$ rpki-client -vvf repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.mft File: DB03D7B542C60D3D72565734C86589420DF070A0.mft (raw, json) Hash identifier: bSMapVb20hDi8+u+Cp/1xsQcjbPStoVNMRGG+fR+k+M= Subject key identifier: BC:0E:14:7A:FF:0B:85:28:70:0D:71:5C:B7:50:6B:07:89:1E:03:4B Authority key identifier: DB:03:D7:B5:42:C6:0D:3D:72:56:57:34:C8:65:89:42:0D:F0:70:A0 Certificate issuer: /CN=DB03D7B542C60D3D72565734C86589420DF070A0 Certificate serial: 7575104FBBF185410C0A83FC9FEA7D003F10950B Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB03D7B542C60D3D72565734C86589420DF070A0.cer Subject info access: rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.mft Manifest number: 020F Signing time: Mon 04 Aug 2025 15:32:09 +0000 Manifest this update: Mon 04 Aug 2025 15:27:09 +0000 Manifest next update: Fri 08 Aug 2025 01:33:09 +0000 Files and hashes: 1: 3130332e3138362e3231322e302f32332d3234203d3e20313439373134.roa (hash: qTxbUW36PI+ML7M9h6pieAAtdA4D+wz75UuUpAqL/GM=) 2: DB03D7B542C60D3D72565734C86589420DF070A0.crl (hash: iYyx0TvFIM1uKLkW09pw8gBrCAT+f8qWJOA0cx1jIZI=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.crl rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB03D7B542C60D3D72565734C86589420DF070A0.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 01:33:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 75:75:10:4f:bb:f1:85:41:0c:0a:83:fc:9f:ea:7d:00:3f:10:95:0b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB03D7B542C60D3D72565734C86589420DF070A0 Validity Not Before: Aug 4 15:27:09 2025 GMT Not After : Aug 8 01:33:09 2025 GMT Subject: CN=BC0E147AFF0B8528700D715CB7506B07891E034B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:bb:cd:49:93:09:61:88:93:a6:4a:19:f3:e5: 79:32:f6:94:9c:bc:aa:4a:d0:6f:f8:a9:7a:7c:12: 66:ff:df:32:13:83:ba:5a:d9:eb:4a:49:7a:af:c7: 4b:34:c8:c2:7b:5a:0b:d9:eb:a9:5e:8d:48:28:70: f9:0c:8c:0f:ab:17:77:f2:19:db:fb:49:1c:e5:da: 0a:18:94:03:1e:3d:e1:27:fc:ac:71:bf:59:a6:e6: f0:f5:47:6d:18:f9:aa:37:ac:2c:51:a6:2e:35:a6: 0f:4e:e0:79:5c:d5:37:26:17:32:af:b3:a3:4a:28: c6:ae:10:25:77:5a:16:b4:22:28:ed:34:e2:94:db: 63:f2:30:ac:16:1a:97:ba:da:fd:99:3d:1c:94:29: 60:bf:d0:81:77:f4:1e:08:42:29:73:4c:c3:27:c8: 1b:34:5a:08:00:ac:c4:7e:39:24:b4:0a:ab:1b:e7: 58:5a:75:84:85:7d:90:ca:a1:ff:c5:fc:69:fd:87: 4a:3e:ef:8e:dd:df:1d:51:e1:b9:c5:6c:30:6c:24: d0:7c:d0:19:f2:d9:a2:c0:da:1d:91:f7:6e:3b:e8: 7e:bc:29:65:8d:f5:07:dc:59:31:20:04:1a:ce:bc: 05:a7:ba:0a:df:34:36:df:b2:d0:ac:d6:52:7b:b1: 0f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:0E:14:7A:FF:0B:85:28:70:0D:71:5C:B7:50:6B:07:89:1E:03:4B X509v3 Authority Key Identifier: keyid:DB:03:D7:B5:42:C6:0D:3D:72:56:57:34:C8:65:89:42:0D:F0:70:A0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB03D7B542C60D3D72565734C86589420DF070A0.