$ rpki-client -vvf repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft File: DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft (raw, json) Hash identifier: FqIg7VpWYOuGFB+5r7cBZZ8Lh6hcOoxQwhzENM8edWw= Subject key identifier: 7C:9A:E1:1B:8B:D0:FE:82:7E:A6:F3:4D:C9:65:D4:31:AC:08:3B:5B Authority key identifier: DB:6B:AB:95:61:4F:69:81:1F:2A:E9:B4:83:73:E7:9D:2D:C2:D7:F3 Certificate issuer: /CN=DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3 Certificate serial: 4443956490DDB8B5234EA9A28A73896495975D39 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft Manifest number: 0500 Signing time: Thu 21 Aug 2025 12:01:40 +0000 Manifest this update: Thu 21 Aug 2025 11:56:40 +0000 Manifest next update: Sun 24 Aug 2025 12:12:40 +0000 Files and hashes: 1: DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl (hash: Gu+GLwEtqT06ijyU7hXrek0ujvIE18FzmJN3MhGNun4=) 2: 3130332e3131362e3231392e302f32342d3234203d3e20313337333637.roa (hash: 7MfETz0OOU0/EW0Af0KTT2gYnfzpkWj/UcRR+LXANfU=) 3: 3130332e3131362e3231372e302f32342d3234203d3e20313337333636.roa (hash: yangIWxRfp5g4q3g5tzxpJf4/ZTvbChL+OGjEKq0xNw=) 4: 3130332e3131362e3231382e302f32342d3234203d3e20313337333636.roa (hash: SgJaLekQ3Q9cVNBqu5Sas48wyzpxdaLZB6LIMnNqJ+c=) 5: 3130332e3131362e3231362e302f32342d3234203d3e20313337333636.roa (hash: iDwSin9srOGKT5atOmt0iLuShHzndQDwuU2x/RU2cYM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 24 Aug 2025 12:12:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:43:95:64:90:dd:b8:b5:23:4e:a9:a2:8a:73:89:64:95:97:5d:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3 Validity Not Before: Aug 21 11:56:40 2025 GMT Not After : Aug 24 12:12:40 2025 GMT Subject: CN=7C9AE11B8BD0FE827EA6F34DC965D431AC083B5B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:03:76:65:b9:19:a9:cd:42:05:dd:5e:2b:fe: 3e:eb:d5:ba:68:00:db:03:6d:19:3d:c8:65:85:26: 55:5a:e4:36:68:bb:66:31:3c:bd:6f:65:7c:13:d6: 11:19:d6:66:02:99:06:8c:8e:15:27:6b:2b:d9:7c: 9b:dc:ee:9e:3b:af:d7:bc:32:f7:d9:35:e9:ea:12: 52:cd:5c:da:a0:d5:2a:ba:83:97:57:b9:6a:20:c2: 8b:8f:1f:c6:ba:47:1e:ea:b8:fe:3c:d8:b4:3c:45: 4b:ca:14:ba:d9:3e:74:d7:6b:eb:cc:79:3c:89:7f: 57:24:23:84:b0:ca:e8:47:0b:1c:3a:dd:a0:23:2e: fa:c2:6f:b6:c1:74:c2:b2:9b:90:ba:c6:bf:b5:95: a8:92:c8:6b:b2:74:ff:ae:a5:2a:9d:c7:ee:fe:b9: c0:99:c8:22:aa:94:96:87:de:2b:23:23:6c:a0:4d: cc:d3:2d:56:a3:69:74:ea:ae:5f:48:f1:cf:41:88: 32:80:4a:bf:03:44:4d:ee:78:e8:af:75:bb:89:f8: 5d:24:08:1e:cd:87:5f:81:5c:e9:55:5f:9e:dd:d2: e0:76:e5:9c:05:da:dd:e5:ae:30:85:4e:a2:da:40: 23:30:ef:e2:58:ab:bd:c5:ef:61:da:ce:d5:37:6a: 6f:db Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7C:9A:E1:1B:8B:D0:FE:82:7E:A6:F3:4D:C9:65:D4:31:AC:08:3B:5B