$ rpki-client -vvf repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft File: DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft (raw, json) Hash identifier: mTkDwyhUA9nK0z29FlM7cBm6xE5QzsbjqP2GleVA8f0= Subject key identifier: 1B:8C:95:70:AD:63:3E:BD:71:92:39:BF:BB:94:15:5B:E2:82:69:F8 Authority key identifier: DB:1E:31:B6:A9:85:67:91:C3:1B:99:A7:3C:0F:39:01:18:E5:4E:B8 Certificate issuer: /CN=DB1E31B6A9856791C31B99A73C0F390118E54EB8 Certificate serial: 6977FC158EADD8C6FFFD6B8673C877A4118484B8 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1E31B6A9856791C31B99A73C0F390118E54EB8.cer Subject info access: rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft Manifest number: 0146 Signing time: Tue 17 Jun 2025 17:20:37 +0000 Manifest this update: Tue 17 Jun 2025 17:15:37 +0000 Manifest next update: Sat 21 Jun 2025 03:22:37 +0000 Files and hashes: 1: DB1E31B6A9856791C31B99A73C0F390118E54EB8.crl (hash: TrOk16f4ut6lsnZUK14BX840hv9zSx1+MVKaqqEVV00=) 2: 3130332e3136342e38332e302f32342d3234203d3e20313431393036.roa (hash: hqJzUmkGfm1tL5Cu+d0Y0jzRfSAbuU8h9B0SylrnKNo=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.crl rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1E31B6A9856791C31B99A73C0F390118E54EB8.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 21 Jun 2025 03:22:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:77:fc:15:8e:ad:d8:c6:ff:fd:6b:86:73:c8:77:a4:11:84:84:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB1E31B6A9856791C31B99A73C0F390118E54EB8 Validity Not Before: Jun 17 17:15:37 2025 GMT Not After : Jun 21 03:22:37 2025 GMT Subject: CN=1B8C9570AD633EBD719239BFBB94155BE28269F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:55:f9:d1:f6:c9:20:53:4e:79:26:63:8a:d5: 60:b0:51:c2:55:d5:98:c6:85:fd:c3:15:61:9e:c8: 66:54:e6:b6:b3:3b:b9:4c:bc:3d:b2:cf:8e:22:7d: 7c:62:44:51:9a:36:c5:62:13:fa:66:f2:3c:32:e5: 49:a8:13:59:98:b2:dd:f2:51:e1:ca:7b:69:cd:72: d4:c4:bd:ed:52:5e:cd:d9:6c:ea:da:37:40:d7:e6: 97:36:64:ed:95:4f:63:8e:06:48:48:3c:b0:0c:f3: fb:51:8e:42:8f:67:b7:cb:c8:2c:20:3c:1e:c8:99: 55:9a:50:1c:9d:92:ed:7b:26:da:52:36:8b:7f:db: d1:17:7c:9d:d5:22:03:12:72:72:7f:7f:9b:51:2d: 42:80:26:f4:f7:18:5c:b0:d2:10:46:7b:98:81:81: 71:7e:88:e9:2d:f3:1f:b7:ab:d2:21:02:55:41:da: 48:83:51:9d:56:e2:95:29:58:bd:b7:07:9a:10:f7: 09:09:8b:f9:38:86:7e:75:84:88:82:95:05:43:54: 73:97:ed:e3:3f:cc:24:ca:81:f9:1c:0b:30:13:9a: 21:f3:85:6b:2e:06:1a:fe:54:b1:55:07:dd:68:ec: 21:ff:99:50:42:9e:f8:1b:77:61:b6:74:2e:81:ec: e1:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:8C:95:70:AD:63:3E:BD:71:92:39:BF:BB:94:15:5B:E2:82:69:F8 X509v3 Authority Key Identifier: keyid:DB:1E:31:B6:A9:85:67:91:C3:1B:99:A7:3C:0F:39:01:18:E5:4E:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1E31B6A9856791C31B99A73C0F390118E54EB8.