$ rpki-client -vvf repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft File: DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft (raw, json) Hash identifier: n7hG2FEMDQfE0zgLwFP55yifK5UDIiw1HYIl1H7mukM= Subject key identifier: 91:55:4D:94:BF:1C:D2:36:95:FD:98:27:28:9E:E7:A7:DC:3B:B7:61 Authority key identifier: DB:6B:AB:95:61:4F:69:81:1F:2A:E9:B4:83:73:E7:9D:2D:C2:D7:F3 Certificate issuer: /CN=DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3 Certificate serial: 79252B06798193AC051800A0791AF4752FA7A11A Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft Manifest number: 051A Signing time: Sat 18 Oct 2025 15:01:38 +0000 Manifest this update: Sat 18 Oct 2025 14:56:38 +0000 Manifest next update: Tue 21 Oct 2025 20:58:38 +0000 Files and hashes: 1: 3130332e3131362e3231372e302f32342d3234203d3e20313337333636.roa (hash: yangIWxRfp5g4q3g5tzxpJf4/ZTvbChL+OGjEKq0xNw=) 2: 3130332e3131362e3231362e302f32342d3234203d3e20313337333636.roa (hash: iDwSin9srOGKT5atOmt0iLuShHzndQDwuU2x/RU2cYM=) 3: 3130332e3131362e3231392e302f32342d3234203d3e20313337333637.roa (hash: 7MfETz0OOU0/EW0Af0KTT2gYnfzpkWj/UcRR+LXANfU=) 4: DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl (hash: Wlc5ND362E6PHVOPy8h1HHAmYJYRSHIvzYr8FR2DG9I=) 5: 3130332e3131362e3231382e302f32342d3234203d3e20313337333636.roa (hash: SgJaLekQ3Q9cVNBqu5Sas48wyzpxdaLZB6LIMnNqJ+c=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 21 Oct 2025 20:58:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 79:25:2b:06:79:81:93:ac:05:18:00:a0:79:1a:f4:75:2f:a7:a1:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3 Validity Not Before: Oct 18 14:56:38 2025 GMT Not After : Oct 21 20:58:38 2025 GMT Subject: CN=91554D94BF1CD23695FD9827289EE7A7DC3BB761 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:66:f6:97:c5:2e:ba:48:06:7d:01:11:e9:60: be:57:35:de:33:51:42:a9:f7:e2:0e:a8:02:9a:69: ef:d6:19:8e:c3:ed:a4:bf:5f:49:d1:ba:d1:78:7c: f7:c2:1d:b0:e1:d8:2b:45:e6:fa:a9:06:42:b0:93: 90:0d:81:67:a6:8d:4e:45:48:f0:84:be:25:16:74: a7:90:3f:16:be:40:51:79:9a:12:49:ba:8f:0b:4b: 45:4b:b0:0a:b3:21:7a:e6:2a:de:3b:19:a3:61:e7: 8e:8e:44:3a:e9:eb:a5:88:07:6f:34:21:b5:d9:8b: 69:9a:8b:e1:2e:21:a7:1b:26:65:0e:7b:45:8f:7b: 08:68:48:77:8c:73:f4:1a:8a:65:a0:b2:68:67:de: 07:89:5c:13:73:09:96:7a:9d:98:99:1d:b9:6c:5a: 03:56:68:1e:40:15:4c:38:0b:34:aa:00:3b:4c:93: 66:46:d3:f2:fe:ac:ee:10:e9:b1:fe:a9:59:db:d4: 86:d5:55:99:a2:3e:c0:7c:ce:99:c5:24:7b:eb:17: 93:77:de:31:44:be:ba:2c:16:8f:48:a5:eb:66:9b: 7e:72:17:ba:f0:1e:19:ba:25:7e:fb:9d:f1:35:d1: b6:df:e8:1a:7e:48:18:aa:3a:69:59:97:65:46:0a: b4:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:55:4D:94:BF:1C:D2:36:95:FD:98:27:28:9E:E7:A7:DC:3B:B7:61 