$ rpki-client -vvf repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft File: DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft (raw, json) Hash identifier: Ezn6vIV6XZ/EBLKXus8lqPGgNB4EzehQ5YfnAxoNISQ= Subject key identifier: 69:0E:D6:0C:27:04:BC:0D:23:00:B4:F1:A7:FA:54:86:EC:40:3C:C7 Authority key identifier: DB:72:5E:AC:2D:D1:E6:2B:7A:02:C5:4A:61:8D:7A:01:B9:58:E4:C4 Certificate issuer: /CN=DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4 Certificate serial: 3C61BDD90BAFEBE8E75F9DF99A6F481AD4972B79 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft Manifest number: BE Signing time: Sun 15 Jun 2025 17:30:34 +0000 Manifest this update: Sun 15 Jun 2025 17:25:34 +0000 Manifest next update: Thu 19 Jun 2025 03:10:34 +0000 Files and hashes: 1: 3130332e31322e3131322e302f32322d3234203d3e20313331373238.roa (hash: W6CbDsM0PrN3d4twoSZMp8DZWVfT/4VVEcjlXAnT5RE=) 2: DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.crl (hash: plW+2yN3vaePdukMrRsmzFZ3V0zvUlUj3WYvO/VsdPc=) 3: 3230332e3135332e3231322e302f32322d3234203d3e20313331373238.roa (hash: L+zbwKEiqCDXphQWC6ta3Lw7/a2eLbSVLx5eDneIanA=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.crl rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 19 Jun 2025 03:10:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:61:bd:d9:0b:af:eb:e8:e7:5f:9d:f9:9a:6f:48:1a:d4:97:2b:79 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4 Validity Not Before: Jun 15 17:25:34 2025 GMT Not After : Jun 19 03:10:34 2025 GMT Subject: CN=690ED60C2704BC0D2300B4F1A7FA5486EC403CC7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:2b:e4:c3:38:9b:7c:58:d5:00:27:03:7c:05: 92:c7:da:43:7b:d4:87:22:dd:f3:65:0b:b7:bb:1f: e9:51:85:74:24:03:9c:76:9f:49:96:34:ba:bf:9c: 1b:3d:3e:a6:0a:b5:ca:94:f6:07:9f:2a:7b:26:5c: b6:2c:c5:84:dd:19:ab:1b:21:9a:09:61:a0:24:f4: 7d:42:1d:4b:aa:5d:78:e6:45:03:ad:cd:3d:cb:fc: c5:e6:73:4f:04:46:b1:4e:3a:ba:2f:05:00:cc:27: 3a:17:f4:ed:c2:d1:60:aa:aa:b7:18:90:08:c7:2f: d0:93:da:3b:52:d3:c0:d2:c8:2a:41:f4:83:ab:f3: 35:bc:b8:c6:e7:92:d3:a0:a2:96:e4:14:43:46:86: f5:2d:57:32:1c:28:d2:26:47:a0:f7:65:e7:ac:97: 58:79:ee:ad:d0:9b:07:07:54:ed:c0:f0:87:16:49: e6:98:00:c9:b6:2b:25:17:d8:6f:b7:f3:b7:82:27: e8:2f:9e:77:f8:bb:f3:ce:bb:d1:ad:93:04:34:35: 4b:e5:1c:e6:fa:be:40:97:39:49:b9:b0:20:f7:0c: c5:7d:95:42:5c:07:e7:cc:60:4b:4c:66:52:d4:b5: 16:09:ef:be:ec:99:bb:e0:36:73:4c:ec:58:a8:c5: eb:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 69:0E:D6:0C:27:04:BC:0D:23:00:B4:F1:A7:FA:54:86:EC:40:3C:C7 X509v3 Authority Key Identifier: