$ rpki-client -vvf repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft File: DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft (raw, json) Hash identifier: t7rtZYBjJnrOgIPcF282hbNiOPciswRIL3ci4uOYVvo= Subject key identifier: AE:A3:B2:E4:D3:07:BE:EE:5A:F7:EC:3F:8E:4A:A7:D1:61:3C:5C:97 Authority key identifier: DB:1B:D7:85:1F:D1:A4:87:B0:12:83:F6:AE:4B:46:E0:E4:93:5A:3C Certificate issuer: /CN=DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C Certificate serial: 76FD83FD89D509A56197F4D47E15355122B57DDC Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.cer Subject info access: rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft Manifest number: 01A9 Signing time: Sun 15 Jun 2025 00:01:36 +0000 Manifest this update: Sat 14 Jun 2025 23:56:36 +0000 Manifest next update: Wed 18 Jun 2025 05:42:36 +0000 Files and hashes: 1: DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.crl (hash: D7+w4EgE1WhSGg/W8nX6D2XJpmJPV69MxoaF4Z9J9lM=) 2: 3130332e36362e33382e302f32342d3234203d3e20313530323431.roa (hash: 1Ff4VDmA+7r6oXDzZnPzt9JuYQ1xqWexxGkdvnwFLiQ=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.crl rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 18 Jun 2025 05:42:36 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:fd:83:fd:89:d5:09:a5:61:97:f4:d4:7e:15:35:51:22:b5:7d:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C Validity Not Before: Jun 14 23:56:36 2025 GMT Not After : Jun 18 05:42:36 2025 GMT Subject: CN=AEA3B2E4D307BEEE5AF7EC3F8E4AA7D1613C5C97 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:a2:b5:e6:31:69:b5:c8:92:cc:af:37:1c:8a: 82:fa:bf:54:46:05:0f:fa:63:e9:7d:95:04:1c:cd: d5:8f:ef:2c:7b:11:56:30:8f:c1:fa:9e:e9:19:89: 81:21:bf:8b:58:7a:a4:5c:55:79:ab:9e:df:75:a9: 67:dc:51:ec:1e:90:b2:bd:42:7e:c3:f3:92:1d:44: 1d:9b:2d:cc:1d:49:e3:87:1d:df:e5:c7:c1:97:0c: de:23:31:94:d6:e9:60:de:60:55:49:83:fe:ed:7f: 91:16:24:b6:8d:1d:1a:30:8c:82:6d:c1:2f:df:9a: 07:35:5c:b5:ff:7b:11:0d:27:a1:2b:b2:8d:86:3e: 5e:65:a0:97:6f:71:c2:82:26:29:5c:60:d5:67:e5: cf:06:12:23:d0:8d:fd:75:44:15:17:f4:ea:3c:ac: 44:b5:22:02:df:d6:98:c3:bd:37:3b:53:00:7d:3e: 67:ca:c2:42:e8:54:1d:02:9d:11:0a:9e:13:37:c5: 98:ea:0d:ee:5f:a9:a3:23:b1:fe:24:0d:8a:df:db: bd:40:ff:e7:d1:81:19:9a:b6:eb:1e:d9:cc:c4:16: 1e:d2:f0:bf:33:bb:8c:7b:fd:08:ec:7d:1d:e9:43: 10:a6:d7:51:79:de:1f:30:c1:74:79:8d:8d:64:5b: 60:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:A3:B2:E4:D3:07:BE:EE:5A:F7:EC:3F:8E:4A:A7:D1:61:3C:5C:97 X509v3 Authority Key Identifier: keyid:DB:1B:D7:85:1F:D1:A4:87:B0:12:83:F6:AE:4B:46:E0:E4:93:5A:3C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/33b2ee74-8c3c-4bc3-b6fb-f35b200a20eb/0/DB1BD7851FD1A487B01283F6AE4B46E0E4935A3C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 