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a18f8a0-93ae-4359-8a5d-1ca678be5668/0/DB1E31B6A9856791C31B99A73C0F390118E54EB8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:46:23:9b:2b:67:a1:e3:d4:69:94:1f:a0:7a:6c:2f:4e:4a: 47:f3:ec:32:18:82:23:0b:03:bf:d8:cc:b4:9a:74:83:93:a6: af:71:a5:aa:f9:cd:c4:a0:78:da:c4:47:7f:61:b2:98:16:9e: 20:63:2b:6c:66:3b:cb:bc:36:60:01:97:e8:d4:31:e8:5c:93: 71:90:18:b1:69:8e:8e:1f:85:3b:fa:13:5c:7a:18:1f:92:11: 8b:18:5f:ed:55:9d:1e:a1:0f:ac:0e:5c:15:54:9f:4d:91:e2: 51:42:bf:c1:3f:73:08:67:57:15:e6:0a:3e:05:4b:a7:1a:be: 6c:41:65:cd:db:a6:f6:b1:2c:fb:a7:06:46:68:01:44:fb:8c: e9:24:b1:ff:17:1b:89:a0:31:7f:05:fb:e3:6f:ce:e2:31:5b: cb:ee:3f:d3:3e:38:e2:0a:b2:73:77:b8:05:a8:00:cb:d6:38: 2a:4f:e6:1f:c8:08:65:d4:d0:36:99:9e:fe:c0:6a:af:0f:95: 2f:b7:86:b4:e7:9f:2e:18:14:1c:56:53:9c:ee:53:77:93:85: 8d:ec:79:fe:67:fc:96:bf:d0:9e:21:ad:d7:72:f6:6a:03:a5: 41:31:86:d5:1b:1f:f4:f3:01:70:4b:09:98:f8:2c:7b:4e:03: 90:24:da:c1 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUaXf8FY6t2Mb//WuGc8h3pBGEhLgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIxRTMxQjZBOTg1Njc5MUMzMUI5OUE3M0MwRjM5MDEx OEU1NEVCODAeFw0yNTA2MTcxNzE1MzdaFw0yNTA2MjEwMzIyMzdaMDMxMTAvBgNV BAMTKDFCOEM5NTcwQUQ2MzNFQkQ3MTkyMzlCRkJCOTQxNTVCRTI4MjY5RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtVfnR9skgU055JmOK1WCwUcJV 1ZjGhf3DFWGeyGZU5razO7lMvD2yz44ifXxiRFGaNsViE/pm8jwy5UmoE1mYst3y UeHKe2nNctTEve1SXs3ZbOraN0DX5pc2ZO2VT2OOBkhIPLAM8/tRjkKPZ7fLyCwg PB7ImVWaUBydku17JtpSNot/29EXfJ3VIgMScnJ/f5tRLUKAJvT3GFyw0hBGe5iB gXF+iOkt8x+3q9IhAlVB2kiDUZ1W4pUpWL23B5oQ9wkJi/k4hn51hIiClQVDVHOX 7eM/zCTKgfkcCzATmiHzhWsuBhr+VLFVB91o7CH/mVBCnvgbd2G2dC6B7OFZAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUG4yVcK1jPr1xkjm/u5QVW+KCafgwHwYDVR0j BBgwFoAU2x4xtqmFZ5HDG5mnPA85ARjlTrgwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y YTE4ZjhhMC05M2FlLTQzNTktOGE1ZC0xY2E2NzhiZTU2NjgvMC9EQjFFMzFCNkE5 ODU2NzkxQzMxQjk5QTczQzBGMzkwMTE4RTU0RUI4LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREIxRTMxQjZBOTg1Njc5MUMzMUI5OUE3M0MwRjM5MDExOEU1 NEVCOC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMmExOGY4YTAtOTNhZS00MzU5LThh NWQtMWNhNjc4YmU1NjY4LzAvREIxRTMxQjZBOTg1Njc5MUMzMUI5OUE3M0MwRjM5 MDExOEU1NEVCOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAJdGI5srZ6Hj1GmUH6B6bC9OSkfz7DIYgiML A7/YzLSadIOTpq9xpar5zcSgeNrER39hspgWniBjK2xmO8u8NmABl+jUMehck3GQ GLFpjo4fhTv6E1x6GB+SEYsYX+1VnR6hD6wOXBVUn02R4lFCv8E/cwhnVxXmCj4F S6cavmxBZc3bpvaxLPunBkZoAUT7jOkksf8XG4mgMX8F++NvzuIxW8vuP9M+OOIK snN3uAWoAMvWOCpP5h/ICGXU0DaZnv7Aaq8PlS+3hrTnny4YFBxWU5zuU3eThY3s ef5n/Ja/0J4hrddy9moDpUExhtUbH/TzAXBLCZj4LHtOA5Ak2sE= -----END CERTIFICATE-----Generated at Tue Jun 17 21:00:06 2025 by rpki-client