$ rpki-client -vvf repo-rpki.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.mft File: DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.mft (raw, json) Hash identifier: ooPscROK0AW9kaWssHc8qoYLxKqZT6/NztfD3z7/1gE= Subject key identifier: 79:DC:AC:7A:AD:B5:CB:4B:11:4E:05:C6:98:7D:9B:10:B5:BE:39:2F Authority key identifier: DB:9B:4D:12:79:E6:C6:4B:0C:DD:F5:93:FB:00:6B:39:92:D5:DF:6F Certificate issuer: /CN=DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F Certificate serial: 1CB786ECA0055AA46E7FB1C92D7B078B6FD03B6C Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.mft Manifest number: B3 Signing time: Sat 23 Aug 2025 00:20:50 +0000 Manifest this update: Sat 23 Aug 2025 00:15:50 +0000 Manifest next update: Tue 26 Aug 2025 06:14:50 +0000 Files and hashes: 1: 3130332e3138352e3139362e302f32342d3234203d3e20313333383136.roa (hash: OBAMIR6o88w8OfvjKc+CvsxLTJpjUECRIBtfHRF/vnM=) 2: DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.crl (hash: bMnbbvrnLuVqlThgyY2SYmDmadQvrCxbFUePH+e/hWU=) 3: 3130332e35322e3231332e302f32342d3234203d3e20313333383136.roa (hash: ddnEDu4ujzH2U+wrCuFYzTTZ0z5ZKNzjOcLkosVrgEM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.crl rsync://repo-rpki.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Aug 2025 06:14:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1c:b7:86:ec:a0:05:5a:a4:6e:7f:b1:c9:2d:7b:07:8b:6f:d0:3b:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F Validity Not Before: Aug 23 00:15:50 2025 GMT Not After : Aug 26 06:14:50 2025 GMT Subject: CN=79DCAC7AADB5CB4B114E05C6987D9B10B5BE392F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:ba:ab:03:9a:26:80:1a:e7:96:00:ca:48:43: 18:3c:0f:db:33:94:b5:04:22:ab:c8:ce:1b:3f:50: 71:f2:86:d7:fc:01:2c:8b:f0:56:e5:98:b6:8b:fe: 36:32:a4:a3:86:87:0f:fa:94:de:d9:10:76:f5:66: ba:1d:88:4a:b8:94:93:95:22:6f:1d:4b:d1:16:e5: a0:b9:d6:ad:7f:55:85:a1:65:0f:81:98:eb:cb:31: 6e:6c:39:15:a7:37:18:08:d5:0e:1d:14:a8:75:77: 53:aa:9f:00:1c:6d:4f:99:cc:77:dd:02:2d:69:37: d9:33:3a:b1:77:89:4e:8e:bc:2a:3b:5a:d4:7c:ce: 1d:ee:01:ed:2b:ed:ea:df:94:d8:4c:eb:0a:31:e0: 80:6c:ef:46:18:bc:c8:af:be:dd:9b:9b:98:f8:ea: 66:69:d7:d2:ac:de:04:5b:1d:0d:2f:1d:73:3f:5c: 6b:a7:62:1a:47:d7:93:fe:5e:73:5a:96:6f:24:d6: 8a:84:3e:01:e0:ba:d5:8b:ff:97:02:5f:2b:bc:84: 4e:7d:34:56:dd:58:3c:e3:6d:24:b0:14:78:d3:18: da:e0:e2:54:31:9b:30:c4:1e:c9:fd:42:58:f8:f0: f8:5a:6f:4e:aa:20:c9:ec:13:35:57:ac:0f:d4:83: 12:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:DC:AC:7A:AD:B5:CB:4B:11:4E:05:C6:98:7D:9B:10:B5:BE:39:2F X509v3 Authority Key Identifier: keyid:DB:9B:4D:12:79:E6:C6:4B:0C:DD:F5:93:FB:00:6B:39:92:D5:DF:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:03:38:78:94:f8:c2:37:db:09:9e:17:cf:e8:59:98:9b:d5: 8d:20:df:d1:38:8f:67:ae:c9:fc:37:89:1b:ae:9e:97:54:d4: 39:a6:f4:18:b8:1c:1a:33:06:14:4f:93:36:74:dd:90:4e:f7: 73:0b:91:4b:b6:e0:d8:c8:b5:c6:e9:22:a3:af:79:25:ed:9e: 62:43:7f:f0:e8:6f:b1:69:76:80:d1:44:36:ec:90:9f:70:ca: 44:a2:d3:5d:90:0a:f7:f9:e5:57:50:09:b7:eb:40:2d:18:95: bd:e8:80:5e:e0:6d:e8:3a:7f:07:61:82:ba:12:05:26:b3:19: 00:70:c9:0b:4d:6d:e8:97:1c:2d:02:46:77:2e:0d:93:95:a4: bc:22:d6:2c:c2:16:91:93:82:1b:57:f0:99:e7:b4:c1:da:9e: 98:ea:f5:25:a7:66:cf:52:4b:7d:3c:3f:35:86:86:cd:76:dd: ee:01:22:35:d1:9e:db:2e:91:66:51:c9:15:2b:dd:27:21:e1: 8c:7c:28:69:ed:d5:a5:f4:c6:bf:07:f4:28:85:07:ae:d1:e7: 71:a0:00:c0:d7:c8:ca:69:ad:2d:d2:8f:6e:20:49:b2:d9:e4: ed:6f:6b:22:df:a0:f3:63:5b:0e:8f:c1:a8:88:ac:5d:c6:7c: 20:fe:31:94 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUHLeG7KAFWqRuf7HJLXsHi2/QO2wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI5QjREMTI3OUU2QzY0QjBDRERGNTkzRkIwMDZCMzk5 MkQ1REY2RjAeFw0yNTA4MjMwMDE1NTBaFw0yNTA4MjYwNjE0NTBaMDMxMTAvBgNV BAMTKDc5RENBQzdBQURCNUNCNEIxMTRFMDVDNjk4N0Q5QjEwQjVCRTM5MkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4uqsDmiaAGueWAMpIQxg8D9sz lLUEIqvIzhs/UHHyhtf8ASyL8FblmLaL/jYypKOGhw/6lN7ZEHb1ZrodiEq4lJOV Im8dS9EW5aC51q1/VYWhZQ+BmOvLMW5sORWnNxgI1Q4dFKh1d1OqnwAcbU+ZzHfd Ai1pN9kzOrF3iU6OvCo7WtR8zh3uAe0r7erflNhM6wox4IBs70YYvMivvt2bm5j4 6mZp19Ks3gRbHQ0vHXM/XGunYhpH15P+XnNalm8k1oqEPgHgutWL/5cCXyu8hE59 NFbdWDzjbSSwFHjTGNrg4lQxmzDEHsn9Qlj48Phab06qIMnsEzVXrA/UgxLTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUedyseq21y0sRTgXGmH2bELW+OS8wHwYDVR0j BBgwFoAU25tNEnnmxksM3fWT+wBrOZLV328wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZTlhYmIxYS1kNmMwLTQ1NGYtODcwYS04YmVlZGQ4MWZjZDIvMC9EQjlCNEQxMjc5 RTZDNjRCMENEREY1OTNGQjAwNkIzOTkyRDVERjZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREI5QjREMTI3OUU2QzY0QjBDRERGNTkzRkIwMDZCMzk5MkQ1 REY2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGU5YWJiMWEtZDZjMC00NTRmLTg3 MGEtOGJlZWRkODFmY2QyLzAvREI5QjREMTI3OUU2QzY0QjBDRERGNTkzRkIwMDZC Mzk5MkQ1REY2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAA0DOHiU+MI32wmeF8/oWZib1Y0g39E4j2eu yfw3iRuunpdU1Dmm9Bi4HBozBhRPkzZ03ZBO93MLkUu24NjItcbpIqOveSXtnmJD f/Dob7FpdoDRRDbskJ9wykSi012QCvf55VdQCbfrQC0Ylb3ogF7gbeg6fwdhgroS BSazGQBwyQtNbeiXHC0CRncuDZOVpLwi1izCFpGTghtX8JnntMHanpjq9SWnZs9S S308PzWGhs123e4BIjXRntsukWZRyRUr3Sch4Yx8KGnt1aX0xr8H9CiFB67R53Gg AMDXyMpprS3Sj24gSbLZ5O1vayLfoPNjWw6PwaiIrF3GfCD+MZQ= -----END CERTIFICATE-----Generated at Sat Aug 23 15:30:55 2025 by rpki-client