$ rpki-client -vvf repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft File: DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft (raw, json) Hash identifier: 8iTBvflSSqz5GbXfQxasg91of7T3GAc8QMm/E2px620= Subject key identifier: 11:20:62:95:F2:7D:2C:BA:79:85:C9:0D:BE:77:C7:90:61:22:0D:1C Authority key identifier: DB:F7:1D:6F:8C:24:BD:B8:0D:69:2B:E8:6D:6F:7A:D3:95:1B:6C:EE Certificate issuer: /CN=DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE Certificate serial: 311536238D205F45A787DB042C9EE6DF483348D8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft Manifest number: 81 Signing time: Sat 18 Oct 2025 20:51:46 +0000 Manifest this update: Sat 18 Oct 2025 20:46:46 +0000 Manifest next update: Wed 22 Oct 2025 03:19:46 +0000 Files and hashes: 1: DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.crl (hash: QsbrFedOqlh66WaD57kd+39KExEkCpOYZqsAeXTIErM=) 2: 3130332e3131352e3130342e302f32342d3234203d3e20313337333631.roa (hash: 6mL7Avaab4glDlpMGnON/Jhq6VFk/42559+PiNPAoXE=) 3: 323030313a6466353a323730303a3a2f34382d3438203d3e20313337333631.roa (hash: lAwEnKyw5OHxCplSawk5HVEotvU+5HwJxxtoSxrjtdo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.crl rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 03:19:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:15:36:23:8d:20:5f:45:a7:87:db:04:2c:9e:e6:df:48:33:48:d8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE Validity Not Before: Oct 18 20:46:46 2025 GMT Not After : Oct 22 03:19:46 2025 GMT Subject: CN=11206295F27D2CBA7985C90DBE77C79061220D1C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:56:a2:79:ec:9a:d3:98:01:86:1a:e9:27:cd: 4a:c8:c1:d0:f2:d4:ef:e2:83:07:28:07:98:48:f3: 81:55:2b:73:7f:b0:9b:28:fe:7e:52:b4:90:58:5d: c9:25:f8:b4:c5:9b:bc:99:52:d6:16:42:9e:22:02: 7e:a5:90:b4:6f:9c:43:ae:03:f6:64:94:e3:50:a1: e2:f4:58:1c:05:69:e5:e9:c2:59:4d:e3:cf:57:38: 43:ca:1f:00:af:ba:40:5b:5c:6a:6b:dd:5c:5e:78: db:08:89:3a:e1:79:28:9d:35:2a:f2:99:b2:65:e9: 9d:aa:72:1a:60:89:28:19:48:b8:e8:6c:08:82:a1: 70:63:85:e8:90:18:5f:51:6d:cb:53:92:ff:c2:f8: 53:59:96:d1:91:de:4a:a8:ee:00:ec:97:78:54:2c: f7:14:cf:3b:cf:5d:ca:6b:c9:1e:73:07:97:53:e4: 41:df:4a:83:a5:8c:87:c6:7a:0d:15:9f:2c:0e:b1: 2b:f0:62:58:f5:b9:23:2a:07:38:e5:f5:f6:65:79: 5f:c7:e7:60:81:fc:db:94:48:9f:ce:57:6b:ac:08: 19:56:a3:93:01:5e:b8:af:ea:2d:5c:11:17:8c:7c: 89:f5:19:87:95:36:e9:31:83:80:64:97:f7:8a:09: 17:3b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:20:62:95:F2:7D:2C:BA:79:85:C9:0D:BE:77:C7:90:61:22:0D:1C X509v3 Authority Key Identifier: