$ rpki-client -vvf repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft File: DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft (raw, json) Hash identifier: 5gEhYgSYnL/LCThVPMy4leG2LqoebaHBg/FUFIODCxo= Subject key identifier: AA:9B:D8:1F:2E:AB:E2:0C:23:D8:D7:F5:56:AD:A9:67:C1:CB:7E:87 Authority key identifier: DB:1E:31:B6:A9:85:67:91:C3:1B:99:A7:3C:0F:39:01:18:E5:4E:B8 Certificate issuer: /CN=DB1E31B6A9856791C31B99A73C0F390118E54EB8 Certificate serial: 187BC834B9FFFF978B50C9E2A252E61C32E75245 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1E31B6A9856791C31B99A73C0F390118E54EB8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft Manifest number: 0163 Signing time: Fri 22 Aug 2025 09:40:36 +0000 Manifest this update: Fri 22 Aug 2025 09:35:36 +0000 Manifest next update: Mon 25 Aug 2025 13:00:36 +0000 Files and hashes: 1: 3130332e3136342e38332e302f32342d3234203d3e20313431393036.roa (hash: hqJzUmkGfm1tL5Cu+d0Y0jzRfSAbuU8h9B0SylrnKNo=) 2: DB1E31B6A9856791C31B99A73C0F390118E54EB8.crl (hash: N5uHCvw6IetNwPDY7HqbIOC3Ect6cs4XwTpBB9KhrcY=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.crl rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1E31B6A9856791C31B99A73C0F390118E54EB8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 13:00:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:7b:c8:34:b9:ff:ff:97:8b:50:c9:e2:a2:52:e6:1c:32:e7:52:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB1E31B6A9856791C31B99A73C0F390118E54EB8 Validity Not Before: Aug 22 09:35:36 2025 GMT Not After : Aug 25 13:00:36 2025 GMT Subject: CN=AA9BD81F2EABE20C23D8D7F556ADA967C1CB7E87 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:b4:09:e2:35:5d:fb:8e:d1:48:b8:10:cc:66: e1:ab:6f:d6:0a:9d:ca:68:b8:51:1f:36:02:84:66: cb:8e:48:4a:3e:65:a6:8b:2d:12:71:a7:3c:20:5a: 7b:1e:b2:fd:6d:2d:85:43:53:e2:a8:1f:66:b7:c5: d4:4a:af:66:b7:9f:d3:3d:c2:84:a3:6c:42:6f:6e: c1:37:86:6a:58:c4:d1:30:58:5c:08:99:5e:22:fd: 9c:7d:03:fe:6b:a5:6f:a7:f2:76:70:de:75:88:42: f4:9c:05:b7:b0:58:1a:79:37:0d:a4:fb:e3:37:82: 33:94:f5:88:4c:87:91:70:7e:1e:ae:11:03:73:ec: 42:45:0c:e9:b9:4a:a6:3e:bc:4f:d9:64:24:a6:e0: 7b:7c:04:14:74:a1:d4:5a:0e:77:cf:4d:55:43:87: 51:49:6f:a6:5b:18:5a:99:ad:11:11:dd:70:ce:b2: 00:9f:6d:84:46:a8:f1:4f:b4:ed:c1:2f:c5:a5:68: 3d:af:ec:11:90:92:8d:ce:d7:fc:67:09:7f:7b:47: 13:5e:e7:c9:00:d4:9b:f1:2e:ae:b1:81:5e:6b:4e: ff:58:89:41:53:82:e4:50:16:b5:48:c7:02:f5:5b: 9c:ea:9c:27:64:cf:fd:b3:72:0e:8d:96:24:59:d4: d4:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AA:9B:D8:1F:2E:AB:E2:0C:23:D8:D7:F5:56:AD:A9:67:C1:CB:7E:87 X509v3 Authority Key Identifier: keyid:DB:1E:31:B6:A9:85:67:91:C3:1B:99:A7:3C:0F:39:01:18:E5:4E:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1E31B6A9856791C31B99A73C0F390118E54EB8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:30:94:79:57:7f:f3:d4:3e:3b:33:4e:c2:fd:0a:a9:11:12: f0:4b:b7:80:fd:14:cc:87:c5:a1:a7:ac:ce:f3:94:a6:86:5d: 7d:79:71:9f:33:eb:ca:88:5c:40:49:74:4c:cf:2c:91:cc:f8: 06:f2:ac:fe:83:fd:e9:75:84:e9:c3:08:ac:07:6d:63:20:bc: d7:0f:0f:95:c1:8c:46:e7:69:f4:a8:74:1b:96:ad:ae:b3:4b: b1:89:34:b1:dc:22:1e:ec:8b:ee:49:18:df:b1:e0:ae:5c:03: 8a:0c:2f:21:8a:06:d5:1f:5c:f5:8d:d7:6e:05:10:3f:53:1e: 05:c8:03:50:e2:3f:56:ab:32:65:77:26:dc:e3:c9:d5:cc:d4: 46:52:d7:26:e8:f7:b2:a3:54:b3:bb:82:8f:db:c0:71:21:09: ed:9f:c1:5d:48:b4:7a:c3:e1:a5:51:95:ec:15:21:0c:78:4e: 63:b1:d0:c5:89:ef:6f:f7:e4:1f:50:43:2d:f7:63:62:38:60: 01:11:71:31:6d:96:7d:85:88:3b:02:a2:e7:1e:c4:a7:fc:3e: b2:31:63:4a:d9:8d:4e:72:10:98:54:34:12:86:f8:c3:3f:d6: 76:61:2d:05:ee:80:aa:eb:14:a2:10:dc:ec:72:39:32:63:f2: 18:f8:43:06 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUGHvINLn//5eLUMniolLmHDLnUkUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIxRTMxQjZBOTg1Njc5MUMzMUI5OUE3M0MwRjM5MDEx OEU1NEVCODAeFw0yNTA4MjIwOTM1MzZaFw0yNTA4MjUxMzAwMzZaMDMxMTAvBgNV BAMTKEFBOUJEODFGMkVBQkUyMEMyM0Q4RDdGNTU2QURBOTY3QzFDQjdFODcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3tAniNV37jtFIuBDMZuGrb9YK ncpouFEfNgKEZsuOSEo+ZaaLLRJxpzwgWnsesv1tLYVDU+KoH2a3xdRKr2a3n9M9 woSjbEJvbsE3hmpYxNEwWFwImV4i/Zx9A/5rpW+n8nZw3nWIQvScBbewWBp5Nw2k ++M3gjOU9YhMh5Fwfh6uEQNz7EJFDOm5SqY+vE/ZZCSm4Ht8BBR0odRaDnfPTVVD h1FJb6ZbGFqZrRER3XDOsgCfbYRGqPFPtO3BL8WlaD2v7BGQko3O1/xnCX97RxNe 58kA1JvxLq6xgV5rTv9YiUFTguRQFrVIxwL1W5zqnCdkz/2zcg6NliRZ1NT7AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUqpvYHy6r4gwj2Nf1Vq2pZ8HLfocwHwYDVR0j BBgwFoAU2x4xtqmFZ5HDG5mnPA85ARjlTrgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTE4ZjhhMC05M2FlLTQzNTktOGE1ZC0xY2E2NzhiZTU2NjgvMC9EQjFFMzFCNkE5 ODU2NzkxQzMxQjk5QTczQzBGMzkwMTE4RTU0RUI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREIxRTMxQjZBOTg1Njc5MUMzMUI5OUE3M0MwRjM5MDExOEU1 NEVCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmExOGY4YTAtOTNhZS00MzU5LThh NWQtMWNhNjc4YmU1NjY4LzAvREIxRTMxQjZBOTg1Njc5MUMzMUI5OUE3M0MwRjM5 MDExOEU1NEVCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKgwlHlXf/PUPjszTsL9CqkREvBLt4D9FMyH xaGnrM7zlKaGXX15cZ8z68qIXEBJdEzPLJHM+AbyrP6D/el1hOnDCKwHbWMgvNcP D5XBjEbnafSodBuWra6zS7GJNLHcIh7si+5JGN+x4K5cA4oMLyGKBtUfXPWN124F ED9THgXIA1DiP1arMmV3JtzjydXM1EZS1ybo97KjVLO7go/bwHEhCe2fwV1ItHrD 4aVRlewVIQx4TmOx0MWJ72/35B9QQy33Y2I4YAERcTFtln2FiDsCoucexKf8PrIx Y0rZjU5yEJhUNBKG+MM/1nZhLQXugKrrFKIQ3OxyOTJj8hj4QwY= -----END CERTIFICATE-----Generated at Sat Aug 23 14:04:39 2025 by rpki-client