$ rpki-client -vvf repo-rpki.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.mft File: DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.mft (raw, json) Hash identifier: HvAx6gjJXleC9mhNqGmx0kkjkcfDI6+Lxr4aG9jUe/s= Subject key identifier: 2C:3B:F6:05:D9:E9:BD:91:5B:26:68:1C:0D:0A:1D:2E:FB:52:B8:BC Authority key identifier: DB:9B:4D:12:79:E6:C6:4B:0C:DD:F5:93:FB:00:6B:39:92:D5:DF:6F Certificate issuer: /CN=DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F Certificate serial: 225FBC497169B3E1F57AA4BDF61A654379EBED06 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.mft Manifest number: AC Signing time: Wed 06 Aug 2025 18:00:50 +0000 Manifest this update: Wed 06 Aug 2025 17:55:50 +0000 Manifest next update: Sat 09 Aug 2025 18:59:50 +0000 Files and hashes: 1: DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.crl (hash: 5yvnO6D9ePJaeeMzF1fl3QWwrZYW5ePwOP1W+0WjfLM=) 2: 3130332e35322e3231332e302f32342d3234203d3e20313333383136.roa (hash: ddnEDu4ujzH2U+wrCuFYzTTZ0z5ZKNzjOcLkosVrgEM=) 3: 3130332e3138352e3139362e302f32342d3234203d3e20313333383136.roa (hash: OBAMIR6o88w8OfvjKc+CvsxLTJpjUECRIBtfHRF/vnM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.crl rsync://repo-rpki.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 09 Aug 2025 18:59:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:5f:bc:49:71:69:b3:e1:f5:7a:a4:bd:f6:1a:65:43:79:eb:ed:06 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F Validity Not Before: Aug 6 17:55:50 2025 GMT Not After : Aug 9 18:59:50 2025 GMT Subject: CN=2C3BF605D9E9BD915B26681C0D0A1D2EFB52B8BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:88:e1:19:f1:19:16:46:09:20:4a:de:71:f4: 77:e1:d7:db:5c:22:c8:67:52:23:ed:e6:d4:5f:8a: af:b3:ab:64:20:99:62:80:8e:a5:e4:3e:ca:78:97: c7:11:08:3f:7f:69:4b:25:d7:ee:43:37:32:52:11: bc:d0:4e:26:4f:9a:3e:5f:61:c7:b0:6f:5b:74:a2: 8c:8c:89:26:d9:f4:17:85:99:4c:2f:48:56:95:ef: bf:48:0d:0c:00:3f:3a:da:b6:f0:f9:d4:83:49:db: 8a:9e:d0:ba:81:84:6c:90:84:b2:4e:54:4a:5f:e1: b4:fc:a7:08:06:18:bc:1e:9a:4d:7f:a6:5d:38:f9: 5a:26:9e:60:31:6d:55:a8:00:4a:63:f0:61:eb:7d: 05:82:16:1e:94:9f:c7:b9:31:3d:ac:18:91:cc:1f: ec:02:f4:08:a9:da:dd:ec:b6:66:4b:2c:10:ef:e6: 91:f0:f0:06:5b:a7:52:9d:da:f5:fd:a9:8b:ae:62: b3:2e:62:51:13:fd:a9:9d:57:a6:12:d0:51:58:7f: f1:98:05:3d:be:9b:04:c8:4a:b9:38:26:10:d8:be: 4f:54:55:fc:b6:b1:5f:e3:e9:29:26:e3:71:1c:61: d3:6e:ca:40:f8:6b:6b:0e:f5:cf:13:05:47:bd:7e: 9f:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2C:3B:F6:05:D9:E9:BD:91:5B:26:68:1C:0D:0A:1D:2E:FB:52:B8:BC X509v3 Authority Key Identifier: keyid:DB:9B:4D:12:79:E6:C6:4B:0C:DD:F5:93:FB:00:6B:39:92:D5:DF:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:ff:74:ff:bb:80:ea:a9:b9:59:59:f4:22:d4:cb:28:49:b2: c6:3a:6b:c6:6f:cd:57:7a:8d:e8:ea:90:46:39:0c:c7:24:6d: ad:08:1b:68:c5:2c:fb:56:0a:17:f6:d6:60:1c:9b:9d:8c:be: a2:7f:4e:07:44:4f:d4:2f:4a:49:22:24:f5:8d:1a:cf:28:9e: 54:85:42:0f:93:06:56:51:45:f3:9d:69:53:c8:2b:39:57:5a: 9d:29:38:89:00:86:1f:35:99:88:51:1a:f0:1e:c5:67:54:e7: bb:64:bb:4a:ab:1b:f4:76:24:4e:0b:60:16:33:7e:8e:8e:83: 8c:13:8d:c2:59:ba:27:30:36:f9:cb:ef:60:55:ac:33:92:d1: 4b:d1:ad:58:de:78:25:25:74:21:17:08:5d:a5:95:b3:41:ac: a7:e0:ce:48:16:86:0a:07:41:01:9b:8a:b6:d1:a9:c8:e8:3a: 55:bc:3c:ec:1c:13:44:87:ad:b8:b8:2f:2a:b6:67:c0:e6:25: 4f:d2:79:3e:bd:af:5f:a8:1c:74:33:fc:b7:68:cf:d2:c0:ca: 0d:f7:af:e0:25:14:d7:5c:18:63:99:e0:06:c4:41:f6:58:38: 9e:9d:34:05:3b:29:8c:c3:b1:e1:df:01:03:ab:f3:3f:31:f2: 5e:6c:aa:8e -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUIl+8SXFps+H1eqS99hplQ3nr7QYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI5QjREMTI3OUU2QzY0QjBDRERGNTkzRkIwMDZCMzk5 MkQ1REY2RjAeFw0yNTA4MDYxNzU1NTBaFw0yNTA4MDkxODU5NTBaMDMxMTAvBgNV BAMTKDJDM0JGNjA1RDlFOUJEOTE1QjI2NjgxQzBEMEExRDJFRkI1MkI4QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeiOEZ8RkWRgkgSt5x9Hfh19tc IshnUiPt5tRfiq+zq2QgmWKAjqXkPsp4l8cRCD9/aUsl1+5DNzJSEbzQTiZPmj5f Ycewb1t0ooyMiSbZ9BeFmUwvSFaV779IDQwAPzratvD51INJ24qe0LqBhGyQhLJO VEpf4bT8pwgGGLwemk1/pl04+VomnmAxbVWoAEpj8GHrfQWCFh6Un8e5MT2sGJHM H+wC9Aip2t3stmZLLBDv5pHw8AZbp1Kd2vX9qYuuYrMuYlET/amdV6YS0FFYf/GY BT2+mwTISrk4JhDYvk9UVfy2sV/j6Skm43EcYdNuykD4a2sO9c8TBUe9fp9bAgMB AAGjggI8MIICODAdBgNVHQ4EFgQULDv2BdnpvZFbJmgcDQodLvtSuLwwHwYDVR0j BBgwFoAU25tNEnnmxksM3fWT+wBrOZLV328wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZTlhYmIxYS1kNmMwLTQ1NGYtODcwYS04YmVlZGQ4MWZjZDIvMC9EQjlCNEQxMjc5 RTZDNjRCMENEREY1OTNGQjAwNkIzOTkyRDVERjZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREI5QjREMTI3OUU2QzY0QjBDRERGNTkzRkIwMDZCMzk5MkQ1 REY2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGU5YWJiMWEtZDZjMC00NTRmLTg3 MGEtOGJlZWRkODFmY2QyLzAvREI5QjREMTI3OUU2QzY0QjBDRERGNTkzRkIwMDZC Mzk5MkQ1REY2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAAX/dP+7gOqpuVlZ9CLUyyhJssY6a8ZvzVd6 jejqkEY5DMckba0IG2jFLPtWChf21mAcm52MvqJ/TgdET9QvSkkiJPWNGs8onlSF Qg+TBlZRRfOdaVPIKzlXWp0pOIkAhh81mYhRGvAexWdU57tku0qrG/R2JE4LYBYz fo6Og4wTjcJZuicwNvnL72BVrDOS0UvRrVjeeCUldCEXCF2llbNBrKfgzkgWhgoH QQGbirbRqcjoOlW8POwcE0SHrbi4Lyq2Z8DmJU/SeT69r1+oHHQz/Ldoz9LAyg33 r+AlFNdcGGOZ4AbEQfZYOJ6dNAU7KYzDseHfAQOr8z8x8l5sqo4= -----END CERTIFICATE-----Generated at Thu Aug 7 00:25:42 2025 by rpki-client