X509v3 Authority Key Identifier: keyid:DB:6B:AB:95:61:4F:69:81:1F:2A:E9:B4:83:73:E7:9D:2D:C2:D7:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:6a:6c:91:0e:e9:06:fa:c4:9a:42:fa:71:75:5c:b4:fe:d4: b9:bd:5f:7b:a4:21:f8:26:2a:e1:33:cc:b0:bc:d3:dd:f2:f3: de:4f:d5:9b:4a:df:11:7c:b9:17:2f:f3:fb:c9:ad:30:e8:c0: 24:96:d2:8b:7f:40:7e:9d:54:ee:11:8f:4c:51:16:64:ea:a4: 97:bd:5f:b9:dd:71:0f:72:f9:95:c2:cd:35:d6:90:b3:c2:5e: 07:84:21:52:4f:39:ba:97:e3:e6:fb:20:b1:9b:1c:4f:4e:ec: 88:6a:1e:7b:b2:65:7d:3b:cc:43:02:ea:30:fd:cf:f5:f9:ca: e3:27:f8:a9:04:72:e4:f0:64:b9:48:08:b0:c7:15:d3:7d:d2: a4:d0:e2:83:8b:5f:a0:3e:86:a9:c8:9a:01:88:5d:40:7c:78: 55:05:be:ba:02:74:49:a5:53:e5:50:05:0f:cd:37:a3:4c:37: 99:ab:4c:1d:d2:27:f3:84:f8:3b:db:f0:99:d7:ab:83:84:fd: 80:b0:84:9a:eb:91:c3:e8:fe:0c:77:c0:89:c3:29:d2:4e:da: ee:ca:40:19:03:3e:28:9c:9b:bb:b3:13:0b:63:9a:23:c0:1f: 91:b8:8f:d8:94:90:b1:2b:49:35:6d:6d:cd:5d:86:e8:0a:ea: 2d:1d:fc:6d -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUREOVZJDduLUjTqmiinOJZJWXXTkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI2QkFCOTU2MTRGNjk4MTFGMkFFOUI0ODM3M0U3OUQy REMyRDdGMzAeFw0yNTA4MjExMTU2NDBaFw0yNTA4MjQxMjEyNDBaMDMxMTAvBgNV BAMTKDdDOUFFMTFCOEJEMEZFODI3RUE2RjM0REM5NjVENDMxQUMwODNCNUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVA3ZluRmpzUIF3V4r/j7r1bpo ANsDbRk9yGWFJlVa5DZou2YxPL1vZXwT1hEZ1mYCmQaMjhUnayvZfJvc7p47r9e8 MvfZNenqElLNXNqg1Sq6g5dXuWogwouPH8a6Rx7quP482LQ8RUvKFLrZPnTXa+vM eTyJf1ckI4SwyuhHCxw63aAjLvrCb7bBdMKym5C6xr+1laiSyGuydP+upSqdx+7+ ucCZyCKqlJaH3isjI2ygTczTLVajaXTqrl9I8c9BiDKASr8DRE3ueOivdbuJ+F0k CB7Nh1+BXOlVX57d0uB25ZwF2t3lrjCFTqLaQCMw7+JYq73F72HaztU3am/bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUfJrhG4vQ/oJ+pvNNyWXUMawIO1swHwYDVR0j BBgwFoAU22urlWFPaYEfKum0g3PnnS3C1/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NmQ3MjBkNS1iN2Q0LTQzOTUtYTA2Yi0xOTkwNGE2M2Y5NDgvMC9EQjZCQUI5NTYx NEY2OTgxMUYyQUU5QjQ4MzczRTc5RDJEQzJEN0YzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREI2QkFCOTU2MTRGNjk4MTFGMkFFOUI0ODM3M0U3OUQyREMy RDdGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODZkNzIwZDUtYjdkNC00Mzk1LWEw NmItMTk5MDRhNjNmOTQ4LzAvREI2QkFCOTU2MTRGNjk4MTFGMkFFOUI0ODM3M0U3 OUQyREMyRDdGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJFqbJEO6Qb6xJpC+nF1XLT+1Lm9X3ukIfgm KuEzzLC8093y895P1ZtK3xF8uRcv8/vJrTDowCSW0ot/QH6dVO4Rj0xRFmTqpJe9 X7ndcQ9y+ZXCzTXWkLPCXgeEIVJPObqX4+b7ILGbHE9O7IhqHnuyZX07zEMC6jD9 z/X5yuMn+KkEcuTwZLlICLDHFdN90qTQ4oOLX6A+hqnImgGIXUB8eFUFvroCdEml U+VQBQ/NN6NMN5mrTB3SJ/OE+Dvb8JnXq4OE/YCwhJrrkcPo/gx3wInDKdJO2u7K QBkDPiicm7uzEwtjmiPAH5G4j9iUkLErSTVtbc1dhugK6i0d/G0= -----END CERTIFICATE-----Generated at Sat Aug 23 12:07:29 2025 by rpki-client