$ rpki-client -vvf repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.mft File: DB03D7B542C60D3D72565734C86589420DF070A0.mft (raw, json) Hash identifier: wNSKndrZHUaPUFkzzzzUk70XoQrm9YUk1vPFYMrwomM= Subject key identifier: CD:EB:C2:72:23:A7:0B:60:51:DE:46:11:60:7F:2D:60:B3:48:84:09 Authority key identifier: DB:03:D7:B5:42:C6:0D:3D:72:56:57:34:C8:65:89:42:0D:F0:70:A0 Certificate issuer: /CN=DB03D7B542C60D3D72565734C86589420DF070A0 Certificate serial: 5178AA8033DD487CDE9A31E7D1E063DAD9135250 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB03D7B542C60D3D72565734C86589420DF070A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.mft Manifest number: 0216 Signing time: Wed 20 Aug 2025 21:32:09 +0000 Manifest this update: Wed 20 Aug 2025 21:27:09 +0000 Manifest next update: Sun 24 Aug 2025 08:45:09 +0000 Files and hashes: 1: 3130332e3138362e3231322e302f32332d3234203d3e20313439373134.roa (hash: qTxbUW36PI+ML7M9h6pieAAtdA4D+wz75UuUpAqL/GM=) 2: DB03D7B542C60D3D72565734C86589420DF070A0.crl (hash: yV1G/lYbdbP7Qzom00kY+PLNs+RD8bPaRnVVaGn9B8w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.crl rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB03D7B542C60D3D72565734C86589420DF070A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 08:45:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:78:aa:80:33:dd:48:7c:de:9a:31:e7:d1:e0:63:da:d9:13:52:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB03D7B542C60D3D72565734C86589420DF070A0 Validity Not Before: Aug 20 21:27:09 2025 GMT Not After : Aug 24 08:45:09 2025 GMT Subject: CN=CDEBC27223A70B6051DE4611607F2D60B3488409 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:d8:8b:e1:52:a5:61:94:5f:13:32:5a:01:33: 2d:9c:6a:c1:60:49:6e:dc:35:09:5c:ef:3b:e3:9f: c2:ea:88:46:af:c1:23:ef:17:a0:75:14:4b:78:aa: 30:aa:fa:29:76:cf:63:9b:b0:c3:0b:a6:6a:f3:af: 95:21:7c:d2:7e:e8:8f:2b:24:73:45:43:de:11:fe: f9:ed:f3:57:9e:a3:9a:19:08:4b:23:e4:31:6c:d3: ac:6f:b1:bf:bf:8a:76:dd:86:e1:92:c1:84:4e:dd: 63:c5:ec:91:35:5c:19:81:87:a5:4e:47:6b:d8:77: 07:3e:4b:34:3b:4b:3e:e6:32:c1:16:de:1c:b3:72: 32:5a:71:13:00:d8:2f:15:11:12:e5:16:7a:ee:34: 74:5b:ac:41:99:d7:c8:14:9f:6b:ea:5a:41:93:df: 37:49:a5:b4:f3:85:30:56:36:09:a2:33:fd:fa:fb: a1:a1:40:1f:88:d7:0b:57:f9:40:ed:d5:ff:3e:71: 71:26:12:82:7c:55:a3:d6:38:e0:3e:4b:e0:84:78: 4f:92:3c:9d:af:33:b5:2a:d8:7c:75:32:c1:c1:07: 3f:56:e8:b0:e3:d4:e8:a7:94:de:3d:6d:39:8a:1e: 39:49:98:7c:47:45:cc:95:87:50:0d:25:df:63:0c: 15:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:EB:C2:72:23:A7:0B:60:51:DE:46:11:60:7F:2D:60:B3:48:84:09 X509v3 Authority Key Identifier: keyid:DB:03:D7:B5:42:C6:0D:3D:72:56:57:34:C8:65:89:42:0D:F0:70:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB03D7B542C60D3D72565734C86589420DF070A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:3c:f7:41:12:4e:8c:1c:fa:f3:37:05:f0:c1:62:b4:b1:13: da:af:fd:70:20:b4:42:e8:da:47:bc:9d:04:19:2b:f9:72:ae: 92:aa:ee:ed:21:46:70:16:7d:31:a4:cd:93:23:3e:88:f3:ee: 7d:e1:73:8e:f8:7f:bd:02:44:81:bf:a2:f3:22:b0:28:14:a9: d2:3e:5d:dc:71:8c:11:6e:db:f2:07:fc:95:a4:e2:39:8f:ef: 06:28:a9:f5:0a:35:24:ea:ca:8d:48:00:14:43:c1:b0:92:4f: 15:1e:59:7a:0c:26:29:b8:ac:2f:88:a8:0d:3d:b8:8e:21:77: 86:26:08:c6:69:fe:d1:fa:cf:8c:f5:98:1e:b1:24:55:b2:97: 2c:16:58:24:54:8c:f0:be:0b:4e:39:88:66:20:cc:c1:b4:44: 17:72:94:b7:b1:dc:26:99:99:aa:16:bd:0b:60:48:6a:fb:c6: 5b:7b:e5:d0:66:41:94:4d:74:24:27:3f:63:08:14:65:8c:df: a1:88:9b:0c:14:32:91:2d:d2:c1:21:15:a9:d9:a5:0e:5c:6a: 13:8d:18:d7:8c:e2:b9:15:15:72:13:b6:f1:97:be:8c:c3:e6: c7:00:ac:ea:bb:1e:ff:5a:27:12:77:02:31:10:1a:b6:88:63: 3d:2c:7d:4f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUXiqgDPdSHzemjHn0eBj2tkTUlAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIwM0Q3QjU0MkM2MEQzRDcyNTY1NzM0Qzg2NTg5NDIw REYwNzBBMDAeFw0yNTA4MjAyMTI3MDlaFw0yNTA4MjQwODQ1MDlaMDMxMTAvBgNV BAMTKENERUJDMjcyMjNBNzBCNjA1MURFNDYxMTYwN0YyRDYwQjM0ODg0MDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCv2IvhUqVhlF8TMloBMy2casFg SW7cNQlc7zvjn8LqiEavwSPvF6B1FEt4qjCq+il2z2ObsMMLpmrzr5UhfNJ+6I8r JHNFQ94R/vnt81eeo5oZCEsj5DFs06xvsb+/inbdhuGSwYRO3WPF7JE1XBmBh6VO R2vYdwc+SzQ7Sz7mMsEW3hyzcjJacRMA2C8VERLlFnruNHRbrEGZ18gUn2vqWkGT 3zdJpbTzhTBWNgmiM/36+6GhQB+I1wtX+UDt1f8+cXEmEoJ8VaPWOOA+S+CEeE+S PJ2vM7Uq2Hx1MsHBBz9W6LDj1OinlN49bTmKHjlJmHxHRcyVh1ANJd9jDBW/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUzevCciOnC2BR3kYRYH8tYLNIhAkwHwYDVR0j BBgwFoAU2wPXtULGDT1yVlc0yGWJQg3wcKAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NGYyODIzNS0wYmE4LTRlMTQtOGI4NS0yOWMzYTRhNzZlYWIvMC9EQjAzRDdCNTQy QzYwRDNENzI1NjU3MzRDODY1ODk0MjBERjA3MEEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREIwM0Q3QjU0MkM2MEQzRDcyNTY1NzM0Qzg2NTg5NDIwREYw NzBBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDRmMjgyMzUtMGJhOC00ZTE0LThi ODUtMjljM2E0YTc2ZWFiLzAvREIwM0Q3QjU0MkM2MEQzRDcyNTY1NzM0Qzg2NTg5 NDIwREYwNzBBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAMw890ESTowc+vM3BfDBYrSxE9qv/XAgtELo 2ke8nQQZK/lyrpKq7u0hRnAWfTGkzZMjPojz7n3hc474f70CRIG/ovMisCgUqdI+ XdxxjBFu2/IH/JWk4jmP7wYoqfUKNSTqyo1IABRDwbCSTxUeWXoMJim4rC+IqA09 uI4hd4YmCMZp/tH6z4z1mB6xJFWylywWWCRUjPC+C045iGYgzMG0RBdylLex3CaZ maoWvQtgSGr7xlt75dBmQZRNdCQnP2MIFGWM36GImwwUMpEt0sEhFanZpQ5cahON GNeM4rkVFXITtvGXvozD5scArOq7Hv9aJxJ3AjEQGraIYz0sfU8= -----END CERTIFICATE-----Generated at Sat Aug 23 10:07:53 2025 by rpki-client