$ rpki-client -vvf repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft File: DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft (raw, json) Hash identifier: pRs3EPyENrfEdMClbvvQSPCsUpdNwu3xcBtTphz9PeA= Subject key identifier: EB:F9:88:A9:97:B0:36:D7:46:E1:A0:9A:37:A0:46:01:C1:34:1C:49 Authority key identifier: DB:E9:15:60:EB:E5:8F:31:F0:1F:54:3D:75:1B:03:FC:02:EA:7D:9E Certificate issuer: /CN=DBE91560EBE58F31F01F543D751B03FC02EA7D9E Certificate serial: 624EA9E3509170158FBCAA63CBC3012B53DF191E Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft Manifest number: 0516 Signing time: Mon 20 Oct 2025 08:31:25 +0000 Manifest this update: Mon 20 Oct 2025 08:26:25 +0000 Manifest next update: Thu 23 Oct 2025 18:33:25 +0000 Files and hashes: 1: 3130332e3135322e37322e302f32332d3234203d3e20313430343432.roa (hash: obl90Ju8Uh49WHiF5evmIzEfZW09mIiXbUTRedxtitw=) 2: DBE91560EBE58F31F01F543D751B03FC02EA7D9E.crl (hash: Uh5TNgMms9WFm7AIaamFCeSnC4/qNp1jA0i8LySWLj8=) 3: 323030313a6466333a666438303a3a2f34382d3438203d3e20313430343432.roa (hash: 6nfQfvYHsKjsaw/P97GpMinNY5TWkRYJKWFHck6y3/Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.crl rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 23 Oct 2025 11:48:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:4e:a9:e3:50:91:70:15:8f:bc:aa:63:cb:c3:01:2b:53:df:19:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBE91560EBE58F31F01F543D751B03FC02EA7D9E Validity Not Before: Oct 20 08:26:25 2025 GMT Not After : Oct 23 18:33:25 2025 GMT Subject: CN=EBF988A997B036D746E1A09A37A04601C1341C49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:15:f9:f7:2c:9a:c1:ac:6e:52:29:f4:6e:7d: c3:6d:43:91:78:5f:2f:5a:0f:bc:9b:d6:68:f5:2f: 12:05:e9:dc:f3:16:ff:25:44:da:88:9a:d1:5f:d8: 55:f1:64:ed:f5:56:47:01:98:e7:f0:f6:a1:96:e8: 0d:1d:48:52:41:5e:80:24:97:b0:05:1d:39:6e:a7: 0e:e1:11:e9:92:2d:1b:4a:66:96:54:7e:fc:53:1d: 37:c3:04:43:d9:4e:21:ce:eb:f9:18:5e:b9:59:ad: ec:bc:9d:48:e7:b6:6a:b7:3f:76:6b:bf:91:39:30: 6d:b2:5b:b9:5c:c4:2e:ba:da:f5:49:0f:cd:8d:fa: 75:b6:48:f5:5a:2a:c9:18:8a:72:1d:bf:54:4c:82: c7:e5:e4:41:54:7f:bb:8b:4e:58:b3:5e:c9:95:ad: 9c:1b:b3:f4:c8:e4:9d:58:52:db:47:07:69:83:c0: f5:1b:12:a1:67:78:b9:ae:a1:72:1b:b1:99:dc:b3: dc:bd:1b:0e:00:54:db:5c:c8:c3:b8:38:80:f5:1b: 8d:29:81:f5:18:49:0f:ea:23:4f:05:9d:e3:5e:73: 17:ae:4c:ca:d0:9c:de:1d:31:d4:09:5d:6a:2d:b9: 7a:6e:d4:cb:b8:20:88:37:25:10:3e:a6:d7:a2:98: 2e:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EB:F9:88:A9:97:B0:36:D7:46:E1:A0:9A:37:A0:46:01:C1:34:1C:49 X509v3 Authority Key Identifier: keyid:DB:E9:15:60:EB:E5:8F:31:F0:1F:54:3D:75:1B:03:FC:02:EA:7D:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 44:52:33:4d:0f:95:fc:ce:1c:f2:e9:de:ff:91:2f:12:bb:bf: 7d:48:ee:6c:56:d1:8f:84:b5:ee:da:a3:8d:df:ec:92:c8:86: c6:19:77:e8:06:ff:43:9d:f9:9e:92:80:88:40:e4:3c:3b:ed: ee:e1:93:f5:a1:c9:92:5a:9f:3b:50:9a:75:d1:a2:2f:b2:b4: 5b:fe:f1:48:63:51:9b:0b:60:05:1c:aa:cd:e7:f1:b1:e7:43: 49:ec:ea:32:bc:05:b4:a6:0f:62:7b:e2:8d:92:9e:1c:a3:46: 87:0c:3e:b7:0f:e7:7d:aa:31:72:17:ce:5c:49:36:44:81:4d: 05:82:f1:d7:2f:55:a4:8d:10:33:92:ca:a7:d5:c3:fd:ea:a9: 6a:04:21:91:b4:9b:b2:2f:23:2b:bb:e3:ee:a4:cc:46:eb:cf: 49:ef:ee:23:88:51:e3:a0:a6:8b:2f:e3:61:9d:36:a1:d0:eb: bf:44:f9:ba:71:53:92:59:76:1c:f4:5e:7c:71:7e:02:3a:2c: e5:1b:9a:96:83:e0:68:95:ed:29:55:38:e8:a4:2f:15:98:99: cf:3b:61:06:d2:d0:54:26:4a:e6:a8:cf:78:5d:e5:b2:ad:97: f5:4c:b6:d1:02:ac:16:ba:3e:84:c4:c5:b5:1d:89:46:d1:f3: ac:8c:4d:1c -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUYk6p41CRcBWPvKpjy8MBK1PfGR4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJFOTE1NjBFQkU1OEYzMUYwMUY1NDNENzUxQjAzRkMw MkVBN0Q5RTAeFw0yNTEwMjAwODI2MjVaFw0yNTEwMjMxODMzMjVaMDMxMTAvBgNV BAMTKEVCRjk4OEE5OTdCMDM2RDc0NkUxQTA5QTM3QTA0NjAxQzEzNDFDNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Ffn3LJrBrG5SKfRufcNtQ5F4 Xy9aD7yb1mj1LxIF6dzzFv8lRNqImtFf2FXxZO31VkcBmOfw9qGW6A0dSFJBXoAk l7AFHTlupw7hEemSLRtKZpZUfvxTHTfDBEPZTiHO6/kYXrlZrey8nUjntmq3P3Zr v5E5MG2yW7lcxC662vVJD82N+nW2SPVaKskYinIdv1RMgsfl5EFUf7uLTlizXsmV rZwbs/TI5J1YUttHB2mDwPUbEqFneLmuoXIbsZncs9y9Gw4AVNtcyMO4OID1G40p gfUYSQ/qI08FneNecxeuTMrQnN4dMdQJXWotuXpu1Mu4IIg3JRA+pteimC5PAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU6/mIqZewNtdG4aCaN6BGAcE0HEkwHwYDVR0j BBgwFoAU2+kVYOvljzHwH1Q9dRsD/ALqfZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NzI4Yzc3Yi0yMTAwLTRmMmEtOTBkOS0wOGM1M2U4NDFlMWIvMC9EQkU5MTU2MEVC RTU4RjMxRjAxRjU0M0Q3NTFCMDNGQzAyRUE3RDlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREJFOTE1NjBFQkU1OEYzMUYwMUY1NDNENzUxQjAzRkMwMkVB N0Q5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjcyOGM3N2ItMjEwMC00ZjJhLTkw ZDktMDhjNTNlODQxZTFiLzAvREJFOTE1NjBFQkU1OEYzMUYwMUY1NDNENzUxQjAz RkMwMkVBN0Q5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAERSM00PlfzOHPLp3v+RLxK7v31I7mxW0Y+E te7ao43f7JLIhsYZd+gG/0Od+Z6SgIhA5Dw77e7hk/WhyZJanztQmnXRoi+ytFv+ 8UhjUZsLYAUcqs3n8bHnQ0ns6jK8BbSmD2J74o2SnhyjRocMPrcP532qMXIXzlxJ NkSBTQWC8dcvVaSNEDOSyqfVw/3qqWoEIZG0m7IvIyu74+6kzEbrz0nv7iOIUeOg posv42GdNqHQ679E+bpxU5JZdhz0XnxxfgI6LOUbmpaD4GiV7SlVOOikLxWYmc87 YQbS0FQmSuaoz3hd5bKtl/VMttECrBa6PoTExbUdiUbR86yMTRw= -----END CERTIFICATE-----Generated at Mon Oct 20 15:53:15 2025 by rpki-client