keyid:DB:F7:1D:6F:8C:24:BD:B8:0D:69:2B:E8:6D:6F:7A:D3:95:1B:6C:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 30:a6:39:d0:be:56:50:8f:7e:66:80:28:04:c6:0b:03:07:e4: d8:4b:06:68:3d:91:20:83:ac:ea:ca:03:1e:f4:b0:fb:53:59: 7a:65:4d:84:eb:a6:52:0d:28:95:d4:ca:f3:74:67:ab:6b:dd: fc:1e:dc:93:a6:9b:cb:46:93:0f:c9:d5:5c:4b:51:ea:2e:9a: 4e:32:3f:31:c7:03:93:ea:13:62:60:aa:fb:78:58:43:92:84: ec:09:89:f0:0b:ce:bd:56:12:a9:88:a5:8a:88:47:bf:e9:f2: 16:fe:15:20:a7:12:0e:66:b4:85:f6:48:c6:a2:48:6b:63:d8: bc:26:e4:28:eb:34:9f:cf:39:6a:74:a7:ed:ca:1b:5e:9c:91: 3c:ea:ce:ce:a9:97:01:c8:90:ff:f2:cf:12:a2:c3:0c:ce:23: b7:c6:93:f2:87:ae:13:03:ef:42:36:12:b6:8e:6e:b5:29:b1: 56:e1:c1:2c:b4:76:02:fb:7f:05:6a:30:bf:b8:33:f8:10:70: 31:1c:25:61:5d:f0:00:72:de:9b:1d:ec:15:58:37:ac:93:3e: 54:ba:8c:08:ba:6e:34:7c:4f:fc:03:0b:d2:6d:32:de:48:ce: 3c:c5:32:74:1e:4c:ed:6a:bb:df:b0:51:3a:a3:d2:82:6d:ff: 11:11:ce:4a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUMRU2I40gX0Wnh9sELJ7m30gzSNgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJGNzFENkY4QzI0QkRCODBENjkyQkU4NkQ2RjdBRDM5 NTFCNkNFRTAeFw0yNTEwMTgyMDQ2NDZaFw0yNTEwMjIwMzE5NDZaMDMxMTAvBgNV BAMTKDExMjA2Mjk1RjI3RDJDQkE3OTg1QzkwREJFNzdDNzkwNjEyMjBEMUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFVqJ57JrTmAGGGuknzUrIwdDy 1O/igwcoB5hI84FVK3N/sJso/n5StJBYXckl+LTFm7yZUtYWQp4iAn6lkLRvnEOu A/ZklONQoeL0WBwFaeXpwllN489XOEPKHwCvukBbXGpr3VxeeNsIiTrheSidNSry mbJl6Z2qchpgiSgZSLjobAiCoXBjheiQGF9RbctTkv/C+FNZltGR3kqo7gDsl3hU LPcUzzvPXcpryR5zB5dT5EHfSoOljIfGeg0VnywOsSvwYlj1uSMqBzjl9fZleV/H 52CB/NuUSJ/OV2usCBlWo5MBXriv6i1cEReMfIn1GYeVNukxg4Bkl/eKCRc7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUESBilfJ9LLp5hckNvnfHkGEiDRwwHwYDVR0j BBgwFoAU2/cdb4wkvbgNaSvobW9605UbbO4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MzJjYWUzZi1iMzI5LTQ0MWItOTdmYy01YmI5ZmNjMDUxZDIvMC9EQkY3MUQ2RjhD MjRCREI4MEQ2OTJCRTg2RDZGN0FEMzk1MUI2Q0VFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREJGNzFENkY4QzI0QkRCODBENjkyQkU4NkQ2RjdBRDM5NTFC NkNFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDMyY2FlM2YtYjMyOS00NDFiLTk3 ZmMtNWJiOWZjYzA1MWQyLzAvREJGNzFENkY4QzI0QkRCODBENjkyQkU4NkQ2RjdB RDM5NTFCNkNFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADCmOdC+VlCPfmaAKATGCwMH5NhLBmg9kSCD rOrKAx70sPtTWXplTYTrplINKJXUyvN0Z6tr3fwe3JOmm8tGkw/J1VxLUeoumk4y PzHHA5PqE2Jgqvt4WEOShOwJifALzr1WEqmIpYqIR7/p8hb+FSCnEg5mtIX2SMai SGtj2Lwm5CjrNJ/POWp0p+3KG16ckTzqzs6plwHIkP/yzxKiwwzOI7fGk/KHrhMD 70I2EraObrUpsVbhwSy0dgL7fwVqML+4M/gQcDEcJWFd8ABy3psd7BVYN6yTPlS6 jAi6bjR8T/wDC9JtMt5IzjzFMnQeTO1qu9+wUTqj0oJt/xERzko= -----END CERTIFICATE-----Generated at Mon Oct 20 12:27:02 2025 by rpki-client