$ rpki-client -vvf repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft File: DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft (raw, json) Hash identifier: 0igWRNqzHV2wqoZlR7yucgeE/y9Jg2nVzEw1CTV+p0M= Subject key identifier: 8E:F6:BA:6D:14:D5:C1:9E:0B:6B:C3:A8:B4:37:3D:C0:36:A4:88:67 Authority key identifier: DB:6B:AB:95:61:4F:69:81:1F:2A:E9:B4:83:73:E7:9D:2D:C2:D7:F3 Certificate issuer: /CN=DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3 Certificate serial: 30494A04448B2A50F808EDFE7A537611E880AE01 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft Manifest number: 04C2 Signing time: Fri 04 Apr 2025 23:01:36 +0000 Manifest this update: Fri 04 Apr 2025 22:56:36 +0000 Manifest next update: Tue 08 Apr 2025 10:36:36 +0000 Files and hashes: 1: 3130332e3131362e3231362e302f32342d3234203d3e20313337333636.roa (hash: V55U7OK1K2QuY3VVbSyrU+unRMpplldjBPASw8ADm0Y=) 2: 3130332e3131362e3231382e302f32342d3234203d3e20313337333636.roa (hash: XBLpOc8QLNhoGsvmXEZNep/rcF2zC1JRvYdm6bbhbC8=) 3: 3130332e3131362e3231392e302f32342d3234203d3e20313337333637.roa (hash: vZps53S9h1BnSZoitUW6NSla+4Sd5IFzDyt7UQvpK88=) 4: 3130332e3131362e3231372e302f32342d3234203d3e20313337333636.roa (hash: M8eQrIYoHKI4QrJSn5fFXFJR7PhUYac8EY7GOcmyaWE=) 5: DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl (hash: X3MxnNzMQkrkMOaoH/Ezuakn2knsYTZXYAjNywkwPRg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 07 Apr 2025 17:17:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 30:49:4a:04:44:8b:2a:50:f8:08:ed:fe:7a:53:76:11:e8:80:ae:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3 Validity Not Before: Apr 4 22:56:36 2025 GMT Not After : Apr 8 10:36:36 2025 GMT Subject: CN=8EF6BA6D14D5C19E0B6BC3A8B4373DC036A48867 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:c7:86:13:43:b2:e2:cf:09:4a:c7:6b:92:98: 67:e0:74:8e:af:d6:62:1d:f6:dc:27:bf:f2:64:14: 54:64:f0:8d:1d:78:0c:75:d8:d8:34:b6:59:71:47: be:a8:49:63:ef:a6:3c:c7:fa:bf:be:6d:58:bd:dc: b3:ad:4f:56:ac:46:3e:79:9c:b3:3f:38:11:b9:3a: dd:2c:34:45:0c:4c:b2:df:19:c4:17:0d:23:d0:af: 64:12:b8:e8:64:9c:88:f1:a2:ca:16:da:43:77:fa: f0:0b:70:e3:d3:dc:d9:4e:bb:60:a7:2e:2b:8f:e4: 62:9e:e5:9e:06:e1:e7:ba:6b:e5:08:d4:1a:fa:4b: 87:c8:cb:a6:90:ba:b0:40:f8:1a:e7:f2:d9:4c:ee: c5:d7:6e:ba:96:24:25:91:75:e2:00:fa:12:55:e2: d6:ba:25:de:e2:3b:ca:d1:3f:ab:5d:2b:c1:de:6d: 85:1c:da:c3:1b:6d:cd:38:ed:1c:5f:27:f8:df:80: 21:d9:b6:3e:a8:84:5f:e3:3e:d1:13:91:8f:65:9e: 97:5b:31:ad:41:43:9c:18:3e:e7:0c:a7:1b:5e:3c: 78:1e:30:f4:cd:1a:5e:a7:c0:fe:84:b9:01:b2:e1: 8e:3c:7e:53:7c:76:1a:4a:8d:fa:da:93:b4:71:2f: 46:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8E:F6:BA:6D:14:D5:C1:9E:0B:6B:C3:A8:B4:37:3D:C0:36:A4:88:67 