$ rpki-client -vvf repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft File: DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft (raw, json) Hash identifier: F7rcVVmzsTDZaaNnhltUy2wIUWTewS8B8cPAnYvvek8= Subject key identifier: ED:7B:FE:C5:77:3A:96:E2:18:BF:21:EA:EF:06:25:C6:02:97:0D:63 Authority key identifier: DB:E9:15:60:EB:E5:8F:31:F0:1F:54:3D:75:1B:03:FC:02:EA:7D:9E Certificate issuer: /CN=DBE91560EBE58F31F01F543D751B03FC02EA7D9E Certificate serial: 697731C70D80DBDC1425A5E5F91324D29A25E6B6 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft Manifest number: 04E4 Signing time: Mon 30 Jun 2025 08:41:24 +0000 Manifest this update: Mon 30 Jun 2025 08:36:24 +0000 Manifest next update: Thu 03 Jul 2025 09:20:24 +0000 Files and hashes: 1: 323030313a6466333a666438303a3a2f34382d3438203d3e20313430343432.roa (hash: 6nfQfvYHsKjsaw/P97GpMinNY5TWkRYJKWFHck6y3/Q=) 2: DBE91560EBE58F31F01F543D751B03FC02EA7D9E.crl (hash: RO5YYZfhse7UibsBqPMlxZaLe2LXwQZzfG60mLcPQt4=) 3: 3130332e3135322e37322e302f32332d3234203d3e20313430343432.roa (hash: obl90Ju8Uh49WHiF5evmIzEfZW09mIiXbUTRedxtitw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.crl rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 03 Jul 2025 09:20:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:77:31:c7:0d:80:db:dc:14:25:a5:e5:f9:13:24:d2:9a:25:e6:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBE91560EBE58F31F01F543D751B03FC02EA7D9E Validity Not Before: Jun 30 08:36:24 2025 GMT Not After : Jul 3 09:20:24 2025 GMT Subject: CN=ED7BFEC5773A96E218BF21EAEF0625C602970D63 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:b4:c3:11:b8:f9:e3:75:97:1f:26:fb:eb:e7: 42:5e:68:c9:a5:31:70:b7:1f:b6:49:6e:b9:e1:a4: b9:72:67:c6:cf:f8:fa:89:09:7f:40:93:a4:6e:9c: f5:30:eb:2a:55:b6:76:d7:8f:4c:f8:0c:78:8f:0b: 8c:d5:c1:5a:71:7e:a1:d6:63:ce:8b:76:d5:4b:fb: 82:ff:8e:98:28:e5:9b:3c:97:c9:62:72:4b:b4:32: 2b:34:2f:0b:de:16:32:67:dc:22:8d:bd:02:a4:b7: ea:cb:fa:fd:01:f5:7d:17:95:0f:0f:28:26:a6:aa: b4:1b:7e:6f:be:dd:88:a6:54:15:d7:24:89:a6:40: 00:e6:90:df:d7:7b:3a:c0:8a:f6:26:1c:32:8f:4f: 2e:67:0c:14:e7:00:f4:a9:91:55:83:b7:06:0c:9d: 5c:03:e0:47:a8:14:cb:0a:a3:f6:ac:89:6b:79:98: 78:ea:f0:18:37:46:48:61:3f:91:97:7a:5b:6e:3d: f1:4d:6e:c4:7c:c3:f1:00:0b:90:67:57:da:74:c3: 3f:25:08:1c:81:b3:29:6f:ff:ca:2c:cb:aa:bc:04: 85:a6:80:6e:e8:0e:5d:37:56:09:89:0f:51:d8:39: 32:01:d3:2d:0d:94:83:f0:ec:52:0b:ba:a8:0e:f8: 12:87 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:7B:FE:C5:77:3A:96:E2:18:BF:21:EA:EF:06:25:C6:02:97:0D:63 X509v3 Authority Key Identifier: keyid:DB:E9:15:60:EB:E5:8F:31:F0:1F:54:3D:75:1B:03:FC:02:EA:7D:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 16:9e:bb:31:f6:93:a8:90:18:28:ee:47:73:b9:9c:27:c9:ab: 33:1a:73:4e:50:29:df:3b:ed:37:e9:a3:d0:82:7b:56:f5:ba: 37:3e:64:fb:14:54:c0:8a:06:75:50:c6:41:21:ab:f6:13:a7: 58:bf:47:2d:4e:6a:21:4c:bc:05:30:db:b4:dd:9a:52:ae:81: 4b:9e:9d:c4:84:5d:fe:b7:5e:0c:dc:08:c5:08:81:aa:9a:b2: 82:19:8d:90:1f:d2:ad:a4:13:23:f6:d5:b4:4a:2c:d4:7f:dd: ec:ca:44:16:13:7e:fd:fb:a2:6b:50:19:9c:45:8e:03:69:db: d0:23:79:a2:2c:f1:f0:44:6e:fd:2b:4f:0a:7c:91:83:a6:7e: ab:a5:32:64:0c:14:32:72:3e:cf:bc:67:f9:b0:30:e0:61:36: 57:b7:f7:7b:4a:c3:b4:b9:1a:60:86:08:e3:ab:96:31:8e:0c: 07:69:24:00:76:78:9e:d2:42:e9:81:19:05:ea:98:bc:61:7f: f3:91:6f:71:e7:40:a5:c7:db:af:b0:da:11:05:97:42:b9:fe: d5:3f:61:5b:3b:ba:c3:32:24:bc:c8:bc:a4:f0:92:b8:60:95: e9:bb:1e:77:2b:7b:d0:e2:62:13:cb:88:b5:c7:35:28:cf:ae: 30:0f:88:40 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaXcxxw2A29wUJaXl+RMk0pol5rYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJFOTE1NjBFQkU1OEYzMUYwMUY1NDNENzUxQjAzRkMw MkVBN0Q5RTAeFw0yNTA2MzAwODM2MjRaFw0yNTA3MDMwOTIwMjRaMDMxMTAvBgNV BAMTKEVEN0JGRUM1NzczQTk2RTIxOEJGMjFFQUVGMDYyNUM2MDI5NzBENjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+tMMRuPnjdZcfJvvr50JeaMml MXC3H7ZJbrnhpLlyZ8bP+PqJCX9Ak6RunPUw6ypVtnbXj0z4DHiPC4zVwVpxfqHW Y86LdtVL+4L/jpgo5Zs8l8licku0Mis0LwveFjJn3CKNvQKkt+rL+v0B9X0XlQ8P KCamqrQbfm++3YimVBXXJImmQADmkN/XezrAivYmHDKPTy5nDBTnAPSpkVWDtwYM nVwD4EeoFMsKo/asiWt5mHjq8Bg3RkhhP5GXeltuPfFNbsR8w/EAC5BnV9p0wz8l CByBsylv/8osy6q8BIWmgG7oDl03VgmJD1HYOTIB0y0NlIPw7FILuqgO+BKHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU7Xv+xXc6luIYvyHq7wYlxgKXDWMwHwYDVR0j BBgwFoAU2+kVYOvljzHwH1Q9dRsD/ALqfZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NzI4Yzc3Yi0yMTAwLTRmMmEtOTBkOS0wOGM1M2U4NDFlMWIvMC9EQkU5MTU2MEVC RTU4RjMxRjAxRjU0M0Q3NTFCMDNGQzAyRUE3RDlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREJFOTE1NjBFQkU1OEYzMUYwMUY1NDNENzUxQjAzRkMwMkVB N0Q5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjcyOGM3N2ItMjEwMC00ZjJhLTkw ZDktMDhjNTNlODQxZTFiLzAvREJFOTE1NjBFQkU1OEYzMUYwMUY1NDNENzUxQjAz RkMwMkVBN0Q5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABaeuzH2k6iQGCjuR3O5nCfJqzMac05QKd87 7Tfpo9CCe1b1ujc+ZPsUVMCKBnVQxkEhq/YTp1i/Ry1OaiFMvAUw27TdmlKugUue ncSEXf63XgzcCMUIgaqasoIZjZAf0q2kEyP21bRKLNR/3ezKRBYTfv37omtQGZxF jgNp29AjeaIs8fBEbv0rTwp8kYOmfqulMmQMFDJyPs+8Z/mwMOBhNle393tKw7S5 GmCGCOOrljGODAdpJAB2eJ7SQumBGQXqmLxhf/ORb3HnQKXH26+w2hEFl0K5/tU/ YVs7usMyJLzIvKTwkrhglem7Hncre9DiYhPLiLXHNSjPrjAPiEA= -----END CERTIFICATE-----Generated at Tue Jul 1 02:27:14 2025 by rpki-client