$ rpki-client -vvf repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft File: DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft (raw, json) Hash identifier: k47FcalQU3udQovcj/VIeJpTz9gSip05POsAq1hltuo= Subject key identifier: D7:75:4D:DD:37:48:47:66:A6:08:0B:CB:7A:B5:1B:09:52:72:0C:3E Authority key identifier: DB:6B:AB:95:61:4F:69:81:1F:2A:E9:B4:83:73:E7:9D:2D:C2:D7:F3 Certificate issuer: /CN=DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3 Certificate serial: 7BFFCA6706F65F1979A876E321ABBF70133ADC6A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft Manifest number: 0507 Signing time: Sat 06 Sep 2025 10:11:37 +0000 Manifest this update: Sat 06 Sep 2025 10:06:37 +0000 Manifest next update: Tue 09 Sep 2025 11:02:37 +0000 Files and hashes: 1: 3130332e3131362e3231372e302f32342d3234203d3e20313337333636.roa (hash: yangIWxRfp5g4q3g5tzxpJf4/ZTvbChL+OGjEKq0xNw=) 2: 3130332e3131362e3231382e302f32342d3234203d3e20313337333636.roa (hash: SgJaLekQ3Q9cVNBqu5Sas48wyzpxdaLZB6LIMnNqJ+c=) 3: DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl (hash: /oEGYsS39zpI0VnRQHBfPE52xdliTQ4BRZ5NBsS+dhs=) 4: 3130332e3131362e3231362e302f32342d3234203d3e20313337333636.roa (hash: iDwSin9srOGKT5atOmt0iLuShHzndQDwuU2x/RU2cYM=) 5: 3130332e3131362e3231392e302f32342d3234203d3e20313337333637.roa (hash: 7MfETz0OOU0/EW0Af0KTT2gYnfzpkWj/UcRR+LXANfU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 09 Sep 2025 11:02:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:ff:ca:67:06:f6:5f:19:79:a8:76:e3:21:ab:bf:70:13:3a:dc:6a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3 Validity Not Before: Sep 6 10:06:37 2025 GMT Not After : Sep 9 11:02:37 2025 GMT Subject: CN=D7754DDD37484766A6080BCB7AB51B0952720C3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:ac:96:9f:ca:27:a5:c7:40:33:6e:18:e8:ec: c0:d7:29:47:8d:7d:12:16:a8:dc:4b:ad:ef:79:52: a4:f6:08:38:83:44:21:51:32:d8:8e:50:5f:b7:95: f1:51:d7:d0:57:e4:9b:02:9b:d6:c2:53:a3:e9:45: a4:90:bf:8d:1f:00:7c:d3:6e:e6:a5:72:10:38:2c: b3:a9:a0:f1:39:9d:cf:d4:03:27:cd:b9:3f:09:f4: b5:5a:fe:58:18:fe:1f:64:5e:3f:78:56:01:11:19: bc:4d:85:b9:66:69:64:b3:b5:22:fd:13:af:5f:1e: b4:13:8d:02:ae:ae:71:06:f5:a1:af:8e:44:3a:af: 6f:cf:61:a5:dc:dc:39:51:af:6d:ba:f7:d1:92:cc: e1:15:7e:c9:03:c0:2e:78:79:84:44:d4:49:cd:b0: 24:57:ca:e0:1f:73:e5:2e:85:b1:fa:c8:68:a1:9e: 4b:71:3f:c0:f8:7e:0a:ff:00:7f:07:6a:9b:56:58: 1d:c8:48:e0:1c:dc:a0:4a:8d:f1:16:ad:46:69:24: c0:8e:20:5b:6f:62:95:6f:58:f6:1f:58:8f:df:3a: d0:49:80:36:d7:cc:6f:26:0c:74:1e:ee:45:95:18: 47:56:36:6d:a8:76:ef:4c:45:20:17:f8:16:82:c9: cd:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:75:4D:DD:37:48:47:66:A6:08:0B:CB:7A:B5:1B:09:52:72:0C:3E