$ rpki-client -vvf repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft File: DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft (raw, json) Hash identifier: 5MSZ304lEoe7KXpPqYbg3jdqPYvPKQufVBDmdIlg7Cw= Subject key identifier: F4:7E:BF:AE:D2:2B:B9:D4:4F:97:DB:5F:9C:72:07:40:4A:86:4D:93 Authority key identifier: DB:E9:15:60:EB:E5:8F:31:F0:1F:54:3D:75:1B:03:FC:02:EA:7D:9E Certificate issuer: /CN=DBE91560EBE58F31F01F543D751B03FC02EA7D9E Certificate serial: 5C5CE85C71AB895DC213D8509CF9C0FAB25BDE35 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.cer Subject info access: rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft Manifest number: 04FC Signing time: Fri 22 Aug 2025 18:01:25 +0000 Manifest this update: Fri 22 Aug 2025 17:56:25 +0000 Manifest next update: Mon 25 Aug 2025 22:28:25 +0000 Files and hashes: 1: DBE91560EBE58F31F01F543D751B03FC02EA7D9E.crl (hash: IEmZXGeMA16ugVSTeY+OC0+sysJ5io1Bd01VGISEUp0=) 2: 3130332e3135322e37322e302f32332d3234203d3e20313430343432.roa (hash: obl90Ju8Uh49WHiF5evmIzEfZW09mIiXbUTRedxtitw=) 3: 323030313a6466333a666438303a3a2f34382d3438203d3e20313430343432.roa (hash: 6nfQfvYHsKjsaw/P97GpMinNY5TWkRYJKWFHck6y3/Q=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.crl rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 25 Aug 2025 22:28:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:5c:e8:5c:71:ab:89:5d:c2:13:d8:50:9c:f9:c0:fa:b2:5b:de:35 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBE91560EBE58F31F01F543D751B03FC02EA7D9E Validity Not Before: Aug 22 17:56:25 2025 GMT Not After : Aug 25 22:28:25 2025 GMT Subject: CN=F47EBFAED22BB9D44F97DB5F9C7207404A864D93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:0e:76:4a:73:d0:71:92:bf:7b:b0:0f:1a:c7: 2a:4a:11:a3:4d:cd:99:1a:b7:a6:7a:6f:7a:a5:7f: 2f:05:00:d6:51:d7:42:3f:34:02:a0:c6:75:d4:b1: 08:66:3a:d8:7d:75:d0:89:00:d9:24:be:6e:59:16: ae:8a:f2:80:f3:de:cf:65:00:49:4d:4f:49:1a:11: 85:e7:72:b2:d5:ec:29:c5:66:30:cf:79:cc:48:fc: 2b:ab:88:b0:bd:1f:35:ef:d4:e3:5b:03:25:cb:00: 70:ce:a0:01:5c:af:ab:b8:08:f2:eb:b7:f1:e7:78: 6f:b6:39:ed:4d:1c:93:e7:bc:33:79:81:e4:e9:23: 94:c1:4e:0d:cf:c9:7e:ab:9a:79:b5:ab:98:17:8b: 48:09:90:7f:a1:c7:fd:4c:31:22:3f:24:03:e0:06: df:46:12:de:6a:5a:f6:d3:a0:82:25:fa:66:ab:3b: bb:87:76:a4:2e:45:57:45:99:03:93:08:ad:2b:a0: fe:9d:59:09:e7:bf:e2:78:21:27:06:b8:e4:b7:79: c1:22:e3:33:99:50:1a:0e:a6:56:92:86:15:44:67: c8:56:4d:a5:47:0d:03:63:26:0a:34:94:f6:b0:1c: fd:2d:56:14:b2:88:a5:ef:f7:80:1a:6f:e0:2a:80: 9a:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:7E:BF:AE:D2:2B:B9:D4:4F:97:DB:5F:9C:72:07:40:4A:86:4D:93 X509v3 Authority Key Identifier: keyid:DB:E9:15:60:EB:E5:8F:31:F0:1F:54:3D:75:1B:03:FC:02:EA:7D:9E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6728c77b-2100-4f2a-90d9-08c53e841e1b/0/DBE91560EBE58F31F01F543D751B03FC02EA7D9E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:cd:65:1f:1b:1f:59:cf:4d:f6:3a:45:1e:da:cd:54:8e:b3: 9d:69:0a:48:05:ab:6a:00:f0:53:d9:db:dd:14:b4:7f:74:24: 62:7a:eb:e7:3b:37:3b:fd:73:c6:56:49:68:44:df:7f:f6:0a: 7e:f7:59:01:58:b8:53:6d:d9:72:40:23:87:e6:32:4e:cc:a5: 0d:4a:46:1a:cd:1d:26:dd:fd:07:7e:7f:81:75:fe:92:be:42: 13:6e:af:21:6f:d6:57:29:e5:59:25:a6:ea:7a:53:b5:6b:5c: 02:f6:a0:a3:33:26:3c:b7:51:64:d4:ed:0a:79:95:53:0a:4c: 13:d6:76:a2:04:8a:1d:79:46:4a:a9:c9:d2:ad:0d:79:68:0f: fc:2a:15:e7:0b:4b:45:a4:a9:cd:b5:9a:49:e7:3e:e2:97:4c: d1:55:51:34:e4:7b:c8:3c:a1:8a:47:57:98:a6:ac:01:32:1b: e7:ad:4d:08:9b:e5:c8:d4:d8:00:05:e2:6e:c4:18:85:4c:cf: 0a:85:6f:46:f8:49:e5:34:59:fa:9f:60:26:74:db:70:68:64: fe:ee:fc:28:32:88:32:61:19:8a:b2:82:7c:28:5c:7f:a0:aa: ba:f0:5a:5c:28:75:5a:3d:ee:5c:45:d6:2c:5d:45:4a:47:be: 15:57:14:ac -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUXFzoXHGriV3CE9hQnPnA+rJb3jUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJFOTE1NjBFQkU1OEYzMUYwMUY1NDNENzUxQjAzRkMw MkVBN0Q5RTAeFw0yNTA4MjIxNzU2MjVaFw0yNTA4MjUyMjI4MjVaMDMxMTAvBgNV BAMTKEY0N0VCRkFFRDIyQkI5RDQ0Rjk3REI1RjlDNzIwNzQwNEE4NjREOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDODnZKc9Bxkr97sA8axypKEaNN zZkat6Z6b3qlfy8FANZR10I/NAKgxnXUsQhmOth9ddCJANkkvm5ZFq6K8oDz3s9l AElNT0kaEYXncrLV7CnFZjDPecxI/CuriLC9HzXv1ONbAyXLAHDOoAFcr6u4CPLr t/HneG+2Oe1NHJPnvDN5geTpI5TBTg3PyX6rmnm1q5gXi0gJkH+hx/1MMSI/JAPg Bt9GEt5qWvbToIIl+marO7uHdqQuRVdFmQOTCK0roP6dWQnnv+J4IScGuOS3ecEi 4zOZUBoOplaShhVEZ8hWTaVHDQNjJgo0lPawHP0tVhSyiKXv94Aab+AqgJpJAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU9H6/rtIrudRPl9tfnHIHQEqGTZMwHwYDVR0j BBgwFoAU2+kVYOvljzHwH1Q9dRsD/ALqfZ4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 NzI4Yzc3Yi0yMTAwLTRmMmEtOTBkOS0wOGM1M2U4NDFlMWIvMC9EQkU5MTU2MEVC RTU4RjMxRjAxRjU0M0Q3NTFCMDNGQzAyRUE3RDlFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREJFOTE1NjBFQkU1OEYzMUYwMUY1NDNENzUxQjAzRkMwMkVB N0Q5RS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjcyOGM3N2ItMjEwMC00ZjJhLTkw ZDktMDhjNTNlODQxZTFiLzAvREJFOTE1NjBFQkU1OEYzMUYwMUY1NDNENzUxQjAz RkMwMkVBN0Q5RS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFzNZR8bH1nPTfY6RR7azVSOs51pCkgFq2oA 8FPZ290UtH90JGJ66+c7Nzv9c8ZWSWhE33/2Cn73WQFYuFNt2XJAI4fmMk7MpQ1K RhrNHSbd/Qd+f4F1/pK+QhNuryFv1lcp5Vklpup6U7VrXAL2oKMzJjy3UWTU7Qp5 lVMKTBPWdqIEih15RkqpydKtDXloD/wqFecLS0Wkqc21mknnPuKXTNFVUTTke8g8 oYpHV5imrAEyG+etTQib5cjU2AAF4m7EGIVMzwqFb0b4SeU0WfqfYCZ023BoZP7u /CgyiDJhGYqygnwoXH+gqrrwWlwodVo97lxF1ixdRUpHvhVXFKw= -----END CERTIFICATE-----Generated at Sat Aug 23 12:23:12 2025 by rpki-client