$ rpki-client -vvf repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft File: DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft (raw, json) Hash identifier: 8OLWoxSJ+TCgb7Px1ggDUPyAIahIKrePKPej2x5F7pM= Subject key identifier: 2F:E8:22:B5:DA:B2:5E:3D:4E:30:6F:C9:83:54:93:50:4F:23:39:9F Authority key identifier: DB:1E:31:B6:A9:85:67:91:C3:1B:99:A7:3C:0F:39:01:18:E5:4E:B8 Certificate issuer: /CN=DB1E31B6A9856791C31B99A73C0F390118E54EB8 Certificate serial: 2FDDA713DC2ED5D75C16D5BEF26296614C21FFCD Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1E31B6A9856791C31B99A73C0F390118E54EB8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft Manifest number: 015C Signing time: Wed 06 Aug 2025 09:20:35 +0000 Manifest this update: Wed 06 Aug 2025 09:15:35 +0000 Manifest next update: Sat 09 Aug 2025 20:40:35 +0000 Files and hashes: 1: 3130332e3136342e38332e302f32342d3234203d3e20313431393036.roa (hash: hqJzUmkGfm1tL5Cu+d0Y0jzRfSAbuU8h9B0SylrnKNo=) 2: DB1E31B6A9856791C31B99A73C0F390118E54EB8.crl (hash: LOm3zwaraIRgwcdVhi/kGDEuaG8iFG0eH9b5sJnI8pw=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.crl rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1E31B6A9856791C31B99A73C0F390118E54EB8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 20:40:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:dd:a7:13:dc:2e:d5:d7:5c:16:d5:be:f2:62:96:61:4c:21:ff:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB1E31B6A9856791C31B99A73C0F390118E54EB8 Validity Not Before: Aug 6 09:15:35 2025 GMT Not After : Aug 9 20:40:35 2025 GMT Subject: CN=2FE822B5DAB25E3D4E306FC9835493504F23399F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:fc:56:5e:6f:d1:0a:17:a9:44:2a:79:48:1a: 41:92:8e:71:05:93:e3:cb:e8:7a:68:e4:74:41:25: c8:0c:8e:53:e6:8d:12:12:1b:cc:ee:41:91:d4:25: 01:f8:6e:96:44:aa:20:ca:4f:3f:a7:d5:df:60:55: b1:21:d2:bc:a0:2a:bf:f5:67:e3:5e:37:4d:bf:23: 26:11:cd:f4:46:00:91:a7:51:73:70:26:5f:ca:4a: 12:e0:44:98:5c:ab:c0:e7:bf:1a:63:c4:d2:25:d1: 2a:46:aa:89:12:72:84:14:c3:ad:75:64:c0:b4:5d: b5:41:f1:8f:30:c7:ad:6c:ac:a3:fd:1d:5b:63:cc: 63:23:9c:2e:49:ab:d8:bd:b7:06:81:82:7a:1c:19: 92:6e:c6:69:d2:db:84:be:69:70:64:4e:d1:de:52: 21:1e:ef:83:54:f7:04:f9:6f:f4:bc:37:bd:91:d4: 48:d3:d8:6b:5d:4b:1c:76:80:83:08:2e:ff:c0:da: 24:38:2c:90:67:08:44:6d:05:f6:86:28:9d:f8:3f: 70:1f:4f:47:dd:68:1c:fa:0c:05:9b:2d:0c:68:d0: 9a:de:76:70:0b:01:36:3f:8f:8c:ab:fa:18:86:25: 35:b3:4a:f0:e5:96:ff:9c:cf:16:ff:e3:dc:c2:41: 03:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:E8:22:B5:DA:B2:5E:3D:4E:30:6F:C9:83:54:93:50:4F:23:39:9F X509v3 Authority Key Identifier: keyid:DB:1E:31:B6:A9:85:67:91:C3:1B:99:A7:3C:0F:39:01:18:E5:4E:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1E31B6A9856791C31B99A73C0F390118E54EB8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:ff:f7:00:1f:ba:c7:93:b3:f9:8d:be:21:d7:e7:78:ab:ac: 96:da:9a:e4:1b:c6:22:dc:09:29:76:6a:dc:c0:03:e8:01:66: 01:d9:2c:91:66:1f:51:fa:46:f3:b7:89:10:62:9d:8f:c0:e5: a8:a8:34:eb:6e:f8:53:63:74:99:67:b1:b7:7f:71:fa:2b:2e: 9a:c1:81:66:27:04:f7:aa:cf:87:5e:a6:b2:1d:96:d6:5f:d7: 1c:61:a6:d8:1d:4c:f6:51:eb:b9:bd:24:da:76:65:96:c5:03: 6d:94:f6:ad:c7:dd:75:4c:76:2b:4e:7e:28:24:fb:2e:b2:66: 98:fa:c5:49:74:7e:e6:84:b9:59:30:58:2a:e9:d2:3b:ee:9f: e3:3e:f1:1d:9c:e2:54:8c:08:39:bd:de:6d:01:85:37:15:7c: bf:5b:d8:1b:78:c2:a8:9f:ce:b8:af:8e:b9:c9:12:f5:2c:04: fe:22:d6:25:bf:11:75:de:84:6f:d8:0b:da:78:f8:9b:4d:87: fb:28:51:59:11:52:c3:bf:8c:c1:3d:77:84:72:5a:17:0d:e2: 92:94:52:27:b8:9d:6e:c7:07:e5:b5:f5:7b:52:83:3e:a4:c8: ff:f0:8e:0b:9f:c4:5c:69:2e:30:28:a8:be:3c:46:af:85:62: d6:d5:83:d7 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUL92nE9wu1ddcFtW+8mKWYUwh/80wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIxRTMxQjZBOTg1Njc5MUMzMUI5OUE3M0MwRjM5MDEx OEU1NEVCODAeFw0yNTA4MDYwOTE1MzVaFw0yNTA4MDkyMDQwMzVaMDMxMTAvBgNV BAMTKDJGRTgyMkI1REFCMjVFM0Q0RTMwNkZDOTgzNTQ5MzUwNEYyMzM5OUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCg/FZeb9EKF6lEKnlIGkGSjnEF k+PL6Hpo5HRBJcgMjlPmjRISG8zuQZHUJQH4bpZEqiDKTz+n1d9gVbEh0rygKr/1 Z+NeN02/IyYRzfRGAJGnUXNwJl/KShLgRJhcq8DnvxpjxNIl0SpGqokScoQUw611 ZMC0XbVB8Y8wx61srKP9HVtjzGMjnC5Jq9i9twaBgnocGZJuxmnS24S+aXBkTtHe UiEe74NU9wT5b/S8N72R1EjT2GtdSxx2gIMILv/A2iQ4LJBnCERtBfaGKJ34P3Af T0fdaBz6DAWbLQxo0JrednALATY/j4yr+hiGJTWzSvDllv+czxb/49zCQQPBAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUL+gitdqyXj1OMG/Jg1STUE8jOZ8wHwYDVR0j BBgwFoAU2x4xtqmFZ5HDG5mnPA85ARjlTrgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTE4ZjhhMC05M2FlLTQzNTktOGE1ZC0xY2E2NzhiZTU2NjgvMC9EQjFFMzFCNkE5 ODU2NzkxQzMxQjk5QTczQzBGMzkwMTE4RTU0RUI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREIxRTMxQjZBOTg1Njc5MUMzMUI5OUE3M0MwRjM5MDExOEU1 NEVCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmExOGY4YTAtOTNhZS00MzU5LThh NWQtMWNhNjc4YmU1NjY4LzAvREIxRTMxQjZBOTg1Njc5MUMzMUI5OUE3M0MwRjM5 MDExOEU1NEVCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBACf/9wAfuseTs/mNviHX53irrJbamuQbxiLc CSl2atzAA+gBZgHZLJFmH1H6RvO3iRBinY/A5aioNOtu+FNjdJlnsbd/cforLprB gWYnBPeqz4deprIdltZf1xxhptgdTPZR67m9JNp2ZZbFA22U9q3H3XVMditOfigk +y6yZpj6xUl0fuaEuVkwWCrp0jvun+M+8R2c4lSMCDm93m0BhTcVfL9b2Bt4wqif zrivjrnJEvUsBP4i1iW/EXXehG/YC9p4+JtNh/soUVkRUsO/jME9d4RyWhcN4pKU Uie4nW7HB+W19XtSgz6kyP/wjgufxFxpLjAoqL48Rq+FYtbVg9c= -----END CERTIFICATE-----Generated at Thu Aug 7 04:23:47 2025 by rpki-client