$ rpki-client -vvf repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.mft File: DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.mft (raw, json) Hash identifier: qt/3trxCwGG0WfS0YtqdbZlEa7yUN3Ymn0RF0JZUFI4= Subject key identifier: 4D:CA:7A:78:79:9B:70:45:C1:BA:4A:A3:EF:41:2E:A5:29:78:BC:00 Authority key identifier: DB:6A:89:80:C5:0F:21:0C:80:41:A2:10:10:E6:DB:F1:0F:C7:C0:DF Certificate issuer: /CN=DB6A8980C50F210C8041A21010E6DBF10FC7C0DF Certificate serial: 44079E5663358638350A8B3808129F8CE0E47F01 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.cer Subject info access: rsync://repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.mft Manifest number: 9E Signing time: Tue 05 Aug 2025 00:41:55 +0000 Manifest this update: Tue 05 Aug 2025 00:36:55 +0000 Manifest next update: Fri 08 Aug 2025 05:55:55 +0000 Files and hashes: 1: DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.crl (hash: DIyPCphnNLncRoLruonxust34byUcGB3uPsDvxxYBuM=) 2: 3136302e32352e35322e302f32342d3234203d3e20313533303738.roa (hash: ZYpQlmxLS5aJFefjxbbBQvH2zXoYQl6ndeOBHWuaRz8=) 3: 3136302e32352e35332e302f32342d3234203d3e20313533303738.roa (hash: pprUfXETHw8TkfqK4zb4CjTcdBTaYCx5VEdGuTnw8a8=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.crl rsync://repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/60F8BE9C16625C424B269EE06C64A83BAB8506D4.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/YPi-nBZiXEJLJp7gbGSoO6uFBtQ.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 08 Aug 2025 05:55:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:07:9e:56:63:35:86:38:35:0a:8b:38:08:12:9f:8c:e0:e4:7f:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB6A8980C50F210C8041A21010E6DBF10FC7C0DF Validity Not Before: Aug 5 00:36:55 2025 GMT Not After : Aug 8 05:55:55 2025 GMT Subject: CN=4DCA7A78799B7045C1BA4AA3EF412EA52978BC00 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:d2:f3:6e:42:e3:68:8a:df:eb:a7:ec:0b:e4: 07:98:1d:e7:cb:d8:60:b8:6e:eb:4b:6c:32:c4:b6: a6:b5:72:79:ff:23:db:76:bd:d0:e6:7c:20:a9:6b: 26:c8:69:37:55:cb:c5:a4:05:6e:8a:fa:c2:78:ab: c1:17:9e:0b:55:b6:44:53:7c:31:75:88:a2:54:3f: a6:95:d9:b2:d9:47:b2:42:fc:e3:9c:81:76:19:21: d8:cd:69:ac:af:dc:81:79:8f:d7:58:5a:33:ac:af: e2:61:51:7f:7b:5e:35:f0:c2:27:17:a0:b4:ff:ff: 75:05:e0:0c:f2:07:41:02:3a:2d:04:fc:f5:d2:fd: 4a:80:da:81:a2:ca:68:bc:4a:56:f4:93:94:8c:04: 63:a5:07:f1:e0:2d:a6:6e:85:29:20:30:58:d5:bf: 7c:28:f3:dc:5f:fa:b0:c6:09:61:c7:46:5e:c0:30: ec:4e:45:d5:e5:54:7f:23:20:fa:52:fd:d6:6e:1a: cb:ca:90:2d:79:2d:eb:be:7c:d1:0e:8d:fd:8b:5e: 96:83:d5:8f:5c:e1:ef:70:e5:06:2c:ca:a9:be:04: f2:fc:67:91:2e:67:a5:10:0a:a4:bf:68:35:e7:d4: 73:f7:8d:08:2c:60:76:bb:e3:d1:d4:db:1c:6e:07: 50:9f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4D:CA:7A:78:79:9B:70:45:C1:BA:4A:A3:EF:41:2E:A5:29:78:BC:00 