X509v3 Authority Key Identifier: keyid:DB:6B:AB:95:61:4F:69:81:1F:2A:E9:B4:83:73:E7:9D:2D:C2:D7:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:fe:58:34:94:3b:aa:7f:3e:09:ec:b0:6f:26:c8:43:bc:f3: d2:c1:60:9f:b7:73:dc:4a:a1:3d:6e:af:0d:55:ba:ad:7e:0f: 74:a4:66:ab:23:09:2d:26:d7:73:c1:5a:2a:1f:90:99:8f:a3: 3d:26:06:43:7e:e8:65:ec:51:5f:00:84:db:15:9b:7b:fa:96: 28:bb:d6:4a:bf:e8:15:ed:01:29:71:53:9f:50:57:10:f3:c1: d5:15:8a:69:18:e7:4d:ee:84:c0:6a:f2:78:c9:fb:1d:2e:63: 40:c5:09:cf:69:d7:57:95:54:3c:df:ce:83:4a:b6:54:0f:72: fc:53:1d:e2:23:0e:54:3a:e9:32:1d:af:29:34:f9:11:b8:b7: 1a:4a:71:a6:c1:01:ca:d9:41:52:ed:b2:c8:3d:7b:3c:ca:f5: 07:60:0c:91:38:33:a2:0d:de:c5:1c:d3:14:ea:cc:73:34:11: 44:3f:08:a4:96:61:74:52:12:ed:19:6e:a4:94:c4:b0:c0:8d: 4a:26:eb:44:e3:b2:3f:50:50:15:46:5d:bc:12:df:44:4a:91: 60:9f:69:f3:22:4e:cd:25:73:28:53:13:2f:6c:20:94:2c:e8: f0:1c:76:d6:41:c5:b2:63:ea:07:8d:00:62:0f:44:86:f2:0c: 58:90:e8:77 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUe//KZwb2Xxl5qHbjIau/cBM63GowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI2QkFCOTU2MTRGNjk4MTFGMkFFOUI0ODM3M0U3OUQy REMyRDdGMzAeFw0yNTA5MDYxMDA2MzdaFw0yNTA5MDkxMTAyMzdaMDMxMTAvBgNV BAMTKEQ3NzU0REREMzc0ODQ3NjZBNjA4MEJDQjdBQjUxQjA5NTI3MjBDM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2rJafyielx0Azbhjo7MDXKUeN fRIWqNxLre95UqT2CDiDRCFRMtiOUF+3lfFR19BX5JsCm9bCU6PpRaSQv40fAHzT bualchA4LLOpoPE5nc/UAyfNuT8J9LVa/lgY/h9kXj94VgERGbxNhblmaWSztSL9 E69fHrQTjQKurnEG9aGvjkQ6r2/PYaXc3DlRr22699GSzOEVfskDwC54eYRE1EnN sCRXyuAfc+UuhbH6yGihnktxP8D4fgr/AH8HaptWWB3ISOAc3KBKjfEWrUZpJMCO IFtvYpVvWPYfWI/fOtBJgDbXzG8mDHQe7kWVGEdWNm2odu9MRSAX+BaCyc0pAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU13VN3TdIR2amCAvLerUbCVJyDD4wHwYDVR0j BBgwFoAU22urlWFPaYEfKum0g3PnnS3C1/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NmQ3MjBkNS1iN2Q0LTQzOTUtYTA2Yi0xOTkwNGE2M2Y5NDgvMC9EQjZCQUI5NTYx NEY2OTgxMUYyQUU5QjQ4MzczRTc5RDJEQzJEN0YzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREI2QkFCOTU2MTRGNjk4MTFGMkFFOUI0ODM3M0U3OUQyREMy RDdGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODZkNzIwZDUtYjdkNC00Mzk1LWEw NmItMTk5MDRhNjNmOTQ4LzAvREI2QkFCOTU2MTRGNjk4MTFGMkFFOUI0ODM3M0U3 OUQyREMyRDdGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAL+WDSUO6p/PgnssG8myEO889LBYJ+3c9xK oT1urw1Vuq1+D3SkZqsjCS0m13PBWiofkJmPoz0mBkN+6GXsUV8AhNsVm3v6lii7 1kq/6BXtASlxU59QVxDzwdUVimkY503uhMBq8njJ+x0uY0DFCc9p11eVVDzfzoNK tlQPcvxTHeIjDlQ66TIdryk0+RG4txpKcabBAcrZQVLtssg9ezzK9QdgDJE4M6IN 3sUc0xTqzHM0EUQ/CKSWYXRSEu0ZbqSUxLDAjUom60Tjsj9QUBVGXbwS30RKkWCf afMiTs0lcyhTEy9sIJQs6PAcdtZBxbJj6geNAGIPRIbyDFiQ6Hc= -----END CERTIFICATE-----Generated at Sun Sep 7 13:59:11 2025 by rpki-client