X509v3 Authority Key Identifier: keyid:DB:6B:AB:95:61:4F:69:81:1F:2A:E9:B4:83:73:E7:9D:2D:C2:D7:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:d6:b3:81:dd:e7:a4:ef:8f:2e:25:21:e5:df:65:f4:3c:f8: ca:a7:59:d4:89:1b:88:5f:65:ae:95:cc:04:1b:ea:2a:b9:84: bf:9e:16:ed:24:45:42:a4:ac:24:5e:8b:d4:47:ad:05:04:cc: 78:cc:a6:26:f4:cd:a7:6c:9b:61:fc:14:c1:d6:f7:ab:f4:52: 4f:a2:dc:58:81:9e:dc:7e:c8:84:d6:d4:fc:39:8a:f4:97:80: d7:f1:b7:9b:51:12:00:84:fe:2e:36:57:8d:46:2e:02:ab:c6: af:b0:4f:fa:49:52:71:7c:c4:40:f9:fb:25:be:24:ed:a3:e9: ba:89:91:d6:e8:62:de:ef:06:25:21:cd:27:df:46:9f:d0:72: c1:76:6f:39:c1:8f:94:3c:af:66:57:f7:24:9e:ba:ed:23:fc: 75:ca:1c:cb:3a:98:ac:82:24:b7:46:86:ca:c8:e5:05:df:4c: 8f:c2:2b:a1:34:1b:4a:c6:6b:2a:0e:6e:68:8c:e9:02:71:9f: ea:02:a0:73:19:a8:63:18:fd:6b:fe:8f:ca:2f:56:27:52:95: 00:ab:79:80:d0:27:6f:78:30:5b:ab:9a:72:63:a2:79:3c:8a: b5:94:e8:36:a7:31:4c:4a:97:50:d1:b5:fc:91:46:e5:a6:f4: 6b:ac:66:cb -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMElKBESLKlD4CO3+elN2EeiArgEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI2QkFCOTU2MTRGNjk4MTFGMkFFOUI0ODM3M0U3OUQy REMyRDdGMzAeFw0yNTA0MDQyMjU2MzZaFw0yNTA0MDgxMDM2MzZaMDMxMTAvBgNV BAMTKDhFRjZCQTZEMTRENUMxOUUwQjZCQzNBOEI0MzczREMwMzZBNDg4NjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9x4YTQ7LizwlKx2uSmGfgdI6v 1mId9twnv/JkFFRk8I0deAx12Ng0tllxR76oSWPvpjzH+r++bVi93LOtT1asRj55 nLM/OBG5Ot0sNEUMTLLfGcQXDSPQr2QSuOhknIjxosoW2kN3+vALcOPT3NlOu2Cn LiuP5GKe5Z4G4ee6a+UI1Br6S4fIy6aQurBA+Brn8tlM7sXXbrqWJCWRdeIA+hJV 4ta6Jd7iO8rRP6tdK8HebYUc2sMbbc047RxfJ/jfgCHZtj6ohF/jPtETkY9lnpdb Ma1BQ5wYPucMpxtePHgeMPTNGl6nwP6EuQGy4Y48flN8dhpKjfrak7RxL0aNAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUjva6bRTVwZ4La8OotDc9wDakiGcwHwYDVR0j BBgwFoAU22urlWFPaYEfKum0g3PnnS3C1/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NmQ3MjBkNS1iN2Q0LTQzOTUtYTA2Yi0xOTkwNGE2M2Y5NDgvMC9EQjZCQUI5NTYx NEY2OTgxMUYyQUU5QjQ4MzczRTc5RDJEQzJEN0YzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREI2QkFCOTU2MTRGNjk4MTFGMkFFOUI0ODM3M0U3OUQyREMy RDdGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODZkNzIwZDUtYjdkNC00Mzk1LWEw NmItMTk5MDRhNjNmOTQ4LzAvREI2QkFCOTU2MTRGNjk4MTFGMkFFOUI0ODM3M0U3 OUQyREMyRDdGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGnWs4Hd56Tvjy4lIeXfZfQ8+MqnWdSJG4hf Za6VzAQb6iq5hL+eFu0kRUKkrCRei9RHrQUEzHjMpib0zadsm2H8FMHW96v0Uk+i 3FiBntx+yITW1Pw5ivSXgNfxt5tREgCE/i42V41GLgKrxq+wT/pJUnF8xED5+yW+ JO2j6bqJkdboYt7vBiUhzSffRp/QcsF2bznBj5Q8r2ZX9ySeuu0j/HXKHMs6mKyC JLdGhsrI5QXfTI/CK6E0G0rGayoObmiM6QJxn+oCoHMZqGMY/Wv+j8ovVidSlQCr eYDQJ294MFurmnJjonk8irWU6DanMUxKl1DRtfyRRuWm9GusZss= -----END CERTIFICATE-----Generated at Sat Apr 5 19:03:15 2025 by rpki-client