$ rpki-client -vvf repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.mft File: DBF597EA29EF8A70656446AF75CF33F0618E8282.mft (raw, json) Hash identifier: vhyhgr1frnPr+EkQP7++6DKzX3OgYfOdCk87SWLeveU= Subject key identifier: 28:DB:5F:47:47:77:FC:59:13:9F:3B:85:C9:F6:77:10:A9:AE:92:C1 Authority key identifier: DB:F5:97:EA:29:EF:8A:70:65:64:46:AF:75:CF:33:F0:61:8E:82:82 Certificate issuer: /CN=DBF597EA29EF8A70656446AF75CF33F0618E8282 Certificate serial: 38D2604C5DAACC9A530BB68DB157576AA55CC506 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF597EA29EF8A70656446AF75CF33F0618E8282.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.mft Manifest number: 0505 Signing time: Fri 05 Sep 2025 09:42:15 +0000 Manifest this update: Fri 05 Sep 2025 09:37:15 +0000 Manifest next update: Mon 08 Sep 2025 18:55:15 +0000 Files and hashes: 1: 3130332e3234322e3230342e302f32322d3234203d3e203233373536.roa (hash: WzW/Sss6A/kpJfugXeZWPxd++ZE3y6mEfaDI33YMU+M=) 2: 3135302e3130372e3133322e302f32322d3234203d3e203233373536.roa (hash: fVRsxuz3woE7uahLGANS8nBiT+UdU+qUUJ2Y/SNoU9E=) 3: 3131372e3130322e3232342e302f31392d3234203d3e203233373536.roa (hash: TuGeKAZ5K1Zu0PRUHP6LxUEiVAWHwbRLn6V580rSqpM=) 4: 3230322e362e3232342e302f32302d3234203d3e203233373536.roa (hash: RLSgg2xBR0eY1oQJ2Fkz63ShTm+IebfyQIgkaUmONdM=) 5: DBF597EA29EF8A70656446AF75CF33F0618E8282.crl (hash: 3nh31uyIq2Rfraf/Am0KFoiRZaDVQTD7/tBBBwP8UJA=) 6: 323430363a363230303a3a2f33322d3438203d3e203233373536.roa (hash: RDF8kXfxQQ2EWR27pMBSl3bUi8DuM2mKbwzECDZeSOA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.crl rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF597EA29EF8A70656446AF75CF33F0618E8282.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 08 Sep 2025 18:55:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:d2:60:4c:5d:aa:cc:9a:53:0b:b6:8d:b1:57:57:6a:a5:5c:c5:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBF597EA29EF8A70656446AF75CF33F0618E8282 Validity Not Before: Sep 5 09:37:15 2025 GMT Not After : Sep 8 18:55:15 2025 GMT Subject: CN=28DB5F474777FC59139F3B85C9F67710A9AE92C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:5a:00:0e:a4:43:69:c7:61:f9:b3:5f:55:aa: e2:b1:aa:6e:50:83:8b:08:90:3a:3b:fb:d9:f2:04: 13:40:16:fc:da:f5:36:b9:f2:e2:0b:21:5c:31:22: c6:a7:16:7d:5e:88:18:ef:30:d1:d6:1f:e6:10:e5: 06:3f:16:76:d3:3e:41:de:af:ca:18:db:ee:c8:f8: 8d:28:f8:c1:71:cd:db:10:d8:60:e5:6e:b3:34:b7: 12:b9:92:05:1b:24:bc:39:b5:84:8e:10:ee:c1:ca: 28:d7:4a:d0:24:e4:84:dc:cf:37:42:ad:ed:1f:ec: 5f:d1:e4:76:6f:65:9c:49:f2:e9:3d:65:c7:02:51: ee:be:ab:37:c2:a1:17:c7:30:c9:69:01:2c:02:2f: 1b:0b:32:ce:40:b1:29:dd:e6:5d:47:68:db:5a:1c: 75:c0:7a:04:8c:27:a8:ae:72:0f:b2:56:f7:58:70: 0c:bb:56:db:cb:73:d4:20:19:cb:36:25:75:85:0f: d7:59:f6:ea:47:19:cb:d0:1b:9b:60:56:20:51:26: c0:ad:ab:68:60:ae:d7:f3:09:aa:97:6b:00:66:ae: ae:9b:10:14:2b:e8:bf:33:00:f7:1a:b8:ba:1a:6c: cf:98:14:12:52:25:fe:4e:e2:58:ed:b6:8a:b4:e7: de:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 28:DB:5F:47:47:77:FC:59:13:9F:3B:85:C9:F6:77:10:A9:AE:92:C1 X509v3 Authority Key Identifier: keyid:DB:F5:97:EA:29:EF:8A:70:65:64:46:AF:75:CF:33:F0:61:8E:82:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF597EA29EF8A70656446AF75CF33F0618E8282.