$ rpki-client -vvf repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.mft File: DB03D7B542C60D3D72565734C86589420DF070A0.mft (raw, json) Hash identifier: kYsu7qOJknM6kMzuj7u9OdXBSCK41eJWEa4KAfAEYsQ= Subject key identifier: 74:E9:CA:72:0B:38:6E:F8:6B:A3:5C:4C:5A:FD:13:56:75:F7:00:27 Authority key identifier: DB:03:D7:B5:42:C6:0D:3D:72:56:57:34:C8:65:89:42:0D:F0:70:A0 Certificate issuer: /CN=DB03D7B542C60D3D72565734C86589420DF070A0 Certificate serial: 66CBFD4105678AAEA7AB5D2B0A4FF01DDF2BAC46 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB03D7B542C60D3D72565734C86589420DF070A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.mft Manifest number: 01FE Signing time: Sat 28 Jun 2025 03:12:07 +0000 Manifest this update: Sat 28 Jun 2025 03:07:07 +0000 Manifest next update: Tue 01 Jul 2025 11:42:07 +0000 Files and hashes: 1: 3130332e3138362e3231322e302f32332d3234203d3e20313439373134.roa (hash: qTxbUW36PI+ML7M9h6pieAAtdA4D+wz75UuUpAqL/GM=) 2: DB03D7B542C60D3D72565734C86589420DF070A0.crl (hash: ez/dg2zrRNxE3XDqetJ/KBxbIdK2orfYzHcp7XFZuSY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.crl rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB03D7B542C60D3D72565734C86589420DF070A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 11:42:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:cb:fd:41:05:67:8a:ae:a7:ab:5d:2b:0a:4f:f0:1d:df:2b:ac:46 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB03D7B542C60D3D72565734C86589420DF070A0 Validity Not Before: Jun 28 03:07:07 2025 GMT Not After : Jul 1 11:42:07 2025 GMT Subject: CN=74E9CA720B386EF86BA35C4C5AFD135675F70027 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:af:10:74:1f:83:6c:79:19:c5:4a:2f:55:9c: 42:22:ae:af:6f:54:d0:77:3b:9a:88:23:3f:c5:68: 57:3c:0a:46:6b:2a:7d:d7:21:e1:96:74:28:66:fc: 21:37:25:7a:3e:39:75:df:16:23:4d:08:3e:58:b3: 3e:69:01:7b:63:92:43:a8:d1:8f:a7:5b:07:fd:03: a1:6b:c4:dc:43:e5:84:dd:98:82:47:c6:d0:d1:f3: bf:4d:9a:88:2c:c2:95:0a:4a:5b:6d:90:8b:41:32: 52:63:b7:95:6c:dd:6b:3d:fe:c2:f1:95:5c:2c:7d: a3:74:40:73:0f:ac:ad:29:43:89:57:18:49:9a:b6: 8f:3a:0d:57:3b:45:f2:c9:d0:52:59:b8:34:f3:8d: c0:9e:49:2e:3b:5b:1a:3f:5c:04:7a:ab:54:43:fd: 45:a4:23:ff:51:10:53:eb:90:19:30:75:5f:a9:67: 8e:6f:6e:f7:3f:6c:fb:87:5a:23:75:1c:8b:69:78: c8:15:14:9b:a1:b7:2a:2c:f0:26:5a:5e:f1:00:33: 01:97:18:1f:b1:1a:c6:f0:44:79:39:17:b6:97:d5: d8:b9:99:ff:6e:9f:e2:0a:09:f1:ce:5e:57:9d:1f: 65:92:e7:c9:aa:42:c4:f9:ec:f1:38:5d:a6:bc:45: ff:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:E9:CA:72:0B:38:6E:F8:6B:A3:5C:4C:5A:FD:13:56:75:F7:00:27 X509v3 Authority Key Identifier: