$ rpki-client -vvf repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft File: DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft (raw, json) Hash identifier: ywmX2tF9ElDCaCSsw0pssfcBhO03fhprwDV5ACklz/w= Subject key identifier: 5B:EA:57:69:3F:D0:0A:01:23:A9:AF:06:E9:85:6D:61:28:F7:CA:88 Authority key identifier: DB:6B:AB:95:61:4F:69:81:1F:2A:E9:B4:83:73:E7:9D:2D:C2:D7:F3 Certificate issuer: /CN=DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3 Certificate serial: 051C29D64D2FCE3543BD156A2641ECB8F032D720 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer Subject info access: rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft Manifest number: 04E2 Signing time: Sat 14 Jun 2025 13:02:22 +0000 Manifest this update: Sat 14 Jun 2025 12:57:22 +0000 Manifest next update: Tue 17 Jun 2025 15:00:22 +0000 Files and hashes: 1: 3130332e3131362e3231362e302f32342d3234203d3e20313337333636.roa (hash: iDwSin9srOGKT5atOmt0iLuShHzndQDwuU2x/RU2cYM=) 2: 3130332e3131362e3231382e302f32342d3234203d3e20313337333636.roa (hash: SgJaLekQ3Q9cVNBqu5Sas48wyzpxdaLZB6LIMnNqJ+c=) 3: 3130332e3131362e3231372e302f32342d3234203d3e20313337333636.roa (hash: yangIWxRfp5g4q3g5tzxpJf4/ZTvbChL+OGjEKq0xNw=) 4: DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl (hash: /v2scBZf4myFILE+UTqLFLv3fk/Z5C3QCzZZH8eKS5o=) 5: 3130332e3131362e3231392e302f32342d3234203d3e20313337333637.roa (hash: 7MfETz0OOU0/EW0Af0KTT2gYnfzpkWj/UcRR+LXANfU=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 17 Jun 2025 15:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 05:1c:29:d6:4d:2f:ce:35:43:bd:15:6a:26:41:ec:b8:f0:32:d7:20 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3 Validity Not Before: Jun 14 12:57:22 2025 GMT Not After : Jun 17 15:00:22 2025 GMT Subject: CN=5BEA57693FD00A0123A9AF06E9856D6128F7CA88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:23:9b:b6:13:c4:96:5e:95:3d:d5:0a:84:1b: 08:4c:de:e4:16:25:de:55:1b:69:fe:e1:01:7d:f3: e8:53:8d:48:7e:68:b9:4e:82:b3:74:c3:61:8f:ed: e5:16:01:e1:5d:2c:d4:f5:7e:e5:0a:38:7c:a5:9e: b6:df:55:8f:26:14:ba:79:dd:e0:9f:f1:d3:3c:98: a7:38:6d:d1:a8:47:cb:67:08:f2:47:f5:d1:db:b9: 65:cf:68:14:2b:10:3c:83:c4:c4:aa:73:4b:f2:59: bd:36:b2:cb:b2:4e:a9:51:cd:9c:ed:4a:4b:ac:af: 33:31:cc:db:a4:08:cb:67:1a:ae:37:66:72:99:10: c7:b7:05:39:96:8c:1f:9c:d6:cf:6e:54:69:99:b0: 46:6a:26:a9:fb:0f:7c:c3:7d:8b:64:03:c6:12:0f: 2f:80:cc:68:03:bb:52:49:25:59:81:19:80:2e:e9: 7b:0d:6a:2b:29:c2:ab:b2:83:3e:53:e4:e0:94:68: 99:81:09:22:59:5c:36:5e:98:6d:2c:a9:5c:a9:76: a2:77:70:17:5b:9b:94:08:49:ff:ce:27:39:f9:f6: c3:91:09:ce:12:0e:0a:56:e5:12:ce:6f:c2:7e:e7: 3d:17:91:1e:66:bf:21:d2:de:23:a4:3b:5e:d3:a8: 8a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5B:EA:57:69:3F:D0:0A:01:23:A9:AF:06:E9:85:6D:61:28:F7:CA:88 X509v3 Authority Key