$ rpki-client -vvf repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft File: DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft (raw, json) Hash identifier: z5lPAp6vH4JtvbSdMcAZZOvo27D9ERhZnW1VEDZgIr0= Subject key identifier: D9:95:00:B1:E4:97:F7:F1:7A:B5:0D:28:4F:C0:A9:D1:2B:10:18:24 Authority key identifier: DB:1B:D7:85:1F:D1:A4:87:B0:12:83:F6:AE:4B:46:E0:E4:93:5A:3C Certificate issuer: /CN=DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C Certificate serial: 2871F2094205F903C6BD42D6DFC0A898A2649E1A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft Manifest number: 01AF Signing time: Sat 28 Jun 2025 19:51:44 +0000 Manifest this update: Sat 28 Jun 2025 19:46:44 +0000 Manifest next update: Wed 02 Jul 2025 04:10:44 +0000 Files and hashes: 1: DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.crl (hash: tylWG5mr/ZQwwC4g57KEyHKaxplq75cZ96dJfK6wSZU=) 2: 3130332e36362e33382e302f32342d3234203d3e20313530323431.roa (hash: 1Ff4VDmA+7r6oXDzZnPzt9JuYQ1xqWexxGkdvnwFLiQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.crl rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 02 Jul 2025 04:10:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 28:71:f2:09:42:05:f9:03:c6:bd:42:d6:df:c0:a8:98:a2:64:9e:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C Validity Not Before: Jun 28 19:46:44 2025 GMT Not After : Jul 2 04:10:44 2025 GMT Subject: CN=D99500B1E497F7F17AB50D284FC0A9D12B101824 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f1:e6:a9:57:48:44:44:14:c7:90:bb:e9:fa:0f: a1:4b:d3:e3:c9:e1:c0:87:f8:3c:14:18:0a:1a:ea: 8a:0c:13:36:55:30:ef:78:a4:a4:12:9d:f1:b0:67: 44:42:3e:d1:45:f5:af:90:46:8f:97:85:81:e5:6f: cb:12:70:a8:e5:f8:5a:4f:4c:43:d9:33:d1:b3:52: 38:b3:a7:6e:40:ce:25:aa:0c:8f:73:6d:e4:b2:f6: 1f:3b:93:32:7d:ce:eb:19:ac:e8:b5:e7:a8:7d:54: da:25:d7:a3:30:c4:3b:eb:b0:77:c4:8d:30:a1:12: 76:16:81:78:e1:b3:d5:0a:89:ba:93:f3:14:8b:ca: 04:58:e7:68:41:b7:6a:39:aa:46:34:a1:d3:a9:5d: 87:75:f1:51:71:1e:ea:ab:a4:85:d7:25:a3:e7:53: f5:eb:85:7b:e7:4e:4e:1f:a2:2a:4d:5b:ca:c6:98: 21:44:26:ea:ef:53:ea:81:85:6f:28:93:a7:c5:13: 91:a3:50:48:14:d8:6f:6a:e9:d8:aa:75:a4:66:b2: 19:54:03:ad:b0:26:f5:22:48:59:09:72:02:30:ac: 25:cc:c9:ba:ae:c4:b7:b7:f3:1d:89:46:5c:b6:60: 38:3c:9f:41:cd:13:12:9f:1a:76:b9:75:9d:83:cd: ea:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:95:00:B1:E4:97:F7:F1:7A:B5:0D:28:4F:C0:A9:D1:2B:10:18:24 X509v3 Authority Key Identifier: keyid:DB:1B:D7:85:1F:D1:A4:87:B0:12:83:F6:AE:4B:46:E0:E4:93:5A:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 