$ rpki-client -vvf repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft File: DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft (raw, json) Hash identifier: MvO4w8S4UrVZg5VTHfzdi0PYGanlCKSncCjzFuJwlBQ= Subject key identifier: 35:EB:B1:67:DD:F6:3B:B1:8F:A6:BA:9F:4A:9E:25:39:48:FF:DA:C9 Authority key identifier: DB:1B:D7:85:1F:D1:A4:87:B0:12:83:F6:AE:4B:46:E0:E4:93:5A:3C Certificate issuer: /CN=DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C Certificate serial: 61FB22B6FC73917A38D24C873A263843BE91D3FA Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft Manifest number: 01C8 Signing time: Thu 21 Aug 2025 21:41:42 +0000 Manifest this update: Thu 21 Aug 2025 21:36:42 +0000 Manifest next update: Mon 25 Aug 2025 01:01:42 +0000 Files and hashes: 1: DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.crl (hash: BBHitUB6t2Kd6m7ggWeAZnZwqnFGUI98YDIxPmFAEa0=) 2: 3130332e36362e33382e302f32342d3234203d3e20313530323431.roa (hash: 2Vms/JsMQPaw+vYfPtEtlm+57xmqH/10AEwVvJR2JV8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.crl rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 01:01:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 61:fb:22:b6:fc:73:91:7a:38:d2:4c:87:3a:26:38:43:be:91:d3:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C Validity Not Before: Aug 21 21:36:42 2025 GMT Not After : Aug 25 01:01:42 2025 GMT Subject: CN=35EBB167DDF63BB18FA6BA9F4A9E253948FFDAC9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:57:25:f2:cb:7c:7c:38:7c:19:26:c5:af:c8: 26:eb:37:ce:11:f5:3b:99:15:95:ba:91:25:e1:67: 69:7a:06:c7:13:b7:8b:76:76:2f:c7:b7:13:c9:4e: 24:24:49:ca:3e:1a:77:b0:ee:1c:04:f9:5e:42:1b: 81:5d:e2:fc:50:4b:63:cc:aa:e1:db:55:65:55:14: 55:3a:52:af:8d:c5:98:76:52:5f:39:b2:00:44:81: ee:a7:f3:74:a6:29:77:7e:06:b3:fc:5d:94:67:ce: 2f:ab:18:72:07:31:2c:96:ff:4c:97:d4:74:53:96: 57:37:3e:eb:d9:6f:6e:c8:41:e8:ca:7e:bc:a2:8a: 95:14:af:a8:91:f6:98:39:24:04:8e:39:89:e6:0b: a2:73:6c:86:94:0b:26:5b:c9:23:1a:25:a0:c1:77: e6:8f:50:fe:14:c4:b8:c2:d1:4c:d8:5b:e9:92:8e: 9c:43:d7:f4:cf:96:7d:47:71:62:49:42:02:5c:dc: 54:de:ec:57:be:0f:46:26:8a:71:62:73:5a:dc:fd: 68:b7:b9:16:38:0f:0a:49:43:8d:97:35:50:30:29: b2:67:2a:b7:6d:a5:7e:e5:70:92:88:41:0e:aa:68: 8c:af:81:ad:0f:6c:e1:3e:c7:d0:b8:e7:8f:48:16: 99:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:EB:B1:67:DD:F6:3B:B1:8F:A6:BA:9F:4A:9E:25:39:48:FF:DA:C9 X509v3 Authority Key Identifier: keyid:DB:1B:D7:85:1F:D1:A4:87:B0:12:83:F6:AE:4B:46:E0:E4:93:5A:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:91:32:d1:c9:75:55:4f:bb:5c:4d:be:ab:70:51:62:7c:4c: c5:7f:3e:0d:76:fa:2d:64:2e:af:1f:27:e3:15:2c:cc:6a:5e: 52:fc:e0:12:b1:19:f4:23:2c:94:50:7a:bf:5e:33:c7:a1:00: 75:17:64:b3:3d:be:95:59:e2:27:fa:93:21:f4:1d:29:f2:3c: 70:69:f6:f2:01:eb:22:87:60:75:88:b1:fe:62:14:fa:f1:87: 94:c4:20:0d:39:65:ff:97:dd:29:a3:3f:37:6e:1f:c6:e3:1b: 6c:e7:b7:fd:66:f3:67:25:80:d0:db:21:f9:e4:ee:ba:9b:bf: 99:44:f1:17:a0:d5:99:4a:32:75:7d:88:3f:05:3d:a7:78:c3: 90:c3:2d:d0:c2:7e:7d:ac:98:c7:b9:77:bf:7c:85:45:cf:d8: b1:de:a7:ac:3d:4c:db:df:ee:fb:1f:06:0e:93:04:96:f0:39: 11:fc:09:06:8f:ff:2c:ec:2d:70:1f:dc:aa:90:9b:dc:13:44: 01:5b:1a:ba:6e:ca:0c:48:1d:bf:5d:5e:6d:21:4d:7e:fb:58: 81:9a:11:cd:fb:66:e9:80:d9:47:84:2c:6f:34:a2:63:db:2a: b6:82:9e:64:4c:4c:ec:a0:58:61:35:17:95:15:c4:54:37:e5: 0c:6a:7b:d4 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYfsitvxzkXo40kyHOiY4Q76R0/owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIxQkQ3ODUxRkQxQTQ4N0IwMTI4M0Y2QUU0QjQ2RTBF NDkzNUEzQzAeFw0yNTA4MjEyMTM2NDJaFw0yNTA4MjUwMTAxNDJaMDMxMTAvBgNV BAMTKDM1RUJCMTY3RERGNjNCQjE4RkE2QkE5RjRBOUUyNTM5NDhGRkRBQzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTVyXyy3x8OHwZJsWvyCbrN84R 9TuZFZW6kSXhZ2l6BscTt4t2di/HtxPJTiQkSco+Gnew7hwE+V5CG4Fd4vxQS2PM quHbVWVVFFU6Uq+NxZh2Ul85sgBEge6n83SmKXd+BrP8XZRnzi+rGHIHMSyW/0yX 1HRTllc3PuvZb27IQejKfryiipUUr6iR9pg5JASOOYnmC6JzbIaUCyZbySMaJaDB d+aPUP4UxLjC0UzYW+mSjpxD1/TPln1HcWJJQgJc3FTe7Fe+D0YminFic1rc/Wi3 uRY4DwpJQ42XNVAwKbJnKrdtpX7lcJKIQQ6qaIyvga0PbOE+x9C4549IFplHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUNeuxZ932O7GPprqfSp4lOUj/2skwHwYDVR0j BBgwFoAU2xvXhR/RpIewEoP2rktG4OSTWjwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2IyZWU3NC04YzNjLTRiYzMtYjZmYi1mMzViMjAwYTIwZWIvMC9EQjFCRDc4NTFG RDFBNDg3QjAxMjgzRjZBRTRCNDZFMEU0OTM1QTNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREIxQkQ3ODUxRkQxQTQ4N0IwMTI4M0Y2QUU0QjQ2RTBFNDkz NUEzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNiMmVlNzQtOGMzYy00YmMzLWI2 ZmItZjM1YjIwMGEyMGViLzAvREIxQkQ3ODUxRkQxQTQ4N0IwMTI4M0Y2QUU0QjQ2 RTBFNDkzNUEzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAGRMtHJdVVPu1xNvqtwUWJ8TMV/Pg12+i1k Lq8fJ+MVLMxqXlL84BKxGfQjLJRQer9eM8ehAHUXZLM9vpVZ4if6kyH0HSnyPHBp 9vIB6yKHYHWIsf5iFPrxh5TEIA05Zf+X3SmjPzduH8bjG2znt/1m82clgNDbIfnk 7rqbv5lE8Reg1ZlKMnV9iD8FPad4w5DDLdDCfn2smMe5d798hUXP2LHep6w9TNvf 7vsfBg6TBJbwORH8CQaP/yzsLXAf3KqQm9wTRAFbGrpuygxIHb9dXm0hTX77WIGa Ec37ZumA2UeELG80omPbKraCnmRMTOygWGE1F5UVxFQ35Qxqe9Q= -----END CERTIFICATE-----Generated at Sun Aug 24 00:38:05 2025 by rpki-client