$ rpki-client -vvf repo-rpki.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.mft File: DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.mft (raw, json) Hash identifier: UvOzn2DuKT26LmdivpOiGE6Ukf+6J7Ky0k9fjTriqiY= Subject key identifier: 87:95:23:27:02:F2:9F:B4:CA:80:18:86:C8:D7:8C:06:F3:62:AD:BC Authority key identifier: DB:9B:4D:12:79:E6:C6:4B:0C:DD:F5:93:FB:00:6B:39:92:D5:DF:6F Certificate issuer: /CN=DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F Certificate serial: 0AEF714D0631D081CB0F31B65E293E7C7AF59471 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.cer Subject info access: rsync://repo-rpki.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.mft Manifest number: D3 Signing time: Mon 03 Nov 2025 09:10:50 +0000 Manifest this update: Mon 03 Nov 2025 09:05:50 +0000 Manifest next update: Thu 06 Nov 2025 19:13:50 +0000 Files and hashes: 1: DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.crl (hash: mmbJ4wWU15r1p593G4Hpg5u/kVQanvtYP/kJ3QiaCRk=) 2: 3130332e3138352e3139362e302f32342d3234203d3e20313333383136.roa (hash: OBAMIR6o88w8OfvjKc+CvsxLTJpjUECRIBtfHRF/vnM=) 3: 3130332e35322e3231332e302f32342d3234203d3e20313333383136.roa (hash: ddnEDu4ujzH2U+wrCuFYzTTZ0z5ZKNzjOcLkosVrgEM=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.crl rsync://repo-rpki.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 06 Nov 2025 19:13:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:ef:71:4d:06:31:d0:81:cb:0f:31:b6:5e:29:3e:7c:7a:f5:94:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F Validity Not Before: Nov 3 09:05:50 2025 GMT Not After : Nov 6 19:13:50 2025 GMT Subject: CN=8795232702F29FB4CA801886C8D78C06F362ADBC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:72:66:8a:c8:74:a2:08:d0:2f:f2:3b:8a:74: bb:a5:1d:a5:1c:a5:61:70:b2:fd:69:d6:65:86:93: 15:4e:91:23:6a:d6:95:1a:7a:32:bf:22:d1:f2:d8: ca:df:43:5a:8c:b8:62:4c:41:76:51:df:28:8d:d0: f2:bf:f0:31:b3:5c:76:62:9d:9f:57:77:ce:fc:f9: 7f:f3:f5:bf:d5:ac:62:51:d8:25:80:5b:d3:03:22: db:49:03:5f:ac:c6:45:92:ec:d2:c2:14:44:b2:14: 02:bf:2e:17:cb:b4:bd:a8:38:db:79:f2:d3:a5:12: fe:96:b4:60:23:5e:df:b8:eb:70:1c:3d:11:ff:8e: 5d:06:4d:9d:2e:9e:28:51:92:18:5b:f1:61:52:10: ec:1c:c7:92:13:67:9b:48:0e:64:ad:69:34:1e:7c: 80:bd:b5:95:17:47:b0:5b:c3:e7:5a:0b:40:5f:1b: fb:51:55:74:63:92:ed:a1:ab:e4:5f:05:91:14:ec: a9:59:13:c9:33:0e:35:79:bc:01:19:42:72:c7:3d: e2:cd:9b:f6:61:a2:96:e7:4f:8b:1a:e5:b1:d6:ff: 88:4f:e1:32:02:c5:8e:08:ef:cb:d3:00:e6:ea:4b: 7a:a9:9c:e0:23:a1:71:07:91:28:31:91:b5:8b:be: 3c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:95:23:27:02:F2:9F:B4:CA:80:18:86:C8:D7:8C:06:F3:62:AD:BC X509v3 Authority Key Identifier: