$ rpki-client -vvf repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.mft File: DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.mft (raw, json) Hash identifier: 7fbJYPaDa1d8VDK+O/DGuF8G2sKjluL8csDgA9dwERk= Subject key identifier: 31:77:15:17:43:33:73:1F:06:AD:C1:C0:0A:81:D2:52:3F:1F:D5:0A Authority key identifier: DB:6A:89:80:C5:0F:21:0C:80:41:A2:10:10:E6:DB:F1:0F:C7:C0:DF Certificate issuer: /CN=DB6A8980C50F210C8041A21010E6DBF10FC7C0DF Certificate serial: 103F62A8C359E7001D061F17FAD830F82F5207F4 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.mft Manifest number: BF Signing time: Sat 18 Oct 2025 19:31:56 +0000 Manifest this update: Sat 18 Oct 2025 19:26:56 +0000 Manifest next update: Tue 21 Oct 2025 22:13:56 +0000 Files and hashes: 1: 3136302e32352e35322e302f32342d3234203d3e20313533303738.roa (hash: ZYpQlmxLS5aJFefjxbbBQvH2zXoYQl6ndeOBHWuaRz8=) 2: 3136302e32352e35332e302f32342d3234203d3e20313533303738.roa (hash: idjxpfeAxHssuGIMoqlSNQnvrimnNEAu/Mw7vVOi7mA=) 3: DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.crl (hash: NZEeSMQZu86Ln1libZrB+k1ukwcBl+wgg9/28OFTnHo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.crl rsync://repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 22:13:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 10:3f:62:a8:c3:59:e7:00:1d:06:1f:17:fa:d8:30:f8:2f:52:07:f4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB6A8980C50F210C8041A21010E6DBF10FC7C0DF Validity Not Before: Oct 18 19:26:56 2025 GMT Not After : Oct 21 22:13:56 2025 GMT Subject: CN=317715174333731F06ADC1C00A81D2523F1FD50A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:30:27:24:7e:64:be:e2:01:8a:78:b1:0b:4e: 5d:aa:15:4c:eb:27:d2:4a:9e:8b:fb:05:a4:08:bb: f7:04:ad:72:36:fe:3a:1c:a1:01:ec:ab:8e:43:61: 41:ec:43:c4:b6:df:0f:cb:fe:ab:56:39:2c:d7:7e: 44:bf:dc:07:35:72:59:2c:c8:43:df:d2:8d:28:79: d8:95:8d:1b:8e:9d:5d:bc:35:de:9d:52:b9:cb:68: ee:d9:41:af:53:5c:85:0b:ec:4d:3b:58:05:b8:fe: 6a:8f:7e:ce:73:cb:42:76:65:fa:bc:05:25:ba:d9: 4d:60:30:c6:83:46:bb:21:b5:ac:14:d4:9f:07:70: 6b:2a:71:82:90:ff:e6:2c:18:c3:6a:5d:a7:89:b0: 07:9d:9b:4a:61:78:71:11:01:a0:60:d0:af:ec:d5: b8:42:f8:46:b6:a2:9d:d3:4a:6e:4b:6a:be:2f:98: ec:0b:27:6d:6d:d8:42:ac:25:3a:a7:6a:84:c0:8d: 05:94:d1:4d:66:14:fc:1c:16:2d:8f:78:20:9a:2f: b5:42:82:da:58:68:b5:af:13:9e:06:02:9a:1e:ab: 34:91:ad:3c:c7:68:c1:b5:f7:32:aa:c3:90:85:d9: 23:b8:fe:57:82:a3:2f:6c:d5:d9:66:6a:d2:68:6e: 81:3f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:77:15:17:43:33:73:1F:06:AD:C1:C0:0A:81:D2:52:3F:1F:D5:0A X509v3 Authority Key Identifier: keyid:DB:6A:89:80:C5:0F:21:0C:80:41:A2:10:10:E6:DB:F1:0F:C7:C0:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:4b:d0:29:78:d1:fb:37:f6:59:d7:3c:16:3d:05:be:39:1b: f8:a5:43:e5:2b:2c:b5:7b:9e:e5:ab:fe:c4:1d:b9:a3:b4:c5: 00:d1:62:46:6d:89:84:66:db:ed:e3:51:ac:c5:d6:2c:a4:b3: 9f:78:61:5b:82:99:a8:40:40:ee:24:fb:8c:57:27:a0:ed:e7: 46:ac:85:54:f0:9d:4c:17:e8:94:99:53:c4:35:1b:56:47:24: 51:50:ee:6b:05:8c:75:2a:4f:ae:ae:53:fa:73:76:3d:a9:be: 38:78:0f:24:2b:55:14:01:33:a5:39:10:4b:93:92:be:42:39: 70:92:5e:4e:e6:b4:55:80:1c:5b:e6:dc:50:ca:98:cd:cb:7f: e9:f4:9b:76:04:05:15:69:48:81:d2:29:99:ce:15:39:23:ba: 18:a7:3f:b6:7f:3b:76:fc:b3:69:ec:73:12:cb:29:a2:37:58: 8a:a1:85:5b:87:f3:de:38:af:ef:78:ea:e4:9e:da:05:9a:1d: 88:34:5d:c9:dd:2b:99:a9:a1:95:2f:1d:ec:43:3d:25:4f:50: e3:51:d2:61:38:af:3a:26:88:81:2d:fc:cc:0d:6d:3e:5c:26: ae:d5:07:23:d2:97:69:a7:62:dd:f1:aa:37:3e:57:ed:b4:7b: 51:c1:b0:ae -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUED9iqMNZ5wAdBh8X+tgw+C9SB/QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI2QTg5ODBDNTBGMjEwQzgwNDFBMjEwMTBFNkRCRjEw RkM3QzBERjAeFw0yNTEwMTgxOTI2NTZaFw0yNTEwMjEyMjEzNTZaMDMxMTAvBgNV BAMTKDMxNzcxNTE3NDMzMzczMUYwNkFEQzFDMDBBODFEMjUyM0YxRkQ1MEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoMCckfmS+4gGKeLELTl2qFUzr J9JKnov7BaQIu/cErXI2/jocoQHsq45DYUHsQ8S23w/L/qtWOSzXfkS/3Ac1clks yEPf0o0oediVjRuOnV28Nd6dUrnLaO7ZQa9TXIUL7E07WAW4/mqPfs5zy0J2Zfq8 BSW62U1gMMaDRrshtawU1J8HcGsqcYKQ/+YsGMNqXaeJsAedm0pheHERAaBg0K/s 1bhC+Ea2op3TSm5Lar4vmOwLJ21t2EKsJTqnaoTAjQWU0U1mFPwcFi2PeCCaL7VC gtpYaLWvE54GApoeqzSRrTzHaMG19zKqw5CF2SO4/leCoy9s1dlmatJoboE/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUMXcVF0Mzcx8GrcHACoHSUj8f1QowHwYDVR0j BBgwFoAU22qJgMUPIQyAQaIQEObb8Q/HwN8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 M2IxNzg1Ny1iZTNkLTQxMzItOGYxOS0xMDgzNmY0MDg1NDYvMC9EQjZBODk4MEM1 MEYyMTBDODA0MUEyMTAxMEU2REJGMTBGQzdDMERGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvREI2QTg5ODBDNTBGMjEwQzgwNDFBMjEwMTBFNkRCRjEwRkM3 QzBERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjNiMTc4NTctYmUzZC00MTMyLThm MTktMTA4MzZmNDA4NTQ2LzAvREI2QTg5ODBDNTBGMjEwQzgwNDFBMjEwMTBFNkRC RjEwRkM3QzBERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJVL0Cl40fs39lnXPBY9Bb45G/ilQ+UrLLV7 nuWr/sQduaO0xQDRYkZtiYRm2+3jUazF1iyks594YVuCmahAQO4k+4xXJ6Dt50as hVTwnUwX6JSZU8Q1G1ZHJFFQ7msFjHUqT66uU/pzdj2pvjh4DyQrVRQBM6U5EEuT kr5COXCSXk7mtFWAHFvm3FDKmM3Lf+n0m3YEBRVpSIHSKZnOFTkjuhinP7Z/O3b8 s2nscxLLKaI3WIqhhVuH8944r+946uSe2gWaHYg0XcndK5mpoZUvHexDPSVPUONR 0mE4rzomiIEt/MwNbT5cJq7VByPSl2mnYt3xqjc+V+20e1HBsK4= -----END CERTIFICATE-----Generated at Mon Oct 20 16:22:56 2025 by rpki-client