$ rpki-client -vvf repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft File: DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft (raw, json) Hash identifier: 1d58l7ZWvcyWtooOXZUxGJUB6oJNlurORJYRa1MXnI0= Subject key identifier: 72:BE:FC:A0:CD:19:D2:B2:D9:AB:77:2A:19:0C:9F:4A:E6:92:1B:AB Authority key identifier: DB:1E:31:B6:A9:85:67:91:C3:1B:99:A7:3C:0F:39:01:18:E5:4E:B8 Certificate issuer: /CN=DB1E31B6A9856791C31B99A73C0F390118E54EB8 Certificate serial: 2A805E7F356561609C7AE3587AB77E6713616232 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1E31B6A9856791C31B99A73C0F390118E54EB8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft Manifest number: 0183 Signing time: Mon 03 Nov 2025 17:20:36 +0000 Manifest this update: Mon 03 Nov 2025 17:15:36 +0000 Manifest next update: Fri 07 Nov 2025 01:29:36 +0000 Files and hashes: 1: 3130332e3136342e38332e302f32342d3234203d3e20313431393036.roa (hash: hqJzUmkGfm1tL5Cu+d0Y0jzRfSAbuU8h9B0SylrnKNo=) 2: DB1E31B6A9856791C31B99A73C0F390118E54EB8.crl (hash: Mhe/HPQNbFn0k1cWJdy0niJ9YRmvFUIhatJOJl0ysZk=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.crl rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1E31B6A9856791C31B99A73C0F390118E54EB8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 07 Nov 2025 01:29:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:80:5e:7f:35:65:61:60:9c:7a:e3:58:7a:b7:7e:67:13:61:62:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB1E31B6A9856791C31B99A73C0F390118E54EB8 Validity Not Before: Nov 3 17:15:36 2025 GMT Not After : Nov 7 01:29:36 2025 GMT Subject: CN=72BEFCA0CD19D2B2D9AB772A190C9F4AE6921BAB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:fa:dd:70:63:25:45:80:0b:75:25:81:a7:42:e4: 39:92:55:74:d7:d6:f4:50:ae:62:e7:d6:39:28:5b: 36:59:86:7a:17:c9:1e:8f:f3:2e:92:d3:4f:0d:c4: d3:69:6d:d2:86:cb:1f:cc:0d:db:8b:21:26:a6:3a: 19:a9:4c:6f:ea:05:2c:0a:95:df:91:75:6f:98:2d: 42:22:fb:18:f2:b7:ea:ed:c3:fa:08:8b:60:8c:28: 9f:99:12:d9:c1:69:ff:71:b3:5e:69:df:e8:22:e3: 66:0b:69:81:aa:6b:e9:52:79:1c:47:3b:16:b3:6f: cf:31:4a:d5:0c:13:1e:2d:ba:ff:3f:7a:09:4e:e8: a1:85:8e:cd:0f:1e:b1:b5:c5:07:3d:b7:f9:32:68: 7f:88:2e:d9:a1:07:90:1c:36:b4:16:37:fc:68:07: d7:f3:e9:54:e4:f1:47:d0:2a:5c:64:18:29:27:27: b2:2b:d2:17:31:2a:a0:d4:33:7a:cb:0b:40:75:6b: df:cd:8d:cb:2f:3d:23:a0:e3:4e:f0:78:c7:1e:6a: ef:29:80:fb:f1:58:48:75:c0:2c:7f:51:83:0a:29: 7b:65:3e:ff:61:81:af:b8:5e:c2:57:d0:9a:71:fe: a1:7a:4a:0f:c7:99:36:fc:db:e6:03:4d:0c:b4:49: b6:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:BE:FC:A0:CD:19:D2:B2:D9:AB:77:2A:19:0C:9F:4A:E6:92:1B:AB X509v3 Authority Key Identifier: keyid:DB:1E:31:B6:A9:85:67:91:C3:1B:99:A7:3C:0F:39:01:18:E5:4E:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1E31B6A9856791C31B99A73C0F390118E54EB8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1c:4d:cb:89:9b:3c:24:33:07:22:7f:6c:fa:63:43:f4:45:82: 43:98:54:ad:3f:eb:b9:64:fa:3c:80:9d:d5:8f:39:ce:cd:fc: 48:b9:ed:be:e9:79:ea:5d:b4:71:55:f9:b7:bd:ea:bd:00:e2: fb:b5:31:68:35:ee:e7:64:55:80:83:95:9c:ba:36:ee:c7:c3: 3e:32:d1:c5:9f:f5:60:d8:50:c8:06:3d:85:df:2b:05:5c:c6: be:f6:ba:54:b4:78:d3:62:8a:ec:cd:c4:7e:7a:68:e3:fa:e8: 06:0d:d6:1f:91:b3:ef:32:3b:96:ba:09:78:d1:fc:7e:35:67: eb:a3:eb:ca:24:3d:0a:d5:05:c0:b7:87:fe:90:19:5f:fa:93: b5:64:9c:c1:73:69:a8:ba:f4:ca:b7:d2:94:96:1d:46:ea:4d: 4b:d7:02:02:ce:19:2e:41:ed:63:9e:8c:54:24:f9:ec:33:2c: 57:a9:69:17:4a:41:ee:d7:5f:8c:d6:81:46:c7:6f:ab:fc:57: dd:cd:32:78:0a:4d:8d:69:70:1e:82:fd:3e:48:4a:af:1a:1e: 95:95:f6:8a:ce:6b:6d:34:3a:13:dc:ee:35:4a:17:4d:6b:fa: 56:cb:1c:e9:b0:03:0a:b2:e0:de:fb:7a:47:2e:78:99:98:4d: 54:7f:04:80 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUKoBefzVlYWCceuNYerd+ZxNhYjIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIxRTMxQjZBOTg1Njc5MUMzMUI5OUE3M0MwRjM5MDEx OEU1NEVCODAeFw0yNTExMDMxNzE1MzZaFw0yNTExMDcwMTI5MzZaMDMxMTAvBgNV BAMTKDcyQkVGQ0EwQ0QxOUQyQjJEOUFCNzcyQTE5MEM5RjRBRTY5MjFCQUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD63XBjJUWAC3UlgadC5DmSVXTX 1vRQrmLn1jkoWzZZhnoXyR6P8y6S008NxNNpbdKGyx/MDduLISamOhmpTG/qBSwK ld+RdW+YLUIi+xjyt+rtw/oIi2CMKJ+ZEtnBaf9xs15p3+gi42YLaYGqa+lSeRxH Oxazb88xStUMEx4tuv8/eglO6KGFjs0PHrG1xQc9t/kyaH+ILtmhB5AcNrQWN/xo B9fz6VTk8UfQKlxkGCknJ7Ir0hcxKqDUM3rLC0B1a9/NjcsvPSOg407weMceau8p gPvxWEh1wCx/UYMKKXtlPv9hga+4XsJX0Jpx/qF6Sg/HmTb82+YDTQy0SbYTAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUcr78oM0Z0rLZq3cqGQyfSuaSG6swHwYDVR0j BBgwFoAU2x4xtqmFZ5HDG5mnPA85ARjlTrgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTE4ZjhhMC05M2FlLTQzNTktOGE1ZC0xY2E2NzhiZTU2NjgvMC9EQjFFMzFCNkE5 ODU2NzkxQzMxQjk5QTczQzBGMzkwMTE4RTU0RUI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREIxRTMxQjZBOTg1Njc5MUMzMUI5OUE3M0MwRjM5MDExOEU1 NEVCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmExOGY4YTAtOTNhZS00MzU5LThh NWQtMWNhNjc4YmU1NjY4LzAvREIxRTMxQjZBOTg1Njc5MUMzMUI5OUE3M0MwRjM5 MDExOEU1NEVCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABxNy4mbPCQzByJ/bPpjQ/RFgkOYVK0/67lk +jyAndWPOc7N/Ei57b7peepdtHFV+be96r0A4vu1MWg17udkVYCDlZy6Nu7Hwz4y 0cWf9WDYUMgGPYXfKwVcxr72ulS0eNNiiuzNxH56aOP66AYN1h+Rs+8yO5a6CXjR /H41Z+uj68okPQrVBcC3h/6QGV/6k7VknMFzaai69Mq30pSWHUbqTUvXAgLOGS5B 7WOejFQk+ewzLFepaRdKQe7XX4zWgUbHb6v8V93NMngKTY1pcB6C/T5ISq8aHpWV 9orOa200OhPc7jVKF01r+lbLHOmwAwqy4N77ekcueJmYTVR/BIA= -----END CERTIFICATE-----Generated at Tue Nov 4 02:20:36 2025 by rpki-client