keyid:DB:9B:4D:12:79:E6:C6:4B:0C:DD:F5:93:FB:00:6B:39:92:D5:DF:6F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8e9abb1a-d6c0-454f-870a-8beedd81fcd2/0/DB9B4D1279E6C64B0CDDF593FB006B3992D5DF6F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 58:42:c2:fa:1b:e6:17:17:2f:92:5d:8e:e2:9d:59:ed:02:77: f3:ad:ec:68:bd:5c:0e:4c:4c:fe:ea:40:9a:55:3f:6c:94:4c: aa:dd:e5:ad:98:5a:f3:11:88:95:19:db:7c:91:cf:b4:22:40: 4b:49:f3:dc:41:1d:80:45:b6:da:50:d0:4a:3d:3f:ab:c4:60: f9:86:e9:c7:86:f9:80:05:27:70:5f:49:b9:63:34:e7:d2:f9: 95:e9:3c:53:8c:e8:59:b0:3e:02:75:76:3c:49:09:cf:dc:70: 73:eb:4a:33:3a:a0:58:05:a9:bf:9d:12:80:f2:f7:24:43:70: bb:3e:95:67:74:36:43:a8:ca:30:f9:31:c5:89:14:a7:82:99: 98:16:e9:17:5a:11:1e:13:9c:6e:20:41:f2:f2:b3:54:d3:bf: 7d:a7:12:6e:30:57:1c:70:c9:cd:87:bd:2c:dc:0b:5a:64:0b: 56:6e:d5:09:21:8a:7f:07:6f:a6:05:33:2f:f4:35:96:67:6c: e4:4c:bf:01:28:98:5b:d5:e5:b4:d0:9b:28:cb:96:0f:fb:66: 94:ce:9a:80:e9:f3:2f:27:f6:38:f2:97:4f:15:60:04:31:85: 80:2b:3e:2e:b3:65:d1:9b:c9:17:02:77:f0:fa:16:2e:4f:00: 28:81:49:dd -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUCu9xTQYx0IHLDzG2Xik+fHr1lHEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREI5QjREMTI3OUU2QzY0QjBDRERGNTkzRkIwMDZCMzk5 MkQ1REY2RjAeFw0yNTExMDMwOTA1NTBaFw0yNTExMDYxOTEzNTBaMDMxMTAvBgNV BAMTKDg3OTUyMzI3MDJGMjlGQjRDQTgwMTg4NkM4RDc4QzA2RjM2MkFEQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCycmaKyHSiCNAv8juKdLulHaUc pWFwsv1p1mWGkxVOkSNq1pUaejK/ItHy2MrfQ1qMuGJMQXZR3yiN0PK/8DGzXHZi nZ9Xd878+X/z9b/VrGJR2CWAW9MDIttJA1+sxkWS7NLCFESyFAK/LhfLtL2oONt5 8tOlEv6WtGAjXt+463AcPRH/jl0GTZ0unihRkhhb8WFSEOwcx5ITZ5tIDmStaTQe fIC9tZUXR7Bbw+daC0BfG/tRVXRjku2hq+RfBZEU7KlZE8kzDjV5vAEZQnLHPeLN m/ZhopbnT4sa5bHW/4hP4TICxY4I78vTAObqS3qpnOAjoXEHkSgxkbWLvjzHAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUh5UjJwLyn7TKgBiGyNeMBvNirbwwHwYDVR0j BBgwFoAU25tNEnnmxksM3fWT+wBrOZLV328wDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 ZTlhYmIxYS1kNmMwLTQ1NGYtODcwYS04YmVlZGQ4MWZjZDIvMC9EQjlCNEQxMjc5 RTZDNjRCMENEREY1OTNGQjAwNkIzOTkyRDVERjZGLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREI5QjREMTI3OUU2QzY0QjBDRERGNTkzRkIwMDZCMzk5MkQ1 REY2Ri5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGU5YWJiMWEtZDZjMC00NTRmLTg3 MGEtOGJlZWRkODFmY2QyLzAvREI5QjREMTI3OUU2QzY0QjBDRERGNTkzRkIwMDZC Mzk5MkQ1REY2Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAFhCwvob5hcXL5JdjuKdWe0Cd/Ot7Gi9XA5M TP7qQJpVP2yUTKrd5a2YWvMRiJUZ23yRz7QiQEtJ89xBHYBFttpQ0Eo9P6vEYPmG 6ceG+YAFJ3BfSbljNOfS+ZXpPFOM6FmwPgJ1djxJCc/ccHPrSjM6oFgFqb+dEoDy 9yRDcLs+lWd0NkOoyjD5McWJFKeCmZgW6RdaER4TnG4gQfLys1TTv32nEm4wVxxw yc2HvSzcC1pkC1Zu1Qkhin8Hb6YFMy/0NZZnbORMvwEomFvV5bTQmyjLlg/7ZpTO moDp8y8n9jjyl08VYAQxhYArPi6zZdGbyRcCd/D6Fi5PACiBSd0= -----END CERTIFICATE-----Generated at Tue Nov 4 12:56:35 2025 by rpki-client