$ rpki-client -vvf repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft File: DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft (raw, json) Hash identifier: pVIIU4GxHc2Xwl0DSpx79ZzRq3OPP3kxpH+qrdqGjtk= Subject key identifier: 61:A0:AD:D9:50:BB:CF:F2:AC:66:6E:92:A5:A2:72:1F:11:C6:2F:26 Authority key identifier: DB:1E:31:B6:A9:85:67:91:C3:1B:99:A7:3C:0F:39:01:18:E5:4E:B8 Certificate issuer: /CN=DB1E31B6A9856791C31B99A73C0F390118E54EB8 Certificate serial: 13155C7E92019AADAFF759E530F26BA4EDCC738E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1E31B6A9856791C31B99A73C0F390118E54EB8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft Manifest number: 014C Signing time: Mon 30 Jun 2025 21:10:35 +0000 Manifest this update: Mon 30 Jun 2025 21:05:35 +0000 Manifest next update: Fri 04 Jul 2025 01:04:35 +0000 Files and hashes: 1: 3130332e3136342e38332e302f32342d3234203d3e20313431393036.roa (hash: hqJzUmkGfm1tL5Cu+d0Y0jzRfSAbuU8h9B0SylrnKNo=) 2: DB1E31B6A9856791C31B99A73C0F390118E54EB8.crl (hash: 81hvQ1jAWcGUFxd6GLKJxlTT2JNKUtSHo5AireF7kyE=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.crl rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1E31B6A9856791C31B99A73C0F390118E54EB8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 04 Jul 2025 01:04:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 13:15:5c:7e:92:01:9a:ad:af:f7:59:e5:30:f2:6b:a4:ed:cc:73:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB1E31B6A9856791C31B99A73C0F390118E54EB8 Validity Not Before: Jun 30 21:05:35 2025 GMT Not After : Jul 4 01:04:35 2025 GMT Subject: CN=61A0ADD950BBCFF2AC666E92A5A2721F11C62F26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:8c:61:b6:1b:c2:87:a4:1d:c5:37:bd:e7:e6: a0:51:40:2e:7a:7d:0d:e6:f9:89:66:18:36:0f:4a: c7:7b:e3:4e:6f:fc:71:28:b7:59:67:23:34:61:91: 5f:fb:28:ba:15:7f:e5:a6:c6:a8:87:5a:5d:b6:a0: d5:f3:0b:1b:18:ce:02:7c:4e:94:5b:11:ff:e7:6d: ec:19:13:f9:15:c3:b3:d2:5a:d9:7e:ff:13:a0:f7: 68:45:d3:19:b9:27:c9:6e:79:2e:e9:e7:43:5b:fd: ac:1b:fd:89:eb:40:93:c0:57:e5:b4:34:f2:72:54: cc:88:a8:fb:15:d9:d5:17:c4:29:bf:65:d6:4b:b3: 51:2e:c2:aa:13:12:ac:a6:78:7d:d9:ca:4a:94:52: 6d:f4:4a:ec:40:0e:e9:b6:3a:5e:36:72:8d:04:9c: ad:ce:6f:2d:49:24:13:e2:b2:0f:fe:0d:1c:fd:1d: 53:55:18:0d:98:15:34:1a:da:5e:01:bc:de:96:ac: 32:53:54:94:02:a7:38:c7:4c:22:cb:f6:d9:f1:e0: cd:cb:c7:29:ac:62:00:d4:61:db:ed:10:4a:ad:9d: 32:c1:8b:9e:1e:62:50:21:14:1a:58:71:e3:17:72: 28:e8:e5:cd:9f:a3:8b:1d:83:2d:8a:ab:ea:c7:4f: e3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:A0:AD:D9:50:BB:CF:F2:AC:66:6E:92:A5:A2:72:1F:11:C6:2F:26 X509v3 Authority Key Identifier: keyid:DB:1E:31:B6:A9:85:67:91:C3:1B:99:A7:3C:0F:39:01:18:E5:4E:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1E31B6A9856791C31B99A73C0F390118E54EB8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 43:bd:70:f6:9e:43:ff:3e:d4:d8:54:00:59:92:6c:9e:bd:e1: ae:65:28:e7:74:08:5a:df:a1:af:60:2a:52:c8:51:dc:4b:62: a5:45:2f:34:5b:03:de:4d:3f:82:b9:cf:3e:78:0d:06:0c:a8: 39:14:87:53:34:81:95:15:df:c1:98:86:84:ce:19:82:49:d7: 26:d6:be:67:5f:23:95:3b:30:63:1b:8c:32:2c:6c:d4:64:69: 1b:0c:6d:34:ec:54:01:70:fa:b9:f6:dd:11:11:55:12:4c:ea: a3:08:fd:7a:a0:c5:3f:a6:3f:b9:21:f3:0f:db:5d:fc:92:f7: 62:3f:c1:3a:9b:b0:32:f1:fa:18:24:95:bc:ac:9c:e3:8a:b6: d3:a8:17:48:1e:4d:9e:68:dd:de:e8:61:15:b7:9e:a8:60:73: d1:15:9b:f4:e6:00:12:67:0e:80:49:d2:9f:7a:a2:3e:46:78: ff:58:04:f0:96:98:49:bc:21:b6:e5:9f:01:9a:f5:46:b2:cb: d6:cf:a1:dd:35:68:e4:b1:c1:d3:b7:e9:fa:e5:85:db:ab:40: ab:19:e5:f5:26:c0:24:a7:24:bf:4f:86:14:20:a7:72:d8:9a: 34:56:aa:c7:fa:ca:09:66:13:11:7b:89:2e:a6:d0:5f:53:4b: b7:fd:6b:bc -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUExVcfpIBmq2v91nlMPJrpO3Mc44wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIxRTMxQjZBOTg1Njc5MUMzMUI5OUE3M0MwRjM5MDEx OEU1NEVCODAeFw0yNTA2MzAyMTA1MzVaFw0yNTA3MDQwMTA0MzVaMDMxMTAvBgNV BAMTKDYxQTBBREQ5NTBCQkNGRjJBQzY2NkU5MkE1QTI3MjFGMTFDNjJGMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBjGG2G8KHpB3FN73n5qBRQC56 fQ3m+YlmGDYPSsd7405v/HEot1lnIzRhkV/7KLoVf+WmxqiHWl22oNXzCxsYzgJ8 TpRbEf/nbewZE/kVw7PSWtl+/xOg92hF0xm5J8lueS7p50Nb/awb/YnrQJPAV+W0 NPJyVMyIqPsV2dUXxCm/ZdZLs1EuwqoTEqymeH3ZykqUUm30SuxADum2Ol42co0E nK3Oby1JJBPisg/+DRz9HVNVGA2YFTQa2l4BvN6WrDJTVJQCpzjHTCLL9tnx4M3L xymsYgDUYdvtEEqtnTLBi54eYlAhFBpYceMXcijo5c2fo4sdgy2Kq+rHT+PZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUYaCt2VC7z/KsZm6SpaJyHxHGLyYwHwYDVR0j BBgwFoAU2x4xtqmFZ5HDG5mnPA85ARjlTrgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTE4ZjhhMC05M2FlLTQzNTktOGE1ZC0xY2E2NzhiZTU2NjgvMC9EQjFFMzFCNkE5 ODU2NzkxQzMxQjk5QTczQzBGMzkwMTE4RTU0RUI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREIxRTMxQjZBOTg1Njc5MUMzMUI5OUE3M0MwRjM5MDExOEU1 NEVCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmExOGY4YTAtOTNhZS00MzU5LThh NWQtMWNhNjc4YmU1NjY4LzAvREIxRTMxQjZBOTg1Njc5MUMzMUI5OUE3M0MwRjM5 MDExOEU1NEVCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEO9cPaeQ/8+1NhUAFmSbJ694a5lKOd0CFrf oa9gKlLIUdxLYqVFLzRbA95NP4K5zz54DQYMqDkUh1M0gZUV38GYhoTOGYJJ1ybW vmdfI5U7MGMbjDIsbNRkaRsMbTTsVAFw+rn23RERVRJM6qMI/XqgxT+mP7kh8w/b XfyS92I/wTqbsDLx+hgklbysnOOKttOoF0geTZ5o3d7oYRW3nqhgc9EVm/TmABJn DoBJ0p96oj5GeP9YBPCWmEm8IbblnwGa9Uayy9bPod01aOSxwdO36frlhdurQKsZ 5fUmwCSnJL9PhhQgp3LYmjRWqsf6yglmExF7iS6m0F9TS7f9a7w= -----END CERTIFICATE-----Generated at Tue Jul 1 12:10:53 2025 by rpki-client