$ rpki-client -vvf repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft File: DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft (raw, json) Hash identifier: JzEk1Wz28E1lshXJC3xtyF5v/KAGPDxtwW9i4YqKc/w= Subject key identifier: 1D:A5:E3:C2:DE:3D:3C:2D:6F:3D:BF:74:1B:68:C8:EA:D9:02:50:58 Authority key identifier: DB:6B:AB:95:61:4F:69:81:1F:2A:E9:B4:83:73:E7:9D:2D:C2:D7:F3 Certificate issuer: /CN=DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3 Certificate serial: 4CE6482AFAFEF7ECD7717F8AFBA0175C67555470 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft Manifest number: 0521 Signing time: Mon 03 Nov 2025 11:21:39 +0000 Manifest this update: Mon 03 Nov 2025 11:16:39 +0000 Manifest next update: Thu 06 Nov 2025 18:55:39 +0000 Files and hashes: 1: 3130332e3131362e3231372e302f32342d3234203d3e20313337333636.roa (hash: yangIWxRfp5g4q3g5tzxpJf4/ZTvbChL+OGjEKq0xNw=) 2: 3130332e3131362e3231392e302f32342d3234203d3e20313337333637.roa (hash: 7MfETz0OOU0/EW0Af0KTT2gYnfzpkWj/UcRR+LXANfU=) 3: 3130332e3131362e3231382e302f32342d3234203d3e20313337333636.roa (hash: SgJaLekQ3Q9cVNBqu5Sas48wyzpxdaLZB6LIMnNqJ+c=) 4: DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl (hash: 1DQSuDB/SvMn4i1GOP2iNf3EYz0xEaiyv9fUC9vVyYU=) 5: 3130332e3131362e3231362e302f32342d3234203d3e20313337333636.roa (hash: iDwSin9srOGKT5atOmt0iLuShHzndQDwuU2x/RU2cYM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 18:55:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:e6:48:2a:fa:fe:f7:ec:d7:71:7f:8a:fb:a0:17:5c:67:55:54:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3 Validity Not Before: Nov 3 11:16:39 2025 GMT Not After : Nov 6 18:55:39 2025 GMT Subject: CN=1DA5E3C2DE3D3C2D6F3DBF741B68C8EAD9025058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:72:a4:b9:5b:33:ec:75:83:01:01:2d:b7:1d: ec:d0:8a:6c:70:9e:63:fd:31:67:6e:28:76:68:dc: 6e:15:f1:84:70:67:db:17:c5:6e:83:c8:0a:c3:68: bf:1c:d8:87:6f:f8:94:12:94:23:da:f0:3c:31:6c: 17:88:80:9d:be:cd:80:47:4a:63:cb:54:25:ff:b9: 1c:5f:82:ff:5b:e2:88:5a:b5:e5:5c:6d:a9:71:c2: d3:69:91:4c:65:9c:34:55:9b:61:98:05:55:4e:1e: 4f:12:c8:97:4b:32:98:a9:ff:62:32:35:ac:db:8a: 7a:d6:ab:9d:ab:41:c1:ee:3e:7d:1c:55:93:82:b4: db:50:20:20:23:4e:dc:4a:26:6f:3d:b6:da:d9:fe: 2e:60:c9:53:af:28:ff:0a:4e:56:92:2f:47:b1:74: ed:a2:b9:14:dd:3c:b2:f1:8e:49:22:bd:4d:02:36: 2d:6b:f6:c2:a0:2f:70:dd:ff:56:67:b7:c4:83:24: 2c:a6:f4:77:ed:e2:c7:15:19:5a:3d:75:df:33:37: b0:28:02:48:f6:37:9c:a0:81:e7:24:62:95:4b:ae: 21:4b:30:ff:9c:0b:4a:35:91:8f:24:f9:7b:6c:57: d3:90:8e:be:17:e2:45:62:a6:49:43:7a:22:b9:5f: de:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1D:A5:E3:C2:DE:3D:3C:2D:6F:3D:BF:74:1B:68:C8:EA:D9:02:50:58 