Identifier: keyid:DB:6B:AB:95:61:4F:69:81:1F:2A:E9:B4:83:73:E7:9D:2D:C2:D7:F3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/86d720d5-b7d4-4395-a06b-19904a63f948/0/DB6BAB95614F69811F2AE9B48373E79D2DC2D7F3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:77:a6:c6:4d:90:13:ef:ea:ed:e7:ad:00:68:10:55:d3:63: c2:68:a7:3b:be:c8:9e:df:ed:2f:85:e0:99:85:96:dd:19:12: 5a:2c:b7:de:4e:db:d8:a7:d3:33:71:13:b9:87:36:aa:d1:6a: ce:55:29:16:ed:1c:73:91:e5:88:e6:fa:d1:80:56:7c:c2:07: cd:44:71:c3:0f:75:c0:f9:ef:92:b7:51:e5:2a:22:ab:53:58: cb:cd:f7:6a:d4:76:02:9f:b9:85:2c:2d:7d:f8:8d:25:e3:2c: ce:0d:3b:1e:e4:26:b2:0c:24:ee:8a:1b:85:9f:63:84:5f:8c: 26:7d:0e:59:65:a2:f2:0e:42:a5:e7:f5:11:84:b9:0f:05:e2: 1b:c6:33:a0:9b:1a:84:2c:2c:6a:e5:51:15:40:f1:b7:72:0f: 27:7a:55:38:b8:65:57:dc:9c:45:52:db:16:fb:74:23:9c:ac: 48:cb:13:ce:21:f5:7d:8d:44:8c:4f:b9:e9:13:68:75:59:c1: 00:15:5f:e1:5f:78:04:7e:2b:a2:73:9c:31:3d:20:a6:9e:f2: 65:53:32:b1:e5:3c:29:4b:5d:d7:ef:bb:f9:7e:d9:01:9d:52: a7:2e:19:08:12:e7:96:9e:36:63:19:45:02:31:8e:b7:56:0a: 1d:4c:2d:6f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUBRwp1k0vzjVDvRVqJkHsuPAy1yAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI2QkFCOTU2MTRGNjk4MTFGMkFFOUI0ODM3M0U3OUQy REMyRDdGMzAeFw0yNTA2MTQxMjU3MjJaFw0yNTA2MTcxNTAwMjJaMDMxMTAvBgNV BAMTKDVCRUE1NzY5M0ZEMDBBMDEyM0E5QUYwNkU5ODU2RDYxMjhGN0NBODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwI5u2E8SWXpU91QqEGwhM3uQW Jd5VG2n+4QF98+hTjUh+aLlOgrN0w2GP7eUWAeFdLNT1fuUKOHylnrbfVY8mFLp5 3eCf8dM8mKc4bdGoR8tnCPJH9dHbuWXPaBQrEDyDxMSqc0vyWb02ssuyTqlRzZzt SkusrzMxzNukCMtnGq43ZnKZEMe3BTmWjB+c1s9uVGmZsEZqJqn7D3zDfYtkA8YS Dy+AzGgDu1JJJVmBGYAu6XsNaispwquygz5T5OCUaJmBCSJZXDZemG0sqVypdqJ3 cBdbm5QISf/OJzn59sORCc4SDgpW5RLOb8J+5z0XkR5mvyHS3iOkO17TqIqjAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUW+pXaT/QCgEjqa8G6YVtYSj3yogwHwYDVR0j BBgwFoAU22urlWFPaYEfKum0g3PnnS3C1/MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 NmQ3MjBkNS1iN2Q0LTQzOTUtYTA2Yi0xOTkwNGE2M2Y5NDgvMC9EQjZCQUI5NTYx NEY2OTgxMUYyQUU5QjQ4MzczRTc5RDJEQzJEN0YzLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREI2QkFCOTU2MTRGNjk4MTFGMkFFOUI0ODM3M0U3OUQyREMy RDdGMy5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODZkNzIwZDUtYjdkNC00Mzk1LWEw NmItMTk5MDRhNjNmOTQ4LzAvREI2QkFCOTU2MTRGNjk4MTFGMkFFOUI0ODM3M0U3 OUQyREMyRDdGMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAt3psZNkBPv6u3nrQBoEFXTY8Jopzu+yJ7f 7S+F4JmFlt0ZElost95O29in0zNxE7mHNqrRas5VKRbtHHOR5Yjm+tGAVnzCB81E ccMPdcD575K3UeUqIqtTWMvN92rUdgKfuYUsLX34jSXjLM4NOx7kJrIMJO6KG4Wf Y4RfjCZ9DlllovIOQqXn9RGEuQ8F4hvGM6CbGoQsLGrlURVA8bdyDyd6VTi4ZVfc nEVS2xb7dCOcrEjLE84h9X2NRIxPuekTaHVZwQAVX+FfeAR+K6JznDE9IKae8mVT MrHlPClLXdfvu/l+2QGdUqcuGQgS55aeNmMZRQIxjrdWCh1MLW8= -----END CERTIFICATE-----Generated at Mon Jun 16 11:05:42 2025 by rpki-client