$ rpki-client -vvf repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft File: DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft (raw, json) Hash identifier: lykzaLAjNRGfz3hBUkLWWwpFDl3ROyuwu2NfQTIM6sk= Subject key identifier: C5:EE:34:8E:B4:F8:6D:FA:52:C1:3C:0C:BD:F3:AB:0C:0C:B6:28:EC Authority key identifier: DB:6B:AB:95:61:4F:69:81:1F:2A:E9:B4:83:73:E7:9D:2D:C2:D7:F3 Certificate issuer: /CN=DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3 Certificate serial: 4F7473AC0B6D317AC09B5C7DBE147861B6C35755 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft Manifest number: 04DC Signing time: Mon 02 Jun 2025 02:03:20 +0000 Manifest this update: Mon 02 Jun 2025 01:58:20 +0000 Manifest next update: Thu 05 Jun 2025 03:32:20 +0000 Files and hashes: 1: 3130332e3131362e3231382e302f32342d3234203d3e20313337333636.roa (hash: SgJaLekQ3Q9cVNBqu5Sas48wyzpxdaLZB6LIMnNqJ+c=) 2: DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl (hash: sJF2GQiAQ44kjXoeX68cW3lZobTLNxvGtOJRxOW60xE=) 3: 3130332e3131362e3231362e302f32342d3234203d3e20313337333636.roa (hash: iDwSin9srOGKT5atOmt0iLuShHzndQDwuU2x/RU2cYM=) 4: 3130332e3131362e3231372e302f32342d3234203d3e20313337333636.roa (hash: M8eQrIYoHKI4QrJSn5fFXFJR7PhUYac8EY7GOcmyaWE=) 5: 3130332e3131362e3231392e302f32342d3234203d3e20313337333637.roa (hash: vZps53S9h1BnSZoitUW6NSla+4Sd5IFzDyt7UQvpK88=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 05 Jun 2025 03:32:20 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:74:73:ac:0b:6d:31:7a:c0:9b:5c:7d:be:14:78:61:b6:c3:57:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3 Validity Not Before: Jun 2 01:58:20 2025 GMT Not After : Jun 5 03:32:20 2025 GMT Subject: CN=C5EE348EB4F86DFA52C13C0CBDF3AB0C0CB628EC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:9b:94:e5:9f:39:cb:c4:84:e5:80:a2:52:aa: c8:b1:83:38:35:84:39:c4:0b:64:2e:2a:82:b9:38: bb:a2:e0:90:01:52:ed:a6:1f:80:94:80:08:d3:60: 59:70:66:77:11:7d:66:61:01:82:5d:84:22:61:a8: 4f:46:d0:4d:9f:7b:7f:1b:0f:54:c9:6b:03:7a:1e: f8:58:67:6b:39:8c:c4:ab:3f:63:cc:2a:d7:99:fb: 17:39:fd:86:08:93:52:69:fa:53:be:68:15:79:3b: c6:9a:6c:9c:0b:de:61:f5:21:11:1d:e3:5a:21:e3: 64:5d:ba:90:e6:05:c5:98:42:52:ff:9c:b2:68:50: 61:92:06:52:02:3f:aa:1a:76:86:b9:47:1a:f7:13: 5c:5d:65:f5:18:55:64:82:ad:7f:e8:4f:08:b5:ce: 07:5c:6b:3e:87:27:61:88:b4:b6:ed:2c:7f:19:10: b8:7a:5f:f2:37:e2:6a:bb:00:cf:22:f6:03:c8:d7: 38:9b:df:9e:41:e6:ac:a1:a4:9e:bb:4d:96:e6:16: 17:33:11:a3:9b:85:f8:35:72:fb:62:32:eb:9e:4d: 9f:bd:42:7e:84:d2:97:a3:7a:9f:40:95:be:38:73: 57:3b:0a:4e:ad:35:60:ae:59:95:6b:4d:e0:66:e7: 8c:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C5:EE:34:8E:B4:F8:6D:FA:52:C1:3C:0C:BD:F3:AB:0C:0C:B6:28:EC