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 24:c3:ea:f0:1d:49:5c:ed:4c:b3:28:53:d2:9f:c2:09:c6:7c: 25:28:35:f9:79:02:85:12:6c:08:e3:16:cf:7c:6a:29:35:29: 38:55:7e:2d:d6:27:19:df:78:3d:0c:61:8b:c0:9f:c1:1d:49: 62:00:62:cf:15:4c:a7:ee:e8:3a:ff:a2:6d:15:ac:1f:63:c9: b4:a4:e7:35:2d:0f:30:51:db:14:d4:4d:43:65:53:12:48:d0: 7b:fb:0b:18:d8:89:66:78:14:e7:f9:1f:8e:d3:62:49:de:5a: 0c:65:3c:e7:66:35:c9:95:da:5b:e3:d1:42:d6:4c:af:d8:82: 0c:a8:d6:11:32:00:37:01:14:f2:f8:cb:6e:84:b8:70:ed:90: 50:7d:66:be:31:d9:58:7b:fa:07:92:31:0c:43:98:f0:89:1d: 0d:55:f6:12:df:75:ab:f2:28:ef:28:98:19:64:e9:b5:56:e1: 73:b0:b4:d0:fc:73:b0:29:c0:1e:c2:fb:06:cf:96:dc:c8:3c: 01:76:92:be:6d:bc:11:2d:79:40:67:d2:a1:0f:6c:42:27:21: 5f:54:9c:f3:aa:29:cc:c0:5c:30:22:3f:03:74:81:0d:3a:f6: f7:9b:54:dc:b0:b9:e2:36:04:e7:25:74:e3:22:31:b2:7f:50: fb:e1:eb:3d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUONJgTF2qzJpTC7aNsVdXaqVcxQYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJGNTk3RUEyOUVGOEE3MDY1NjQ0NkFGNzVDRjMzRjA2 MThFODI4MjAeFw0yNTA5MDUwOTM3MTVaFw0yNTA5MDgxODU1MTVaMDMxMTAvBgNV BAMTKDI4REI1RjQ3NDc3N0ZDNTkxMzlGM0I4NUM5RjY3NzEwQTlBRTkyQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDgWgAOpENpx2H5s19VquKxqm5Q g4sIkDo7+9nyBBNAFvza9Ta58uILIVwxIsanFn1eiBjvMNHWH+YQ5QY/FnbTPkHe r8oY2+7I+I0o+MFxzdsQ2GDlbrM0txK5kgUbJLw5tYSOEO7ByijXStAk5ITczzdC re0f7F/R5HZvZZxJ8uk9ZccCUe6+qzfCoRfHMMlpASwCLxsLMs5AsSnd5l1HaNta HHXAegSMJ6iucg+yVvdYcAy7VtvLc9QgGcs2JXWFD9dZ9upHGcvQG5tgViBRJsCt q2hgrtfzCaqXawBmrq6bEBQr6L8zAPcauLoabM+YFBJSJf5O4ljttoq0596ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKNtfR0d3/FkTnzuFyfZ3EKmuksEwHwYDVR0j BBgwFoAU2/WX6invinBlZEavdc8z8GGOgoIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZDBmMWE2ZS04M2I2LTQ1MzQtOTY3ZC1mOGRiM2MzNzExZjQvMC9EQkY1OTdFQTI5 RUY4QTcwNjU2NDQ2QUY3NUNGMzNGMDYxOEU4MjgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREJGNTk3RUEyOUVGOEE3MDY1NjQ0NkFGNzVDRjMzRjA2MThF ODI4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWQwZjFhNmUtODNiNi00NTM0LTk2 N2QtZjhkYjNjMzcxMWY0LzAvREJGNTk3RUEyOUVGOEE3MDY1NjQ0NkFGNzVDRjMz RjA2MThFODI4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACTD6vAdSVztTLMoU9KfwgnGfCUoNfl5AoUS bAjjFs98aik1KThVfi3WJxnfeD0MYYvAn8EdSWIAYs8VTKfu6Dr/om0VrB9jybSk 5zUtDzBR2xTUTUNlUxJI0Hv7CxjYiWZ4FOf5H47TYkneWgxlPOdmNcmV2lvj0ULW TK/Yggyo1hEyADcBFPL4y26EuHDtkFB9Zr4x2Vh7+geSMQxDmPCJHQ1V9hLfdavy KO8omBlk6bVW4XOwtND8c7ApwB7C+wbPltzIPAF2kr5tvBEteUBn0qEPbEInIV9U nPOqKczAXDAiPwN0gQ069vebVNywueI2BOcldOMiMbJ/UPvh6z0= -----END CERTIFICATE-----Generated at Sun Sep 7 14:05:23 2025 by rpki-client