$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft File: DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft (raw, json) Hash identifier: XGxe9ZFlkS9SN5sGSBNe03w99nsIowHkBKd7cfuHrcM= Subject key identifier: C6:23:A1:84:A1:12:12:D1:26:30:8A:E4:3F:2A:46:01:48:47:66:E6 Authority key identifier: DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3 Certificate issuer: /CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3 Certificate serial: 741C6BDF817D95B381DD6DD05945617F2FD5C7B2 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft Manifest number: 0221 Signing time: Sun 02 Nov 2025 06:20:56 +0000 Manifest this update: Sun 02 Nov 2025 06:15:56 +0000 Manifest next update: Wed 05 Nov 2025 07:31:56 +0000 Files and hashes: 1: 3130332e3131382e3137352e302f32342d3234203d3e203530313034.roa (hash: 0f2PA52uub2AIW3HVhP+kRWDT2sjTpqTW3vdzs5HzME=) 2: 3130332e3131382e3137352e302f32342d3234203d3e20323131343037.roa (hash: D7vL0dWhHLWGMsR8H6EfhySZTfu+/ovgCxiI8LpMnhg=) 3: 3130332e3131382e3137352e302f32342d3234203d3e20323130353337.roa (hash: H9HoLlwsPZ7vWOyU7iY4WK1IEAYm6ZYFQe1/pX+yL6k=) 4: 323030313a6466313a316334303a3a2f34382d3438203d3e20313532333638.roa (hash: oHm/b4iyQLSGBhCpt6FnAGvZb8oOHkZH9fWssNMlC38=) 5: 323030313a6466313a316334303a3a2f34382d3438203d3e203530313034.roa (hash: Wp9W2Rj7SOYCUcu19j3p/Fdm3AlKEhaeQ0agpMYNbvU=) 6: 3130332e3131382e3137342e302f32342d3234203d3e20313532333638.roa (hash: rTgQmdFwVK4QH13LPVhNkKRBGW9YevRVeOcoVmRvwXw=) 7: 3130332e3131382e3137352e302f32342d3234203d3e20313532333638.roa (hash: kR8T9q/RgSSIceyvyByw5FPl6k8a1Y38HMh9CIjccZE=) 8: 3130332e3131382e3137342e302f32342d3234203d3e20313439393533.roa (hash: 1GWI9DsalLLnVqal8oinWe9NrHYqZtqJkFvL9lNkK+c=) 9: 3130332e3131382e3137342e302f32342d3234203d3e20323130353337.roa (hash: 5tTNaFKVIpcsc/okIuKSdd47tmmVdXhx+ntRKQSJMJQ=) 10: 3130332e3131382e3137352e302f32342d3234203d3e20313439393533.roa (hash: 9b88BYrc5fW60hCTvccg2BM34mQg6ZvvmRF6BzjVMcc=) 11: 323030313a6466313a316334303a3a2f34382d3438203d3e20313439393533.roa (hash: 7NwT3lu9JZjfjgapimGfIHaWTUgpUh5i3OuwyUj48VY=) 12: 3130332e3131382e3137342e302f32342d3234203d3e203530313034.roa (hash: +BXNEKTyQIjcl0qPczbAlblVHqKtw7MqFu+APMhxSxk=) 13: 3130332e3131382e3137352e302f32342d3234203d3e203234333132.roa (hash: ZErCRMzj3m+Fl5KnJq4RrHkwrZjyK1a28QhPXfjqsjA=) 14: DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl (hash: DP8ykmbCKwTaXXBTmdU+aQdsn7esmgJdfSIc/RElh/w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 05 Nov 2025 07:31:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:1c:6b:df:81:7d:95:b3:81:dd:6d:d0:59:45:61:7f:2f:d5:c7:b2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3 Validity Not Before: Nov 2 06:15:56 2025 GMT Not After : Nov 5 07:31:56 2025 GMT Subject: CN=C623A184A11212D126308AE43F2A4601484766E6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f8:7e:3d:78:7b:28:a6:87:04:73:f4:4e:ec:8a: 1d:80:2e:a8:44:f9:40:5e:6f:a9:59:ce:db:2a:ad: 52:28:cc:ce:c5:6b:19:ff:c3:fc:83:53:90:81:e3: c0:87:fc:7f:87:6e:19:90:00:3b:57:e3:f6:7f:fc: 90:4a:e8:d2:94:fe:b6:a1:b6:49:7a:cd:40:ad:62: 1c:2d:39:48:49:dc:8c:be:89:15:b3:b1:d5:3d:84: 52:40:55:7b:b2:a8:2a:2b:24:5d:84:fa:ab:f5:2e: 