X509v3 Authority Key Identifier: keyid:DB:6B:AB:95:61:4F:69:81:1F:2A:E9:B4:83:73:E7:9D:2D:C2:D7:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 62:ef:ab:1e:a6:c2:95:67:4c:a8:4b:90:eb:4a:6f:d3:c3:4b: 95:8c:99:24:c1:b7:0b:63:dd:8e:fd:79:ee:8c:17:39:3e:c3: da:fe:34:24:08:1a:6e:e6:e8:44:8f:a9:66:1f:e0:74:e6:bd: 85:38:43:2e:8b:c0:75:6e:44:7a:3b:20:ae:b8:28:7a:55:51: d6:ab:58:a8:1a:bf:0d:96:29:49:79:a8:3d:5a:fc:96:e9:36: cd:58:e1:c3:3a:e6:48:5c:8c:bc:33:fe:4c:58:50:8e:6c:0c: 67:87:83:7e:c0:d3:74:61:e4:18:89:17:55:dd:d3:b9:1d:8e: 65:a1:f1:71:e2:a4:e3:74:0b:41:82:85:dd:4b:64:6b:95:5f: 80:79:5d:d7:7a:9b:5c:f2:d9:3a:65:d7:00:c8:f1:5f:11:a9: 93:8f:78:cd:c3:de:c1:4a:e0:a0:a2:55:32:12:df:d6:c2:ae: b6:d8:45:4e:c8:46:99:8e:d5:5e:d8:89:7a:6e:29:ca:b6:fc: aa:24:3b:a5:a9:c7:c6:c7:22:88:ef:71:1e:1e:32:53:49:46: c7:73:87:e4:bb:a3:67:07:1e:e5:9e:ef:ee:98:93:1e:81:4c: 12:7b:6a:22:cd:33:d8:7e:80:78:7a:53:73:cb:f8:44:b7:ad: fc:03:2a:b6 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUeSUrBnmBk6wFGACgeRr0dS+noRowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI2QkFCOTU2MTRGNjk4MTFGMkFFOUI0ODM3M0U3OUQy REMyRDdGMzAeFw0yNTEwMTgxNDU2MzhaFw0yNTEwMjEyMDU4MzhaMDMxMTAvBgNV BAMTKDkxNTU0RDk0QkYxQ0QyMzY5NUZEOTgyNzI4OUVFN0E3REMzQkI3NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAZvaXxS66SAZ9ARHpYL5XNd4z UUKp9+IOqAKaae/WGY7D7aS/X0nRutF4fPfCHbDh2CtF5vqpBkKwk5ANgWemjU5F SPCEviUWdKeQPxa+QFF5mhJJuo8LS0VLsAqzIXrmKt47GaNh546ORDrp66WIB280 IbXZi2mai+EuIacbJmUOe0WPewhoSHeMc/QaimWgsmhn3geJXBNzCZZ6nZiZHbls WgNWaB5AFUw4CzSqADtMk2ZG0/L+rO4Q6bH+qVnb1IbVVZmiPsB8zpnFJHvrF5N3 3jFEvrosFo9Ipetmm35yF7rwHhm6JX77nfE10bbf6Bp+SBiqOmlZl2VGCrT/AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUkVVNlL8c0jaV/ZgnKJ7np9w7t2EwHwYDVR0j BBgwFoAU22urlWFPaYEfKum0g3PnnS3C1/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NmQ3MjBkNS1iN2Q0LTQzOTUtYTA2Yi0xOTkwNGE2M2Y5NDgvMC9EQjZCQUI5NTYx NEY2OTgxMUYyQUU5QjQ4MzczRTc5RDJEQzJEN0YzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREI2QkFCOTU2MTRGNjk4MTFGMkFFOUI0ODM3M0U3OUQyREMy RDdGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODZkNzIwZDUtYjdkNC00Mzk1LWEw NmItMTk5MDRhNjNmOTQ4LzAvREI2QkFCOTU2MTRGNjk4MTFGMkFFOUI0ODM3M0U3 OUQyREMyRDdGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGLvqx6mwpVnTKhLkOtKb9PDS5WMmSTBtwtj 3Y79ee6MFzk+w9r+NCQIGm7m6ESPqWYf4HTmvYU4Qy6LwHVuRHo7IK64KHpVUdar WKgavw2WKUl5qD1a/JbpNs1Y4cM65khcjLwz/kxYUI5sDGeHg37A03Rh5BiJF1Xd 07kdjmWh8XHipON0C0GChd1LZGuVX4B5Xdd6m1zy2Tpl1wDI8V8RqZOPeM3D3sFK 4KCiVTIS39bCrrbYRU7IRpmO1V7YiXpuKcq2/KokO6Wpx8bHIojvcR4eMlNJRsdz h+S7o2cHHuWe7+6Ykx6BTBJ7aiLNM9h+gHh6U3PL+ES3rfwDKrY= -----END CERTIFICATE-----Generated at Mon Oct 20 20:53:58 2025 by rpki-client