$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft File: DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft (raw, json) Hash identifier: OG2BTGTBVBlXxQz/uoj42v0JqhxK3rWlxgW+X4+xLDM= Subject key identifier: E4:B5:EA:23:C5:96:B5:F8:63:6B:09:DF:84:ED:5D:87:CC:5F:B6:61 Authority key identifier: DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3 Certificate issuer: /CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3 Certificate serial: 25A0B5B653E7691A59E42073F484DEB9EA2FF420 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft Manifest number: 01E3 Signing time: Sun 15 Jun 2025 11:40:54 +0000 Manifest this update: Sun 15 Jun 2025 11:35:54 +0000 Manifest next update: Wed 18 Jun 2025 15:56:54 +0000 Files and hashes: 1: 3130332e3131382e3137352e302f32342d3234203d3e20323131343037.roa (hash: D7vL0dWhHLWGMsR8H6EfhySZTfu+/ovgCxiI8LpMnhg=) 2: 3130332e3131382e3137352e302f32342d3234203d3e20313439393533.roa (hash: 9b88BYrc5fW60hCTvccg2BM34mQg6ZvvmRF6BzjVMcc=) 3: 3130332e3131382e3137352e302f32342d3234203d3e20313532333638.roa (hash: kR8T9q/RgSSIceyvyByw5FPl6k8a1Y38HMh9CIjccZE=) 4: 3130332e3131382e3137342e302f32342d3234203d3e20313439393533.roa (hash: 1GWI9DsalLLnVqal8oinWe9NrHYqZtqJkFvL9lNkK+c=) 5: 3130332e3131382e3137342e302f32342d3234203d3e20323130353337.roa (hash: 5tTNaFKVIpcsc/okIuKSdd47tmmVdXhx+ntRKQSJMJQ=) 6: 3130332e3131382e3137342e302f32342d3234203d3e203530313034.roa (hash: +BXNEKTyQIjcl0qPczbAlblVHqKtw7MqFu+APMhxSxk=) 7: 3130332e3131382e3137352e302f32342d3234203d3e203530313034.roa (hash: 0f2PA52uub2AIW3HVhP+kRWDT2sjTpqTW3vdzs5HzME=) 8: 323030313a6466313a316334303a3a2f34382d3438203d3e20313439393533.roa (hash: 7NwT3lu9JZjfjgapimGfIHaWTUgpUh5i3OuwyUj48VY=) 9: 323030313a6466313a316334303a3a2f34382d3438203d3e203530313034.roa (hash: Wp9W2Rj7SOYCUcu19j3p/Fdm3AlKEhaeQ0agpMYNbvU=) 10: 323030313a6466313a316334303a3a2f34382d3438203d3e20313532333638.roa (hash: oHm/b4iyQLSGBhCpt6FnAGvZb8oOHkZH9fWssNMlC38=) 11: DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl (hash: iNeobaVnC16bIsUoX0vIsjUYvFMiuDDcnPHEPLzjgFg=) 12: 3130332e3131382e3137352e302f32342d3234203d3e203234333132.roa (hash: ZErCRMzj3m+Fl5KnJq4RrHkwrZjyK1a28QhPXfjqsjA=) 13: 3130332e3131382e3137352e302f32342d3234203d3e20323130353337.roa (hash: H9HoLlwsPZ7vWOyU7iY4WK1IEAYm6ZYFQe1/pX+yL6k=) 14: 3130332e3131382e3137342e302f32342d3234203d3e20313532333638.roa (hash: rTgQmdFwVK4QH13LPVhNkKRBGW9YevRVeOcoVmRvwXw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 15:56:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:a0:b5:b6:53:e7:69:1a:59:e4:20:73:f4:84:de:b9:ea:2f:f4:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3 Validity Not Before: Jun 15 11:35:54 2025 GMT Not After : Jun 18 15:56:54 2025 GMT Subject: CN=E4B5EA23C596B5F8636B09DF84ED5D87CC5FB661 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4a:94:e1:1f:ce:fa:50:5c:ec:a0:ca:1e:5b: 75:38:ae:45:d0:ab:03:2f:b6:f0:a1:e5:c8:e3:46: 72:33:01:22:c5:ad:11:db:10:2f:0a:02:cf:53:e2: d9:7c:cf:0a:b6:95:f9:cf:fd:36:07:6c:1c:af:f5: b8:d3:15:1f:6d:51:03:4e:39:23:d4:b8:ac:36:91: 67:c8:ca:8d:1c:5e:5d:c3:69:89:16:ca:a3:87:d6: 22:95:e2:e4:fa:88:a3:97:cd:e8:2d:4a:fb:30:dd: 