X509v3 Authority Key Identifier: keyid:DB:6B:AB:95:61:4F:69:81:1F:2A:E9:B4:83:73:E7:9D:2D:C2:D7:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:0a:d0:d6:b4:c8:c3:9d:0c:7d:98:30:e1:8c:78:b9:c6:93: 3f:9b:b7:2d:82:66:76:0f:c9:d2:4d:f4:4d:74:f2:ad:47:a5: 4d:27:3f:e8:8f:61:08:f9:a7:68:3e:a7:d5:10:61:a8:74:dd: a9:77:1a:16:11:06:3d:fe:ee:c4:56:bb:7b:c2:01:12:22:1b: da:69:98:1d:2b:a9:31:8b:0c:89:f3:c2:04:5e:c8:4a:3a:fa: 92:71:6c:8b:53:ec:2b:5e:87:4d:b8:50:7f:48:2e:5c:e4:c1: 75:3a:27:f5:19:c2:ab:30:a0:86:3e:8a:ac:dd:8a:01:ff:4e: 3d:99:2f:46:50:ad:a3:31:c2:8f:6d:19:37:c0:a6:35:db:62: ee:c9:98:7a:73:8c:ae:9f:ac:00:63:2f:db:cb:1e:16:9d:dd: 64:e4:72:c9:ec:de:92:25:20:92:d0:10:ae:6a:45:9c:11:ad: bc:f7:9c:7d:db:f6:82:4d:e1:45:13:78:c6:5c:ed:30:b8:d8: c3:da:35:5f:85:2b:81:70:2e:4a:27:3f:35:da:20:b4:1d:44: 77:cd:96:f1:b3:d9:f2:e9:a3:2b:16:98:02:7c:66:f8:8c:3e: 26:d7:c5:1d:40:3f:51:e0:77:a9:77:e2:4f:4d:ef:8c:5f:aa: 97:44:85:58 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUT3RzrAttMXrAm1x9vhR4YbbDV1UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI2QkFCOTU2MTRGNjk4MTFGMkFFOUI0ODM3M0U3OUQy REMyRDdGMzAeFw0yNTA2MDIwMTU4MjBaFw0yNTA2MDUwMzMyMjBaMDMxMTAvBgNV BAMTKEM1RUUzNDhFQjRGODZERkE1MkMxM0MwQ0JERjNBQjBDMENCNjI4RUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCdm5TlnznLxITlgKJSqsixgzg1 hDnEC2QuKoK5OLui4JABUu2mH4CUgAjTYFlwZncRfWZhAYJdhCJhqE9G0E2fe38b D1TJawN6HvhYZ2s5jMSrP2PMKteZ+xc5/YYIk1Jp+lO+aBV5O8aabJwL3mH1IREd 41oh42RdupDmBcWYQlL/nLJoUGGSBlICP6oadoa5Rxr3E1xdZfUYVWSCrX/oTwi1 zgdcaz6HJ2GItLbtLH8ZELh6X/I34mq7AM8i9gPI1zib355B5qyhpJ67TZbmFhcz EaObhfg1cvtiMuueTZ+9Qn6E0pejep9Alb44c1c7Ck6tNWCuWZVrTeBm54yXAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxe40jrT4bfpSwTwMvfOrDAy2KOwwHwYDVR0j BBgwFoAU22urlWFPaYEfKum0g3PnnS3C1/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NmQ3MjBkNS1iN2Q0LTQzOTUtYTA2Yi0xOTkwNGE2M2Y5NDgvMC9EQjZCQUI5NTYx NEY2OTgxMUYyQUU5QjQ4MzczRTc5RDJEQzJEN0YzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREI2QkFCOTU2MTRGNjk4MTFGMkFFOUI0ODM3M0U3OUQyREMy RDdGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODZkNzIwZDUtYjdkNC00Mzk1LWEw NmItMTk5MDRhNjNmOTQ4LzAvREI2QkFCOTU2MTRGNjk4MTFGMkFFOUI0ODM3M0U3 OUQyREMyRDdGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGgK0Na0yMOdDH2YMOGMeLnGkz+bty2CZnYP ydJN9E108q1HpU0nP+iPYQj5p2g+p9UQYah03al3GhYRBj3+7sRWu3vCARIiG9pp mB0rqTGLDInzwgReyEo6+pJxbItT7Cteh024UH9ILlzkwXU6J/UZwqswoIY+iqzd igH/Tj2ZL0ZQraMxwo9tGTfApjXbYu7JmHpzjK6frABjL9vLHhad3WTkcsns3pIl IJLQEK5qRZwRrbz3nH3b9oJN4UUTeMZc7TC42MPaNV+FK4FwLkonPzXaILQdRHfN lvGz2fLpoysWmAJ8ZviMPibXxR1AP1Hgd6l34k9N74xfqpdEhVg= -----END CERTIFICATE-----Generated at Tue Jun 3 23:14:41 2025 by rpki-client