keyid:DB:72:5E:AC:2D:D1:E6:2B:7A:02:C5:4A:61:8D:7A:01:B9:58:E4:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8015a855-b29c-4502-af81-cbb8b4f7f0f7/0/DB725EAC2DD1E62B7A02C54A618D7A01B958E4C4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 48:d7:9a:52:6d:04:a2:cc:e2:1c:52:46:91:24:d7:28:db:b2: 75:ea:ed:38:ea:74:70:ba:32:0b:13:6b:70:f7:64:25:cd:c1: 84:b6:bb:8d:7d:d6:ba:e6:ad:85:8d:d9:14:9e:23:41:3e:f6: 48:72:9a:56:da:f7:ff:cc:20:6d:4d:15:2d:b8:22:27:85:0a: c7:d4:ef:25:0f:45:01:72:23:cf:c5:2b:ed:3a:1e:07:ab:d8: 0b:00:ab:32:68:10:1f:cc:76:3e:e0:6b:9b:e4:a5:03:3e:28: c3:c6:6c:fd:6a:0f:e4:fb:1f:57:94:4a:a6:1b:c1:7d:ec:ae: d2:98:9d:dc:72:83:46:40:62:e3:4b:39:0b:5e:ef:8e:03:4f: e7:10:da:be:cb:7a:d5:83:24:0f:a9:5e:fd:ce:68:76:b9:0a: ac:f0:35:94:b4:e7:37:46:c0:6b:1c:47:fc:bb:cb:36:aa:c7: 9d:f6:d1:c6:70:f3:05:c0:69:7f:35:89:02:d1:e7:26:92:bc: 9a:9d:98:ae:38:ef:a7:63:33:b2:93:ed:b9:88:cc:9c:db:a3: a3:02:3b:ed:45:81:16:81:a6:b8:86:36:ba:34:a1:54:89:ea: ca:f8:c1:03:96:30:58:45:fa:22:9b:a6:2e:69:4a:54:52:6a: cf:e2:e2:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPGG92Quv6+jnX535mm9IGtSXK3kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI3MjVFQUMyREQxRTYyQjdBMDJDNTRBNjE4RDdBMDFC OTU4RTRDNDAeFw0yNTA2MTUxNzI1MzRaFw0yNTA2MTkwMzEwMzRaMDMxMTAvBgNV BAMTKDY5MEVENjBDMjcwNEJDMEQyMzAwQjRGMUE3RkE1NDg2RUM0MDNDQzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjK+TDOJt8WNUAJwN8BZLH2kN7 1Ici3fNlC7e7H+lRhXQkA5x2n0mWNLq/nBs9PqYKtcqU9gefKnsmXLYsxYTdGasb IZoJYaAk9H1CHUuqXXjmRQOtzT3L/MXmc08ERrFOOrovBQDMJzoX9O3C0WCqqrcY kAjHL9CT2jtS08DSyCpB9IOr8zW8uMbnktOgopbkFENGhvUtVzIcKNImR6D3Zees l1h57q3QmwcHVO3A8IcWSeaYAMm2KyUX2G+387eCJ+gvnnf4u/POu9GtkwQ0NUvl HOb6vkCXOUm5sCD3DMV9lUJcB+fMYEtMZlLUtRYJ777smbvgNnNM7FioxesjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUaQ7WDCcEvA0jALTxp/pUhuxAPMcwHwYDVR0j BBgwFoAU23JerC3R5it6AsVKYY16AblY5MQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 MDE1YTg1NS1iMjljLTQ1MDItYWY4MS1jYmI4YjRmN2YwZjcvMC9EQjcyNUVBQzJE RDFFNjJCN0EwMkM1NEE2MThEN0EwMUI5NThFNEM0LmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREI3MjVFQUMyREQxRTYyQjdBMDJDNTRBNjE4RDdBMDFCOTU4 RTRDNC5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODAxNWE4NTUtYjI5Yy00NTAyLWFm ODEtY2JiOGI0ZjdmMGY3LzAvREI3MjVFQUMyREQxRTYyQjdBMDJDNTRBNjE4RDdB MDFCOTU4RTRDNC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAEjXmlJtBKLM4hxSRpEk1yjbsnXq7TjqdHC6 MgsTa3D3ZCXNwYS2u4191rrmrYWN2RSeI0E+9khymlba9//MIG1NFS24IieFCsfU 7yUPRQFyI8/FK+06Hger2AsAqzJoEB/Mdj7ga5vkpQM+KMPGbP1qD+T7H1eUSqYb wX3srtKYndxyg0ZAYuNLOQte744DT+cQ2r7LetWDJA+pXv3OaHa5CqzwNZS05zdG wGscR/y7yzaqx5320cZw8wXAaX81iQLR5yaSvJqdmK4476djM7KT7bmIzJzbo6MC O+1FgRaBpriGNro0oVSJ6sr4wQOWMFhF+iKbpi5pSlRSas/i4t0= -----END CERTIFICATE-----Generated at Mon Jun 16 22:16:33 2025 by rpki-client