40:51:4e:06:91:5c:25:60:d3:f6:b6:a4:8f:27:bf: 65:12:8b:c3:77:6f:d7:79:15:af:5e:e0:16:71:74: b9:e3:8e:9f:ee:ab:1a:47:3b:ca:39:1f:3c:c7:b4: 70:88:1d:75:8e:67:23:da:b6:55:56:05:21:42:61: 8a:ce:83:5d:83:24:ac:a2:64:fd:19:9e:94:0a:7c: 79:13:bc:2a:1e:1c:77:21:18:24:11:cb:39:43:7a: 9e:c2:f1:48:1a:6c:b2:79:07:21:65:6c:85:cc:10: 49:38:19:60:a0:62:1b:1e:e6:3c:e9:58:da:6b:f8: 6f:cb:9f:7a:d0:e5:67:96:0d:ff:59:19:ed:70:2e: 74:2b:0f:f9:a6:8c:82:bc:b1:6a:4c:7f:a4:d0:1c: e3:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:23:A1:84:A1:12:12:D1:26:30:8A:E4:3F:2A:46:01:48:47:66:E6 X509v3 Authority Key Identifier: keyid:DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b8:42:44:3a:14:8c:50:08:37:d5:7f:1f:29:d1:91:86:6f:58: de:45:2b:88:9f:38:00:62:17:21:9b:93:5a:2e:be:61:48:f6: e8:de:1e:82:cc:63:81:7c:75:ed:76:88:0e:79:bf:d7:88:58: 54:72:e3:63:25:ca:9f:b1:26:54:37:b6:ff:ef:bf:80:5d:5e: 4c:88:41:69:ae:2a:c2:3b:ad:ef:c6:c3:71:95:b6:57:47:9d: 90:25:9c:30:8b:7e:e8:41:ef:f9:1e:74:09:99:6b:fa:f1:76: 54:46:1f:40:11:54:fb:be:96:91:e6:0b:38:71:e7:c4:09:e4: 0e:27:c1:27:c4:bc:33:39:95:b5:1f:7b:1e:01:a7:7d:c1:9f: 9c:4e:01:55:66:a0:53:fe:c5:ac:3f:b1:5f:95:8d:a4:a3:5c: 0a:a1:6e:b7:44:19:81:d0:b6:02:d5:64:8e:66:cd:ae:ca:d9: 58:f3:05:7b:ca:0c:f6:c3:f6:ce:4c:12:7c:34:8c:33:74:84: 11:cd:05:67:ef:1f:11:7d:cf:92:ad:dc:a5:e4:c2:34:35:f7: 76:b2:12:ee:a7:f9:3c:67:68:e8:ef:e7:1a:f1:73:9d:a8:7f: a8:a8:7f:4d:35:ec:7b:2e:8d:87:44:f6:14:90:81:70:32:f5: ae:3a:1e:6a -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdBxr34F9lbOB3W3QWUVhfy/Vx7IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJCMThDQ0Y1ODkxNDUyNEFGQjExM0ZFMTMzNTlDQzZC MDhFRkJGMzAeFw0yNTExMDIwNjE1NTZaFw0yNTExMDUwNzMxNTZaMDMxMTAvBgNV BAMTKEM2MjNBMTg0QTExMjEyRDEyNjMwOEFFNDNGMkE0NjAxNDg0NzY2RTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD4fj14eyimhwRz9E7sih2ALqhE +UBeb6lZztsqrVIozM7Faxn/w/yDU5CB48CH/H+HbhmQADtX4/Z//JBK6NKU/rah tkl6zUCtYhwtOUhJ3Iy+iRWzsdU9hFJAVXuyqCorJF2E+qv1LkBRTgaRXCVg0/a2 pI8nv2USi8N3b9d5Fa9e4BZxdLnjjp/uqxpHO8o5HzzHtHCIHXWOZyPatlVWBSFC YYrOg12DJKyiZP0ZnpQKfHkTvCoeHHchGCQRyzlDep7C8UgabLJ5ByFlbIXMEEk4 GWCgYhse5jzpWNpr+G/Ln3rQ5WeWDf9ZGe1wLnQrD/mmjIK8sWpMf6TQHOM5AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUxiOhhKESEtEmMIrkPypGAUhHZuYwHwYDVR0j BBgwFoAU27GMz1iRRSSvsRP+EzWcxrCO+/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y N2Q5ZDdjYi02Y2ZiLTRkZTAtOWRhYS1kMjIyYjdhODkwNzIvMC9EQkIxOENDRjU4 OTE0NTI0QUZCMTEzRkUxMzM1OUNDNkIwOEVGQkYzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREJCMThDQ0Y1ODkxNDUyNEFGQjExM0ZFMTMzNTlDQzZCMDhF RkJGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMjdkOWQ3Y2ItNmNmYi00ZGUwLTlk YWEtZDIyMmI3YTg5MDcyLzAvREJCMThDQ0Y1ODkxNDUyNEFGQjExM0ZFMTMzNTlD QzZCMDhFRkJGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBALhCRDoUjFAIN9V/HynRkYZvWN5FK4ifOABi FyGbk1ouvmFI9ujeHoLMY4F8de12iA55v9eIWFRy42Mlyp+xJlQ3tv/vv4BdXkyI QWmuKsI7re/Gw3GVtldHnZAlnDCLfuhB7/kedAmZa/rxdlRGH0ARVPu+lpHmCzhx 58QJ5A4nwSfEvDM5lbUfex4Bp33Bn5xOAVVmoFP+xaw/sV+VjaSjXAqhbrdEGYHQ tgLVZI5mza7K2VjzBXvKDPbD9s5MEnw0jDN0hBHNBWfvHxF9z5Kt3KXkwjQ193ay Eu6n+TxnaOjv5xrxc52of6iof0017HsujYdE9hSQgXAy9a46Hmo= -----END CERTIFICATE-----Generated at Tue Nov 4 01:57:26 2025 by rpki-client