keyid:DB:03:D7:B5:42:C6:0D:3D:72:56:57:34:C8:65:89:42:0D:F0:70:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB03D7B542C60D3D72565734C86589420DF070A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:95:83:39:95:3d:02:a0:cb:19:09:db:5d:9b:5e:ae:e0:b2: d8:9d:9a:9d:65:77:63:f2:63:71:97:b9:49:9e:55:93:b9:7c: bd:bf:62:5e:b7:f1:42:8c:48:8b:a0:33:bc:d9:5c:82:d9:99: 29:9a:83:cc:24:44:76:f8:8f:38:d4:8d:01:2e:a4:7d:d3:5e: 09:2b:95:96:29:84:d8:5c:84:25:59:e8:4a:15:3a:e5:e1:d4: 38:dd:40:93:43:19:53:ae:57:a4:ac:de:45:37:dc:c7:7e:b8: 7f:f7:10:14:92:8e:6f:3b:a8:d3:c3:11:38:a8:ad:91:df:74: 6c:76:20:ce:e0:2c:a2:1b:89:ae:25:07:49:56:ac:1d:49:63: ea:34:1a:e7:6f:b3:f4:22:19:55:93:57:c2:d3:0f:05:ad:31: 94:a7:4d:74:cf:28:7a:f9:67:85:9d:56:9a:ac:64:b6:6b:1c: 6e:9b:fa:f6:59:3f:14:69:a8:36:77:bb:90:02:3a:71:36:77: dd:eb:45:2f:75:c9:ed:7d:af:5e:db:f8:fa:da:76:cd:72:16: 57:53:8f:15:83:b2:9a:db:81:dd:88:5f:45:e4:a1:9d:cf:c3: 69:8c:d0:40:f4:95:05:24:57:35:ea:8a:f3:7e:7a:16:7a:e2: 01:6f:78:24 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUZsv9QQVniq6nq10rCk/wHd8rrEYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIwM0Q3QjU0MkM2MEQzRDcyNTY1NzM0Qzg2NTg5NDIw REYwNzBBMDAeFw0yNTA2MjgwMzA3MDdaFw0yNTA3MDExMTQyMDdaMDMxMTAvBgNV BAMTKDc0RTlDQTcyMEIzODZFRjg2QkEzNUM0QzVBRkQxMzU2NzVGNzAwMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbrxB0H4NseRnFSi9VnEIirq9v VNB3O5qIIz/FaFc8CkZrKn3XIeGWdChm/CE3JXo+OXXfFiNNCD5Ysz5pAXtjkkOo 0Y+nWwf9A6FrxNxD5YTdmIJHxtDR879NmogswpUKSlttkItBMlJjt5Vs3Ws9/sLx lVwsfaN0QHMPrK0pQ4lXGEmato86DVc7RfLJ0FJZuDTzjcCeSS47Wxo/XAR6q1RD /UWkI/9REFPrkBkwdV+pZ45vbvc/bPuHWiN1HItpeMgVFJuhtyos8CZaXvEAMwGX GB+xGsbwRHk5F7aX1di5mf9un+IKCfHOXledH2WS58mqQsT57PE4Xaa8Rf/RAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUdOnKcgs4bvhro1xMWv0TVnX3ACcwHwYDVR0j BBgwFoAU2wPXtULGDT1yVlc0yGWJQg3wcKAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NGYyODIzNS0wYmE4LTRlMTQtOGI4NS0yOWMzYTRhNzZlYWIvMC9EQjAzRDdCNTQy QzYwRDNENzI1NjU3MzRDODY1ODk0MjBERjA3MEEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREIwM0Q3QjU0MkM2MEQzRDcyNTY1NzM0Qzg2NTg5NDIwREYw NzBBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDRmMjgyMzUtMGJhOC00ZTE0LThi ODUtMjljM2E0YTc2ZWFiLzAvREIwM0Q3QjU0MkM2MEQzRDcyNTY1NzM0Qzg2NTg5 NDIwREYwNzBBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACuVgzmVPQKgyxkJ212bXq7gstidmp1ld2Py Y3GXuUmeVZO5fL2/Yl638UKMSIugM7zZXILZmSmag8wkRHb4jzjUjQEupH3TXgkr lZYphNhchCVZ6EoVOuXh1DjdQJNDGVOuV6Ss3kU33Md+uH/3EBSSjm87qNPDETio rZHfdGx2IM7gLKIbia4lB0lWrB1JY+o0Gudvs/QiGVWTV8LTDwWtMZSnTXTPKHr5 Z4WdVpqsZLZrHG6b+vZZPxRpqDZ3u5ACOnE2d93rRS91ye19r17b+Prads1yFldT jxWDsprbgd2IX0XkoZ3Pw2mM0ED0lQUkVzXqivN+ehZ64gFveCQ= -----END CERTIFICATE-----Generated at Sun Jun 29 18:13:02 2025 by rpki-client