68:14:77:c7:09:a4:f8:70:a3:5a:33:bf:4b:db:a3:ad:d4:e2: 72:93:86:c6:cb:16:10:3c:e3:37:89:ef:cf:23:80:a9:c0:0e: 09:73:6b:aa:33:66:0a:c9:8a:49:87:cf:c4:b3:48:d1:b2:24: 66:28:7e:98:42:46:11:cc:65:42:ae:95:6e:16:25:fb:f0:33: 39:a6:12:39:15:fe:d4:6d:f9:f4:3e:5e:26:35:13:df:a1:b9: 73:cc:f1:71:ee:f0:69:c4:6d:9c:7b:1d:7f:eb:19:dc:c3:6c: 7f:95:60:0f:27:0b:82:9f:d2:c2:59:ef:43:e1:f8:a4:ad:91: 7d:2c:6f:77:e9:97:f7:a4:14:f6:22:32:17:28:00:8e:b8:85: 27:ef:78:b9:67:92:bc:51:60:07:88:92:e5:87:a9:a3:f1:3b: ae:5c:f6:7f:91:36:0f:e0:d4:c8:ff:a3:e2:15:16:df:eb:d7: 6c:20:1f:3c:79:14:47:a0:b5:fe:4b:10:04:08:62:fb:ce:6b: f1:e6:34:1f:8c:59:07:9e:d7:16:bc:75:14:51:64:a7:4a:89: 97:8f:e7:c5:64:35:14:d5:03:ea:d1:88:30:fb:ab:fb:e2:73: 93:d3:4e:8e:89:54:56:b7:70:80:5d:b8:0c:c5:e7:9f:be:a5: d5:52:8f:21 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKHHyCUIF+QPGvULW38ComKJknhowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIxQkQ3ODUxRkQxQTQ4N0IwMTI4M0Y2QUU0QjQ2RTBF NDkzNUEzQzAeFw0yNTA2MjgxOTQ2NDRaFw0yNTA3MDIwNDEwNDRaMDMxMTAvBgNV BAMTKEQ5OTUwMEIxRTQ5N0Y3RjE3QUI1MEQyODRGQzBBOUQxMkIxMDE4MjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDx5qlXSEREFMeQu+n6D6FL0+PJ 4cCH+DwUGAoa6ooMEzZVMO94pKQSnfGwZ0RCPtFF9a+QRo+XhYHlb8sScKjl+FpP TEPZM9GzUjizp25AziWqDI9zbeSy9h87kzJ9zusZrOi156h9VNol16MwxDvrsHfE jTChEnYWgXjhs9UKibqT8xSLygRY52hBt2o5qkY0odOpXYd18VFxHuqrpIXXJaPn U/XrhXvnTk4foipNW8rGmCFEJurvU+qBhW8ok6fFE5GjUEgU2G9q6diqdaRmshlU A62wJvUiSFkJcgIwrCXMybquxLe38x2JRly2YDg8n0HNExKfGna5dZ2DzeqZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2ZUAseSX9/F6tQ0oT8Cp0SsQGCQwHwYDVR0j BBgwFoAU2xvXhR/RpIewEoP2rktG4OSTWjwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2IyZWU3NC04YzNjLTRiYzMtYjZmYi1mMzViMjAwYTIwZWIvMC9EQjFCRDc4NTFG RDFBNDg3QjAxMjgzRjZBRTRCNDZFMEU0OTM1QTNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREIxQkQ3ODUxRkQxQTQ4N0IwMTI4M0Y2QUU0QjQ2RTBFNDkz NUEzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNiMmVlNzQtOGMzYy00YmMzLWI2 ZmItZjM1YjIwMGEyMGViLzAvREIxQkQ3ODUxRkQxQTQ4N0IwMTI4M0Y2QUU0QjQ2 RTBFNDkzNUEzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGgUd8cJpPhwo1ozv0vbo63U4nKThsbLFhA8 4zeJ788jgKnADglza6ozZgrJikmHz8SzSNGyJGYofphCRhHMZUKulW4WJfvwMzmm EjkV/tRt+fQ+XiY1E9+huXPM8XHu8GnEbZx7HX/rGdzDbH+VYA8nC4Kf0sJZ70Ph +KStkX0sb3fpl/ekFPYiMhcoAI64hSfveLlnkrxRYAeIkuWHqaPxO65c9n+RNg/g 1Mj/o+IVFt/r12wgHzx5FEegtf5LEAQIYvvOa/HmNB+MWQee1xa8dRRRZKdKiZeP 58VkNRTVA+rRiDD7q/vic5PTTo6JVFa3cIBduAzF55++pdVSjyE= -----END CERTIFICATE-----Generated at Mon Jun 30 07:02:21 2025 by rpki-client