91:e2:08:f9:6c:59:b6:64:d4:ec:95:b6:29:36:2a: 0f:79:64:ad:7b:03:3c:f2:3d:f7:8e:4b:1d:e8:ec: 96:8f:8b:99:a3:3f:e1:14:66:2a:8a:1a:02:0f:10: 71:d8:74:7c:82:a1:4c:71:1c:02:1c:91:d4:b5:ad: a9:f1:d0:3a:43:88:4d:da:2c:47:07:5a:1a:5f:41: 2d:93:d6:6f:13:67:81:ca:fd:17:ba:56:6d:76:3b: e9:0a:82:88:10:d5:0c:74:37:b8:e3:84:12:a7:64: d9:3f:b2:1e:57:15:45:8f:49:6c:d9:d4:5d:03:c8: 89:a9:f2:2a:93:a9:47:e4:75:11:bf:a7:9e:e6:42: 4e:34:73:ba:a1:5a:56:1c:04:9d:e8:28:4c:14:bd: ef:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E4:B5:EA:23:C5:96:B5:F8:63:6B:09:DF:84:ED:5D:87:CC:5F:B6:61 X509v3 Authority Key Identifier: keyid:DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 42:2c:8c:c9:ce:ff:64:8e:49:b8:8e:9a:85:8e:29:b9:75:4f: d3:33:fd:09:03:1e:d9:be:28:c2:a4:c5:df:bc:7d:2e:d9:a8: 1c:7d:86:42:68:29:eb:67:ef:be:1c:52:e4:31:9c:31:92:2a: be:85:b9:d9:12:8f:65:47:ce:a2:a2:cf:d0:72:7e:05:1c:ca: d7:95:a4:47:01:66:35:53:ce:0c:f9:88:c3:f7:ee:ea:b9:8d: 14:ae:bf:5a:92:88:fa:6a:17:29:52:62:e6:46:54:ab:c4:47: b3:53:cd:5a:bb:ae:9e:86:dc:82:a5:fe:52:0a:cc:8e:22:26: 57:7e:7e:52:c8:d6:5c:9c:e1:4a:55:f5:43:17:66:c3:9d:ff: f8:65:0b:19:5c:ee:24:02:91:0c:9f:39:7f:d9:79:9e:04:9b: 2b:2c:7b:bc:73:e3:68:37:c1:6b:15:16:4f:fe:02:92:02:e3: f7:e5:04:8d:0b:6a:f5:2c:ae:a6:ae:b7:f1:9c:88:78:6b:13: 46:5a:bb:61:14:ee:3d:99:ca:73:b3:20:89:83:e7:ad:5d:4f: 37:77:99:10:84:74:b9:c1:44:aa:12:53:51:0f:c2:8c:a5:3a: 10:61:12:05:65:79:36:b6:f8:ee:6d:90:53:b3:ef:1a:0c:47: 83:e3:74:61 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUJaC1tlPnaRpZ5CBz9ITeueov9CAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJCMThDQ0Y1ODkxNDUyNEFGQjExM0ZFMTMzNTlDQzZC MDhFRkJGMzAeFw0yNTA2MTUxMTM1NTRaFw0yNTA2MTgxNTU2NTRaMDMxMTAvBgNV BAMTKEU0QjVFQTIzQzU5NkI1Rjg2MzZCMDlERjg0RUQ1RDg3Q0M1RkI2NjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJSpThH876UFzsoMoeW3U4rkXQ qwMvtvCh5cjjRnIzASLFrRHbEC8KAs9T4tl8zwq2lfnP/TYHbByv9bjTFR9tUQNO OSPUuKw2kWfIyo0cXl3DaYkWyqOH1iKV4uT6iKOXzegtSvsw3ZHiCPlsWbZk1OyV tik2Kg95ZK17AzzyPfeOSx3o7JaPi5mjP+EUZiqKGgIPEHHYdHyCoUxxHAIckdS1 ranx0DpDiE3aLEcHWhpfQS2T1m8TZ4HK/Re6Vm12O+kKgogQ1Qx0N7jjhBKnZNk/ sh5XFUWPSWzZ1F0DyImp8iqTqUfkdRG/p57mQk40c7qhWlYcBJ3oKEwUve8ZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU5LXqI8WWtfhjawnfhO1dh8xftmEwHwYDVR0j BBgwFoAU27GMz1iRRSSvsRP+EzWcxrCO+/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5ZDdjYi02Y2ZiLTRkZTAtOWRhYS1kMjIyYjdhODkwNzIvMC9EQkIxOENDRjU4 OTE0NTI0QUZCMTEzRkUxMzM1OUNDNkIwOEVGQkYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREJCMThDQ0Y1ODkxNDUyNEFGQjExM0ZFMTMzNTlDQzZCMDhF RkJGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjdkOWQ3Y2ItNmNmYi00ZGUwLTlk YWEtZDIyMmI3YTg5MDcyLzAvREJCMThDQ0Y1ODkxNDUyNEFGQjExM0ZFMTMzNTlD QzZCMDhFRkJGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEIsjMnO/2SOSbiOmoWOKbl1T9Mz/QkDHtm+ KMKkxd+8fS7ZqBx9hkJoKetn774cUuQxnDGSKr6FudkSj2VHzqKiz9ByfgUcyteV pEcBZjVTzgz5iMP37uq5jRSuv1qSiPpqFylSYuZGVKvER7NTzVq7rp6G3IKl/lIK zI4iJld+flLI1lyc4UpV9UMXZsOd//hlCxlc7iQCkQyfOX/ZeZ4Emysse7xz42g3 wWsVFk/+ApIC4/flBI0LavUsrqaut/GciHhrE0Zau2EU7j2ZynOzIImD561dTzd3 mRCEdLnBRKoSU1EPwoylOhBhEgVleTa2+O5tkFOz7xoMR4PjdGE= -----END CERTIFICATE-----Generated at Mon Jun 16 10:44:17 2025 by rpki-client