:64:fb:65:52:39:ac:4d:14:f3:9e:f1: 44:88:4d:2e:a4:a8:c4:44:fa:01:cf:46:cb:f1:f2:b1:b4:95: b0:a1:0c:93 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUf2jJFRDeeZJziyOL3/3RWMcYSrwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI2QTg5ODBDNTBGMjEwQzgwNDFBMjEwMTBFNkRCRjEw RkM3QzBERjAeFw0yNTEwMjAyMjE2NTVaFw0yNTEwMjMyMjUzNTVaMDMxMTAvBgNV BAMTKERDRENDRDlGRjE2MUU2NEUzRjQ4Nzk1ODVBRDc3MTExMUVEODJCQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxgSrN5W94qaFbdXYwIf06iFZo jpAch4+wXIvsAj0rjJn3WETxVoL72+fTIaZCfmKobkb0DLd4H8+Xc+egmXubsaVK vFHJ+pbMGspktmhHSN7eG1wR2aJ5hsDzoz0tqAdtOhsBbKtUhhSC06C6XTt84nSH 66/07OI22nXFEn/BH28cOTYZdNXAdoAyNISlZPY7CMsIbyScTUO3kOAjDn7Hg6WD dZlSouobplz713RZxf1iovqjnpQrqpnkIz7r7n2+511U4Y1LBfgEOWTbEnj9YvTO mENo0gTEuB0VVKnfEqgV+d5ioWviVdV6/WcFKLLtVVf42aPpPT+9WXqrAsKPAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU3NzNn/Fh5k4/SHlYWtdxER7YK8IwHwYDVR0j BBgwFoAU22qJgMUPIQyAQaIQEObb8Q/HwN8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 M2IxNzg1Ny1iZTNkLTQxMzItOGYxOS0xMDgzNmY0MDg1NDYvMC9EQjZBODk4MEM1 MEYyMTBDODA0MUEyMTAxMEU2REJGMTBGQzdDMERGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvREI2QTg5ODBDNTBGMjEwQzgwNDFBMjEwMTBFNkRCRjEwRkM3 QzBERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjNiMTc4NTctYmUzZC00MTMyLThm MTktMTA4MzZmNDA4NTQ2LzAvREI2QTg5ODBDNTBGMjEwQzgwNDFBMjEwMTBFNkRC RjEwRkM3QzBERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIKgDWES6CEnsoZBNlKmRHVIazc4Os4dqzXU Aw8miHL6lhmMM55o2vBExw8rvPaBKjaSmyi+1Zu3rfO7fM48vzCUYDTU71EwzmlH 9K3VbVE0wr+5TbiZwGgiKczov2SHu77wzbcfZInSZBky7eg7XHgWLbUVhsA/diVO QKAhOaHZ7NwhDOJ0FneEY7IFD1v8ysLVtORNGu5b/J6GHjFRLTcwij1VC3HxO1Me 7ikBbI6kMSmkND3k0buIJupdwTCU0wB6FvjyMkl/a+NU6N3bA55X7d0AE/6/FEIO 3JLykU1k+2VSOaxNFPOe8USITS6kqMRE+gHPRsvx8rG0lbChDJM= -----END CERTIFICATE-----Generated at Tue Oct 21 02:23:13 2025 by rpki-client