34:3c:c6:24:5f:47:22:3d:32:ac:48:0d:6b:c0:1d:c4:1f:08: db:36:37:d5:f4:cf:58:b9:ae:e2:02:f4:49:7c:00:0a:b1:24: 7c:f7:d4:52:8d:cf:36:32:64:2b:75:65:53:d3:24:be:ce:fa: 23:90:09:08:fe:e6:04:1a:8a:17:d9:cc:eb:bd:09:90:c2:a1: 59:e5:56:d3:66:07:66:b6:ed:7e:cf:11:d7:23:a2:6d:4a:ee: 04:43:ce:d1:f6:b7:17:42:c0:91:0a:62:25:49:a7:ff:73:74: ac:ed:3b:12:fd:fd:d8:f3:dd:33:c9:6c:10:a4:a4:17:3a:f9: 53:a3:6d:ea:d1:ec:34:cf:24:86:b1:b0:7f:aa:f5:de:1e:7b: 2b:26:0b:86:3b:0e:0d:87:41:97:5a:29:57:01:00:87:3d:67: ab:22:84:34:e1:a1:cf:a7:e1:61:e3:1a:95:51:05:ad:5f:20: af:f5:82:30:a8:3b:26:31:9c:f3:08:5f:53:5e:3a:ac:b5:cc: e1:5d:b4:1e:ab:5f:79:29:66:0b:b3:2c:26:61:df:a8:3f:e3: 03:b6:11:fa:b7:87:45:30:91:51:0c:88:50:36:0e:2e:32:da: 7f:05:5b:57:f4:a9:f7:81:d4:cb:7b:5e:65:98:3b:2f:76:43: 9c:41:52:19 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUdv2D/YnVCaVhl/TUfhU1USK1fdwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREIxQkQ3ODUxRkQxQTQ4N0IwMTI4M0Y2QUU0QjQ2RTBF NDkzNUEzQzAeFw0yNTA2MTQyMzU2MzZaFw0yNTA2MTgwNTQyMzZaMDMxMTAvBgNV BAMTKEFFQTNCMkU0RDMwN0JFRUU1QUY3RUMzRjhFNEFBN0QxNjEzQzVDOTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0orXmMWm1yJLMrzccioL6v1RG BQ/6Y+l9lQQczdWP7yx7EVYwj8H6nukZiYEhv4tYeqRcVXmrnt91qWfcUewekLK9 Qn7D85IdRB2bLcwdSeOHHd/lx8GXDN4jMZTW6WDeYFVJg/7tf5EWJLaNHRowjIJt wS/fmgc1XLX/exENJ6Erso2GPl5loJdvccKCJilcYNVn5c8GEiPQjf11RBUX9Oo8 rES1IgLf1pjDvTc7UwB9PmfKwkLoVB0CnREKnhM3xZjqDe5fqaMjsf4kDYrf271A /+fRgRmatuse2czEFh7S8L8zu4x7/QjsfR3pQxCm11F53h8wwXR5jY1kW2CRAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUrqOy5NMHvu5a9+w/jkqn0WE8XJcwHwYDVR0j BBgwFoAU2xvXhR/RpIewEoP2rktG4OSTWjwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z M2IyZWU3NC04YzNjLTRiYzMtYjZmYi1mMzViMjAwYTIwZWIvMC9EQjFCRDc4NTFG RDFBNDg3QjAxMjgzRjZBRTRCNDZFMEU0OTM1QTNDLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREIxQkQ3ODUxRkQxQTQ4N0IwMTI4M0Y2QUU0QjQ2RTBFNDkz NUEzQy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzNiMmVlNzQtOGMzYy00YmMzLWI2 ZmItZjM1YjIwMGEyMGViLzAvREIxQkQ3ODUxRkQxQTQ4N0IwMTI4M0Y2QUU0QjQ2 RTBFNDkzNUEzQy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBADQ8xiRfRyI9MqxIDWvAHcQfCNs2N9X0z1i5 ruIC9El8AAqxJHz31FKNzzYyZCt1ZVPTJL7O+iOQCQj+5gQaihfZzOu9CZDCoVnl VtNmB2a27X7PEdcjom1K7gRDztH2txdCwJEKYiVJp/9zdKztOxL9/djz3TPJbBCk pBc6+VOjberR7DTPJIaxsH+q9d4eeysmC4Y7Dg2HQZdaKVcBAIc9Z6sihDThoc+n 4WHjGpVRBa1fIK/1gjCoOyYxnPMIX1NeOqy1zOFdtB6rX3kpZguzLCZh36g/4wO2 Efq3h0UwkVEMiFA2Di4y2n8FW1f0qfeB1Mt7XmWYOy92Q5xBUhk= -----END CERTIFICATE-----Generated at Tue Jun 17 03:24:26 2025 by rpki-client