$ rpki-client -vvf repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft File: DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft (raw, json) Hash identifier: WOiS5Ekwd0Rya7xykY/f5m3fLdILMjZY8fl2sLzu9OA= Subject key identifier: 82:BD:72:30:4B:DE:64:B1:D4:65:1B:13:AA:98:75:25:BA:A6:23:A9 Authority key identifier: DB:F7:1D:6F:8C:24:BD:B8:0D:69:2B:E8:6D:6F:7A:D3:95:1B:6C:EE Certificate issuer: /CN=DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE Certificate serial: 265DFD42E14B5D06135E6E5E0BCF146E30E85580 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.cer Subject info access: rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft Manifest number: 60 Signing time: Mon 04 Aug 2025 20:01:47 +0000 Manifest this update: Mon 04 Aug 2025 19:56:47 +0000 Manifest next update: Thu 07 Aug 2025 23:44:47 +0000 Files and hashes: 1: 323030313a6466353a323730303a3a2f34382d3438203d3e20313337333631.roa (hash: lAwEnKyw5OHxCplSawk5HVEotvU+5HwJxxtoSxrjtdo=) 2: 3130332e3131352e3130342e302f32342d3234203d3e20313337333631.roa (hash: 6mL7Avaab4glDlpMGnON/Jhq6VFk/42559+PiNPAoXE=) 3: DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.crl (hash: cUW8UlMMrrvmCFULe9fhpJSWokKrNdecZWJupykIMIg=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.crl rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 07 Aug 2025 23:44:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:5d:fd:42:e1:4b:5d:06:13:5e:6e:5e:0b:cf:14:6e:30:e8:55:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE Validity Not Before: Aug 4 19:56:47 2025 GMT Not After : Aug 7 23:44:47 2025 GMT Subject: CN=82BD72304BDE64B1D4651B13AA987525BAA623A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:b1:3b:05:79:5b:c1:a8:1d:2d:43:88:cf:72: 69:66:d8:f8:57:b4:64:e0:dc:90:76:3a:57:2b:b7: 1f:29:d5:a2:85:d5:fb:fd:8a:88:63:28:76:d4:ba: 5e:5e:a4:d5:c2:e0:27:9e:c1:81:cc:5a:59:69:1f: 39:5a:0c:90:4d:9f:7f:54:20:13:99:8c:3d:a9:5e: cd:81:b2:62:19:d7:8c:d6:c5:c0:2e:70:b2:88:a7: bb:a8:40:87:ad:a4:07:13:cd:03:15:6a:2e:fa:f5: 57:46:c9:6d:22:74:64:b7:00:70:09:40:d9:0d:6b: 20:10:a8:9c:ca:9b:cd:92:50:b0:d5:12:ae:96:47: a4:87:b1:03:e4:af:0a:4a:f2:d8:09:d3:e9:b6:7c: 4a:f2:22:61:49:c7:89:47:6f:0a:5d:3d:09:d7:a5: f3:aa:2f:ef:60:26:58:3a:3a:21:42:c2:f6:ec:aa: 6a:a5:fd:cd:e1:8b:10:13:73:b7:8c:ce:a5:b6:9f: 63:8f:ab:ad:61:ea:b4:33:62:fe:4c:bd:83:c4:6c: 11:3d:9a:70:37:59:3b:ca:64:c1:a9:47:7a:55:67: 29:df:52:61:82:9b:51:d8:48:5b:84:61:63:b2:e8: 7b:b6:8d:45:ff:88:90:b5:95:42:8a:e8:88:37:ce: 9b:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:BD:72:30:4B:DE:64:B1:D4:65:1B:13:AA:98:75:25:BA:A6:23:A9 X509v3 Authority Key Identifier: