$ rpki-client -vvf repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft File: DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft (raw, json) Hash identifier: JT1MmzQFVT8xpeVIsIdMiiIbyGu4UJc8ASnU3CCyoKQ= Subject key identifier: 64:13:4E:C3:63:59:36:DB:1F:89:63:A4:30:8A:A4:FE:53:7B:B4:2F Authority key identifier: DB:6B:AB:95:61:4F:69:81:1F:2A:E9:B4:83:73:E7:9D:2D:C2:D7:F3 Certificate issuer: /CN=DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3 Certificate serial: 2BFFC96EA11542EF90DCCD04879EA67B22FFDB3F Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft Manifest number: 04E8 Signing time: Sat 28 Jun 2025 07:11:36 +0000 Manifest this update: Sat 28 Jun 2025 07:06:36 +0000 Manifest next update: Tue 01 Jul 2025 07:13:36 +0000 Files and hashes: 1: 3130332e3131362e3231392e302f32342d3234203d3e20313337333637.roa (hash: 7MfETz0OOU0/EW0Af0KTT2gYnfzpkWj/UcRR+LXANfU=) 2: DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl (hash: X3OKa8a4tx5kSWOO1LRInYgG00RSaZg2EzOgHa76B/0=) 3: 3130332e3131362e3231362e302f32342d3234203d3e20313337333636.roa (hash: iDwSin9srOGKT5atOmt0iLuShHzndQDwuU2x/RU2cYM=) 4: 3130332e3131362e3231382e302f32342d3234203d3e20313337333636.roa (hash: SgJaLekQ3Q9cVNBqu5Sas48wyzpxdaLZB6LIMnNqJ+c=) 5: 3130332e3131362e3231372e302f32342d3234203d3e20313337333636.roa (hash: yangIWxRfp5g4q3g5tzxpJf4/ZTvbChL+OGjEKq0xNw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 01 Jul 2025 07:13:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:ff:c9:6e:a1:15:42:ef:90:dc:cd:04:87:9e:a6:7b:22:ff:db:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3 Validity Not Before: Jun 28 07:06:36 2025 GMT Not After : Jul 1 07:13:36 2025 GMT Subject: CN=64134EC3635936DB1F8963A4308AA4FE537BB42F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ce:3d:52:7f:8d:88:a5:3b:74:8f:f6:e3:9b: 24:05:38:ae:27:44:4b:9c:d6:8f:62:08:e3:95:36: a2:a1:e4:5b:10:3b:62:48:be:8e:33:36:ee:c5:4c: 41:dc:19:74:8d:29:0d:9a:fe:1f:7d:af:26:f2:19: 7a:37:43:2e:13:a7:df:03:9e:5b:86:a2:2d:fd:39: fe:d5:39:49:33:4f:4f:74:46:90:e8:bd:05:2a:74: e1:e6:8c:d6:89:c9:34:c7:62:a1:0c:e4:1b:37:49: b9:b7:a7:d8:fe:e5:e1:86:ef:fd:3d:e2:bf:3a:df: b2:43:a9:91:e9:b0:5d:7f:2f:0d:df:b5:3b:41:db: 49:0a:0f:c2:b5:b5:23:da:1d:39:eb:ab:0a:ca:70: b5:0d:56:06:e1:70:4e:91:33:c6:07:62:57:c3:d2: 05:b8:cc:21:9a:67:95:34:d9:0e:9d:89:4d:a3:2f: 0f:fd:db:59:71:1d:f6:fe:3c:44:7e:e0:1e:1a:67: c8:58:eb:94:a7:32:44:ba:ca:01:1a:16:a0:64:88: e5:39:63:08:59:1e:b3:3a:86:74:f7:98:70:5c:11: e8:4c:c1:b5:e5:96:51:82:84:46:70:e3:c9:b5:e7: 81:95:70:36:53:98:09:6d:c6:f4:5e:48:fd:f0:a6: 2d:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:13:4E:C3:63:59:36:DB:1F:89:63:A4:30:8A:A4:FE:53:7B:B4:2F