X509v3 Authority Key Identifier: keyid:DB:6A:89:80:C5:0F:21:0C:80:41:A2:10:10:E6:DB:F1:0F:C7:C0:DF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/63b17857-be3d-4132-8f19-10836f408546/0/DB6A8980C50F210C8041A21010E6DBF10FC7C0DF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:53:29:0d:7e:b1:1e:74:c4:a4:0f:ba:02:4a:79:20:34:61: 73:8e:3a:58:d8:aa:a8:4a:b3:97:02:84:cc:09:24:11:67:1f: 01:56:96:4e:4d:4b:6d:05:38:18:be:a0:1a:7b:85:78:9f:bd: 04:1d:db:78:ca:36:18:b0:68:a7:57:d8:ee:f6:ab:d3:2f:8d: ae:30:21:31:b0:6a:cb:7b:5c:3f:98:77:37:98:cc:db:9b:b8: 55:5b:fc:6b:0b:33:f5:db:f1:bc:86:18:da:72:fc:53:0f:2e: 7e:a6:9e:57:52:09:e7:25:98:9b:8b:46:ca:20:ec:ff:88:c2: 44:b7:98:d6:fe:ed:9b:cf:c4:d2:11:22:00:01:82:c9:93:5b: 7d:08:01:de:98:50:88:3e:43:36:02:a8:d8:df:ff:3c:a7:48: 59:05:10:04:41:01:16:d0:e7:d7:ab:93:5a:ac:45:c3:06:06: 8f:68:3b:7a:76:14:f6:70:6a:93:f5:04:26:1a:2e:97:e9:9f: 0f:da:13:97:a5:dc:42:61:ac:8b:51:a7:aa:38:82:41:8d:4e: e6:7f:31:85:c6:ce:a9:cf:5a:5d:01:03:31:8e:f5:72:5b:b9: fc:3f:3b:52:5e:44:ee:91:ce:52:d1:30:62:aa:c4:01:67:fe: 95:cd:4c:e3 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIURAeeVmM1hjg1Cos4CBKfjODkfwEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI2QTg5ODBDNTBGMjEwQzgwNDFBMjEwMTBFNkRCRjEw RkM3QzBERjAeFw0yNTA4MDUwMDM2NTVaFw0yNTA4MDgwNTU1NTVaMDMxMTAvBgNV BAMTKDREQ0E3QTc4Nzk5QjcwNDVDMUJBNEFBM0VGNDEyRUE1Mjk3OEJDMDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQ0vNuQuNoit/rp+wL5AeYHefL 2GC4butLbDLEtqa1cnn/I9t2vdDmfCCpaybIaTdVy8WkBW6K+sJ4q8EXngtVtkRT fDF1iKJUP6aV2bLZR7JC/OOcgXYZIdjNaayv3IF5j9dYWjOsr+JhUX97XjXwwicX oLT//3UF4AzyB0ECOi0E/PXS/UqA2oGiymi8Slb0k5SMBGOlB/HgLaZuhSkgMFjV v3wo89xf+rDGCWHHRl7AMOxORdXlVH8jIPpS/dZuGsvKkC15Leu+fNEOjf2LXpaD 1Y9c4e9w5QYsyqm+BPL8Z5EuZ6UQCqS/aDXn1HP3jQgsYHa749HU2xxuB1CfAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUTcp6eHmbcEXBukqj70EupSl4vAAwHwYDVR0j BBgwFoAU22qJgMUPIQyAQaIQEObb8Q/HwN8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82 M2IxNzg1Ny1iZTNkLTQxMzItOGYxOS0xMDgzNmY0MDg1NDYvMC9EQjZBODk4MEM1 MEYyMTBDODA0MUEyMTAxMEU2REJGMTBGQzdDMERGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzEvREI2QTg5ODBDNTBGMjEwQzgwNDFBMjEwMTBFNkRCRjEwRkM3 QzBERi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNjNiMTc4NTctYmUzZC00MTMyLThm MTktMTA4MzZmNDA4NTQ2LzAvREI2QTg5ODBDNTBGMjEwQzgwNDFBMjEwMTBFNkRC RjEwRkM3QzBERi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKBTKQ1+sR50xKQPugJKeSA0YXOOOljYqqhK s5cChMwJJBFnHwFWlk5NS20FOBi+oBp7hXifvQQd23jKNhiwaKdX2O72q9Mvja4w ITGwast7XD+YdzeYzNubuFVb/GsLM/Xb8byGGNpy/FMPLn6mnldSCeclmJuLRsog 7P+IwkS3mNb+7ZvPxNIRIgABgsmTW30IAd6YUIg+QzYCqNjf/zynSFkFEARBARbQ 59erk1qsRcMGBo9oO3p2FPZwapP1BCYaLpfpnw/aE5el3EJhrItRp6o4gkGNTuZ/ MYXGzqnPWl0BAzGO9XJbufw/O1JeRO6RzlLRMGKqxAFn/pXNTOM= -----END CERTIFICATE-----Generated at Wed Aug 6 08:00:14 2025 by rpki-client