$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft File: DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft (raw, json) Hash identifier: 6y/Brz9Q9UqMVtsXhHNCzkhYQnsYWQSMHD2wvpGoC8w= Subject key identifier: 2D:BA:73:E4:39:7E:57:E6:33:29:EB:77:41:AC:6B:12:08:10:6F:3E Authority key identifier: DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3 Certificate issuer: /CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3 Certificate serial: 6C0B886F2233E80B977B99B8469BE16FACF3DDDC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft Manifest number: 021B Signing time: Sun 19 Oct 2025 10:20:56 +0000 Manifest this update: Sun 19 Oct 2025 10:15:56 +0000 Manifest next update: Wed 22 Oct 2025 21:34:56 +0000 Files and hashes: 1: DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl (hash: TvK9mX4IYlTcHihAS1Utmrnn8vCeDgvzU2sRIjnwp2k=) 2: 3130332e3131382e3137352e302f32342d3234203d3e20313532333638.roa (hash: kR8T9q/RgSSIceyvyByw5FPl6k8a1Y38HMh9CIjccZE=) 3: 3130332e3131382e3137352e302f32342d3234203d3e20313439393533.roa (hash: 9b88BYrc5fW60hCTvccg2BM34mQg6ZvvmRF6BzjVMcc=) 4: 3130332e3131382e3137342e302f32342d3234203d3e20313532333638.roa (hash: rTgQmdFwVK4QH13LPVhNkKRBGW9YevRVeOcoVmRvwXw=) 5: 323030313a6466313a316334303a3a2f34382d3438203d3e20313532333638.roa (hash: oHm/b4iyQLSGBhCpt6FnAGvZb8oOHkZH9fWssNMlC38=) 6: 3130332e3131382e3137352e302f32342d3234203d3e20323131343037.roa (hash: D7vL0dWhHLWGMsR8H6EfhySZTfu+/ovgCxiI8LpMnhg=) 7: 323030313a6466313a316334303a3a2f34382d3438203d3e20313439393533.roa (hash: 7NwT3lu9JZjfjgapimGfIHaWTUgpUh5i3OuwyUj48VY=) 8: 3130332e3131382e3137352e302f32342d3234203d3e20323130353337.roa (hash: H9HoLlwsPZ7vWOyU7iY4WK1IEAYm6ZYFQe1/pX+yL6k=) 9: 323030313a6466313a316334303a3a2f34382d3438203d3e203530313034.roa (hash: Wp9W2Rj7SOYCUcu19j3p/Fdm3AlKEhaeQ0agpMYNbvU=) 10: 3130332e3131382e3137342e302f32342d3234203d3e203530313034.roa (hash: +BXNEKTyQIjcl0qPczbAlblVHqKtw7MqFu+APMhxSxk=) 11: 3130332e3131382e3137352e302f32342d3234203d3e203530313034.roa (hash: 0f2PA52uub2AIW3HVhP+kRWDT2sjTpqTW3vdzs5HzME=) 12: 3130332e3131382e3137352e302f32342d3234203d3e203234333132.roa (hash: ZErCRMzj3m+Fl5KnJq4RrHkwrZjyK1a28QhPXfjqsjA=) 13: 3130332e3131382e3137342e302f32342d3234203d3e20323130353337.roa (hash: 5tTNaFKVIpcsc/okIuKSdd47tmmVdXhx+ntRKQSJMJQ=) 14: 3130332e3131382e3137342e302f32342d3234203d3e20313439393533.roa (hash: 1GWI9DsalLLnVqal8oinWe9NrHYqZtqJkFvL9lNkK+c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 21:34:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:0b:88:6f:22:33:e8:0b:97:7b:99:b8:46:9b:e1:6f:ac:f3:dd:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3 Validity Not Before: Oct 19 10:15:56 2025 GMT Not After : Oct 22 21:34:56 2025 GMT Subject: CN=2DBA73E4397E57E63329EB7741AC6B1208106F3E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:78:55:63:2f:8b:b1:1d:d9:fc:37:da:79:92: 23:14:94:9f:fd:a4:5f:72:5e:f8:ee:cd:d5:1e:eb: 39:04:82:06:82:87:67:46:ab:b8:8d:2d:55:a6:ff: 43:12:d7:b3:aa:75:4e:df:3a:6a:87:45:62:8c:25: 31:4b:1d:0c:a7:64:ba:f0:c7:c1:b7:f5:29:f4:dc: f2:bf:7d:8c:df:78:6c:49:00:db:da:36:d9:c4:c9: ec:c1:31:54:c6:e9:8c:e4:95:cd:28:fb:2d:f8:8d: f8:92:9f:20:63:24:1f:91:0d:f9:87:52:5c:1f:af: a7:96:fa:ea:f8:82:e7:c2:32:6e:c6:2d:a6:8f:78: 25:2d:07:e1:32:bf:3d:ba:6e:a7:20:c9:6e:c8:86: 8c:52:64:ab:c9:3d:57:c6:14:b4:b4:aa:27:b9:1b: 33:10:79:38:0e:9c:d3:96:7e:19:e7:88:62:2f:1e: e3:b6:63:e5:ea:9b:7b:81:11:8d:d7:f8:86:68:1f: 29:d8:fd:f1:e2:20:e2:7d:74:7d:48:06:e4:36:74: 1b:15:2a:3a:85:90:82:4a:9d:63:00:7f:78:0b:fd: 00:fa:74:02:bd:7f:95:f7:9c:de:cf:6f:3a:e7:06: 6f:28:d1:91:3b:cd:a3:2c:0c:8e:b3:74:36:2c:83: 47:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:BA:73:E4:39:7E:57:E6:33:29:EB:77:41:AC:6B:12:08:10:6F:3E X509v3 Authority Key Identifier: keyid:DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a5:09:4a:67:13:b2:14:fd:88:1d:69:11:94:9c:d4:4d:08:16: e1:d7:37:8f:bd:97:87:4c:83:38:96:35:bb:8c:8d:48:8e:0e: be:e2:0c:ac:ba:36:e6:a1:26:86:f6:dc:a2:c9:68:e9:f5:34: 91:03:94:f0:bb:79:71:6e:d7:a6:62:23:16:83:74:59:ed:3d: cc:c8:6d:9c:fb:4c:1b:bf:23:8c:d9:99:7a:2b:f1:94:e2:1f: 8a:9f:bb:ce:84:4d:89:98:87:1c:da:ef:b8:70:21:1f:be:23: 6c:b7:b9:17:07:43:ef:e2:1e:83:d5:e9:64:10:24:f5:84:e1: 3c:d7:9c:48:0a:38:16:a7:a9:67:68:95:78:4d:e5:51:0a:36: 14:f3:66:14:2a:35:c5:87:6d:7d:23:f8:e6:3b:33:de:e6:44: db:73:c4:b3:ea:78:16:ca:d9:52:bd:0f:b7:61:2c:d3:51:ee: 82:40:8c:1f:45:39:dd:a6:ce:02:92:d7:eb:5c:82:6d:0f:f1: e0:42:86:97:bc:3a:45:f8:1e:c7:7e:30:4f:73:39:d6:73:b9: c0:0d:4c:12:1e:cb:0c:96:d0:fd:7d:4f:86:e5:3c:a7:fe:72: fc:9a:e7:a6:92:1f:10:d4:4d:85:54:1f:15:c5:fa:d5:8f:08: 7d:22:78:22 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUbAuIbyIz6AuXe5m4Rpvhb6zz3dwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJCMThDQ0Y1ODkxNDUyNEFGQjExM0ZFMTMzNTlDQzZC MDhFRkJGMzAeFw0yNTEwMTkxMDE1NTZaFw0yNTEwMjIyMTM0NTZaMDMxMTAvBgNV BAMTKDJEQkE3M0U0Mzk3RTU3RTYzMzI5RUI3NzQxQUM2QjEyMDgxMDZGM0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMeFVjL4uxHdn8N9p5kiMUlJ/9 pF9yXvjuzdUe6zkEggaCh2dGq7iNLVWm/0MS17OqdU7fOmqHRWKMJTFLHQynZLrw x8G39Sn03PK/fYzfeGxJANvaNtnEyezBMVTG6Yzklc0o+y34jfiSnyBjJB+RDfmH Ulwfr6eW+ur4gufCMm7GLaaPeCUtB+Eyvz26bqcgyW7IhoxSZKvJPVfGFLS0qie5 GzMQeTgOnNOWfhnniGIvHuO2Y+Xqm3uBEY3X+IZoHynY/fHiIOJ9dH1IBuQ2dBsV KjqFkIJKnWMAf3gL/QD6dAK9f5X3nN7PbzrnBm8o0ZE7zaMsDI6zdDYsg0eLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULbpz5Dl+V+YzKet3QaxrEggQbz4wHwYDVR0j BBgwFoAU27GMz1iRRSSvsRP+EzWcxrCO+/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5ZDdjYi02Y2ZiLTRkZTAtOWRhYS1kMjIyYjdhODkwNzIvMC9EQkIxOENDRjU4 OTE0NTI0QUZCMTEzRkUxMzM1OUNDNkIwOEVGQkYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREJCMThDQ0Y1ODkxNDUyNEFGQjExM0ZFMTMzNTlDQzZCMDhF RkJGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjdkOWQ3Y2ItNmNmYi00ZGUwLTlk YWEtZDIyMmI3YTg5MDcyLzAvREJCMThDQ0Y1ODkxNDUyNEFGQjExM0ZFMTMzNTlD QzZCMDhFRkJGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKUJSmcTshT9iB1pEZSc1E0IFuHXN4+9l4dM gziWNbuMjUiODr7iDKy6NuahJob23KLJaOn1NJEDlPC7eXFu16ZiIxaDdFntPczI bZz7TBu/I4zZmXor8ZTiH4qfu86ETYmYhxza77hwIR++I2y3uRcHQ+/iHoPV6WQQ JPWE4TzXnEgKOBanqWdolXhN5VEKNhTzZhQqNcWHbX0j+OY7M97mRNtzxLPqeBbK 2VK9D7dhLNNR7oJAjB9FOd2mzgKS1+tcgm0P8eBChpe8OkX4Hsd+ME9zOdZzucAN TBIeywyW0P19T4blPKf+cvya56aSHxDUTYVUHxXF+tWPCH0ieCI= -----END CERTIFICATE-----Generated at Mon Oct 20 09:20:09 2025 by rpki-client