keyid:DB:F7:1D:6F:8C:24:BD:B8:0D:69:2B:E8:6D:6F:7A:D3:95:1B:6C:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/032cae3f-b329-441b-97fc-5bb9fcc051d2/0/DBF71D6F8C24BDB80D692BE86D6F7AD3951B6CEE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 85:5f:f0:64:05:b0:86:40:a1:43:3b:75:34:d1:e5:ce:ba:46: 45:4f:ce:4b:72:9f:88:e0:32:a1:3d:2e:c6:49:ed:1b:88:8b: a5:0c:ab:4e:f7:f9:b7:ee:e1:71:f8:af:c0:da:bf:68:af:ce: ab:46:e1:ad:99:ca:86:63:61:e4:61:ad:99:fd:4d:b9:f7:d2: 9e:ef:8d:13:37:f6:77:91:de:1f:7c:d8:1d:51:d0:72:54:55: bd:51:ea:23:fd:4d:c3:38:dc:93:ff:f5:61:d3:0a:55:67:e7: 2f:5f:88:de:7f:cd:91:b7:95:7e:73:4b:62:a4:eb:1a:e5:31: f0:98:02:3c:67:2c:29:3f:39:bc:2a:5b:3c:72:c0:7f:53:6d: dc:99:4a:11:7b:35:56:91:64:29:33:37:d3:ec:90:68:8a:23: 17:72:40:f8:d7:c2:3d:92:4d:15:70:06:1b:b8:66:51:7e:55: 22:f1:18:83:2f:b1:4e:5b:2c:19:c9:fa:1e:fc:50:21:76:ee: eb:49:6c:63:69:e0:5f:5e:b0:20:a9:f1:eb:4f:aa:ff:6e:1b: 8f:07:e5:4b:67:7e:58:16:20:18:e7:e1:7d:3e:d3:09:89:ad: c8:31:17:d3:f5:37:cd:f3:e2:6e:43:f6:51:0b:d3:fa:b3:ec: 37:95:18:5e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJl39QuFLXQYTXm5eC88UbjDoVYAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJGNzFENkY4QzI0QkRCODBENjkyQkU4NkQ2RjdBRDM5 NTFCNkNFRTAeFw0yNTA4MDQxOTU2NDdaFw0yNTA4MDcyMzQ0NDdaMDMxMTAvBgNV BAMTKDgyQkQ3MjMwNEJERTY0QjFENDY1MUIxM0FBOTg3NTI1QkFBNjIzQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFsTsFeVvBqB0tQ4jPcmlm2PhX tGTg3JB2Olcrtx8p1aKF1fv9iohjKHbUul5epNXC4CeewYHMWllpHzlaDJBNn39U IBOZjD2pXs2BsmIZ14zWxcAucLKIp7uoQIetpAcTzQMVai769VdGyW0idGS3AHAJ QNkNayAQqJzKm82SULDVEq6WR6SHsQPkrwpK8tgJ0+m2fEryImFJx4lHbwpdPQnX pfOqL+9gJlg6OiFCwvbsqmql/c3hixATc7eMzqW2n2OPq61h6rQzYv5MvYPEbBE9 mnA3WTvKZMGpR3pVZynfUmGCm1HYSFuEYWOy6Hu2jUX/iJC1lUKK6Ig3zputAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUgr1yMEveZLHUZRsTqph1JbqmI6kwHwYDVR0j BBgwFoAU2/cdb4wkvbgNaSvobW9605UbbO4wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w MzJjYWUzZi1iMzI5LTQ0MWItOTdmYy01YmI5ZmNjMDUxZDIvMC9EQkY3MUQ2RjhD MjRCREI4MEQ2OTJCRTg2RDZGN0FEMzk1MUI2Q0VFLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREJGNzFENkY4QzI0QkRCODBENjkyQkU4NkQ2RjdBRDM5NTFC NkNFRS5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDMyY2FlM2YtYjMyOS00NDFiLTk3 ZmMtNWJiOWZjYzA1MWQyLzAvREJGNzFENkY4QzI0QkRCODBENjkyQkU4NkQ2RjdB RDM5NTFCNkNFRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAIVf8GQFsIZAoUM7dTTR5c66RkVPzktyn4jg MqE9LsZJ7RuIi6UMq073+bfu4XH4r8Dav2ivzqtG4a2ZyoZjYeRhrZn9Tbn30p7v jRM39neR3h982B1R0HJUVb1R6iP9TcM43JP/9WHTClVn5y9fiN5/zZG3lX5zS2Kk 6xrlMfCYAjxnLCk/ObwqWzxywH9TbdyZShF7NVaRZCkzN9PskGiKIxdyQPjXwj2S TRVwBhu4ZlF+VSLxGIMvsU5bLBnJ+h78UCF27utJbGNp4F9esCCp8etPqv9uG48H 5UtnflgWIBjn4X0+0wmJrcgxF9P1N83z4m5D9lEL0/qz7DeVGF4= -----END CERTIFICATE-----Generated at Thu Aug 7 00:27:07 2025 by rpki-client