$ rpki-client -vvf repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft File: DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft (raw, json) Hash identifier: RXQvQb5sUyoWKKB/bRMCs/YZ6lDHc3QvNBpgIzTlbgU= Subject key identifier: B8:6D:61:F6:31:43:41:AA:36:7F:94:99:B3:DC:7A:4E:DD:25:B8:60 Authority key identifier: DB:1E:31:B6:A9:85:67:91:C3:1B:99:A7:3C:0F:39:01:18:E5:4E:B8 Certificate issuer: /CN=DB1E31B6A9856791C31B99A73C0F390118E54EB8 Certificate serial: 54F17E1C68564D3F94BC10A99BCAEA571839DE49 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1E31B6A9856791C31B99A73C0F390118E54EB8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft Manifest number: 017C Signing time: Sat 18 Oct 2025 13:00:36 +0000 Manifest this update: Sat 18 Oct 2025 12:55:36 +0000 Manifest next update: Wed 22 Oct 2025 00:07:36 +0000 Files and hashes: 1: DB1E31B6A9856791C31B99A73C0F390118E54EB8.crl (hash: AIngh8sP4XynicisjFjx1LfsoY5o2jKNeMsg3v4XHr0=) 2: 3130332e3136342e38332e302f32342d3234203d3e20313431393036.roa (hash: hqJzUmkGfm1tL5Cu+d0Y0jzRfSAbuU8h9B0SylrnKNo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.crl rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1E31B6A9856791C31B99A73C0F390118E54EB8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 22 Oct 2025 00:07:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:f1:7e:1c:68:56:4d:3f:94:bc:10:a9:9b:ca:ea:57:18:39:de:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB1E31B6A9856791C31B99A73C0F390118E54EB8 Validity Not Before: Oct 18 12:55:36 2025 GMT Not After : Oct 22 00:07:36 2025 GMT Subject: CN=B86D61F6314341AA367F9499B3DC7A4EDD25B860 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:05:fd:69:76:76:53:ec:92:b3:1c:76:2c:96: a6:c8:5c:e6:c3:f7:38:b1:53:48:3f:f3:d3:5d:dc: f4:9a:5a:2c:e0:e0:a5:5a:99:11:33:e7:f3:9d:99: ac:99:34:3a:b4:34:88:12:19:11:0e:b3:68:b6:dc: e2:54:b4:1c:d5:c5:bb:1f:38:e4:9e:f6:4a:9b:e3: 10:15:2c:41:b0:ff:09:d7:d1:f0:be:71:d7:c7:ce: 34:c9:70:75:52:99:3d:33:79:50:5e:58:41:40:a8: 8b:e8:55:70:24:c7:f5:70:a3:d8:9e:e0:82:e3:92: a4:ac:98:18:62:6e:63:22:ed:c1:ed:40:0f:24:83: e0:52:77:82:27:c8:30:d1:e5:07:6d:45:64:05:cc: 35:bd:15:92:dc:09:83:3b:04:86:83:1f:2a:c6:9b: 50:2e:22:35:44:3d:b1:e8:d8:00:ae:ad:54:9d:da: 2f:13:2d:e1:2d:77:bd:e5:16:cc:dd:e7:16:bb:3f: 0c:99:ed:1d:1f:5d:92:a2:d0:2c:67:9b:ec:bb:ec: dd:b2:4d:af:75:0a:39:a3:6b:ba:8c:c0:6c:a7:cb: 26:37:e0:dd:27:e5:f7:78:ea:df:5c:32:0c:92:58: f9:98:24:9d:e2:ba:93:11:b7:b1:70:c4:d2:95:b0: cb:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B8:6D:61:F6:31:43:41:AA:36:7F:94:99:B3:DC:7A:4E:DD:25:B8:60 X509v3 Authority Key Identifier: keyid:DB:1E:31:B6:A9:85:67:91:C3:1B:99:A7:3C:0F:39:01:18:E5:4E:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1E31B6A9856791C31B99A73C0F390118E54EB8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 47:2e:7a:d9:41:a5:43:9d:c9:01:10:21:d7:8b:05:64:98:29: a0:cc:be:46:00:93:22:fe:22:c3:6a:13:70:d8:95:79:c2:c3: 51:c0:68:5c:ad:e6:d9:7d:e8:93:e9:01:e3:36:db:68:8b:f9: a0:26:cb:c4:2c:60:3a:1f:fc:d6:3d:15:06:95:b3:1d:93:dd: ea:ea:b8:ba:ca:5e:5b:b6:1c:3c:81:16:77:c2:3a:13:da:16: dc:77:59:47:75:35:91:5c:7a:98:10:4d:7a:02:0f:ca:d8:6b: 3e:91:4d:3f:00:94:eb:b1:32:2b:c2:b1:84:49:b7:86:b4:97: 91:f8:a5:0d:ec:18:7a:e3:4d:a4:2f:fb:78:0d:26:81:43:ef: 9b:f5:b7:0d:05:5c:87:0a:3c:69:0f:1b:fc:97:07:99:9e:09: 13:7d:cf:ca:1c:73:16:61:38:f0:61:6c:c6:3b:3d:56:77:c6: 78:09:0f:2f:6a:de:90:a6:b1:e3:85:fd:03:8b:1e:57:ad:6a: 3e:20:2d:22:15:ed:7b:61:9f:84:29:3e:89:a9:b2:de:b3:c2: 59:c5:ec:26:4f:15:37:5e:76:9b:23:90:06:ee:26:a0:91:b8: e6:9a:d0:ba:98:73:94:96:25:e9:ac:24:ab:58:39:b2:59:c8: ef:0e:e5:b7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVPF+HGhWTT+UvBCpm8rqVxg53kkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIxRTMxQjZBOTg1Njc5MUMzMUI5OUE3M0MwRjM5MDEx OEU1NEVCODAeFw0yNTEwMTgxMjU1MzZaFw0yNTEwMjIwMDA3MzZaMDMxMTAvBgNV BAMTKEI4NkQ2MUY2MzE0MzQxQUEzNjdGOTQ5OUIzREM3QTRFREQyNUI4NjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZBf1pdnZT7JKzHHYslqbIXObD 9zixU0g/89Nd3PSaWizg4KVamREz5/OdmayZNDq0NIgSGREOs2i23OJUtBzVxbsf OOSe9kqb4xAVLEGw/wnX0fC+cdfHzjTJcHVSmT0zeVBeWEFAqIvoVXAkx/Vwo9ie 4ILjkqSsmBhibmMi7cHtQA8kg+BSd4InyDDR5QdtRWQFzDW9FZLcCYM7BIaDHyrG m1AuIjVEPbHo2ACurVSd2i8TLeEtd73lFszd5xa7PwyZ7R0fXZKi0Cxnm+y77N2y Ta91Cjmja7qMwGynyyY34N0n5fd46t9cMgySWPmYJJ3iupMRt7FwxNKVsMvLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUuG1h9jFDQao2f5SZs9x6Tt0luGAwHwYDVR0j BBgwFoAU2x4xtqmFZ5HDG5mnPA85ARjlTrgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTE4ZjhhMC05M2FlLTQzNTktOGE1ZC0xY2E2NzhiZTU2NjgvMC9EQjFFMzFCNkE5 ODU2NzkxQzMxQjk5QTczQzBGMzkwMTE4RTU0RUI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREIxRTMxQjZBOTg1Njc5MUMzMUI5OUE3M0MwRjM5MDExOEU1 NEVCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmExOGY4YTAtOTNhZS00MzU5LThh NWQtMWNhNjc4YmU1NjY4LzAvREIxRTMxQjZBOTg1Njc5MUMzMUI5OUE3M0MwRjM5 MDExOEU1NEVCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEcuetlBpUOdyQEQIdeLBWSYKaDMvkYAkyL+ IsNqE3DYlXnCw1HAaFyt5tl96JPpAeM222iL+aAmy8QsYDof/NY9FQaVsx2T3erq uLrKXlu2HDyBFnfCOhPaFtx3WUd1NZFcepgQTXoCD8rYaz6RTT8AlOuxMivCsYRJ t4a0l5H4pQ3sGHrjTaQv+3gNJoFD75v1tw0FXIcKPGkPG/yXB5meCRN9z8occxZh OPBhbMY7PVZ3xngJDy9q3pCmseOF/QOLHletaj4gLSIV7Xthn4QpPompst6zwlnF 7CZPFTdedpsjkAbuJqCRuOaa0LqYc5SWJemsJKtYObJZyO8O5bc= -----END CERTIFICATE-----Generated at Mon Oct 20 10:18:21 2025 by rpki-client