$ rpki-client -vvf repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft File: DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft (raw, json) Hash identifier: lg8z7ti12WFs2t0x05ivOw4+/8JCTfPHD6c7nau31DE= Subject key identifier: C1:1F:79:46:C8:61:9E:ED:5A:26:88:C1:F3:CE:6B:4E:60:AA:81:9D Authority key identifier: DB:E9:15:60:EB:E5:8F:31:F0:1F:54:3D:75:1B:03:FC:02:EA:7D:9E Certificate issuer: /CN=DBE91560EBE58F31F01F543D751B03FC02EA7D9E Certificate serial: 154C67D65FBA6BD94A8B728F6E2ED372AA8EF678 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft Manifest number: 0503 Signing time: Sun 07 Sep 2025 04:01:23 +0000 Manifest this update: Sun 07 Sep 2025 03:56:23 +0000 Manifest next update: Wed 10 Sep 2025 16:00:23 +0000 Files and hashes: 1: 3130332e3135322e37322e302f32332d3234203d3e20313430343432.roa (hash: obl90Ju8Uh49WHiF5evmIzEfZW09mIiXbUTRedxtitw=) 2: DBE91560EBE58F31F01F543D751B03FC02EA7D9E.crl (hash: oxTu4QK+JxzLOoi+an4RtzXtj0sSjAOO2kvc1y8xg1M=) 3: 323030313a6466333a666438303a3a2f34382d3438203d3e20313430343432.roa (hash: 6nfQfvYHsKjsaw/P97GpMinNY5TWkRYJKWFHck6y3/Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.crl rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 10 Sep 2025 10:23:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:4c:67:d6:5f:ba:6b:d9:4a:8b:72:8f:6e:2e:d3:72:aa:8e:f6:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBE91560EBE58F31F01F543D751B03FC02EA7D9E Validity Not Before: Sep 7 03:56:23 2025 GMT Not After : Sep 10 16:00:23 2025 GMT Subject: CN=C11F7946C8619EED5A2688C1F3CE6B4E60AA819D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:e9:6b:f3:ee:a6:f2:d8:ce:ff:0e:9e:d3:22: 1a:82:e6:6d:99:e2:4a:78:43:b7:bc:99:a0:ff:23: 47:ca:64:46:fa:df:b3:51:f3:a2:1b:8e:62:dc:29: d9:8d:93:fc:31:5b:7a:da:72:17:99:9f:27:36:0d: fc:08:7e:9a:48:ff:41:0f:76:8c:69:17:ad:61:bd: 65:f8:61:7f:64:12:59:a9:17:da:f3:30:8a:fc:b2: a5:c8:f0:7d:09:69:38:89:b7:fe:e6:d2:de:95:d5: a1:d3:ef:4f:2a:57:9c:b6:2a:35:19:46:a0:4b:77: 18:8f:bc:43:50:0d:90:77:80:bd:9c:78:e3:d2:37: bf:b7:66:53:2a:56:45:6e:14:6f:6e:e8:c5:ef:1b: 74:54:2a:31:8b:6f:2c:c6:94:aa:2c:5c:29:da:49: bb:8b:90:cc:c4:40:b6:75:6d:a9:61:bd:8a:e0:e8: d1:de:77:79:5f:d6:01:1c:16:77:5b:c8:b5:14:9c: 78:68:36:8c:5a:4f:36:0f:d5:00:f1:41:fd:df:66: b6:75:8a:48:ba:97:a2:57:ad:49:6c:c1:ca:53:10: 8b:de:cc:ce:78:28:77:ed:a1:04:5d:ab:9a:8d:37: 5d:20:0f:59:e4:50:c3:4c:9b:a5:7d:09:af:c2:e4: 37:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:1F:79:46:C8:61:9E:ED:5A:26:88:C1:F3:CE:6B:4E:60:AA:81:9D X509v3 Authority Key Identifier: keyid:DB:E9:15:60:EB:E5:8F:31:F0:1F:54:3D:75:1B:03:FC:02:EA:7D:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3f:97:63:ac:d8:b4:d8:e6:76:4a:21:9c:e8:ed:b6:7e:27:35: a1:a1:83:13:24:4f:6f:cf:98:49:f3:ad:41:fd:b8:10:91:00: 02:ca:13:aa:b6:fe:b7:75:b0:40:f7:34:08:39:eb:9d:2f:5b: 26:7a:7b:7b:38:59:82:38:99:0c:d4:1c:9e:9f:90:29:bb:4a: 83:2b:e8:86:2a:5a:83:bf:4b:79:84:a7:0b:00:c8:a8:91:86: a7:0f:65:ca:77:43:36:5d:da:fc:25:2f:58:ea:f4:74:a0:b7: 95:e0:7a:e3:1d:8a:c0:82:dd:c3:5d:df:96:cc:3d:97:9a:36: 02:6f:4b:20:2a:b7:f5:dc:25:27:8e:23:ee:cc:91:cf:a2:41: 39:a5:a6:bb:a5:3f:8f:fb:b2:60:14:61:f6:75:72:14:b0:cf: a9:96:22:62:f1:9b:c5:df:83:7e:47:0b:a3:7a:33:79:1e:3e: 93:59:2e:e0:58:e1:1b:3a:59:eb:04:d9:a9:c5:1a:d3:7e:7a: 83:f6:35:bb:b1:4a:26:e9:52:80:84:03:60:c7:ec:7a:e2:9c: ae:a4:e4:9a:b3:da:43:44:03:d8:2a:4f:50:a8:56:45:50:47: 2c:73:8b:d7:5e:14:73:ac:72:85:f1:a8:29:0c:f0:f7:7f:79: 00:3d:32:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUFUxn1l+6a9lKi3KPbi7TcqqO9ngwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJFOTE1NjBFQkU1OEYzMUYwMUY1NDNENzUxQjAzRkMw MkVBN0Q5RTAeFw0yNTA5MDcwMzU2MjNaFw0yNTA5MTAxNjAwMjNaMDMxMTAvBgNV BAMTKEMxMUY3OTQ2Qzg2MTlFRUQ1QTI2ODhDMUYzQ0U2QjRFNjBBQTgxOUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+6Wvz7qby2M7/Dp7TIhqC5m2Z 4kp4Q7e8maD/I0fKZEb637NR86IbjmLcKdmNk/wxW3racheZnyc2DfwIfppI/0EP doxpF61hvWX4YX9kElmpF9rzMIr8sqXI8H0JaTiJt/7m0t6V1aHT708qV5y2KjUZ RqBLdxiPvENQDZB3gL2ceOPSN7+3ZlMqVkVuFG9u6MXvG3RUKjGLbyzGlKosXCna SbuLkMzEQLZ1balhvYrg6NHed3lf1gEcFndbyLUUnHhoNoxaTzYP1QDxQf3fZrZ1 iki6l6JXrUlswcpTEIvezM54KHftoQRdq5qNN10gD1nkUMNMm6V9Ca/C5DdfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUwR95Rshhnu1aJojB885rTmCqgZ0wHwYDVR0j BBgwFoAU2+kVYOvljzHwH1Q9dRsD/ALqfZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NzI4Yzc3Yi0yMTAwLTRmMmEtOTBkOS0wOGM1M2U4NDFlMWIvMC9EQkU5MTU2MEVC RTU4RjMxRjAxRjU0M0Q3NTFCMDNGQzAyRUE3RDlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREJFOTE1NjBFQkU1OEYzMUYwMUY1NDNENzUxQjAzRkMwMkVB N0Q5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjcyOGM3N2ItMjEwMC00ZjJhLTkw ZDktMDhjNTNlODQxZTFiLzAvREJFOTE1NjBFQkU1OEYzMUYwMUY1NDNENzUxQjAz RkMwMkVBN0Q5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAD+XY6zYtNjmdkohnOjttn4nNaGhgxMkT2/P mEnzrUH9uBCRAALKE6q2/rd1sED3NAg5650vWyZ6e3s4WYI4mQzUHJ6fkCm7SoMr 6IYqWoO/S3mEpwsAyKiRhqcPZcp3QzZd2vwlL1jq9HSgt5XgeuMdisCC3cNd35bM PZeaNgJvSyAqt/XcJSeOI+7Mkc+iQTmlprulP4/7smAUYfZ1chSwz6mWImLxm8Xf g35HC6N6M3kePpNZLuBY4Rs6WesE2anFGtN+eoP2NbuxSibpUoCEA2DH7HrinK6k 5Jqz2kNEA9gqT1CoVkVQRyxzi9deFHOscoXxqCkM8Pd/eQA9MgY= -----END CERTIFICATE-----Generated at Sun Sep 7 14:02:16 2025 by rpki-client