X509v3 Authority Key Identifier: keyid:DB:6B:AB:95:61:4F:69:81:1F:2A:E9:B4:83:73:E7:9D:2D:C2:D7:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:5c:24:4c:29:16:62:93:ba:93:17:21:11:33:c7:a1:5e:ec: 32:9a:cb:4c:6d:90:67:b0:6b:5e:4a:da:55:7c:b4:cf:65:3b: 7d:bd:fd:f7:a5:df:c1:47:c3:ad:94:4d:bc:1c:b2:eb:ec:61: eb:9a:99:12:cc:51:2c:9f:9a:92:cf:23:38:8d:b4:5f:1b:1f: 18:17:71:43:ce:97:c0:f8:90:00:5d:8f:3c:ab:e9:58:6d:1c: ca:25:e4:79:b1:fd:c2:ac:3d:5d:74:47:e2:80:22:e5:c3:55: 1e:6e:d8:9f:60:49:e0:47:df:7e:4b:78:42:66:2a:1a:e3:68: 36:38:82:67:f9:7f:1e:1d:e8:c4:67:65:20:57:2a:e9:fa:4d: 11:56:13:94:46:4e:51:b9:69:e1:4e:7b:5b:d9:d0:d3:72:1a: dd:bf:93:5c:f4:73:b4:9c:db:71:b8:9b:8d:ea:f3:69:23:73: 42:64:ff:cc:79:06:00:2e:51:bd:6f:e4:d2:c6:d0:42:29:da: a0:08:f3:a2:88:ca:d3:37:29:1e:f1:b4:54:01:b3:8b:8f:f4: 75:28:5e:40:38:82:c7:9b:34:c3:54:52:74:68:17:ce:39:54: ca:7e:cd:96:c8:a5:33:a0:69:c4:46:d0:60:3d:be:f1:ff:06: 92:d6:04:fd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUK//JbqEVQu+Q3M0Eh56meyL/2z8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI2QkFCOTU2MTRGNjk4MTFGMkFFOUI0ODM3M0U3OUQy REMyRDdGMzAeFw0yNTA2MjgwNzA2MzZaFw0yNTA3MDEwNzEzMzZaMDMxMTAvBgNV BAMTKDY0MTM0RUMzNjM1OTM2REIxRjg5NjNBNDMwOEFBNEZFNTM3QkI0MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCVzj1Sf42IpTt0j/bjmyQFOK4n REuc1o9iCOOVNqKh5FsQO2JIvo4zNu7FTEHcGXSNKQ2a/h99rybyGXo3Qy4Tp98D nluGoi39Of7VOUkzT090RpDovQUqdOHmjNaJyTTHYqEM5Bs3Sbm3p9j+5eGG7/09 4r8637JDqZHpsF1/Lw3ftTtB20kKD8K1tSPaHTnrqwrKcLUNVgbhcE6RM8YHYlfD 0gW4zCGaZ5U02Q6diU2jLw/921lxHfb+PER+4B4aZ8hY65SnMkS6ygEaFqBkiOU5 YwhZHrM6hnT3mHBcEehMwbXlllGChEZw48m154GVcDZTmAltxvReSP3wpi2fAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUZBNOw2NZNtsfiWOkMIqk/lN7tC8wHwYDVR0j BBgwFoAU22urlWFPaYEfKum0g3PnnS3C1/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NmQ3MjBkNS1iN2Q0LTQzOTUtYTA2Yi0xOTkwNGE2M2Y5NDgvMC9EQjZCQUI5NTYx NEY2OTgxMUYyQUU5QjQ4MzczRTc5RDJEQzJEN0YzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREI2QkFCOTU2MTRGNjk4MTFGMkFFOUI0ODM3M0U3OUQyREMy RDdGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODZkNzIwZDUtYjdkNC00Mzk1LWEw NmItMTk5MDRhNjNmOTQ4LzAvREI2QkFCOTU2MTRGNjk4MTFGMkFFOUI0ODM3M0U3 OUQyREMyRDdGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAI5cJEwpFmKTupMXIREzx6Fe7DKay0xtkGew a15K2lV8tM9lO329/fel38FHw62UTbwcsuvsYeuamRLMUSyfmpLPIziNtF8bHxgX cUPOl8D4kABdjzyr6VhtHMol5Hmx/cKsPV10R+KAIuXDVR5u2J9gSeBH335LeEJm KhrjaDY4gmf5fx4d6MRnZSBXKun6TRFWE5RGTlG5aeFOe1vZ0NNyGt2/k1z0c7Sc 23G4m43q82kjc0Jk/8x5BgAuUb1v5NLG0EIp2qAI86KIytM3KR7xtFQBs4uP9HUo XkA4gsebNMNUUnRoF845VMp+zZbIpTOgacRG0GA9vvH/BpLWBP0= -----END CERTIFICATE-----Generated at Sun Jun 29 18:50:03 2025 by rpki-client