$ rpki-client -vvf repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft File: DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft (raw, json) Hash identifier: 2zBQzDEk0yGki2QhWim/0/Jvc32wN1kW5nklL6ypmpQ= Subject key identifier: 4C:16:FB:19:08:DE:7C:9C:E3:D7:77:82:2E:C3:0E:EB:78:E5:4C:4C Authority key identifier: DB:F7:1D:6F:8C:24:BD:B8:0D:69:2B:E8:6D:6F:7A:D3:95:1B:6C:EE Certificate issuer: /CN=DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE Certificate serial: 31E3156DE38D7B41BBD245AE3E6DC72F1CACCCB1 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft Manifest number: 68 Signing time: Fri 22 Aug 2025 16:51:48 +0000 Manifest this update: Fri 22 Aug 2025 16:46:48 +0000 Manifest next update: Tue 26 Aug 2025 01:44:48 +0000 Files and hashes: 1: 3130332e3131352e3130342e302f32342d3234203d3e20313337333631.roa (hash: 6mL7Avaab4glDlpMGnON/Jhq6VFk/42559+PiNPAoXE=) 2: 323030313a6466353a323730303a3a2f34382d3438203d3e20313337333631.roa (hash: lAwEnKyw5OHxCplSawk5HVEotvU+5HwJxxtoSxrjtdo=) 3: DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.crl (hash: KIWL2HZftVw+7UeWt9Hm60UM/YbWkOCbHmz1KtxEybw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.crl rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 01:44:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:e3:15:6d:e3:8d:7b:41:bb:d2:45:ae:3e:6d:c7:2f:1c:ac:cc:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE Validity Not Before: Aug 22 16:46:48 2025 GMT Not After : Aug 26 01:44:48 2025 GMT Subject: CN=4C16FB1908DE7C9CE3D777822EC30EEB78E54C4C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:f8:06:bc:e6:01:6c:fc:95:e8:04:6f:95:d9: b2:4f:f5:f2:2e:17:d6:65:ab:0e:b0:94:d0:8e:08: ac:36:8d:0f:69:70:ed:52:fd:b4:91:a4:c7:f2:4a: 73:db:38:41:97:d2:c9:63:e5:8d:be:7a:74:35:ed: 6c:9b:cf:b9:b7:62:bc:5e:d2:93:03:c6:97:24:28: ef:3c:b9:c5:52:4b:5e:f1:ab:63:21:4f:7c:47:25: 49:04:34:73:d3:eb:67:da:cd:42:90:41:fc:8c:6f: 66:86:87:2d:ac:4c:d0:ea:24:20:71:ab:17:c4:e1: dd:cd:6d:ea:b1:c8:4f:6a:27:b2:2f:9e:f3:eb:4b: c0:8d:38:f4:08:8c:78:63:89:b1:94:66:ea:81:ee: 5b:3d:aa:98:29:52:b0:57:50:b7:20:0c:ff:05:9a: a3:33:f7:6c:d8:aa:85:cf:06:94:f9:da:5c:0b:5a: 95:41:00:cc:ce:e5:68:fe:07:9d:50:19:d8:de:89: d7:c8:b0:c5:a1:33:76:b8:89:d3:3c:79:a5:c4:f4: 61:54:26:79:3c:6e:95:ab:16:a3:88:e4:fd:09:90: 15:32:9f:f7:4a:00:21:af:38:d3:0a:1c:9c:7a:f9: 95:3f:a4:a4:0f:c7:4c:34:de:22:2b:8a:74:8a:6f: d0:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:16:FB:19:08:DE:7C:9C:E3:D7:77:82:2E:C3:0E:EB:78:E5:4C:4C X509v3 Authority Key Identifier: keyid:DB:F7:1D:6F:8C:24:BD:B8:0D:69:2B:E8:6D:6F:7A:D3:95:1B:6C:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 13:fa:a0:96:c0:85:83:bb:26:50:d9:db:e3:9c:da:a9:24:ee: b7:b1:3c:5f:56:62:dc:7c:30:47:88:d2:8a:93:7f:0a:71:d7: cc:d4:ed:5e:18:85:78:64:61:84:32:dd:55:e0:e2:ce:71:a0: 45:a9:ee:46:4a:c9:29:df:04:cf:ea:44:26:3b:56:9f:3e:ab: 5f:91:e5:d1:96:2c:74:b8:53:43:25:01:f4:74:bf:b8:15:c4: dc:1a:60:43:59:c3:11:8e:12:a5:cf:c6:ca:bc:13:a3:96:4a: 7b:94:0e:47:f5:3d:f0:e4:b9:39:07:5b:f5:44:03:32:35:2a: c8:10:a5:60:24:7b:66:ae:c3:5c:55:2a:a1:81:4f:4d:c6:b0: d3:d0:1f:37:01:85:7e:d7:91:22:bf:81:6d:04:67:1d:8f:65: 5d:2a:9b:ff:c8:d6:00:82:75:77:22:b6:00:e7:09:25:5b:03: fa:18:39:50:2d:0f:9a:9e:83:6c:cd:82:13:e8:04:9b:73:3f: 38:9e:c3:70:55:7e:8f:2f:bb:3c:43:70:69:de:90:66:00:f7: f4:39:c4:ba:64:68:e1:0c:71:cf:bd:67:6b:22:d7:3e:a3:02: e0:b1:76:15:7a:7d:a5:60:ca:3a:e8:19:0b:a5:c2:16:e2:37: 24:a5:fc:a8 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMeMVbeONe0G70kWuPm3HLxyszLEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJGNzFENkY4QzI0QkRCODBENjkyQkU4NkQ2RjdBRDM5 NTFCNkNFRTAeFw0yNTA4MjIxNjQ2NDhaFw0yNTA4MjYwMTQ0NDhaMDMxMTAvBgNV BAMTKDRDMTZGQjE5MDhERTdDOUNFM0Q3Nzc4MjJFQzMwRUVCNzhFNTRDNEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4+Aa85gFs/JXoBG+V2bJP9fIu F9Zlqw6wlNCOCKw2jQ9pcO1S/bSRpMfySnPbOEGX0slj5Y2+enQ17Wybz7m3Yrxe 0pMDxpckKO88ucVSS17xq2MhT3xHJUkENHPT62fazUKQQfyMb2aGhy2sTNDqJCBx qxfE4d3NbeqxyE9qJ7IvnvPrS8CNOPQIjHhjibGUZuqB7ls9qpgpUrBXULcgDP8F mqMz92zYqoXPBpT52lwLWpVBAMzO5Wj+B51QGdjeidfIsMWhM3a4idM8eaXE9GFU Jnk8bpWrFqOI5P0JkBUyn/dKACGvONMKHJx6+ZU/pKQPx0w03iIrinSKb9DzAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTBb7GQjefJzj13eCLsMO63jlTEwwHwYDVR0j BBgwFoAU2/cdb4wkvbgNaSvobW9605UbbO4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MzJjYWUzZi1iMzI5LTQ0MWItOTdmYy01YmI5ZmNjMDUxZDIvMC9EQkY3MUQ2RjhD MjRCREI4MEQ2OTJCRTg2RDZGN0FEMzk1MUI2Q0VFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREJGNzFENkY4QzI0QkRCODBENjkyQkU4NkQ2RjdBRDM5NTFC NkNFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDMyY2FlM2YtYjMyOS00NDFiLTk3 ZmMtNWJiOWZjYzA1MWQyLzAvREJGNzFENkY4QzI0QkRCODBENjkyQkU4NkQ2RjdB RDM5NTFCNkNFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABP6oJbAhYO7JlDZ2+Oc2qkk7rexPF9WYtx8 MEeI0oqTfwpx18zU7V4YhXhkYYQy3VXg4s5xoEWp7kZKySnfBM/qRCY7Vp8+q1+R 5dGWLHS4U0MlAfR0v7gVxNwaYENZwxGOEqXPxsq8E6OWSnuUDkf1PfDkuTkHW/VE AzI1KsgQpWAke2auw1xVKqGBT03GsNPQHzcBhX7XkSK/gW0EZx2PZV0qm//I1gCC dXcitgDnCSVbA/oYOVAtD5qeg2zNghPoBJtzPziew3BVfo8vuzxDcGnekGYA9/Q5 xLpkaOEMcc+9Z2si1z6jAuCxdhV6faVgyjroGQulwhbiNySl/Kg= -----END CERTIFICATE-----Generated at Sat Aug 23 15:23:31 2025 by rpki-client