X509v3 Authority Key Identifier: keyid:DB:6B:AB:95:61:4F:69:81:1F:2A:E9:B4:83:73:E7:9D:2D:C2:D7:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:17:5e:14:23:4c:ef:3b:e3:a6:b9:20:81:78:ba:2e:22:5e: 86:35:9b:36:ed:d4:2a:1f:b4:89:eb:21:3e:89:01:d5:13:3a: 03:9a:ff:ae:93:6b:15:00:60:1c:f3:f9:f9:32:76:7a:e9:8c: fd:63:21:1c:80:a8:ab:a0:f6:55:6f:18:5b:45:ca:09:70:6a: fe:5f:1e:b1:0a:d2:bc:41:2f:9e:82:95:69:91:79:2a:d0:eb: 56:5b:1b:b1:c1:14:a2:b7:7f:81:ca:bf:ae:a1:2d:d4:75:b0: 0e:98:bd:de:5f:62:ce:b1:76:5b:a0:89:66:31:bc:e0:fb:6c: 14:22:eb:03:26:10:8e:c7:ab:e1:2b:7a:49:9a:3c:ad:62:2f: 00:42:62:fa:50:e2:88:ee:aa:03:2a:8d:1e:cc:17:48:8e:5a: 92:14:70:04:ef:31:ab:9a:32:ac:a5:8e:02:8d:fb:85:5b:6f: 07:db:dd:d8:f7:1b:f0:51:e7:1c:6e:7c:11:db:ea:30:db:07: 21:99:cc:61:ca:94:af:00:75:44:d2:a8:cf:22:cb:ad:5a:e7: a9:70:a5:82:22:7b:32:c8:4a:d2:c9:7a:7b:e1:d5:59:9a:8b: 19:ae:f4:b2:d9:6a:8f:bc:d7:96:77:dc:43:07:f4:30:01:39: 97:0b:ec:a2 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUTOZIKvr+9+zXcX+K+6AXXGdVVHAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI2QkFCOTU2MTRGNjk4MTFGMkFFOUI0ODM3M0U3OUQy REMyRDdGMzAeFw0yNTExMDMxMTE2MzlaFw0yNTExMDYxODU1MzlaMDMxMTAvBgNV BAMTKDFEQTVFM0MyREUzRDNDMkQ2RjNEQkY3NDFCNjhDOEVBRDkwMjUwNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4cqS5WzPsdYMBAS23HezQimxw nmP9MWduKHZo3G4V8YRwZ9sXxW6DyArDaL8c2Idv+JQSlCPa8DwxbBeIgJ2+zYBH SmPLVCX/uRxfgv9b4ohateVcbalxwtNpkUxlnDRVm2GYBVVOHk8SyJdLMpip/2Iy NazbinrWq52rQcHuPn0cVZOCtNtQICAjTtxKJm89ttrZ/i5gyVOvKP8KTlaSL0ex dO2iuRTdPLLxjkkivU0CNi1r9sKgL3Dd/1Znt8SDJCym9Hft4scVGVo9dd8zN7Ao Akj2N5yggeckYpVLriFLMP+cC0o1kY8k+XtsV9OQjr4X4kVipklDeiK5X959AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUHaXjwt49PC1vPb90G2jI6tkCUFgwHwYDVR0j BBgwFoAU22urlWFPaYEfKum0g3PnnS3C1/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NmQ3MjBkNS1iN2Q0LTQzOTUtYTA2Yi0xOTkwNGE2M2Y5NDgvMC9EQjZCQUI5NTYx NEY2OTgxMUYyQUU5QjQ4MzczRTc5RDJEQzJEN0YzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREI2QkFCOTU2MTRGNjk4MTFGMkFFOUI0ODM3M0U3OUQyREMy RDdGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODZkNzIwZDUtYjdkNC00Mzk1LWEw NmItMTk5MDRhNjNmOTQ4LzAvREI2QkFCOTU2MTRGNjk4MTFGMkFFOUI0ODM3M0U3 OUQyREMyRDdGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJUXXhQjTO8746a5IIF4ui4iXoY1mzbt1Cof tInrIT6JAdUTOgOa/66TaxUAYBzz+fkydnrpjP1jIRyAqKug9lVvGFtFyglwav5f HrEK0rxBL56ClWmReSrQ61ZbG7HBFKK3f4HKv66hLdR1sA6Yvd5fYs6xdlugiWYx vOD7bBQi6wMmEI7Hq+ErekmaPK1iLwBCYvpQ4ojuqgMqjR7MF0iOWpIUcATvMaua MqyljgKN+4Vbbwfb3dj3G/BR5xxufBHb6jDbByGZzGHKlK8AdUTSqM8iy61a56lw pYIiezLIStLJenvh1Vmaixmu9LLZao+815Z33EMH9DABOZcL7KI= -----END CERTIFICATE-----Generated at Tue Nov 4 14:02:08 2025 by rpki-client