$ rpki-client -vvf repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.mft File: DBF597EA29EF8A70656446AF75CF33F0618E8282.mft (raw, json) Hash identifier: uqzEgYl0ReR1H2/eupNlKNzk49sW37mOAJf6c5wLuvM= Subject key identifier: D8:6B:99:AA:43:20:CC:15:E9:57:A3:B6:1F:57:61:34:D9:06:50:6D Authority key identifier: DB:F5:97:EA:29:EF:8A:70:65:64:46:AF:75:CF:33:F0:61:8E:82:82 Certificate issuer: /CN=DBF597EA29EF8A70656446AF75CF33F0618E8282 Certificate serial: 5295AB70615551832FBB496731C4C7066E3E2850 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF597EA29EF8A70656446AF75CF33F0618E8282.cer Subject info access: rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.mft Manifest number: 04F8 Signing time: Wed 06 Aug 2025 14:22:14 +0000 Manifest this update: Wed 06 Aug 2025 14:17:13 +0000 Manifest next update: Sun 10 Aug 2025 02:01:13 +0000 Files and hashes: 1: 3230322e362e3232342e302f32302d3234203d3e203233373536.roa (hash: RLSgg2xBR0eY1oQJ2Fkz63ShTm+IebfyQIgkaUmONdM=) 2: 3131372e3130322e3232342e302f31392d3234203d3e203233373536.roa (hash: TuGeKAZ5K1Zu0PRUHP6LxUEiVAWHwbRLn6V580rSqpM=) 3: 3135302e3130372e3133322e302f32322d3234203d3e203233373536.roa (hash: fVRsxuz3woE7uahLGANS8nBiT+UdU+qUUJ2Y/SNoU9E=) 4: 3130332e3234322e3230342e302f32322d3234203d3e203233373536.roa (hash: WzW/Sss6A/kpJfugXeZWPxd++ZE3y6mEfaDI33YMU+M=) 5: 323430363a363230303a3a2f33322d3438203d3e203233373536.roa (hash: RDF8kXfxQQ2EWR27pMBSl3bUi8DuM2mKbwzECDZeSOA=) 6: DBF597EA29EF8A70656446AF75CF33F0618E8282.crl (hash: fCwm3gB4pI9Ap57I9oM18q6UiBBute7+M1vN94doous=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.crl rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF597EA29EF8A70656446AF75CF33F0618E8282.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sun 10 Aug 2025 02:01:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 52:95:ab:70:61:55:51:83:2f:bb:49:67:31:c4:c7:06:6e:3e:28:50 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DBF597EA29EF8A70656446AF75CF33F0618E8282 Validity Not Before: Aug 6 14:17:13 2025 GMT Not After : Aug 10 02:01:13 2025 GMT Subject: CN=D86B99AA4320CC15E957A3B61F576134D906506D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:9f:18:29:c0:b5:4f:50:2f:7f:19:a1:41:ab: 7f:bf:8b:1d:6d:21:3c:75:13:cb:60:97:72:31:47: 90:0a:af:b3:b5:1e:8b:ab:4d:01:5d:08:00:a4:b3: 33:6d:b0:a2:c4:ef:64:c4:3e:43:65:72:46:7e:a3: a7:94:ec:00:99:50:44:72:7a:0f:44:82:4f:1f:a1: 87:5e:dd:78:17:de:82:63:27:b2:9b:05:6e:51:8b: df:c2:ae:b2:d8:cc:00:66:26:66:8c:80:85:6d:4f: 14:87:e9:cd:14:5c:31:74:8b:f5:8c:4b:0e:0b:af: 6a:47:be:30:7f:86:aa:c8:cd:ab:14:78:e9:ad:ba: 3e:cd:bf:0b:09:4d:3e:22:e0:5e:96:e4:e1:9c:1b: e5:99:e9:f0:89:d6:eb:9a:4a:20:c2:3c:0a:94:4d: 86:2e:b5:ac:51:26:9f:2b:4c:8a:57:2a:9d:72:72: 08:77:46:fa:ad:3b:8d:93:27:09:3c:cb:a1:61:b3: 62:b9:a9:45:87:4a:ed:9e:37:1c:9a:14:6b:0e:28: b9:9a:f4:fa:28:c9:7d:a1:ab:92:b2:0e:7a:34:ae: 46:02:a8:e1:cd:37:24:75:02:b3:f4:9b:49:02:41: 14:13:09:23:07:ca:61:f4:f5:f6:8a:64:49:31:d3: 94:4b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D8:6B:99:AA:43:20:CC:15:E9:57:A3:B6:1F:57:61:34:D9:06:50:6D X509v3 Authority Key Identifier: keyid:DB:F5:97:EA:29:EF:8A:70:65:64:46:AF:75:CF:33:F0:61:8E:82:82 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBF597EA29EF8A70656446AF75CF33F0618E8282.