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/04f28235-0ba8-4e14-8b85-29c3a4a76eab/0/DB03D7B542C60D3D72565734C86589420DF070A0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:78:00:d5:d7:61:d1:a2:e0:e8:d6:a9:ec:68:00:13:d0:b5: 7d:79:8b:b6:7d:24:00:10:4c:ae:21:1d:ee:35:6a:bc:45:eb: 4d:ad:8d:fa:6d:bd:f5:1f:20:24:d7:1f:27:e8:d3:40:08:36: b0:b3:2b:b5:f6:9e:c2:eb:65:7d:8e:4f:7d:06:95:72:d7:16: 80:12:41:33:c4:19:10:cf:94:e6:39:77:89:36:3f:af:14:4d: ba:60:fb:9c:72:5c:c3:12:ea:54:b4:3c:06:2d:6d:c5:2d:45: ca:5a:5c:1c:ed:1f:60:d5:ed:e2:84:25:97:21:c4:85:12:f7: d7:c9:81:54:b2:01:0b:c5:70:2f:69:ab:49:c1:04:df:f1:06: 5a:f8:68:f2:41:1f:de:a2:c4:94:da:7b:5b:3d:f8:c7:c4:95: bf:13:91:6f:fa:3d:0c:99:b0:65:58:10:da:1d:af:8d:14:e1: c6:3d:81:fb:1d:f8:fa:f6:f7:0a:d8:4f:e8:d7:07:fa:9b:f3: 4a:a2:53:e0:f3:e9:63:c1:e4:fd:8e:0f:1a:1f:ae:b1:f2:a0: 90:f1:53:45:33:9d:a1:86:5b:63:df:d4:ae:6e:16:7f:d4:6e: 31:f2:39:89:3a:a0:1e:92:ad:60:b6:4c:30:9e:2a:1c:b4:33: 69:ff:43:db -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdXUQT7vxhUEMCoP8n+p9AD8QlQswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIwM0Q3QjU0MkM2MEQzRDcyNTY1NzM0Qzg2NTg5NDIw REYwNzBBMDAeFw0yNTA4MDQxNTI3MDlaFw0yNTA4MDgwMTMzMDlaMDMxMTAvBgNV BAMTKEJDMEUxNDdBRkYwQjg1Mjg3MDBENzE1Q0I3NTA2QjA3ODkxRTAzNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7u81JkwlhiJOmShnz5Xky9pSc vKpK0G/4qXp8Emb/3zITg7pa2etKSXqvx0s0yMJ7WgvZ66lejUgocPkMjA+rF3fy Gdv7SRzl2goYlAMePeEn/Kxxv1mm5vD1R20Y+ao3rCxRpi41pg9O4Hlc1TcmFzKv s6NKKMauECV3Wha0IijtNOKU22PyMKwWGpe62v2ZPRyUKWC/0IF39B4IQilzTMMn yBs0WggArMR+OSS0Cqsb51hadYSFfZDKof/F/Gn9h0o+747d3x1R4bnFbDBsJNB8 0Bny2aLA2h2R92476H68KWWN9QfcWTEgBBrOvAWnugrfNDbfstCs1lJ7sQ+TAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUvA4Uev8LhShwDXFct1BrB4keA0swHwYDVR0j BBgwFoAU2wPXtULGDT1yVlc0yGWJQg3wcKAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w NGYyODIzNS0wYmE4LTRlMTQtOGI4NS0yOWMzYTRhNzZlYWIvMC9EQjAzRDdCNTQy QzYwRDNENzI1NjU3MzRDODY1ODk0MjBERjA3MEEwLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREIwM0Q3QjU0MkM2MEQzRDcyNTY1NzM0Qzg2NTg5NDIwREYw NzBBMC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMDRmMjgyMzUtMGJhOC00ZTE0LThi ODUtMjljM2E0YTc2ZWFiLzAvREIwM0Q3QjU0MkM2MEQzRDcyNTY1NzM0Qzg2NTg5 NDIwREYwNzBBMC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAHl4ANXXYdGi4OjWqexoABPQtX15i7Z9JAAQ TK4hHe41arxF602tjfptvfUfICTXHyfo00AINrCzK7X2nsLrZX2OT30GlXLXFoAS QTPEGRDPlOY5d4k2P68UTbpg+5xyXMMS6lS0PAYtbcUtRcpaXBztH2DV7eKEJZch xIUS99fJgVSyAQvFcC9pq0nBBN/xBlr4aPJBH96ixJTae1s9+MfElb8TkW/6PQyZ sGVYENodr40U4cY9gfsd+Pr29wrYT+jXB/qb80qiU+Dz6WPB5P2ODxofrrHyoJDx U0UznaGGW2Pf1K5uFn/UbjHyOYk6oB6SrWC2TDCeKhy0M2n/Q9s= -----END CERTIFICATE-----Generated at Thu Aug 7 00:26:56 2025 by rpki-client