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad0f1a6e-83b6-4534-967d-f8db3c3711f4/0/DBF597EA29EF8A70656446AF75CF33F0618E8282.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 82:37:af:b8:b0:c4:d1:93:12:54:81:9b:fe:50:9a:e7:d1:9d: 0f:86:ce:ce:9b:07:d2:65:ab:70:ec:26:05:b2:3d:9e:07:6e: d2:fb:4a:5d:b7:2c:e7:77:cd:1e:6d:7a:09:8f:15:1a:08:fd: cf:f3:f2:a7:66:5e:ce:71:4a:58:b5:ab:b6:99:62:64:5b:db: d7:b6:df:23:b8:05:77:fb:9f:dc:40:0f:6f:4a:81:e7:36:1c: d3:7e:36:fe:ea:af:69:af:3b:22:43:54:74:dd:fa:8d:2b:2f: 48:43:57:27:6b:a6:64:9e:d8:44:b5:50:88:ba:29:33:29:02: 8b:82:79:d1:5d:64:ff:6a:d3:37:b5:77:03:e1:a9:b2:3a:b0: a1:90:01:54:08:df:0b:38:a6:e2:72:f9:05:87:ed:60:b6:e6: 3d:da:c9:90:54:f5:11:92:e9:ba:38:be:c4:7a:c4:d1:3d:db: ec:42:d6:c2:29:96:d1:4c:67:b8:34:2d:91:25:23:b1:12:7a: 8d:45:73:97:6e:a5:49:61:97:be:d9:50:ea:a8:f7:1e:4c:a6: 33:a2:0c:4b:49:57:36:97:a7:fa:e3:e1:e6:6c:89:f4:ed:06: b8:c0:9c:f8:e9:87:81:74:47:a1:03:84:02:88:22:19:ec:66: 36:55:7f:9f -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUUpWrcGFVUYMvu0lnMcTHBm4+KFAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREJGNTk3RUEyOUVGOEE3MDY1NjQ0NkFGNzVDRjMzRjA2 MThFODI4MjAeFw0yNTA4MDYxNDE3MTNaFw0yNTA4MTAwMjAxMTNaMDMxMTAvBgNV BAMTKEQ4NkI5OUFBNDMyMENDMTVFOTU3QTNCNjFGNTc2MTM0RDkwNjUwNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC7nxgpwLVPUC9/GaFBq3+/ix1t ITx1E8tgl3IxR5AKr7O1HourTQFdCACkszNtsKLE72TEPkNlckZ+o6eU7ACZUERy eg9Egk8foYde3XgX3oJjJ7KbBW5Ri9/CrrLYzABmJmaMgIVtTxSH6c0UXDF0i/WM Sw4Lr2pHvjB/hqrIzasUeOmtuj7NvwsJTT4i4F6W5OGcG+WZ6fCJ1uuaSiDCPAqU TYYutaxRJp8rTIpXKp1ycgh3RvqtO42TJwk8y6Fhs2K5qUWHSu2eNxyaFGsOKLma 9PooyX2hq5KyDno0rkYCqOHNNyR1ArP0m0kCQRQTCSMHymH09faKZEkx05RLAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU2GuZqkMgzBXpV6O2H1dhNNkGUG0wHwYDVR0j BBgwFoAU2/WX6invinBlZEavdc8z8GGOgoIwDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h ZDBmMWE2ZS04M2I2LTQ1MzQtOTY3ZC1mOGRiM2MzNzExZjQvMC9EQkY1OTdFQTI5 RUY4QTcwNjU2NDQ2QUY3NUNGMzNGMDYxOEU4MjgyLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvREJGNTk3RUEyOUVGOEE3MDY1NjQ0NkFGNzVDRjMzRjA2MThF ODI4Mi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYWQwZjFhNmUtODNiNi00NTM0LTk2 N2QtZjhkYjNjMzcxMWY0LzAvREJGNTk3RUEyOUVGOEE3MDY1NjQ0NkFGNzVDRjMz RjA2MThFODI4Mi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAII3r7iwxNGTElSBm/5QmufRnQ+Gzs6bB9Jl q3DsJgWyPZ4HbtL7Sl23LOd3zR5tegmPFRoI/c/z8qdmXs5xSli1q7aZYmRb29e2 3yO4BXf7n9xAD29Kgec2HNN+Nv7qr2mvOyJDVHTd+o0rL0hDVydrpmSe2ES1UIi6 KTMpAouCedFdZP9q0ze1dwPhqbI6sKGQAVQI3ws4puJy+QWH7WC25j3ayZBU9RGS 6bo4vsR6xNE92+xC1sIpltFMZ7g0LZElI7ESeo1Fc5dupUlhl77ZUOqo9x5MpjOi DEtJVzaXp/rj4eZsifTtBrjAnPjph4F0R6EDhAKIIhnsZjZVf58= -----END CERTIFICATE-----Generated at Thu Aug 7 00:25:51 2025 by rpki-client